Umbrella

Umbrella is a cloud-delivered secure internet gateway that provides the first line of defense against threats on the internet wherever users go. By analysing and learning from internet activity patterns, Umbrella automatically uncovers attacker infrastructure staged for current and emerging threats. It also proactively blocks malicious requests before they reach a customer’s network or endpoints. With Umbrella, you prevent devices from connecting to malicious sites in the first place, before a malware file is downloaded or an IP connection is even established. You can also stop phishing and malware infections earlier, identify already infected devices faster, and prevent data exfiltration.

Intelligence

Gathering intelligence on advanced attacks that target your network is vital, but you need a way to easily enforce that intelligence. Umbrella blocks new threats beyond the network perimeter—everywhere your employees work. Because it is built into the foundation of the internet and delivered from the cloud, Umbrella provides complete visibility into internet activity across all locations and users.

Through integration partnerships, Umbrella extends and enforces the local intelligence from your existing security stack to protect your employees, whether they’re working on or off the corporate network. Most security integrations involve custom development and many hours of professional services but not with Umbrella. In minutes, your local intelligence about malicious domains is extended to protect users beyond your perimeter.

Umbrella Advantage

Cisco Umbrella stands out among the competition in several ways:

1.  Security efficacy

  • Broadest coverage of malicious destinations and files: Using statistical and machine learning models to uncover known and emergent threats, Umbrella blocks connections to malicious destinations at the DNS and IP layers. 
  • Intelligence to uncover threats earlier:  Umbrella resolves over 185 billion DNS requests every day and correlates this data with over 11 billion historical events. Using a combination of machine learning and human intelligence, this data is analysed to identify patterns, detect anomalies, and create statistical models to automatically uncover attacker infrastructure being staged for the next threat.

2. Network speed

  • Most reliable cloud infrastructure: Umbrella uses Anycast routing, which provides global load balancing and transparent failover. As a result, it has had 100 percent uptime since the network was created in 2006.
  • No added latency: Using over 500 ISP/CDN peering partnerships with more than 3,000 peering sessions, Umbrella prevents the extra hops that might increase latency.

3. Enterprise coverage

  • Protect all on-network devices in minutes: Deployment on the network is as simple as changing a configuration on your DNS or DHCP servers to point external DNS requests to  Umbrella global network IP addresses. Protect every device that comes into your network, including unmanaged and Internet of Things (IoT) devices. Off-network protection for laptops is simple too—either deploy a lightweight client that redirects external DNS requests to the proposed Umbrella or use integration with the Cisco AnyConnect®.
  • Use your existing Cisco footprint for easy provisioning: With Cisco AnyConnect solution, you can enable Umbrella roaming security module and protect laptops when the VPN is off—without requiring another agent. 
  • No hardware to deploy or software to maintain: Umbrella is cloud-delivered so there’s no hardware to purchase or deploy. Software components are automatically updated through the cloud infrastructure.