Cost and availability are making the internet the preferred method of connectivity for the enterprise market.
Organizations must be prepared to secure direct internet access, and embrace mobile users, remote workers and
SaaS apps. By enabling users to work from any device or location (vs. company managed devices and networks),
IT has less visibility leading to gaps in protection and an increased risk of attacks and compliance violations. Managing
disparate security tools makes it challenging for limited security resources to keep up and prioritize remediation. It’s
driving a new market for products.

As a leading provider of security and recursive DNS services, our success has been built on helping businesses of all
sizes, across all industries, connect to the internet with confidence on any device. We have built a reputation for easy
deployment and powerful protection anywhere users access the internet.
As the networking and security landscape changes, new challenges are causing a shift in behavior. Branch offices
— and thus enterprises requiring SD-WAN — are driving Cisco’s security strategy. We have added new features
to Umbrella — including secure web gateway, cloud-delivered firewall, and cloud access security broker (CASB)
functionality, plus integration with Cisco SD-WAN, to help organizations face this new set of security challenges.

Cisco Umbrella is a cloud-delivered security platform that secures internet access and controls cloud app usage
across networks, branch offices, and roaming users. Unlike disparate security tools, Umbrella unifies secure web
gateway, cloud-delivered firewall, DNS-layer security, and cloud access security broker (CASB) functionality into
a single cloud platform. Umbrella also integrates with Cisco SD-WAN to provide security and policies for direct
internet access (DIA) at branch offices. Umbrella acts as a secure onramp to the internet and delivers deep
inspection and control to support compliance and provides the most effective protection against threats for users
anywhere they connect.

To deploy Umbrella’s DNS-layer security, any network device (e.g. router, DHCP server, etc.) can be used to the provision
by pointing external DNS to our IP addresses (. You can also use your existing Cisco footprint — SD-WAN (Viptela),
Integrated Services Router (ISR) 1K and 4K Series, Meraki MR, and Wireless LAN Controllers — to quickly provision
protection across hundreds of routers and access points.
Off-network protection is available for laptops that use Windows, macOS, Chrome OS, and supervised Apple devices
that run iOS 11.3 or higher.
To enable the secure web gateway or cloud-delivered firewall functionality, the following options are available:
• For cloud-delivered firewalls, you create IPSec tunnels to forward all internet traffic to our platform.
• For secure web gateway, you can forward web traffic via:
-- Proxy chaining
-- PAC files
-- IPSec tunnels

Cisco recognized its unique position to help our networking customers transition to SD-WAN and ensure security
remains top of mind. The buying center for networking and security is more tightly integrated than ever before. You
want security that is “built-in” so you don’t have to manage, upgrade, and install boxes everywhere — especially at
your branch offices. Enter Cisco Umbrella, our cloud-delivered security platform.

The following components are integrated seamlessly in a single, cloud-delivered platform:

• DNS-layer security: DNS requests precede the IP connection, enabling DNS resolvers to log requested domains over any port or protocol for all network devices, office locations, and roaming users. Monitor DNS requests, as well as subsequent IP connections, to improve accuracy and detection of compromised systems, security visibility, and network protection. Block requests to malicious destinations before a connection is even established — stopping threats before they reach your network or endpoints.

• Secure web gateway: A cloud-based full (or selective) proxy that can log and inspect your web traffic, including uploaded and downloaded files, for greater transparency, control, and protection against malware and other hidden threats. View detailed reporting with full URL addresses, network identity, allow or block actions, plus the external IP address. Create policies for content filtering by category or specific URLs to block destinations that violate policies or compliance regulations.
• Cloud-delivered firewall: All internet activity is logged and unwanted traffic is blocked using customizable IP, port, and protocol rules. To forward traffic, simply configure an IPsec tunnel from any network device. As new tunnels are created, security policies can automatically be applied for better visibility and control of all internet traffic, including easy setup and consistent enforcement throughout your environment.
• Cloud access security broker (CASB): Detect and report on the cloud applications in use across your environment. Automatically generate overview reports on the vendor, category, application name, and the volume of activity for each discovered app. Drill down reports include web reputation score, financial viability, and relevant compliance certifications to enable better management of cloud adoption, reduce risk, and provide more control to block the use of offensive or inappropriate cloud applications in the work environment.
• Interactive threat intelligence access: Umbrella utilizes threat intelligence from Cisco Talos, one of the largest commercial threat intelligence teams in the world to uncover and block a broad spectrum of malicious domains, IPs, URLs, and files used in attacks. We feed volumes of global internet activity into a combination of statistical and machine learning models to identify new attacks staged on the internet to help organizations respond to the rise in threats, incidents, and breaches. View unparalleled threat intelligence in our web console or integrate with your existing security tools for faster remediation.
• SD-WAN integration: Deploy across your network and gain powerful cloud-delivered security to protect against threats on the internet and when accessing the cloud. Create flexible security policies based on the level of protection and visibility you need — all in the Umbrella dashboard. Our integrated approach can efficiently protect your branch users, connected devices, and application usage from all DIA breakouts.