Cisco Umbrella is a cloud-based security platform at the DNS (domain name system) layer that provides the first line of defense against threats on the Internet by blocking requests to malicious destinations (domains, IPs, URLs) before a connection is established. It provides protection against threats over all ports and protocols, and can protect Internet access across all devices on Your network, all office locations, and roaming users.
The Insights package offers everything from Professional, plus Active Directory integration, user-based policies, the ability to retain logs forever, and more reporting options.
Best for mid-sized companies
Identify targeted attacks by comparing local vs. global activity
Identify cloud, shadow IT, & IoT usage risks by reporting on 1800+ services
Enforcement & visibility per internal network or AD user/group
Proxy risky domains for URL and file inspection using AV engines and Cisco Advanced Malware Protection (AMP)
Retain logs forever by integrating with your Amazon S3 bucket