Cisco Umbrella

Cisco Umbrella is the cloud protected Internet gateway (secure internet gateway, SIG) intended for the solution of the corporate problems of information security arising with distribution of mobile and cloud computing.

Cisco Umbrella filters content and checks files, all domains are analyzed using the Cisco Talos database. The cloud gateway of security allows to predict and prevent network attacks, performs counteraction to threats on all ports and protocols, interfering with connection setup with dangerous domains, the addresses URL and IP and also to downloading of files, the majority of which will not recognize a normal antivirus as harmful.

The Cisco Umbrella service is comfortable in terms of deployment and operation as it does not require installation of the special equipment or the software. Blocking of all attacks happens before they reach corporate network, protection begins to work already at an early stage of connection  of the DNS query. If in network the infected computers are detected, the cloud platform of security blocks their interaction with the external server of attacking.

2018: Free access from CTI

The CTI company offered on October 11, 2018 a cloud service of Cisco Umbrella for information security support of the enterprises with free access: within 21 days users will be able to test a product free of charge.

CTI represents a cloud platform of Cisco Umbrella in Russia and the CIS countries. The solution helps to close vulnerabilities and at the same time to simplify deployment of "the first line of defense" in an end-to-end system of protection. Service is directed to support of security in the conditions of the extending number of mobile and cloud applicaions and technologies which are used by employees. Thus protection which provides visualization and control on border between the distributed information perimeter of the enterprise in any its point and the Internet in general is provided.

Counteraction to threats is performed on all ports and protocols, irrespective of an interaction method, access lock to dangerous domains, the addresses URL IP, to malware and files happens even before connection setup or data loading.

The cloud service provides information protection thanks to interaction with external servers of the analysis of domain names and the analysis of requests of DNS through constantly updated database about reputation of websites and cloud analytics of Cisco Talos.

2017: Announcement of Umbrella

On February 14, 2017 the Cisco company announced the embodiment of the concept of the cloud protection providing visualization and control on border of the Internet in the gateway Umbrella which will ensure safety of production processes.

The gateway SIG protects Internet access everywhere even if users do not resort to VPN. SIG works as check-point in the Internet, providing the first line of control and protection independently about where users are and what want to be connected to.

Cisco Umbrella is created as a cloud platform of information security, a boundary of protection of users, both in corporate network, and beyond its limits. Umbrella blocks a way to the operating and arising threats on all ports and protocols, blocks access to dangerous domains, the addresses (URL and IP) and files - before connection setup or loading of the file. The security system of Umbrella does not require difficult operational manipulations. All procedures are performed in a cloud and there is no hardware which is required to be mounted, program - that to update it.

Representation of Cisco Umbrella, Cisco’s Secure Internet Gateway, (2017)

The organization customer can organize protection of the resources in several minutes, using at the same time the Cisco resources, including clients of AnyConnect, the integrated service Integrated Services Router 4K routers and controllers of wireless LAN to direct Internet traffic (both in corporate network, and out of it) to the gateway Umbrella.

Features

• Universal visualization and protection. Umbrella provides the visualization necessary for protection of Internet access on all devices to networks, to all office platforms and all users in roaming. The combination of Umbrella and Cisco Cloudlock Cloud Access Security Broker technology will help the organizations to define what are used applications and to apply the politicians blocking dangerous or incorrect applications.
• Intellectual prevention of the attacks till their beginning. During the day Umbrella permits more than 100 billion Internet requests and correlates these up-to-date data from 11 billion archive events. Then the analysis for identification of characteristics and anomalies is carried out and also models for automatic disclosure of the infrastructure of the malefactor prepared for the following attack are created.
• Scope of the harmful websites and files. The gateway Umbrella obtains data for identification and prevention of threats, using means of Cisco Security. In their structure:
  • the models of machine learning allowing to reveal the known and appearing threats, to block connections to the harmful websites at the DNS and IP levels;
  • intellectual means of Cisco Talos for blocking of harmful URL at the level of HTTP/S;
  • Cisco Advanced Malware Protection (AMP) technology for detection of harmful files and their blocking in a cloud.
  • Open platform and easy integration. Integration of Umbrella with the existing systems, including devices of protection, the platform of data analysis and also means of own development allowing to expand protection of devices and platforms out of perimeter limits is provided.

• Detection and control for applications of SaaS. Umbrella in combination with Cloudlock technology allows the organizations to detect and control confidential data in applications of SaaS both on network, and out of it.
• Reliable and fast communication as guarantee of service quality. When using Umbrella customers should not complain of reduction of speed or a rupture of connections. Umbrella uses Anycast routing — each DPC announces the same IP address and therefore requests it is transparent are sent on free and offering maximum speed, at the same time automatic abnormal switching provides to 100% working capacity.