Overview

Cisco Public

Cisco Umbrella: Secure Embrace SASE with SIG Advantage

A rise in remote employees and an increased reliance on SaaS

Internet Gateway (SIG)

applications create new, wider gaps in security. To put it simply, it’s more
challenging to protect users at the edge — ensuring seamless connections
that optimize productivity without creating performance issues that drag

Advantage Package down user satisfaction.

Enter secure access service edge (SASE), an architectural approach that

Highest level of protection from

offers an alternative  to traditional data center-oriented security. SASE
converges networking capabilities with cloud-native security functions to

a single service simplify deployment and streamline management in the cloud.

SIG Advantage can help you cut complexity, reduce risk exposure, and
Organizations are facing a difficult dilemma. Given the improve performance with a single cloud-delivered service that deploys
easily and scales with your business.
growing threat landscape alongside an ever-expanding attack
surface, they need even higher levels of protection. However, Highlights include:
more security vendors result in complex security operations • Deliver secure access anywhere, anytime
and increases costs. No wonder, according to Gartner, 80% of • Move access control to the edge
organizations are interested in vendor consolidation strategy.1 • Gain efficiencies with an as-a-service model
• Make your business more agile
1. Gartner Top Security and Risk Trends for 2021

© 2021 Cisco and/or its affiliates. All rights reserved.

 Overview
Cisco Public

What if you could reduce complexity and costs and get better security? Since 2006,
Cisco Umbrella has delivered reliable, proven protection and has grown to over
“Cisco Umbrella combines the
24,000 customers. As a pioneer in cloud-delivered security, we got our start with
DNS-layer security and now offer a multi-function service that continues to evolve.
functionality of many point products
Now, we’ve innovated again to deliver the most complete set of advanced security into a single cloud-native solution that
capabilities from a single vendor in a single package with a single subscription for
maximum value. can scale to meet the security needs
of any organization. Now with the
“Nearly half of customers deployed Cisco SD-WAN integration, Umbrella
Cisco Umbrella in less than 1 day.” security services can be brought to
TechValidate survey of 230 users,
the branch in a matter of minutes.”
May 2021
Mike Pfeiffer,
Technical Solutions Architect, WWT

© 2021 Cisco and/or its affiliates. All rights reserved.

 Overview
Cisco Public

SIG Advantage: Advanced Security, Simplified

The Umbrella SIG Advantage package significantly into a single cloud service. Umbrella SIG Advantage
simplifies security and reduces the cost, time, and represents our highest level of protection with features
resources previously required for deployment, not available in other packages, including a Layer 7
configuration, and integration. SIG Advantage unifies firewall with intrusion prevention system, data loss
secure web gateway, cloud access security broker, prevention and Cisco Secure Malware Analytics for
DNS-layer security, cloud-delivered firewall, data analyzing file behavior.
loss prevention, and Cisco Secure Malware Analytics

“74% of Umbrella customers identified “fast and

easy deployment” as the top benefit for using
Cisco Umbrella.”
TechValidate survey of 314 users of Cisco Umbrella,
May 2021

© 2021 Cisco and/or its affiliates. All rights reserved.

 Overview
Cisco Public

DNS-layer security Secure web gateway (full proxy)

By enforcing security at the DNS and IP layers, Umbrella blocks requests to malicious Umbrella includes a cloud-based full proxy that can log and inspect all of your web
and unwanted destinations before a connection is even established — stopping traffic for greater transparency, control, and protection. IPsec tunnels, PAC files and
threats over any port or protocol before they reach your network or endpoints. proxy chaining can be used to forward traffic for full visibility, URL and application-level
controls, and advanced threat protection.
Highlights include:
Highlights include:
• The visibility needed to protect internet access across all
network devices, office locations, and roaming users • Content filtering by category or specific URLs to block destinations
that violate policies or compliance regulations
• Detailed reporting for DNS activity by type of security threat
or web content and the action taken • The ability to efficiently scan all uploaded and downloaded files for
malware and other threats using the Cisco Secure Endpoint
• Ability to retain logs of all activity as long as needed
(formerly Cisco AMP) engine and third-party resources
• Fast rollout to thousands of locations and users to provide
• Cisco Secure Malware Analytics (formerly Threat Grid) rapidly analyzes
immediate return on investment
suspicious files (unlimited samples)
This level of protection is enough for some locations and users, yet others
• File type blocking (e.g., block download of .exe files)
need additional visibility and control to meet compliance regulations and
further reduce risk. • Full or selective SSL decryption to further protect your organization
from hidden attacks and time-consuming infections
• Granular app controls to block specific user activities in select apps
(e.g., file uploads to Dropbox, attachments to Gmail, post/shares
on Facebook)
• Detailed reporting with full URL addresses, network identity, allow or
block actions, plus the external IP address

© 2021 Cisco and/or its affiliates. All rights reserved.

 Overview
Cisco Public

Data Loss Prevention (DLP) Cloud-delivered firewall (CDFW)

Cisco Umbrella data loss prevention analyzes sensitive data in-line to provide The Umbrella cloud-delivered firewall provides visibility and control for traffic that
visibility and control over sensitive data leaving your organization. originated from requests going to the internet, across all ports and protocols.
Highlights include: Highlights include:
• Easy enablement as part of Umbrella secure web gateway • Deployment, management and reporting through the
Umbrella single, unified dashboard
• 80+ built-in content classifiers including PII, PCI, and PHI
• Customizable policies (IP, port, protocol, application
• Customizable built-in content classifiers with threshold and
and IPS policies)
proximity to tune and reduce false positives
• Layer 3 / 4 firewall to log all activity and block unwanted
• User-defined dictionaries with custom phrases
traffic using IP, port, and protocol rules
(such as project code names)
• Layer 7 application visibility and control to identify thousands
• Detection and reporting on sensitive data usage and
of applications and block/allow them
drill-down reports to help identify misuse
• Intrusion prevention system (IPS)* to examine network traffic flows
• Inspection of cloud app and web traffic content and
and prevent vulnerability exploits with an added layer of threat prevention
enforcement of data policies
using SNORT 3 technology and signature-based detection.
• Detection and blocking of vulnerability exploitation
• Scalable cloud compute resources eliminates appliance capacity
concerns Cisco Talos threat intelligence to detect and block more threats

* General availability targeted for July 2021

© 2021 Cisco and/or its affiliates. All rights reserved.
 Overview
Cisco Public

Cloud access security broker (CASB) Cisco Secure Malware Analytics

Umbrella helps expose shadow IT by detecting and reporting on cloud applications in Cisco Secure Malware Analytics (formerly known as Threat Grid) combines advanced
use across your environment. Insights can help manage cloud adoption, reduce risk sandboxing with threat intelligence into one unified solution to protect organizations
and block the use of offensive or inappropriate cloud applications. from malware. By leveraging Cisco Umbrella Investigate, included in the SIG
Advantage package, and Cisco Secure Malware Analytics, security analysts can
Highlights include:
uncover malicious domains, IPs, ASNs and files to get the most complete view of an
• Reports on vendor category, application name, and volume attackers’ infrastructure, tactics, and techniques.
of activity for each discovered app
Highlights include:
• App details and risk information such as web reputation score,
financial viability, and relevant compliance certifications • Ability to detect hidden attack methods and report on
malicious files
• Cloud malware detection to detect and remove malware from
cloud-based file storage applications and ensure that applications • Single, correlated source of intelligence to speed threat
remain malware-free. hunting and incident response

• Ability to block/allow specific apps • Simple APIs to integrate with SecureX and your SIEM for
enriching security data
• Tenant restrictions to control the instance(s) of SaaS applications
that all users or specific groups/individuals can access • Ability to predict unknown threats using real-time
threat intelligence
• Automated alerts for retrospective events

© 2021 Cisco and/or its affiliates. All rights reserved.

 Overview
Cisco Public

Remote browser isolation (RBI)

Available as an optional add-on Umbrella and SD-WAN Integration
By isolating web traffic from the user device and the threat, Umbrella remote Backhauling internet bound traffic from remote sites is expensive and adds
browser isolation (RBI) delivers an extra layer of protection to the Umbrella latency. Many organizations are upgrading their network infrastructure by
secure web gateway so that users can safely access risky websites. adopting SD-WAN and enabling direct internet access (DIA). Eighty percent of
Highlights include: organizations extensively or selectively use SD-WAN today.1

• Isolation of web traffic between user device and Umbrella and SD-WAN are core elements of Cisco’s secure access service
browser-based threats edge (SASE) architecture that consolidate networking and security functions.
With the Umbrella and Cisco SD-WAN integration, you can simply and rapidly
• No performance impact on end users
deploy Umbrella across your network and gain powerful cloud-delivered security
• Protection from zero-day threats to protect against threats on the internet and secure cloud access. This market-
• Granular controls for different risk profiles leading automation makes it easy to deploy and manage the security environment
over tens, hundreds or even thousands or remote sites. Umbrella offers flexibility
• Rapid deployment without changing existing
to create security policies based on the level of protection and visibility you need
browser configuration
— all in the Umbrella dashboard.
• On-demand scale to easily protect additional users
on all devices, browsers, and operating systems

© 2021 Cisco and/or its affiliates. All rights reserved.

 Overview
Cisco Public

“The one-click integration

of Cisco Umbrella with Cisco SecureX extends simplicity, visibility, and efficiency
Cisco SecureX (included with Umbrella for greater simplicity and visibility. It automates
SD-WAN has been great. subscriptions) accelerates your threat investigation workflows to increase operational efficiency.

It makes deployment and remediation by unifying Umbrella’s threat

intelligence with data from additional Cisco Security
Cisco SecureX helps reduce complexity with a
built-in platform experience.

and configuration much products and your other security infrastructure. It

unifies your entire security ecosystem in one location
easier in a distributed
environment. This is a
Global cloud architecture enables reliable security with
big step forward in great performance
simplifying the distribution Umbrella’s battle-hardened global cloud architecture SaaS platforms deliver lightning-fast performance.
delivers network resiliency and reliability to keep your The architecture automates routing for top-notch
and management of performance fast and your connections secure. Over availability and reliability. The containerized, multi-
1000 peering partnerships with top IXPs, CDNs and tenant architecture is flexible and scalable.
edge security.”
Joshua Mudd,
Senior Network Engineer, Presidio

© 2021 Cisco and/or its affiliates. All rights reserved.

 Overvierw
Cisco Public

For more information

Contact your Cisco sales representative for more information
on the Umbrella SIG Advantage package.

© 2021 Cisco and/or its affiliates. All rights reserved. Cisco and the Cisco logo are trademarks or registered trademarks of
Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/
trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not
imply a partnership relationship between Cisco and any other company. 06/21