Cisco Umbrella Valuable Features
One of the coolest features, for me at least, is to be able to type in a website and have it give an overall summary of how safe that website appears. Part of that is just so that we can investigate. And if there's any sort of confusion between our cyber team and us, we can look further into that site and dive more into that risk score that Umbrella gives us. We can just analyze [those sites] and make sure that we're unblocking safe sites and blocking sites that we deem could be harmful for our employees.
I would say it provides single-pane-of-glass management. We still, of course, use those old WSAs, but in the long run, our plan is to get those replaced with Umbrella. We have locations in Japan, Korea, China. So it's a little bit more difficult to go through one proxy for all of those, especially because it's a bit slower. What's nice is, [with] Umbrella being in the cloud, we can just go into the site, see everything from the management console in that page. Nothing is slow [and] nothing is hosted by us so that we don't have to worry about network issues or management issues. Everything is just laid out right in front of us from the Umbrella dashboard on the internet, in the cloud. And that makes it super helpful for us to just manage all that from one spot across all of our locations across the world.
We aren't a very big team, so that's the main thing. Going through filtering web traffic or blocking sites or unblocking sites, whatever we need to do, can be a bit tedious, especially when we have all these different locations and we would have to go into each location specifically to perform these tasks. Umbrella, being one pane for managing, being all-encompassing, allows us to quickly go in, make a change, and it applies to either every location, if we want it to, or we can have policies in place that only apply to certain users or certain computers. And that makes it super useful for us because we're not messing around with jumping into all these different locations and manually doing each and every one individually. It is extremely helpful for us and it improves efficiency exponentially.View full review »
Director of Security
I was able to make use of Cisco Umbrella because it acts like a proxy. The company also had content security, which I used on-prem with Blue Coat products. Any time someone went off the network, the AnyConnect client had the Umbrella agent built in, and it would realize when their computer connected that they were not on the corporate network. It would monitor and they would have pretty close to the same rules that they had to follow when they were in the office, regarding what kind of website browsing they could do.
The single pane of glass management was one of the really good features. From that single pane, not only could you look at what was happening security-wise, such as what was being blocked by domains and IPs, but you could check for your roaming users. With a deployment of AnyConnect, or just the Umbrella agent, on 5,000 machines, you could watch the main glass and see how many roaming users were out there that had it on their machines. And even if they were in the office, it was always active, talking to Cisco's cloud.
You could see numbers. I was able to watch, as we were deploying, how many people were getting the agent. I could see activity such as how many blocks we were getting, what types of blocks they were, and whether they were in categories. I would ask why those users were going to those categories that they shouldn't be going to. Maybe we needed to just refresh them with an email saying, "Hey, remember, we don't do this kind of thing."
Cisco's Umbrella client product is superb. It worked so well for us and was easy to deploy.
I wanted to ensure that all outgoing traffic went through Cisco AMP servers. So, if we did get a crypto locking incident or any malicious sites that wanted to direct traffic to particular websites, they would be unable to do that because they would be blocked by the Cisco Umbrella DNS servers.
It also did website filtering for preventing access to porn sites and gambling sites. It had all other standard features. It had a good section where you could whitelist and blacklist websites.
I was able to implement it myself. It was really easy to install. You could install it on a server locally if you want to. If you have the biggest site, you would do that, but for my site, it was just directing all the traffic out through the Cisco Umbrella DNS. It was really handy. When the owners of the company went overseas, I knew that they would be secure because even if they were not on the company network, they would still go through the Cisco Umbrella servers. It was a complete solution for protecting the company with outgoing data.
The other useful feature was that if we were to get a malicious actor onto a server or service running somewhere, it would still have to go out through the Umbrella servers. So, it would more likely be blocked through there. It had multiple features that were super handy.View full review »
Network Security Architect at Lake Trust Credit Union
Both monitoring the activity, so that we can investigate anything that may pop up, and the ability to restrict the access, or filter out what content end-users can view or go to [are valuable features of Umbrella]. Also, the fact that it blocks them from any known malicious locations.
It works really well and the best part about it is the fact that it's transparent to the users until they try to go somewhere that's either restricted because of content or restricted because of the fact that it's malicious. Then they simply get a popup and that's all there is to it. So from their perspective, it's very easy. They don't have to do anything in order for it to work.
There is a single portal that we go to that handles being able to set up policy, look at activity, or even manually add sites that we think that we want to restrict, even if it's not considered a particular category or a particular malware. The single-pane-of-glass management is very important. We have a very small team. We can't spend a lot of time going from product to product to product to either investigate or set up policy. We need to have one place that we can go to and set everything up.
It's really easy. It's an easy portal to go to, it's cloud-based, so we can get to it from anywhere. The ability to set up the policy is pretty straightforward. There are a lot of tie-ins with other products, like SecureX and other things, that make it just as easy.
It's cloud-based, so as long as you can get to the cloud, you're golden.
When we have laptops that leave the building, they could connect to public WiFi before they establish a VPN connection back into the company. For that duration or that period of time when they're not docked in the network or on a VPN, they effectively don't have that full layer of security that I provide inside the building. This tool stands in during that period of time, and we extend the security settings through their basic firewall or their cloud-based firewall at that time. So, we do content filtering and control access, but they also are looking at new domains, IP addresses, and bad requests. They're blocking them on my behalf when a laptop is not sitting behind our security appliances.
The best feature is the visibility. We're able to see the specific user names of whoever clicked on a certain link. It also gives us a threat detection level. It allows us to maintain more [awareness of] who's doing what they shouldn't be doing. The most valuable asset of it is giving us the ability to categorize who should have access to what type of sites.
This solution does give us a single-pane-of-glass for this particular instance. We do have several products implemented that we manage, which this hasn't integrated with yet, but we have just been made aware of the SecureX implementation and we are looking into implementing that and bringing that into another single-pane-of-glass, but with more options available.
A single pane of glass saves time. It saves effort and the headache of having to open up multiple links and go to different dashboards for troubleshooting different areas. This does have a lot of options available for us to see who's doing what, what trends, what errors. We can set up our alerting through it as well. It is definitely a great dashboard.
The dashboard, the single pane, is very helpful, it's very visual. Everything is straightforward there; it's definitely important for management. Even when we bring it to upper management and explain why this product is beneficial for us, this gives us a good breakdown and makes a lot of details available for us.
One valuable feature is definitely its simplicity in terms of deployment. It is very easy to integrate it into the environment without any heavy lifting. Users didn't notice that we implemented it. You can start with a very low monitoring mode and start observing what Cisco Umbrella sees.
In terms of helping workers feel safe, secure, supported, and included, the solution is pretty transparent to the end user in most cases. They don't necessarily get any confidence from it, but it's supposed to be that way. It's supposed to be as transparent as possible. However, when the end-user accesses a site that is blacklisted or treated as potentially suspicious, he or she will see a warning displayed. This gives them additional confidence that somebody else is taking care of the details and that they can confidently browse around. If they come across a suspicious site, they know that they will get a warning or advice on how to proceed.
Cisco Umbrella supporting hybrid work environments is important. Within our organization, even before COVID, a lot of us worked remotely from time to time. For companies that we work with, it has become a reality with COVID. Before, everybody was working on site, and now, that's no longer the case. It is important to have flexibility and know that even if we work from home or from another place we're still secure.
For all Umbrella-related things, it does provide single-pane-of-glass management, but it's one component. If I look at the typical employee, he is only one piece of the puzzle. Other solutions, like, for example, AnyConnect for remote access, are managed separately. For Umbrella-specific items, it's a single interface for management. For monitoring, policies, and troubleshooting a specific case, everything is in one place. I don't need to go through the logs to know where to look.
My organization is not very large, and I'd say my colleagues are pretty proficient. So, it's not a high priority to have single-pane-of-glass management, but it's always good if solutions are capable of integrating together. If by enabling single-pane-of-glass management the workflow is simplified and the day-to-day operations are a little easier, then that's something we definitely want to benefit from.
The administrator user experience is definitely optimized by single-pane-of-glass management, especially if the personnel are busy. Then, it helps if all the relevant details are in one place.
In terms of maintaining network connectivity, Umbrella on its own is pretty user-friendly. It is easy to set up and maintain. It's one of its strong suits.
For the branch and campus, it's very simple to apply and maintain network connectivity. For the home environments, there are options to integrate it into the employee's PC as well. Cisco Umbrella supports different methods for different environments so that you can achieve the level of implementation that you need. It's where it should be.
It's very efficient in securing the infrastructure from end to end so that we can detect and remediate threats. You can simply adopt it right into the environment, and you don't need to build the rule sets on your own. It utilizes best practices, and it's very easy to set up policies such as potential malicious categories on the internet, what you want to block, what you want to filter out, etc. It's very easy to implement those.
When you go through the reports, you can see what kind of threats were blocked. Luckily, we haven't had an incident where something got through and caused a security incident.
In terms of metrics on how Cisco Umbrella has been able to remediate threats, the numbers look pretty impressive. However, it's hard to assess how serious that potential threat really was. It's hard to put actual weight on the numbers to determine how meaningful those numbers are.
The value that resilience helps offer in cyber security is pretty high. Cyber security resilience is a high priority in our organization. It's important to our customers that we handle what we do for them in a secure manner.View full review »
The most valuable thing is how easy it is to deploy. We did it with 9,000 users at my last job, and it took a week to get to all the endpoints. Doing that without having to physically touch all those endpoints was very simple.
The single pane of glass management makes it very easy to manage your rollout. We get a lot of "single panes of glass" and, eventually, you need a pane of panes of glass. But it's always good to have a clear and graphical view, and Umbrella's is nice and easy to read. Definitely, of the panes of glass that we do have, it's one of the easiest to use.
The single pane of glass is good to group users together and separate people out. Some people need different types of security. Some people are more vulnerable. Some have more highly valuable assets, like C-suite people. It's really good to be able to have end-users defined inside of that. You don't have to jump around. You don't have to figure out who's who. It's all done through one pane of glass.
What most people don't realize is that it's running in the background, which is a really nice aspect when it comes to security. Often, when you deploy a security tool, it takes up CPU performance. Everything slows to a grind. But Umbrella is so simple and easy and it doesn't affect the end-user experience. It's the best of all worlds. It's nice when people realize that they're being protected when they go to the wrong site. I think people are happy that they're protected, but it's nice that they rarely notice it.
It's generally easy to maintain network connectivity, but with Umbrella, the nice part is that whichever connectivity you're on, you're always secure. With Umbrella, as long as you're online, you're going to be protected.View full review »
IT Consultant with 501-1,000 employees
The Global Block List is one of the most valuable features because it's really easy to block domain names as well as URLs. Sometimes you don't want to block the whole site, you just want to block one URL. The Global Block and Allow Lists are the best features for us.
Cisco Umbrella also provides a single pane of glass for management. It's really helpful and it's important for us because we have multiple locations. Without a single pane of glass, if you want to block websites you have to go to every location, in each firewall, one by one. But when you have a single management portal, it's a lot easier.
The user experience is good because, as IT and admins, it's easy to use. But that's not only for admins, it's also true for the clients because they know the reason a website is blocked. The user experience is pretty smooth because they can report a false positive or a malicious website that has not been blocked in Umbrella. We are happy with the user experience.
And when it comes to applying and maintaining network connectivity consistently across all workplaces, Umbrella is excellent. We can track, among the different locations that we have, where the users are trying to get to. That means the risk of disruption is reduced by using Umbrella. And in that way, Umbrella contributes to maintaining network connectivity.
The user interface is pretty nice. Once you know how to do tasks, it's easy.
The most valuable features are actually the reporting with all the visibility. It gives a hawk-eye view when we map AD with Umbrella. It gives us the visibility of every user, e.g., which sites and content are being used and who is accessing what. That has really been a good new addition for me.
We don't need to access multiple devices in order to give access to our internal resources. We are secured in having everything on a single pane of glass, which keeps us secure as well. We can enter the configuration to reach our destinations based on the main names. Other than that, it also secures us by not looking at only the destination, but also the predefined security parameters that Cisco Umbrella has provided. For example, if I coded command and control centers (CNCs), then most phishing websites, where there are known websites caught by Talos, are being categorized as the bad domain. That is where it gives us a nice, handy lift.
The single-pane-of-glass management is really important. In today's era, administration costs and operational expenses will cost you a lot, and it reduces that as well. You don't need extra resources to manage all your parameter firewalls, looking at every single device to allow resources internal access. By just introducing the single-pane-of-glass management, it has lifted the burden off of management, especially the network management.
It gives us a quick view into what we are looking at. We don't need to go to the different devices and see where our traffic is starving, etc. So, we have better visibility, when using Umbrella, from its single pane of glass.View full review »
Senior Network Engineer at a educational organization with 1,001-5,000 employees
Being able to control policy sets has been a very nice feature. Being able to have appliances that are separate, where we can send DNS traffic, has been very beneficial as well.
It is a good product for helping workers feel safe, secure, supported, and included. Having the roaming client is probably one of the key factors in being able to do that.
Cisco Umbrella provides single-pane-of-glass management, which is pretty important for my organization. We have a lot of products, including security products, that we manage. Being able to see a lot of those data sets in a single pane of glass is very beneficial for my team. We enjoy having it. It is very easy to use.
It is not very difficult to maintain network connectivity.View full review »
Security BDM UK at a tech services company with 51-200 employees
Its simplicity is most valuable. I can install it and get it up and running, and it can be pervasive across my business within a business day.
It is pretty simple and straightforward to install and configure. Its remit is reasonably clearly defined. When you look at solutions like Darktrace and Carbon Black, the mission objective isn't as clearly defined. Cisco Umbrella, Sophos Central, or some of the other solutions have a more standardized approach to antivirus, which includes enhanced response from the machine learning or deep learning perspective.View full review »
IT Architect at a tech vendor with 10,001+ employees
The content filtering piece is something that really ties back to what my customer is using because they do have some sites that they don't want end users to go to, in order for the security to be locally available, allowing the users to break out to the Internet. The content filtering is a key piece that our customers want to test and use. So, we tested, and it was successful.
The single-pane-of-glass management is very important. Management wants to look at a single frame, then expand it to get the information that they need, without relying on engineers to take it out. Sometimes, engineers need to go down multiple levels to get the information and package it, and then it is possibly not the information that they are looking for. So, it has to be done again.View full review »
Solutions Architect at a tech services company with 51-200 employees
The most valuable feature is the ability to block users from reaching places that they should not even try to reach has been a boon.
Once we were given a roaming client and we did not only have Umbrella servers filtering the traffic as it left the perimeter. They were giving us what we want and did not have to worry anymore, I was happy with the solution. I view it as a mature solution that delivers what we need.View full review »
Vice President Information Security & Compliance at a tech vendor with 1,001-5,000 employees
One of the most important features is the security posture check which Umbrella offers when a user accesses any website. That is one of the most unique features that it offers.View full review »
It's very important that the solution helps support hybrid work. In the past, we might have had one or two people who were working from home because of illness or pregnancy. Now, with 60 percent of our people working from home, Cisco Umbrella has really helped us out with threats that they might not even know exist on their side. We can monitor them and be proactive about them.
Also, if it didn't have a single pane of glass, we would not be using it. The single pane of glass gives you a one-stop shop. It's like going to Home Depot. You find all your stuff there. You can see all your threats and your endpoints. It's a very important feature and makes things very simple.
Another point is that it's very easy to maintain network connectivity.View full review »
Network Engineer & Security Specialist at a tech services company with 51-200 employees
I like that it's a cloud solution.
The best part of Cisco is that Cisco has the second-largest security service cloud for security background checks. That is the big advantage of the Cisco security portfolio.
The solution is extremely stable. It has excellent performance.
The solution can scale if you need it to.
The initial setup is pretty straightforward.
The pricing is reasonable. You can negotiate contracts with Cisco.
Integration is very easy. It's not that complicated. Out of two clients, one had an easy integration, which was something new for me. That said, it did take time as it was the initial setup for me.View full review »
Network Manager at a consultancy with 11-50 employees
It is user-friendly. It is easy to manage the solution.View full review »
Domain blocking is among the most valuable features. It keeps people from accidentally clicking on something they shouldn't. Also, if I see an email that comes through, I can pick out bad domains that we want to block and make custom policies to block them.
In addition, when it comes to hybrid work it's pretty effective. We've got the agents. We can protect people inside our building and, when they're using their laptops out in the field, they're still protected. It's working well.
The single pane of glass management is also pretty helpful because we don't have to hunt for what we're trying to work on.View full review »
The most valuable features for us include
- Tenant lock
- Content filtering
- DLP solutions, looking for PII and information being exfiltrated.
Also, the policies are applied wherever you go, and that's good.View full review »
It enables us to go granular in the customization of blocking some categories on the DNS.
Also managing all the DNS aspects from one portal is definitely great from a security perspective. Sometimes we get a malicious URL in a phishing campaign on the email side. Blocking a domain across the whole company in one minute is definitely great. To block a DNS request very quickly you just add the domain to the Global Block List and in one second it's blocked.
Another feature that is good in Umbrella is applying and maintaining network connectivity consistently across all workplaces. You can go through the categories and do templates based on the sites, such as a data center or a branch and apply policies based on that.View full review »
I like the original functionality, which allows for providing secure DNS services. To define that, one's users can be on-net or off-net. This can be either in one's office or a remote location. This is the functionality that I find to be most prevalent in the area.
It makes for good flexibility. The solution is very easy to manage. We found the initial setup, for example, to be quite simple.
Easy to deploy.
Efficient protection on the DNS level and even higher. The sandboxing feature analyse and handle the complicated security risks.
Team Lead Network Infrastructure at a tech services company with 1-10 employees
Cisco Umbrella is very flexible, and it does not show any kind of delay that someone is responding to their DNS server, outside of their network and outside of their environment.
I haven't found any issues related to latency or any other issue.
They have Umbrella Investigate, which uses machine learning and artificial intelligence algorithms to find malicious attacks in the domains.View full review »
I like the DNS layer security.View full review »
The first thing that I found most valuable is that there is much differentiation within the licensing so if anyone wants DNS security from the DNS security log, we are there already, and if anyone wants to go to a secure internet gateway, that is also available. We can get the integrated cloud DLP license keys. That is a good benefit with Cisco Umbrella. You can get a complete solution in a single licensing.
Additionally, the cloud firewall is available to integrate if you want. Also, you can create side to side within everything in the cloud.
Right now there are modules just like cloud DLP that are implemented very well. You can just log onto the site, upload and download with the multiple options that are available. That is a good option with Umbrella. Also, you can integrate it with a Cisco Meraki switch as a firewall. That is also a good benefit with Cisco Umbrella.View full review »
CTO at a tech vendor with 11-50 employees
DNS security used to be the main value for us. Looking forward, SASE-style use cases (the ability to connect to any endpoint, be it a corporate-managed device, or a privately managed device, to any SaaS service) seems to be the most important feature for the future, on top of DNS security.View full review »
It provides security for the remote workers and it helps to improve enterprise security in a very easy way.
We mainly enjoy web software protection capabilities. It prevents the end-users from getting into bad sites or sites that potentially could have malware or could be phishing. It helps end-users avoid the wrong sites.
The solution works very smoothly.
The user interface is good.
The implementation is pretty easy.View full review »
The most valuable feature is the website protection capabilities because it prevents end-users from entering bad sites that potentially have malware or could be used for phishing. Ultimately, it helps users avoid the wrong sites.
It is very easy to integrate.View full review »
Network security consultant at a tech services company with 1,001-5,000 employees
You can manage and create policies based on a group of users. It can permit some URLs and block others. For example, we can block Facebook and YouTube.
From the DNS perspective, you can control and block malicious URLs. DNS security is the best way to use it to protect against malicious websites.
Cisco Umbrella provides a cloud management system. We can manage every client from a single workspace because they're in our portal. The single pane of glass management is user-friendly.
Overall, it is a very good solution. It is a simple solution and very easy to set up.
Project Delivery Coordinator at a media company with 201-500 employees
Some clients only want DNS security, while others want more of the advanced features that it has available.View full review »
The most valuable feature is its web content filtering.
It is very important for our organization that the solution offers single-pane-of-glass management.
It is very easy to maintain network connectivity.
The customer experience has been very good.
Consultant at a computer software company with 1,001-5,000 employees
I think recently with many people working from home, Cisco Umbrella has been very useful. For example, we can manage the device and the network when the employee is not working on the local host. Cisco Umbrella is very valuable for this kind of infrastructure.View full review »
I have found the malware protection feature valuable. It is helpful and deliverable and is able to protect my entire organization from getting compromised. It also prevents us from visiting any malicious sites which are not visible to the users.View full review »
Network Consultant at a security firm with 51-200 employees
Cisco Umbrella is a totally different solution. They are the first to come up with this idea of security. It's a totally new concept of security for everybody, for every time, real time, perfectionism. The browsing is great compared to other products. You will be protected by Cisco rather than other security solutions where you must first be rerouted and then they will start working on the domain rather than this. This couldn't be compared to any other solution.View full review »
General Manager at a mining and metals company with 10,001+ employees
The most valuable features of this solution are the Web Filtering and the APT. The APT is something that I find to be very good in Cisco.View full review »
The security and access control features are the most valuable for us.
Cisco Umbrella can be implemented very fast and easily. All that we must do is redirect the DNS registers in their routers, or the active directory service of the enterprise that is going to use Umbrella services. If you buy the service now, in two hours you are protected by the service because it's very fast to put in service.View full review »
Spider Solutions CTO at a security firm with 11-50 employees
The most valuable feature is the ease of use.
It's very Robust.
It offers good visibility for the Administrator. The administrator has full visibility of what is blocked or has the knowledge of where users go when they are surfing the internet.View full review »
Head of Business Solutions, UK&I at a comms service provider with 10,001+ employees
We've found it to be stable and good for our customers.View full review »
Director at seamlessinfotech.com
I like that it integrates with the infrastructure. I also like the kind of data and intelligence that's built-in. It helps create innovative reports for security.View full review »
The user interface is great. It's very easy to tailor to our client's environment and needs.View full review »
We like Cisco Umbrella because of DNS security. It's one step ahead of whatever we are using for regular web filtering. In that way, it's more secure than other web filtering products.View full review »
Systems Support Specialist at a tech services company with 51-200 employees
It's good for local communication with the data center and LAN.View full review »
Cyber Security Consultant at flydubai
It is a good cloud-based solution for DNS security.View full review »