Umbrella

DNS-layer security and filtering: Cisco Umbrella enforces security at the DNS layer, resolving and inspecting DNS requests and blocking those destined for malicious or policy-violating domains before a connection is ever established, stopping threats early in the attack chain.

Secure web gateway: A full secure web gateway proxies and inspects web traffic, applying URL filtering, content inspection, and threat protection to HTTP/HTTPS traffic for deeper control than DNS alone.

Cloud-delivered firewall: Umbrella provides a cloud-delivered firewall that inspects and controls traffic across ports and protocols, extending network-layer security to users and locations served by the service.

Cloud Access Security Broker (CASB) functionality: CASB capabilities give visibility into and control over cloud-application usage, including discovering shadow IT and applying policy to sanctioned and unsanctioned SaaS use.

Malware and phishing domain blocking: The service blocks access to domains and destinations associated with malware and phishing, preventing users from reaching sites that would deliver threats or steal credentials.