Cisco Umbrella is a cloud-based security platform that protects endpoints, on-network, and remote users by blocking malicious domains and C2 traffic at the DNS layer.
Key features
- Recursive DNS security (101+ data centers)
- Secure Web Gateway (SWG) and CASB modules
- Cloud-Delivered Firewall (CDFW)
- Roaming Client for remote-user protection
- Threat intelligence queries with Investigate
- SD-WAN, Cisco AnyConnect integration
Why it is preferred
Preferred for DNS-layer security by geographically distributed teams and organizations rapidly adopting SASE.