Discover the Future of Umbrella SIG: Powerful New Features Deep Dive

Alright, well welcome to everybody. Welcome to today's webinar to discover the future of Umbrella SIG powerful new features for our deep dive.00:11Today our presenters and panelists consist of of seasoned product managers, technical marketing engineers, and customer success specialists here at Cisco. Our main presenters today will be Nagisa and Prabhu. Additionally, you will have four panelists who will be working to answer your questions as they come in. So speaking of asking questions during today's session, you can ask your.00:18Questions at any time. We highly encourage it. All we ask is that you type your question into the Slido panel, which you can locate by clicking the three dots on the bottom right hand side of your screen and selecting the Q and A option. Please remember to select all panelists from the dropdown list, click send and on our online panelists will respond to your questions.00:38So with that, I'm going to pass it over to Nigisa to jump into the specific agenda and get us started. Thank you Chris. Hello, everyone. I'm Nikisa Taymorian. I'm part of the Cisco security product team. And as Chris said, my colleague Prabhu and I will be your presenters for today's session.00:57So glad you decided to join us today. I know you're gonna find this session very, very valuable, and I'm happy to talk to you all today about the future of Umbrella SIG, our evolution to secure access and we'll be taking a look at the powerful new features that you'll.01:17Get when you transition over to secure access.01:37Okay, so let's take a look at our agenda for today's session. So I'll start by kicking us off and explaining the evolution of Cisco Umbrella to Cisco secure secure access and how this evolution is going to take your security to the next level and help you to.01:43To future proof your security and really empower you with AI powered security. And then from there we're gonna be talking about maximizing your investment. So I'll explain how you're gonna get more value from your umbrella license by planning for your move over to secure access.02:02And getting, getting these new advanced AI driven features. And then from there, my colleague Prabhu is going to do a demonstration for you all of these latest secure access innovations, so you can see firsthand our AI driven.02:24Protections and action.02:43And then before we wrap, I'm gonna talk to you all about our exclusive offer, the elevate offer. This is a limited time offer that gives you investment credits for your unused umbrella balance as you move over, to secure access. It also gives you a lot of fun.02:45Flexibility in your timing as you move over to secure access, and it'll really help make this a smooth transition.03:05As Chris mentioned, if you have questions throughout the session, please do put them in our Slido Q and A panel. We have experts on the line and we'd love to help answer your questions. Okay, so let's jump right in and I'd like to start by 1st.03:14Thanking you all for choosing Cisco Umbrella to protect your organization. I personally absolutely love umbrella. I've been working on Umbrella for about the past eight years, so it's something that's very special to me and I am very passionate about this transition.03:33To secure access. I really do believe you're gonna get so much more added value when you move over to secure access. So I'm excited to talk to you all about that today. And again, thank you for your investment in umbrella. And with your investment in umbrella, you've gotten received this.03:53Strong foundation, improving your visibility, blocking threats and strengthening your security posture.04:13Okay, so let's now talk about how security needs have expanded. So really at the core of why this umbrella evolution to secure access, it's really about how the threat landscape has expanded. I mean, it's been expanding but with a.04:23AI, and everything that's been coming with AI, you know, the, the.04:43The magnitude of change really requires a new platform and that's what we designed secure access to be. So this modern SSE platform that can help you counter today's modern threats and AI fuel challenges. So the statistics.04:49On this slide really drive the urgency of this situation. No surprise that about 98 % of organizations are concerned with evolving threats. And this is something that impacts organizations, you know, universally across industries, sizes, you know, different geos.05:09But there's really a gap in feeling, you know, ready and prepared to respond to cyber attacks. And, what I'm happy to share with you all is that our umbrella evolution is one big step in helping you to strengthen your security posture. I've heard many of our our.05:29Our customers refer to secure access as Umbrella two.o.05:49And what's great about secure access is we're boosting your security with AI driven intelligence and delivering an unmatched level of simplicity both for end users as well as IT teams. That's something I consistently hear when I talk to our customers is they just.05:55Love the the simplicity aspect of the solution.06:15Okay, so now let's talk about why you should move to secure access. So really this is about staying ahead of threats and future proofing your security with.06:20With, it, with added AI protections. You know, given that cyber threats are constantly evolving, secure access offers advanced defense mechanisms to keep you one step of attacker ahead of attackers. And, and also one of the key.06:35The reasons why you want to move to secure access is you're gonna get a lot more value for your umbrella investment. So we've designed this to be a very affordable and budget friendly transition over to secure access and you're gonna get.06:55A lot more value. So 1st of all, you're gonna get, you're gonna be able to secure use of gen gen AI and a gentic AI in your environment. So this goes far beyond pattern matching to include advanced contextual inter interpretations and also.07:15Guardrails to manage, you know, AI risks and, you know, what exactly your users can do when they're using various AI tools.07:35You're also gonna get, you know, high performance and modern protocols. So with secure access, we use modern protocols like Mask and quick and techniques like vector packet processing VPPP. So that's gonna speed up your connections faster internet access.07:46Best for your users, four times faster than than SIG. And then you're gonna get in addition to that digital experience monitoring from thousand eyes. This is a capability that our customers love. They get deeper visibility, faster troubleshooting, and my colleague Prabhu is gonna demo.08:06Straight all of these capabilities for us in the demo portion of our session today. I'll share more on our seamless fast migration with our automated upgrade manager. Most of our customers can, can complete the upgrade in about an hour or so. And this is a NO cost.08:26Cost tool that's available for you as an umbrella customer.08:46And as I mentioned earlier, we'll talk about the elevate offer, and this will give you access to both Umbrella and secure access for as long as you need during your migration. So by acting now and, you know, planning to transition over to secure access, you can.08:50Take advantage of a very budget friendly transition path.09:10Okay, so now let's talk about the various upgrade paths that are available. So most of you on the call today are likely umbrella SIG customers, given that that's in the title of our session today, but we may have a couple umbrella DNS customers.09:16On the call as well. So for umbrella DNS customers, you're gonna wanna plan your transition over to secure access DNS defense. And for you all in particular, you're gonna get, you know, that same, you know, reliable industry leading DNS layer security that you get with umbrella DNS and we're.09:35We're gonna add a number of new added capabilities on there for you. Cloud malware protection and cloud DLP.09:55Which you're gonna give you deeper data protection and control over your cloud applications, and then both DNS and SIG customers, when you move move over to secure access, you're gonna get a hundred seat long term trial free trial of our secure part.10:04Private access ZTNA capability. So this is a great way to get started with, with zero trust and just start with, you know, a small subset of your users, small subset of your applications, just kind of get your feet wet with it and see if this is something you'd like to do more of.10:23And then for our umbrella SIG customers, you're gonna move over to secure internet access.10:43So you're gonna get, again, everything that you've been using with SIG, and then on top of that, you're gonna get the AI protections with the AI guardrails. You're gonna get the digital experience monitoring, you know, the the faster performance with the modern protocols.10:50And a lot more that I'll elaborate on here. Okay, so now let's take a closer look at, some of the specifics of what you're gonna get when you move over to secure access SIA. And again, this is about future.11:11What's your proof in your security, getting more value from your license with a very budget friendly upgrade path?11:31You're gonna get all of the capabilities with the umbrella SIG that you trust and that you love. And then on top of that, we're gonna add the secure use of gen Gen AI and the Gentic AI capabilities. This includes the AI guard.11:41Drills which our customers really, really get excited about and appreciate. The AI capabilities in particular, the AI driven threat protection in particular, we hear from our customers is one of their main drivers, top drivers for wanting to move over from umbrella to.11:59Secure access. And in full transparency, you know, Umbrella hasn't been getting any new cutting edge capabilities. All of our innovations are going into secure access. So take it to take advantage of all of the Gen AI and agent to KAI protections.12:18You're gonna wanna move over to secure access.12:39Okay, and then they mentioned the high performance with the modern protocols like mask and quick. So I hear our customers talk about, you know, how, how great the user experience is connecting to their applications, to the internet, even from, you know, remote locations, thanks to our.12:42Mask and quick capability. And I also hear our customers talk a lot about how much they love the deep visibility and fast troubleshooting with our digital experience monitoring capability from thousand eyes. So this can take what was hours of troubleshooting across various.13:02Dashboards and trim that down to a matter of minutes. So it's a very powerful capability to get deeper visibility for your IT teams to quickly isolate issues, reduce troubleshooting time and minimize business disruption.13:22When, you know, various challenges come up, very various issues around performance come up. Okay, and then simplified performance. So what, what allows sec secure access to deliver, a simplified performance, one of the.13:42The main aspects here is that we're bringing together this powerful protection with simplified management, in particular policies are a lot easier to manage compared to umbrella. So we've really streamlined your security operations by making your policy.14:01Policies easier to manage, and to maintain over time. And we also have an AI assistant that includes like a policy wizard that makes it easier for you to, create new policies.14:21Okay, so I want to share with you all a success story. So we have a customer that is headquarters, their headquarters is out in London, in the UK.14:46But they are a global company with a global presence in 34 countries, 20000 users, the customer's Era. And they're a professional services company. They design a lot of the world's, you know, most important buildings, bridges, metro systems. They've been in number.14:59Tell customer for a really long time. They started out with DNS and then went on to SIG and about I think over a year ago, expanded to the full secure access, solution.15:19And their lead cyber, their lead cyber engineer David Noble, worked on their migration from Umbrella to secure access and as you can see from the quote on the screen here, their migration from Umbrella to secure access was completely seamless, it was painless, it was a smooth transition, and they.15:34We received great support, from Cisco. And one thing that David really loved about the transition over to secure access is that his team didn't have much of a learning curve because they were familiar with umbrella.15:54And, Airp in particular, they did decide to add the zero zero trust capabilities, the secure private access capabilities, because they wanted to better secure their large diverse workforce.16:11And because they, they handle extremely sensitive customer data. So they wanted to enforce that least privilege across their critical applications and the way David described this his words, protecting our crown jewels. So this.16:27Is a great example of a success story and we actually have several umbrella to secure access secure access Umbrella to secure access success stories on our secure access home page if you're interested in checking out more of them.16:47Okay, so I mentioned earlier that we've really designed this to be a simple and smooth transition for you all, and we have an automated upgrade manager that's available for you guys to take advantage of.17:02So typically our customers can complete their policy replication in about an hour using our upgrade manager. It's often less for a typical customer size. And what's great about how we've designed this upgrade is that you can make this.17:20Transition happen on your own timeline. So we completely understand and are well aware of the fact that you all are busy, you have projects planned for the next several months, and we're giving you the flexibility to run your umbrella instance simultaneously with your secure access.17:40S instance so that you can take all the time you need to move your policies over, test everything out, and then you can log out of umbrella, when you're completely comfortable and ready for that.18:00And as I mentioned earlier, this is a free, NO cost tool that's available from the umbrella UI. It's not a separate package or an added cost. You all have access to it. So I just wanna reiterate here that now is really the perfect time.18:17To upgrade your security, get more value and future proof, by moving over to secure access. So I want to encourage you all to add the migration to secure access to your project list today and whether your timeline is next month or six months from now.18:36Secure your spot, take advantage of our elevate offer to ensure a smooth transition to secure access, and to ensure that you have a a very budget friendly path for moving over to secure access.18:57Okay, so now that you all have, you know, a better understanding of the umbrella evolution to secure access and for SIG customers in particular, you know, what are some of the added capabilities you're gonna get when you move over to secure access so.19:13I'm gonna hand it over to Prabhu, who's going to demo these added capabilities so you can check them out via a, a demo.19:32Hi there, my name is. I'm a global security technologist here at Cisco. In this session, we'll talk about some additional cloud security capabilities for the AI era. The attack surface that we're looking to address has expanded significantly.19:46We now have new threats due to the unpredictable nature of AI applications. Like with any good defense in depth approach, the 1st step is around visibility. This is the proverbial you cannot control what you cannot see approach. Now, we need to understand shadow AI usage. Now, a lot of us are very familiar with the concept of shadow IT.20:04This is where the usage of AI of applications is not driven by IT.20:24Shadow AI is the same concept. With Cisco AI access, we're able to provide visibility into over 3800 different applications out of the box. And this list is growing ever ever so. Now 2nd part is about providing guardrails. Maybe you need to understand certain types of.20:29Documents, not based on document labeling, but unstructured content where our machine learning understand intent for the documents that are things like patent applications or M and A related or financial statements. And all of these ultimately can be governed using a single unified security framework.20:49Now, one of the many ways security providers, including Cisco, have addressed the needs of data loss prevention is via you know is via something like inline web data loss prevention controls. Now what DLP controls typically govern is what data is allowed to go in and out.21:09Part of the organization.21:29This is essential and needed, but we've gone further. Now, if you think about most of the communication with a generative AI application, it is largely unstructured, which calls for broader and deeper security. Now within AI guardrails inside of AI access with this capability.21:30We're providing deeper visibility into greater contextual interpretation versus just string or regex based only awareness capabilities. Now this set of capabilities are fully integrated within secure access and let's take a look at what this actually looks like from a user standpoint.21:50So in this quick demo, we're gonna start off by showing you an experience of a user who tries to use grop. You can see here quickly that we're guiding the user to an approved Gen AI application. In this case, it's the enterprise edition of chat GPT.22:09Are they gonna give it another try and say, hey, I want to try gemini. In this case again, they're gonna be blocked and being being guided to use the chat GPD enterprise application. Now, when the user actually gets here, we're gonna allow them to sign into the enterprise workspace.22:26What we're actually showing you here are tenant controls where we're gonna select that ABM demo engineering tenant, which is the enterprise tenant. But we always want them to be guided and use the enterprise tenant versus their own personal tenant. So you can quickly see here that personal workspace switching is actually disabled. There is NO option for them.22:42To go and use their partial tenant.23:02We can also embed endpoint data loss prevention where we can prevent copy paste of sensitive data types. So we have a sample set of data which we're gonna copy and going to test how this works within with a simple HTTP as post test that we were trying to accomplish here. You can quickly see that you get an endpoint data loss.23:04Notification.23:25And next, if we go into chat GPT enterprise, this is where we see that contextual awareness that we can bring. This does not match any sort of regex capability. In this case, we're just gonna say we're fictional storywriter and we're gonna start trying to get that prompt, and you can see that we are actually being prompted for an AI.23:26My guardrails alert.23:45Now, a lot of times we've been largely addressing the needs of users. Now, there could be employees who are using generative AI. The developers and folks who are actually building large language models are users too, and they're oftentimes more advanced.23:49Users of these capabilities. Now they need a very specific type of particular projection when it comes to the building of AI, AI models.24:08Now, a lot of times developers oftentimes will go use something like HuggingFace or pytorch as their 1st step in order to download, download models in in their 1st step of actually building some of these large anguage models and training models.24:17Now these repositories provide easy access to pre trained machine learning models for a variety of tasks. Now, huge time saving and it's a huge boost of productivity, but they can also bring considerable amount of risk. Now with with our SSE capabilities in secure access and specifically the AI supply chain.24:33Is we provide the ability for you to stop risky models before they're used.24:53Think of these as reuse enforcement guardrails that the models can include for things like malicious code. Now we could also look for intellectual property compliance, so things like copy left licensing or even look at things like the origin of the code origin of the model itself.24:59Perhaps this this model was built in a country or region with known connection to malicious activities. So again, think of these as pre use enforcement guardrails where we can stop risky models before they are before the end user or the developers can actually start using these models themselves.25:17Now, as we roll out zero trust security, being able to troubleshoot performance issues especially as you're starting this rollout becomes really, really critical. Now with experience insights, which is powered by thousandeyes, offers us this end to end visibility into where the performance issue may reside.25:37Now with this, IT teams are now able to quickly zero in.25:56On all the way from the endpoint on which you see on the left side to the application itself. And this is where we're able to fix the problem to find a more resilient approach for zero trust networking. Plus, we're also able to rely on things like historical recommendations where teams can tweak what their zero trust access policies need to be.26:01Be for a proactive posture and increase resilience.26:21We've also found ways to make an ease and streamlined policy management within secure access. Now, in the umbrella policy, so if you think about how we've done this within umbrella, if you wanted to create an exception targeting something really specific, say a specific identity and say, hey, this is for LinkedIn for the HR.26:26Our team or this is for a new domain that we want to accomplish. Here we would need to duplicate the policy and then build that exception into the new duplicated policy.26:46Now, within secure access, we've actually we we started to use a much more streamlined simplified rule rule and access policy model where we can create a simpler rule that targets just the HR team and LinkedIn with an allow.26:58And then we could create a regular generic company policy that would sit below. So any changes to the company policy can continue without being made to that base policy and any new exceptions can be made much much more simply. Now, in addition to the the capabilities that we talked.27:14Talked about earlier, we are also very happy to provide you a trial for secure private access. Now what does secure private access actually bring to the table and how does it actually help transform the access strategy overall? Now 1st and foremost, with reduced cyber cybersecurity risk.27:34We're able to enforce zero trust principles by preventing lateral movement and protecting your private applications without exposing them to the internet. Now secondly, we're able to provide a frictionless user experience where we can provide transparent access to private applications from anywhere.27:53With the single unified client, we will see reduced user disruptions and increase productivity. From an IT operations standpoint, secure private access offers a centralized policy administration.28:11Which significantly reduces the complexity to manage across zero trust network access VPN as a service and internet access. We can also reduce hardware cost and maintenance by moving the VPN service to the cloud.28:28To something like VPN as a service. We could also enjoy faster experiences for users from an app onboarding standpoint. All of that that can be accomplished through a single single unified client. And finally, when it comes to scalability and flexibility, we're able to offer optimized security and performance.28:43Where we could offer flexible traffic routing across both both cloud and on premises environments.29:03There's also flexible adoption in native ZTNA on mobile devices, so you're ready for growth and future demands. Now, we, I would encourage you not to miss this opportunity to simplify your IT, enhance user experience.29:10And significantly reduce your cybersecurity risk. Thank you and see you on the next, next webcast. Okay, I hope that demonstration was helpful for all of you to check out some of the features I've been talking about in the session today and you know see exactly what what they.29:25Are like in action. So we're gonna just wrap up a couple items here and talk about eligibility and next steps. I also saw some questions come in the chat, so I'm gonna answer those questions as well in just a moment here. So.29:45Bring back up my presentation.30:06Okay, awesome. Alright, so I'm gonna share some next steps in upgrading to secure access, secure internet access. So 1st of all, let's talk about eligibility in terms of which customers are eligible to move over to secure access.30:09So all of our umbrella DNS essentials, DNS advantage, customers, all of our umbrella SIG customers, as well as, any of you on our legacy packages, Umbrella insights and platform customers, if you never moved over to one of our umbrella deals.30:29You are eligible to move over to secure access. And in order to make the move over to secure access, you're gonna need to opt in via your partner or your account team. This is not anything that's automated or that you're gonna be forced to.30:50Do, you're gonna want to.31:09You know, let your account team or or seller, your account team or your partner know, if you don't have their contact information, what I can, what we're gonna do when we wrap up here is I'm gonna share a link that you can provide your information if you want our account team to reach out to you.31:12You. So before I get into the the next steps, there's a couple questions I I saw in the chat that I wanted to answer. So regarding the upgrade paths, I wanted to reiterate that for umbrella DNS customers, you're gonna move a.31:32Or just secure access DNS defense, and then for umbrella SIG customers, you're gonna move over to secure access internet access. And that's what we call a like for like migration where you're basically moving over to the equivalent package and secure access. And when you do that.31:52It's a very budget friendly upgrade path, and I saw someone asking like what are the specifics? Like how much does it cost? I can't tell you exactly how much it costs. It will depend on your specific situation, but I can tell you that it's a nominal fee. It's a.32:12Relatively very small dollar amount. You will need to talk to your account team or your partner to look at the exact details of your situation with the elevate offer, which I will speak to in just a moment. And then I saw a question that was asking.32:32If we move over from umbrella DNS to secure access DNS defense, will we get access to the AI guardrails in secure access? So that capability is specific to the SIA package, so you could absolutely get access to it, but that would be.32:52More of that's more of an upgrade. It's not a like for like migration, but you can always do a trial for the secure internet access package play around with it, and then decide if you would like to do an upgrade to that package.33:12Okay, so now I want to talk about the elevate offer. So again reiterating this is meant to be a very budget friendly upgrade. If you're gonna be paying anything, it should be a nominal amount. And keeping that in mind, let's now talk about.33:28About the elevate offer. So the elevate offer is designed for you to take your umbrella investment further with secure access. There's two main components that you you get with this elevate offer. So you're gonna get up to full investment credit. So whether you have 90 days or two years left.33:47In your umbrella SIG subscription, you're gonna get investment credit for that entire unused balance that's applied to secure access.34:07And then the other very important part of this offer is that you can take as long as you need moving off of umbrella, and as you transition to secure access so that you can take this at your own pace in an operationally friendly manner. So we're giving you a lot of.34:18Flexibility with the timeline and again this should be very cost effective and for a like for like migration, it should just be a nominal amount. So if you're interested, definitely talk to your Cisco partner or your account team about secure access and the elevate offer.34:37Okay, one important call out that I wanted to make regarding the elevate offer is that when you are looking at moving over to secure access and getting that investment credit from Umbrella over to secure access.34:59Access the new secure access term that you're purchasing, it cannot be less than your existing remaining umbrella term, and there is a one year minimum requirement for secure access. So that's an important call out that I wanted to make, but all.35:17All Umbrella customers anywhere in their contract cycle are eligible to take advantage of the elevate offer.35:37Okay, I did wanna make sure you are all aware of our user protection suite. So oftentimes we see that our customers that have Umbrella also have duo. So if you already have duo.35:47And you are interested in moving over to secure access. I wanted to make sure you're aware that the user protection suite maybe a cleaner way to package secure access and identity together as you plan for your migration. This will help you gain visibility into your.36:05Organization's identity security posture and to use those insights to inform access decisions. So if you're, if you're interested in, exploring the user protection suite, that's something you can also talk to your, your representative about, your sales represent.36:25Percentative about.36:45Okay, I also want to make sure you guys are aware of Gartner Peer Insights. If you haven't heard of Gartner Peer Insights, this is like the Yelp for IT. Definitely a handy website you guys should be checking out as you're evaluating, security.36:48Reset security solutions. So we have a lot of great reviews for secure access on Gartner appearance sites. You have access to this to, you know, it's public, you can check it out. We have a 4.8 out of five and a lot of great positive reviews on how easy.37:06On how easy secure access is to use both from the end user perspective, as well as for IT. So I encourage you guys to check out Gartner Peer insights. Okay, so in closing, again, want to, share with you all.37:26Know that this really is the perfect time to start planning your upgrade over to secure access and future proofing your security. I know that there's a lot of, a lot of our customers that are happy with umbrella, they want to stay on umbrella, but it really, really is.37:46Critical that you make this transition over to secure access to future proof your security, take advantage of all the AI driven, innovation and protection that we're making available for you with secure access. So you can talk to your representative or.38:06For your, your partner. Again, if you want to have our sales team reach out to you, we'll go ahead and put, the link for this brief form.38:26In the chat or follow up with it via email so that you can have one of our reps reach out to you. So again, I encourage you all to take that next step towards modern cloud security with secure access, take advantage of all these great AI driven innovations and allow.38:37Us to help you make the move quickly and easily. Thank you all for joining today and have a wonderful rest of your day.38:57Yeah, thank you so much for your fantastic presentation today. We will be sending out the recordings today's session and for future review. Additionally, all questions and resources during today's session will be included in the follow up email, so you'll be able to access and review them when you receive the post webinar email. So with that.39:06Thank you all so much for your time today and we look forward to seeing you on the next one.39:26