Cisco now offers OpenDNS Umbrella Web Filtering. Cisco acquired OpenDNS in August 2015, and rebranded the product as Cisco Umbrella.
N/A
Tufin Orchestration Suite
Score 7.6 out of 10
N/A
Israeli company Tufin offers a firewall security management offering via the Tufin Orchestration Suite, including SecureApp for managing network connectivity, SecureChange network change automation, and SecureTrack multi-vendor and next-generation firewall management.
Cisco Umbrella most of the time actively blocks high malicious domain by itself which we found very effective to save our employees from phishing campaigns. Another great use of Cisco Umbrella is the web content filtering feature helps by setting up custom rules and block access to non-work-related or potentially harmful sites/URL/domains. So, I think Cisco Umbrella suits pretty well if anyone is trying to protect their organizations from one of the biggest cyber threat these days which is phishing.
Well suited scenarios - 1) Firewall Policy / Ruleset management 2) Where all the products are from Tufin like TOS ST, SC, SecureApp etc 3) Where customer focuses on ruleset compliance - USP violations, and other features Less suited - 1) Agnostic/distributed environment - Tough with integrate with 3rd party like CyberArk 2) FW recertification processes / exception process when complex process is included
I just did, which is the multi-organizational component that allows me to have a federal model where I can dictate very high-level policies. And that is also true in case of an incident or a new malware or a new IP address that is coming out. Or a great example is in 2022 the all-Ukraine deal was growing up in Europe and from a top level we made a decision we were going to block all Russian domains and Ukrainian as well while we were at it and we just pushed it to all the companies in two seconds after then changing control of course. And that was quite valuable. That gives us a lot of freedom and ability. The fact that the product also allows me to have the segmentation permits me to follow the virus regulations in the countries. So for example, in Germany, there are a lot of stricter rules on what you can and not do in monitoring an employee from a work council and union perspective, and therefore we have a special setup for them specifically and also where the logs are stored in the region. My American team has the same thing, but in that case, the storage of those logs is stored in the US and that gives us great flexibility for sure. Then okay, there is some businesses that are also using it to police employees, meaning I don't want 'em see 'em job search websites or I don't want them to be looking at travel planning their vacation during business hours or I don't want my blue-collar workers to do anything other those 10 applications on the internet, on the web. So we are able to do that. It's not the part that is more fun because of a lot of HR involvement, but we use it also that way.
Not a very intuitive system when you want to whitelist sites
Accounts department has complained that the purchasing system is difficult, because it is a manual process. They have to ask for quotes each time we add new seats.
I've had several issues with the roaming agent which has quite a few bugs
First off I never give anything a "10" unless it's perfect. LOL - I grade on the curve. I think OpenDNS/Umbrella is a very good product. I think that fact that Cisco absorbed them is one of the proofs of that. I have used the product back when it was free for companies our size. I have not always appreciated the cost - but in the post pandemic cyber chaos, I believe the cost benefit ratio is still very high. I have honestly not looked at other products because Umbrella continues to work to my satisfaction. I consider Umbrella to be one of the key layers in my cyber security strategy.
Better features and easy to manage system with great customer support and overall usability is great as it works for hybrid environment with ease as it is having features for on prem users as wells as cloud users with great customer support and great team of trained engineers to support our opeartions.
Cisco umbrella services in the cloud are always available. However, the weakness is the VM installed in the data center that are the first resolvers. If the VMs become unavailable for any reason or the vSphere goes down, then all DNS is affected
our experience with cisco products has always been awesome and same is the case with cisco umbrella .Under umbrella cisco provides flexible and scalable software solution to use across different dept and sites . These softwares are very user friendly ,pages load quickly as these applications are designed for minimum latency and reports are also provided quickely
We have not had a chance to use Cisco support frequently, but when we needed to troubleshoot some issues that we were having with the agent installation, the support was very responsive and the solution that they offered worked. The only reason I give it one less point is that the turnaround time for non-critical issues is very long.
Quite easy to understand training modules prepared by knowledgeable trainers. Training modules have included all the desired features of these softwares and the content delivery is very good from the respective module trainers and it explains in details the features and apart from that further training material support is also provided if needed.
At the time we were forced to move from Cloud Web Security to Cisco Umbrella, Cisco Umbrella was far from being a direct replacement. It was frustrating and difficult to migrate due to the lack of functionality. This has since been addressed, however we now have legacy rulesets that were built as bandaids that cannot be removed. Hopefully the migration to Secure Access will address this.
Different products in different spaces. The Z3 was more of a VPN endpoint so that users didn't have to worry about a client. If they are at home, they are on their corporate network and able to access resources. Cisco Umbrella can be used then to serve corporate DNS across the VPN tunnel to the Z3 device and extend the capabilities of Cisco Umbrella.
1) Fairly okay overall but definitely needs improvement overall Vs the other products available in the market like Palo Alto XSOAR 2) Cost wise okay at the beginning but when client demands add-ons/ more features/customization tailored to their needs, Tufin Orchestration Suite recommends RFE / custom costs/development costs 3) USP feature is cool to use overall Vs FireMon 4) Tufin ProServ needs to buckle-up/Support compared to other competitors in the market
Cisco umbrella provides fleaxible and scalable software solutions which are easy deploy across multiple departments and sites wherever needed and this softwares are very easy to use and provides the best interface along with cisco support for other devices apart from cisco infrastructure but still there is scope for improvement on the inclusion of latest features
Cisco Umbrella has been an excellent investment for us. The extra protection it provides in a very simple way has been well worth the costs.
Cisco Umbrella is very easy to setup and manage and can do most of the things we need with little daily interaction so we are free to work on other systems that need more attention.
Utilizing the Cisco Umbrella reporting features, we can determine what systems might need additional attention. If we see systems attempting certain types of access, we quickly know there is likely something on the device that probably needs removed.
Specific Cisco Umbrella reports can help us determine if we need to do user education and develop cyber habits.
