Cisco Umbrella provides DNS-layer security that blocks threats before they reach your network or endpoints. By filtering at the DNS level, Cisco Umbrella stops malware, ransomware, and phishing attacks before a connection is ever made.
How Cisco Umbrella Works
Every time you visit a website, your computer first looks up the site's IP address through DNS (Domain Name System). Cisco Umbrella intercepts these requests and checks them against its threat intelligence database. If a site is known to be malicious, the request is blocked before any connection is made.
Key Threats Addressed
Unsafe Web Surfing by Employees
The system monitors web traffic on each computer, blocking known malicious sites from access, whether employees visit them accidentally or intentionally. This prevents drive-by downloads and malware infections from compromised websites.
Email Phishing Scams
Phishing is the attempt to obtain sensitive information such as usernames, passwords, and credit card details by disguising as a trustworthy entity. When employees click phishing links, Cisco Umbrella blocks access to the malicious destination.
Malicious Crypto-mining
Malicious software can run on company computers performing cryptocurrency mining tasks without the knowledge of the person using the computer. This slows down your systems and increases electricity costs. Cisco Umbrella blocks connections to known crypto-mining operations.
Command and Control (C2) Traffic
If malware does infect a device, it often tries to communicate with external servers for instructions. Cisco Umbrella blocks these callback attempts, preventing attackers from controlling infected machines.
Content Filtering
In addition to security threats, Cisco Umbrella can filter content by category. Organizations configure both Content Category Settings and Security Settings to match their policies. Common filtered categories include:
- Pornographic and adult content
- Gambling sites
- Streaming media (if configured)
- Social media (if configured)
- Other categories as determined by your organization
What You See When Content is Blocked
When you attempt to access a blocked site, you will see a BRITECITY block page explaining:
- Why the content was blocked (category or security threat)
- How to request access if you believe it's a legitimate business need
- Who to contact for assistance
Protection Everywhere
Cisco Umbrella protection follows your devices wherever they go:
- In the Office: All devices on the network are automatically protected
- Working Remote: The Umbrella agent provides protection on home networks
- On Public WiFi: Stay protected even on unsecured networks
- Mobile Devices: Protection extends to phones and tablets
Key Benefits
Cloud-delivered protection
Hardware required
Continuous protection
Part of POLARITY
Cisco Umbrella is included as part of BRITECITY's POLARITY cybersecurity service. Pricing is:
- $14 per user per month
- $15 per computer/server per month
For maximum protection, all devices and users should be covered. POLARITY is offered in addition to your BRITECITY Managed Service Plan.
About the Author
Quick Answers
- Why is a website I need blocked by Cisco Umbrella?
- Websites are blocked if they're categorized as malicious, inappropriate, or outside your organization's acceptable use policy. Contact BRITECITY support with the URL and business justification, and we can review and potentially allowlist the site.
- Does Cisco Umbrella work when I'm working from home?
- Yes, the Cisco Umbrella roaming client installed on your computer provides protection anywhere you have internet access, whether at home, at a coffee shop, or traveling. Protection follows your device, not your location.