Cisco Umbrella Investigate provides access to certain Cisco Threat Content about malicious domains, IPs, networks, and file hashes. Using a diverse dataset of billions of daily DNS requests and live views of the connections between different networks on the Internet, Cisco Umbrella Investigate applies statistical models and human intelligence to identify attackers’ infrastructures. Cisco Umbrella Investigate data can be accessed via a web-based console or an API. Cisco Umbrella includes various license options including Roaming, Branch, Professional, Insights, Platform and Investigate and WLAN.
Please consult the Umbrella Documentation for further information on its technical specifications, configuration requirements, features and functionalities.
Protection
- Add new layer of predictive security for any device, anywhere
- Prevent malware, phishing, and C2 callbacks over any port
- Enforce acceptable use policies using 60 content categories
Performance
- 100% cloud—no hardware to install or software to maintain
- 100% uptime—resolves 80B+ requests daily with no added latency
- 7M+ malicious destinations enforced as DNS requests are processed
Enforcement
- Block malicious domain requests & IP responses at the DNS-layer
- Block malicious URL paths & direct IP connections at the IP-layer*
Visibility
- Real-time, enterprise-wide activity search & scheduled reports
- Identify targeted attacks by comparing local vs. global activity*
- Identify cloud & IoT usage risks by reporting on 1800+ services*
Management
- Custom block/allow lists, built-in block pages, and bypass options
- Enforcement & visibility per internal or AD user/group*
- Retain logs forever by integrating with your Amazon S3 bucket*
