The most effective way to mitigate against malware infecting your network and endpoints is to stop the source of the threat before it reaches you.
When a user clicks an email or browser link, how do you know the website they are about to access is safe?
Umbrella is a cloud security service built into the fabric of the internet that enforces security at the DNS and IP layers. It blocks requests to phishing, malware, ransomware, and botnets before a connection can be set up. This stops threats over any port or protocol before they reach your network or your endpoints.
DNS-layer security plays an important part in the new SASE approach to managing security.
Any issues with the service, whether that’s advice, consultancy on functionality or faults, will be handled by SAS regardless of the service option chosen.
Cisco Umbrella forms part of a market-leading suite of security products, all integrated into Cisco’s new XDR (eXtended Detection & Response) Platform, SecureX.
Unmatched threat intelligence
Improve visibility and control
Flexible and future-proofed
Easy to buy
A flexible service with ongoing support and consultancy
Block domains associated with malware, phishing, botnets, and other high-risk categories
Enable granular web filtering using 85+ domain content categories
Protect users whether they are on or off the network
Consult, Design and Deploy service delivered by SAS’ Technical Consultants
Fully supported by SAS’ 24/7 Service Desk
Automatic application & platform updates, with patch management and maintenance
Customer Reporting Portal
Simple monthly subscription model
Traditionally, content filtering and DNS protection involved an appliance situated within the security perimeter at the corporate HQ. Most applications and users resided within the perimeter, and therefore any traffic destined for the internet passed through the security perimeter. With Applications and Users more commonly outside the private network, funnelling all traffic to a perimeter in the HQ and back out to the internet is inefficient. Cloud-based security allows users and remote offices to connect to the internet and their applications directly with the reassurance that the DNS and content control security they require sits in between.
With some websites, it’s very difficult to determine whether all of their content is safe at any given moment. This is particularly true with websites that allow their users to upload their own content. Where Umbrella has labelled a website neither good nor bad but unknown, it directs the connection via the proxy service, which can decrypt the risky domains for deeper inspection of URLs and files.
Umbrella’s first two licences are aimed at visibility, control and protection at the DNS layer with the higher-level licence, DNS Advantage, including the selective proxy for inspection of risky domains.
Building on this functionality comes the Secure Internet Gateway product, which adds a full proxy for all traffic, a Layer 7 Firewall as a Service (FWaaS) and Cloud Access Security Broker (CASB) service for granular application control.
Combined with Cisco DUO for Zero Trust Network Access and Meraki SD WAN, Umbrella plays a key role in Cisco’s SASE (Secure Access Service Edge) solution.
Our Technical Consultants will work with you to discuss your options and capture your requirements before agreeing on the technical design with you.
In our experience, customers usually start protecting all their users with cloud-based content filtering and DNS Security with the selective proxy before investigating the architectural implications of a centralised FWaaS with CASB solution within the Secure Internet Gateway product.
SAS provides two options for the ongoing management of your service from our 24*7 Service Desk as well as access to our Technical Consultants and, of course, your assigned Account Manager.
You can choose whether you want to manage the day to day, low-level admin changes yourself or have SAS perform these on your behalf.
If there is a fault with the service, SAS is still responsible for raising a ticket and resolving the issue, keeping you informed at all times.
Licences are charged on a per user basis. Simply choose the licence type and management service option, and we’ll apply this across your whole estate.
We invoice monthly, based on the number of live licences shown within the Customer Reporting Portal on the last day of the month. There is no volume or term commitment – just pay for the licences you need.
If you would like to find out how SAS Cisco Umbrella Service could benefit your business then please make an enquiry and we’ll get back to you as soon as possible.