Cisco Umbrella is a cloud security service that provides network-layer security by inspecting and filtering DNS requests to block access to malicious or policy-violating domains before a connection is established. It extends protection to off-network devices and can apply scoped security policies to specific users, groups, or locations. The service functions as a secure web gateway, proxying and inspecting HTTP/S traffic for content, threats, and sensitive data, with capabilities for SSL decryption and sandboxing suspicious files. It also discovers and provides controls for cloud application usage, logs DNS and web activity for reporting, and uses threat intelligence to block command-and-control callbacks and other threats across various ports and protocols.
