Item: Cisco Umbrella
Rating: 10
Author: Verified User

Overall Satisfaction with Cisco Umbrella

Use Cases and Deployment Scope

This is being used enterprise-wide for both our internal endpoints as well as our guest-WIFI networks. Umbrella allows us to provide a consistent policy to all these endpoints without requiring all traffic to pass through my entire security stack. In addition, we are able to apply this policy to managed endpoints when they would otherwise be considered off-net.

Pros and Cons

Pros

Application of policy to networks, not just managed endpoints.
High-volume DNS forwarder. No reliance upon ISP DNS services.

Cons

Identification of requesting endpoint depending on deployment methodology.
Reporting policy actions when IP of endpoint appears to change between resolution and access times.

Security Coverage

Extension to endpoints outside the firewall requires the installation of an agent, either a dedicated Umbrella agent or the AnyConnect Roaming Security module. Once that agent and an organization-specific config file are deployed there is no more touch required on the endpoint as all policy management/reporting is accessed via the cloud management dashboard.

Support Rating

Umbrella support has always been responsive and willing to work with us, whether that was simply user education, issue troubleshooting, or submitting feature enhancement requests.

Other Software Used

Cisco Web Security Appliance (WSA)

Likelihood to Recommend

Easily apply policies to an enterprise without touching any endpoints by simply using Cisco Umbrella as a forwarder on existing DNS servers. However, that deployment method precludes Umbrella from providing visibility into which endpoints may be trying to communicate with C&C servers.

Deploying the Umbrella roaming module provides a means to extend a security policy and protection to mobile devices when outside the enterprise networks.

Comments

Please log in to join the conversation

Cisco Umbrella: Simple to use, simply get it