Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                

Cisco Umbrella Education Package

Download as pdf or txt
Download as pdf or txt
You are on page 1of 2

Data sheet

Cisco Umbrella

Cisco Umbrella Education Package


Secure students and staff, everywhere.

Cisco Umbrella secures internet access and controls cloud app usage for students and staff across your campus
network. Umbrella acts as a secure onramp to the internet to support compliance and provide effective threat protection
for students and staff, both and off-campus. Backed by Cisco Talos, one of the largest threat intelligence teams in the
world, Umbrella blocks threats before they can reach your network or endpoints. Delivered from the cloud, Umbrella
offers protection and enforcement for students and staff anywhere they access the internet.

The Cisco Umbrella EDU package, exclusively for K-12 schools and higher education institutions, is licensed by the
number of faculty and staff users. There is zero charge for students!

Secure Internet
DNS Security
Education Gateway (SIG)
Advantage
Essentials

for education
for education
organizations with
exclusively for schools organizations and who
Cisco SD-WAN, or with
and colleges need deeper inspection
advanced security and
and control
web policy needs

by # of faculty and
Licencing staff users. No charge by # of users by # of users
for students

Security & Controls


DNS-layer security
Block domains associated with phishing, malware, botnets, and other high risk
● ● ●
categories (cryptomining, newly seen domains, etc.)
Block domains based on partner integrations (Splunk, Anomali, & others) and
● ● ●
custom lists using our enforcement API
Block direct-to-IP traffic for C2 callbacks that bypass DNS¹ ● ●
Secure web gateway
Traffic associated with
Proxy web traffic for inspection risky domains via selective All web traffic
proxy
Decrypt and inspect SSL (HTTPS) traffic With selective proxy ●
By domain or By domain or By domain, URL,
Enable web filtering
domain category domain category or category
Create custom block/allow lists Of domains Of domains Of URLs
Block URLs based on Cisco Talos and third party feeds, and block files based on
With selective proxy ●
AV engine and Cisco Advanced Malware Protection (AMP) data
Use Cisco Threat Grid cloud sandbox environment to analyze suspicious files

(200 files/day)
Use retrospective security to identify previously-benign files that became malicious ●
Cloud-delivered firewall
Create layer 3/layer 4 policies to block specific IPs, ports, and protocols ●
Use IPSec tunnel terimination ●
Cloud access security broker
Discover and block shadow IT (based on domains) with with our
● ●
App Discovery report
Discover and block shadow IT (based on URLs) with App Discovery report ●
Create policies with granular controls (block uploads, attachments, and posts)

for select apps
Umbrella Investigate
Access Investigate’s web console for interactive threat intelligence (5 logins) ● ●
Use the Investigate on-demand enrichment API to enrich other tools/systems
● ●
with domain, URL, IP, and file threat intelligence (2,000 requests per day)
Integrate with Cisco Threat Response to aggregate threat activity across Cisco With enforcement
● ●
AMP, Threat Grid, Email Security, NGFW, and Umbrella API only

© 2020 Cisco and/or its affiliates. All rights reserved.


Data sheet
Cisco Umbrella

Secure Internet
DNS Security
Education Gateway (SIG)
Advantage
Essentials
for education
for education
organizations with
exclusively for schools organizations who
Cisco SD-WAN, or with
and colleges need deeper inspection
advanced security and
and control
web policy needs
by # of faculty and
Licencing staff users. No charge by # of users by # of users
for students

Security & Controls


Traffic forwarding

Forward external DNS traffic for:


• On-network protection via Cisco (SD-WAN, Meraki MR, Integrated Services
Router, & Wireless LAN Controller) and third party integrations (Cradlepoint,
● ● ●
Aerohive, & others)
• Off-network protection via AnyConnect, Umbrella roaming client, and Cisco
Security Connector for iOS

Send outbound network traffic via IPSec tunnel, proxy chaining, or PAC filesI ●
User attribution

Create policies and view reports by:


• Network (egress IP)
• Internal subnet²
● ● ●
• Network device (including VLAN or SSID)³
• Roaming device
• Active Directory group membership (including specific users)⁴

Create policies and view reports using SAML ●


Management
Customize block pages and bypass options ● ● ●
Use our multi-org console to centrally manage decentralized orgs ● ● ●
Use our management API to create, read, update, and delete identities
● ● ●
using own internal tools
Reporting and logs
Leverage real-time activity search and our reporting API to easily extract
● ● ●
key events
Choose North America or Europe for log storage ● ● ●
Use customer or Cisco-managed AWS S3 bucket to export and retain logs
● ● ●
as long as needed⁵
Access domain request logs in our user interface (30 day: detail, 1yr: summary) ● ● ●
Access full URL logs in our user interface (30 days: detail) ●
Access firewall (IP, port, and protocol) logs in our user interface

(30 days: detail)

Support
Enhanced - 24 x 7 technical + on-boarding Required

Premium - 24 x 7 technical + on-boarding + Technical Account Manager (TAM) Optional upgrade

1 Requires endpoint footprint (Umbrella roaming client, Chromebook client, or AnyConnect roaming module)
2 Internal IP attribution requires network footprint (our virtual appliance), Meraki MR integration, Cisco ISR integration, or Cisco ASA integration, or Cisco SD-WAN integration.
Select third-party integrations available too
2 Requires network device integration with Cisco Integrated Services Router (ISR) or Cisco Wireless LAN Controller or Meraki MR
4 Active Directory (AD) policies and attribution requires Umbrella AD connector with network footprint (Umbrella virtual appliance)
or endpoint footprint (Umbrella roaming client or AnyConnect roaming module)
5 No Amazon account required when using the Cisco-managed S3 bucket

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list
of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a
partnership relationship between Cisco and any other company. (1110R)

You might also like