Data sheet

Cisco Umbrella

Cisco Umbrella: Branch Package

The simplest and fastest way to protect branch offices.

Cisco Umbrella Branch is a cloud-delivered security service for the Cisco

Integrated Services Router (ISR) 1k and 4k series, and the Cisco Small
Business RV Series Routers. It provides the first layer of defense against The problem
threats at branch offices. And it offers the simplest, fastest way to protect
• 30% of advanced targeted threats will
every device on your branch network. You gain visibility and enforcement specifically target branch offices as an
at the DNS-layer, so you can block requests to malicious domains and IPs entry point.1
before a connection is ever made.
• 70% of branches offices have some
Umbrella Branch protects employees and guests in distributed branch level of DIA.1
offices – like those in retail, finance, hospitality, and education. By enforcing
security at the DNS-layer, connections are never established and files are
never downloaded. This prevents malware from infecting devices and stops
attacks from exfiltrating data over any port. Umbrella Branch also brings a
simple-to-use content filtering solution to your branch offices. It stops Wi-Fi The solution
guests from accessing inappropriate content and keeps employees focused
on productivity when on the internet. This keeps your customers happy with Cisco ISR or RV Series Routers +
safe internet access, while also protecting your business. Cisco Umbrella Branch
Simple, effective security for every user,
in every branch office.
Block

Malware

C2 Callback

Phishing
No one combines
Cisco® Umbrella Branch
208.67.222.222
effectiveness &
performance better
CISCO ISR CISCO RV • #1 fastest & most reliable DNS with
90M+ daily active users
• 175B+ daily internet requests or
connections
• 3M+ daily new domain names
Devices on branch network
discovered
• 60K+ daily malicious destinations
Umbrella Branch is the simplest way to protect any device in your branch identified
offices — all you need to do is upgrade the software on your Cisco devices to
• 7M+ malicious destinations enforced
begin enforcing acceptable use policies and blocking malware, phishing, and
concurrently while resolving DNS
command and control callbacks. There’s no action required from end users to
requests
start getting protection. Whether it’s a corporate device, employee-owned, or
customer-owned device connecting to the Internet through the Cisco router,
Umbrella Branch adds an easy, but very effective layer of protection.

1. http://cs.co/gartner-branch

© 2019 Cisco and/or its affiliates. All rights reserved.

Data sheet
Cisco Umbrella

The trends in branch offices

80% of employees and customers are served in branch offices2

Guests expect easy access to Wi-Fi, and employees need connectivity to be productive. However, the majority of
branch offices have direct internet access and advanced threats are specifically targeting exposed locations. As more
users connect to these unprotected branches, they become more attractive to those with malicious intent.

How we predict threats before they happen

Real-time, diverse data reveals internet activity patterns

Our global network infrastructure handles more than 175 billion DNS requests every day, which gives us a unique view
of the internet. By correlating DNS, WHOIS record data, BGP routes, IP geolocation, SSL certificates, malware file
connectivity, and more, Umbrella gains a complete view of domains and IPs used in attacks.

Automated statistical and machine learning models identify malicious destinations

Similar to Amazon learning from shopping patterns to suggest the next purchase, or Pandora learning from music
patterns to play the next song, we learn from internet activity patterns to identify attacker infrastructure being staged
for the next threat. We run statistical and machine learning models against our data to uncover current and emerging
threats and proactively block users from connecting to malicious destinations.

Simple for both security & sysadmin teams

Enable protection in minutes

With a few simple steps, you can easily deploy Umbrella on Cisco ISR and RV Series Routers.

For ISR deployment details, please visit the Umbrella and ISR integration guide.

For RV Series Router deployment details, including supported models, please visit the Umbrella and RV Series Router
integration guide.

Global security by default

1. As soon as Umbrella Branch is enabled, all users, guests, and employees are protected against malicious
destinations.
2. If a threat is requested via a web browser, end-users receive a customizable block page.
3. To immediately access a blocked site, just edit the Umbrella policy to allow the domain.

Instant visibility into threats

1. View your daily, weekly, or monthly security events in your inbox or our dashboard.
2. Check if threats are trending up or down as well as the domains and laptop with the most security events.
3. Respond to an incident by drilling into the full activity per domain or laptop.

Detailed logs for incident response

1. View and optionally filter the last 30 days of detailed, real-time internet activity by time, domain, category, laptop,
or IP location.
2. “Top N” summary reports are retained for up to 2 years and can be scheduled to be sent to your inbox.

2. http://cs.co/tech-target

© 2019 Cisco and/or its affiliates. All rights reserved. Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list
of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a
partnership relationship between Cisco and any other company. (1110R)