Supercharge your Cisco Umbrella License: Unlock Powerful New Features Without Paying More

Awesome. Thank you so much Rachel. Hello, everyone. Thank you so much for joining our umbrella SIG product update webinar today. Supercharge your umbrella license.00:08Unlock powerful new features without paying more. My name is Nigisa Taymorian. I'm part of our Cisco security product team and along with my colleague Prabhu and Chris, we're really, really excited to talk to you all today about the evolution of Cisco Umbrella and how you can get stronger security.00:20Security, more value from your existing umbrella license by migrating to Cisco Secure Access.00:40Okay, so let's take a look at our journey forward for our session today. I'm gonna kick us off by talking about how Umbrella has evolved to take your security to the next level and give you some context on, you know, why, why this evolution. And then we're gonna spend a bulk of our time.00:49Today focused on how you can get more, more value from your umbrella license by migrating to secure access SIA. This is our secure Internet Access package. So we're going to be talking about the added functionality and capabilities you get when you make this migration happen.01:09So we have our AI access capability, our digital experience monitoring from thousand eyes and more. My colleague Prabhu is gonna demonstrate these features and show them to you in action. And then from there, my colleague Chris is going to share with you how simple, easy, and fast.01:29Your migration can be leveraging our automated upgrade manager tool. This, this tool is available for free. It's part of the umbrella UI, NO additional cost. And then we'll wrap up by talking about our elevate offer and how this exclusive offer offers you.01:49Further investment protection and makes your migration to secure access even smoother. I'll also share with you all tips on how to get started with your migration journey.02:09As, as Rachel mentioned earlier, we would love your questions throughout the session. Please go ahead and put them in the Webex Q and A panel and we'll get those answered for you throughout. Okay, so I'd I'd like to start with a big thank you to all of you for.02:22You're choosing Umbrella to protect your organization. Your investment in Umbrella has given you a strong foundation in improving your visibility, blocking your blocking threats, strengthening your overall security posture. I have worked on Umbrella for several years and it has.02:41A soft spot in my heart, and I know for many of our customers it does as well. So thank you for being a loyal umbrella customer.03:01Okay, so now I want to talk to you all a bit about the evolution of Umbrella to secure access and really why we embarked on this evolution from Umbrella to secure access. Really, the core of this, it comes down to.03:11The fact that the threat landscape continues to expand. Attackers continue to become more sophisticated. None of this is a surprise to you all, but the the what this boils down to is the fact that your security must also evolve. And that's why we have designed secure access from.03:30The ground up to be a more modern security platform to deliver advanced security, and it really builds on umbrella strengths while also delivering new advanced capabilities that are designed for today's challenges. So if you take a look at the stats here on the left side.03:50That left hand side of the screen, what you're seeing is that according to a recent survey, CISO survey, 94 % of organizations, a majority of organizations are concerned about evolving cyber risks, but only 4 % feel that they are really ready to prevent or respond to cyber.04:10Tax, and you know what what what.04:30Makes me happy here is to share with all of you that, our umbrella evolution is one big step in helping you to strengthen your security posture. A lot of our umbrella customers actually refer to secure access as Umbrella two dotto, and with securex.04:34Access we're, we're boosting your security or delivering a differentiated level of simplicity for your IT and security teams, also for your end users. This is something that our customers really love about secure access is that it's a totally transparent experience for.04:54Users.05:14Also with secure access, we are solving for many of the challenges we've been hearing our umbrella customers talk about for years. So this is what you're seeing on the right hand side of the screen. So we hear our customers talking about their frustrations around inconsistent use.05:16User experience, certain private applications not being supported, having multiple dashboards, multiple licenses, the challenges around complex policy management. So all of this was taken into account when we designed and built secure access.05:35Okay, so now that we have covered the evolving landscape, threat landscape, we've talked about the challenges that many of you are facing and protecting your distributed workforce. Let's talk more about the solution that addresses these challenges, Cisco Secure Access and what are.05:55Customers are saying about this solution. So if you take a look today on Gartner Peer Insights, you'll see that we have a very impressive rating of 4.8 out of five. And this is really a testament to the effectiveness and user satisfaction for.06:15Go secure access. If you haven't heard of Gartner Peer insights, it's like the Yelp for IT. It's public, you can access it publicly. It's publicly available. It's free, highly recommend going on there and taking a look at the reviews for secure access. You'll see that.06:35Many of our reviews specifically call out how easy secure access is, again, easy for users, easy for IT and security, and it's making a real impact for our customers. If you see these quotes here on the bottom left of the screen, we have the C CISO of LTI mindtree.06:55Calling out how his, the users at his organization are accessing their critical applications 60 % faster. And then we have the VP of security at Innovation Federal Credit Union calling out how.07:15With zero trust, their user experience is completely seamless and transparent using secure access. Okay, so I also want to share with you guys some of the, the key drivers for a full SSE solution. You maybe thinking, well.07:29Why do certain customers, want a full SSE solution? And before I share with you these drivers, I, I want to make sure that you guys are aware of this very important point here that when you're transitioning from Umbrella SIG to Secure Access.07:49SIA, our internet access pa our internet access package. You have the flexibility to remain internet access centric as you are today or if needed, if you need those greater zero trust capabilities, you can upgrade to a full SSE solution. So again, just want to reiterate.08:09That this is completely your choice in terms of of, you know, what you migrate to when you move to secure access.08:29So in terms of the key drivers that we're seeing in terms of why our customers umbrella customers want a full SSC solution, the primary driver here is zero trust protection. The customer is on a zero trust journey. They're looking for ZTNA and they want to authenticate.08:39Every access request for applications to help reduce their attack surface.08:58The next reason is end to end visibility. So we're hearing that organizations want broader visibility across their network, users and applications so that they can quickly identify and respond to threats. Next, we're seeing that organizations are looking for ways to.09:07Get stronger with their security posture. And one way to do so is by unifying your security functions and applying consistent policies across all of your access points. This helps you to create more robust and resilient defense against sophisticated threats.09:27And then the final reason we're seeing being a main driver for a full SSE solution is wanting to secure the use of Gen AI, and with secure access we can secure your AI initiatives ensuring that your valuable data models are protected.09:46So these are some of the high level benefits of secure access. I also wanted to mention that in addition to full SSE, some organizations are also looking for unified sassy secure access service edge. They're looking for a unified sassy solution and.10:06Cisco does offer a unified sassy solution combining SSC and SD WAN for high performance and simplified identity driven security. And with our unified sassy solution, our SD WAN and secure access working together, what's great about this is we enable.10:26All automated tunnel creation. So this really simplifies deployment across multiple branch locations and it also means less manual configuration, which is a great benefit for unified sassy.10:46Okay, so now that I've given you all some broader context on some of the, you know, additional capabilities and broader solution sets out there, let's dive into why you should migrate to secure access SIA or secure Internet Access package. So.11:02You're gonna you are able and eligible to migrate to this package at NO additional cost. So I have five reasons on the screen here for you now and the 1st reason why you want to migrate to secure access is to stay ahead of threats. Cyber threats.11:21Are constantly evolving and secure access offers you advanced defense mechanisms beyond what you have in your umbrella license today to keep you one step ahead of attackers. So this is really one big step in, in helping you to strengthen your overall security posture.11:41Reason number two is more value, NO added cost. So I'm really excited that later in our presentation today, my colleague Prabhu is gonna demo these features that are available for you with our secure access SIA package. You're gonna see a demo of our AI access capability.12:02That secures the use of Geni, Gen AI. You're also gonna see a demo of our digital experience monitoring capability from thousand eyes. Our customers love this feature, and how much it helps them to speed up troubleshooting. It's just a, a favorite that I hear.12:21About from our customers all the time. And then reason number three is the simplified experience. So secure access as I mentioned earlier, brings together powerful protection and simplified management for your security and IT teams. And one specific example of how we've.12:41The experience is your policy management. So compared to umbrella, it's way, way easier to manage policies in secure access. So this really helps to streamline your security operations. Reason number four is seamless and fast migration.13:02So with our automated migration tool, most of our customers are completing their upgrade to secure access in an hour or less, and, this is completely free and available in the umbrella UI. The migration tool is.13:21And then finally, we have our elevate offer available that gives you access to both Umbrella and secure access during your migration for as long as you need. So we know that our customers, they've told us that they want to take their time with their migration and be able to test out policies across both tools.13:39So Elevate gives you that ability to have a dual view across both solutions, so you can really take your time with the migration, and, and, you know, comfortably at your own pace migrate to secure access. So by acting now and starting it in to play.13:59Plan for your migration now, you can upgrade to secure access SIA at NO cost and lock in your current pricing for your umbrella SIG license before any increases at your next renewal.14:19Okay, so now I'd like to share with you all a high level view of our umbrella packages and how they align with Cisco Secure Access packages. So this view is super helpful for, you know, kind of looking at which, which package you're gonna.14:36So for our umbrella DNS customers, there maybe just a few of you on the call today. You are going to migrate to secure access DNS defense. So this package builds on our industry leading DNS layer security and adds on top of that additional capabilities like.14:56Cloud malware protection, cloud DLP, and more. For our umbrella SIG customers, that's the all majority of you on the call today. You all are gonna move to secure internet access and you're gonna get added capabilities like AI access, digital experience monitoring, and more.15:16And then, you're all going to get a long term free trial of our secure access spa capability. This is secure private access. So this includes our zero trust, CTNA VPN as a service, integrated capability, a hundred seats.15:35And what's great about doing zero trust in, in this fashion is that we've seen a lot of our customers really like to start small and try it out with a small batch of their customers, a small batch of their critical applications, and then expand there from as needed.15:55So in migrating to secure access, you're gonna get that free trial to, you know, play around and test our private access capability and see what you think and expand further further with your seat count if you'd like to do so.16:15Okay, so we're almost at the time for the demo, but before we we get into our demo, I do want to share with you this great view and slide that summarizes what you're getting on top of your umbrella SIG license when you move over.16:35To secure access SIA. So 1st of all, you're gonna get four times faster secure access for your workforce. So this is compared to Umbrella SIG, and really this faster access is powered by our high performance architect.16:54Architecture that secure access has leveraging our modern protocols and our vector packet processing VPP for lightning speed connectivity.17:14Next, you're gonna get secure use of gen AI tools. So with our AI access capability, we're going to secure your workforce's, your workforce's use of generative AI tools by applying inline DLP as well as advanced contextual visibility.17:25Ability beyond simple pattern matching. So this feature is fully integrated and it requires NO additional licensing. We're also going to be able to offer integrated RBI, so this is for our SIG advantage customers. They get RBI.17:45For free when they move to secure access SIA.18:06And then you're also going to be able to get faster troubleshooting and deeper actionable visibility with our digital experience monitoring capability from thousand eyes. So this is the capability that I was mentioning a moment ago that our customers absolutely love, so it, it offers you the ability to.18:10Correlate and get visibility into correlated endpoint network and application performance metrics. And I've heard specific examples of our customers talking about how, what used to be hours of troubleshooting is now minutes with thousand eyes and how, what used to be some.18:30Several tickets, is now just one. So lots of great benefits that come with that thousand eyes capability.18:50And then finally, the easy to manage and powerful unified role based policy. So this is across DNS SWG, and firewall, big leap forward in how easy it is for you to manage your umbrella policies. So not only are you gonna have faster creation of policies, it's also gonna be easy.18:59Here for you to maintain your policies over time.19:18And then as I mentioned, you get that extra bonus free trial of our private access capability as well. Okay, I would like to share with you all, one quick success story of air up and their lead cyber.19:23Our Engineer David Noble. He often joins these product update webinar calls if you're on today. Hello David. So Erab is a professional services company based in the UK, headquartered in London. There are over 20000 users with a global presence of.19:42Of in 34 countries, they focus on construction and engineering and they design and plan all kinds of solutions like metro systems, water utilities, some of the world's most important bridges have been designed by Arab. And we worked with David Noblets.20:02Their lead cyber engineer on their migration from Umbrella to secure access. And as you can see from the quote here from David, it was very smooth and he loved that his team didn't have much of a learning curve moving from Umbrella to secure access and it was building on, you know, a solution that they already.20:22Really trusted and loved working with. After they did the migration to secure access, they also ended up adding zero trust capabilities because they wanted to better secure their large diverse workforce and the very sensitive, highly sensitive content and.20:42Data, customer data that they work on.21:02Okay, so a little bit more about our secure access upgrade manager. So our product team has made this upgrade tool really, really easy for you to use and my colleague Chris will be demoing this later in our presentation today. But this upgrade policy rep.21:08Application happens typically in about an hour often less for a typical customer and you get that dual view both for Umbrella and secure access, so that you can test out policies across both, solutions. And we have this migration wizard that.21:27That Translates policies to secure access rules for you, making that process really really smooth. So now is the perfect time to upgrade your security, to get more value from your umbrella SIG license, so I want to encourage you all to start planning for your.21:47Migration to secure access, add this to your project list, whether it's a month out or six months out, we understand that you are all are all busy and you have a full project list, but definitely start thinking about when is a good time for your organization to make this move and add this to your project list so.22:08So that you can have a smooth NO cost transition to secure access.22:27With that, I will hand it over to my colleague Prabhu, who's gonna demo for us all of the added capability that you can get in Secure Access SIA at NO extra cost. Over to you, Prabhu. Awesome. Thank you, Nagissa.22:35Let me grab the ball really quickly from you and share. Alright, let me know if you can see my screen, I could just get a thumbs up really quick. Awesome. Thank you.22:53Awesome, thank you so thank you. My name's probarity. I'm a global security technologist here at Cisco focus on universal DTNA and our secure access sassy offerings along with a bunch of other things. What I wanted to actually go through was a couple of features. Now, I I did see a couple of questions in the chat.23:11Just just for everyone to be aware of right like when we talk about.23:32SI or the secure internet access capability. It does include a bunch of different elements like you know things that you would expect like CASB, DLP, all these other capabilities, but we're gonna focus on a couple of things and actually already talked about a few of these earlier.23:36Want to start by focusing around generative AI used to it, right? So what we oftentimes find is that the attack surface that we we sort of see right now has really expanded with a bunch of new threats and people sort of leveraging generative AI tools at a much rapid pace than ever.23:54Before. Now, like with any sort of defensive approach that you want to be able to do in this sort of situations, the 1st is around getting the visibility. Now.24:13You know, the you probably heard the provobial thing that hey, you can't control what you cannot see. So what we really need to do here is being able to understand what is shadow AI usage. Now most of you are probably familiar with the concept of shadow IT, but this is the same concept, but we're sort of extending it to the use of AI applications specifically.24:23Applications. Now, out of the box, we are able to provide visibility into over 1200 different applications and that list is only going to be growing.24:44This includes the AI applications, chatbots, a bunch of other, those kind of tools. Now, 2nd element is that now you have the visibility, what do you do with it? You want to be able to control what folks are actually doing with it. Now, this could be things like hey I want to be able to control what kind of documents people are using in these applications.24:54Or this could be unstructured content and I'll talk about that specifically in the next slide here.25:13But you want to be able to understand like, hey, are people actually taking source code or specific documents? This could be M and A type of documents, financial statements, those are very, very critical to an organization. Are they actually putting it into a public generated AI platform without any sort of guardrails that you want to be able to sort of protect against, right? Now, I touched.25:18Based on the the notion of unstructured conversations and yeah the unstructured data in a minute ago. Now, why is this important? Now, one of the ways that most most folks provide security capability around securing things like generative AI.25:38Is by using something like data loss prevention or DLP controls. Now, you provide DLP controls on inline web traffic, so you can sort of govern, hey, what's the, what data is coming in and out of an organization. Now this is what I would almost argue that, hey, this is kind of table stakes, like you know you you need to have this kind of functionality. But if you think about how.25:55How most people actually communicate with a generative AI application, it is unstructured, meaning I'm going to go to a generative AI application and say hey tell me what the score is. Tell me what the weather is, tell me how to make a apple pie or punk and pie or whatever, right? These are unstructured conversations that we're having with a generating AI tool. So in that sort of situ.26:15You need broader context and sort of a way to be able to understand user intent. It is not just enough to be able to look for regex matching or pattern matchings. You want to be able to understand user intent and go a little bit deeper and provide that contextual interpretation versus just using, like I said, strings or regex based sort of.26:36Awareness, right? That's the capability that we're providing with AI guardrails. Now, AI guardrails kind of goes a little bit deeper where we could look at things like safety, we could look at security and privacy. And I'll show you what this means in in in the portal directly so you kind of get an idea.26:56Now what I want you to take away is that this is a fully integrated feature set of secure access, NO external licensing that is required here for us to be able to sort of provide this capability. Now, 2nd aspect here is one is around using generally AI applications. So this is the the use.27:11Is where hey folks are going to a Gen AI application and they're sort of, they're sort of conversing with.27:31The application. But there's also another aspect here of about folks actually building applications. Now think of the use case where people are actually starting off building large language models in in their on their local desktop and so on and so forth. And this is where you could also make the argument that, hey, developers are also users, but they are.27:36Also more sophisticated users in the, in that sense. Now there's a huge amount of productivity game step one when you think about how people are actually developing applications. Now in most cases, developers would go to something like.27:56Like a hugging phase or you know pytorch or TensorFlow or that these are popular models that are available, these are popular destinations to actually get models. Now what they are able to provide is an easy access to a ton of pre trained machine learning models.28:10They have a variety of tasks like, you know, you could build a chat bot out of the box and so on and so forth. But it's a, this also brings about a question of, hey, what are we gaining and what is the risk associated with it, right? Now, using these out of the box machine, out of the box sort of the the models does provide.28:26By incredible time saving, like you could go download, get going very, very quickly in in a matter of hours or days you you have a pre trained LLM ready to go. But it also at the same time it brings with a considerable amount of risk, and I'll tell you why, and kind of we'll explain why in this case.28:46Now, one of the key capabilities we have actually built here is the ability for us to stop risky models even before they're actually used. Now, think of these what we're gonna talk about, the AI supply chain risk management here is kind of a way for us to do pre use enforcement, meaning, hey, before someone actually goes and starts the.29:04Using a potentially malicious model, we've actually done the hard work of actually categorizing these models where we could look through and say, hey, does this consider, does this model actually have malicious code?29:24Does this have, intellectual property compliance concerns or does it have things like popular licensing or in this case or it could also have origin concern, maybe, hey, there's a, there is a model that we we're downloading from perhaps a country or region which has known malicious activities, so on and so forth, right? So.29:35I'm gonna take a quick pause here in terms of the slide deck really quick and we're gonna jump into our secure access portal so we can kind of show you what this actually looks like live, ok? So let me open up my Google Chrome.29:55All right. So here we're in secure access, the secure access portal. So the 1st one I'm gonna sort of talk to you about is the AI access capability that we talked about, right? So it is gonna be something that you can configure under data loss prevention policy. Now you do have the option to create like an AIML.30:12Monitor that is going to be able to block things like, you know, source code and a bunch of other things. But specifically what we're looking for is the safety, security, and privacy guardrails that we've configured, pre configured here already. So I'm gonna pop one of these guys open so you kind of can see what it actually entails. So going back to what I sort of.30:32Mentioned before, this is kind of where that classification engine really comes into play, where we can either look at something which is gonna be a privacy guardrail, a safety guardrail or security guardrail. So e.g., if I hover over the privacy guardrails, it's gonna be able to sort of show you, hey, what are we actually securing against? This is in this case, we're protecting a.30:52Against Gen AI applications by where whereby we're gonna be able to sort of prevent users from divulging things like bank account numbers, credit card numbers, drives license, email addresses. These are all things, these are all data identifiers that we've sort of created.31:122nd one is around safety guardrails, so this is to protect users against things like harassment, hate speech. Again, think back to the use case I mentioned before, like if you want to be able to look for unstructured and user intent, that is kind of what this is looking for. Not looking for like patterns in this case. Now the last one is around security guardrail. Now this.31:27This is where we can also look for things like code detection or prompt injection where someone is actually trying to get unauthorized access or be able to sort of circumvent some of the out of the box guardrails for an application for and for a generally AI application, these are meant to sort of look and identify those, those pieces.31:47Now, you can all obviously go ahead and look for things like, you know, hey, what kind of file size you want to be include, include or exclude from scanning, you can apply it to, as you would expect, hey, can I apply this to specific users that are coming from AD groups, tunnel groups, roaming computers, so on and so forth?32:07And in terms of destinations, we have already sort of pre created these things for you for you to be able to consume. So these are the most commonly used generative AI applications that are out of the box available today for us. And then as you would expect, you could go ahead and monitor where you could say, hey, when this violation happens, I want to be able to monitor or you could.32:23Just I'll try to block this connection out of the box. Now, what I, what you want, what I want to sort of show you is what happens at the end of it.32:43Now, in this case we've already sort of run a bunch of prompts for you to be able to sort of see what the net effect of this is. Obviously, as you would expect, we're gonna block the connection for some of these privacy guardrails, but what happens then is for you to be able to sort of see what actually happened. Once you hop into event details, you'll be able to sort of see, hey, firstly, who.32:52Created that. So in this case this was actually created it, what application they they used and also what it what it triggered. In this case it's a privacy guardrail that we triggered. And in this case, the, the actual text that was actually sent through was the, hey, tell I want to write a professional email to my client with an email address and so on and so forth.33:12That's the privacy guardrail that actually tripped in this case for us to be able to, get a hold of this.33:33I talked about the ability for us to be able to look at pre trained models and be able to see, hey, what models are people actually using? And then can we put some guardrails around the enforcement of those models. Similar to the the conversational bit that I showed you earlier, we have a new tab here which is called AI supply chain.33:39Once you go into AI supply chain, 1st and foremost, you're gonna be able to see, hey, you get full visibility on what are the models that people are actually using. So you can explore and figure out, hey, how many people are actually downloading deep seat, how many people are actually downloading any of these models that you see. Once you sort of get that information, you'll find that you'll be actually.33:59Categorize the model itself, you'll see, hey, these are prohibited suppliers.34:19One of these models that someone has downloaded already has copyle of licensing implications and then the last one here has malicious code execution as an example. Now, we can see that what we've actually done here is we've actually already started to block it, so that's why you see it, the column that under blocked downloads actually already has 39 of these. So if you click on the the the.34:24Model itself similar to what I showed you earlier, you'll be able to now go into activity search and quickly be able to sort of see what are the actions and get full details on, hey, what are the source, what is the destination, and what what was the file in this case that we actually invoked for, for this action to actually happen here?34:44So pretty cool, pretty easy for us to be able to sort of provide a safe use for a safe way for folks to be able to use use both generated applications and then also build on top of top of the as well.35:04Alright, so I'm gonna switch back to the PowerPoint really quick and we're gonna jump into another aspect that Nikisa mentioned earlier about digital experience monitoring. Now, as folks are, as folks are sort of rolling out.35:18The the ZTNA experience or even the pieces that we talked about earlier, it is very, very crucial for us to be able to troubleshoot performance issues really, really fast. We've all been at the other end of the phone call where someone is like, hey, my teams is running slow, my zoom is running slow. There is an application that is running slow.35:35And we need to be able to sort of quickly get an idea of where that actually, where that issue actually resides. And this is where experience insights, which is part of our solution and it's available inside secure access in the same you in the same user interface, it allows us to be able to sort of pinpoint and provide visibility into.35:55Where that performance issue really, really resides. Now, this allows folks to be able to really quickly zero in all the way from the endpoint where the client endpoint is and say, hey, is this actually on the client side where it could be potentially a, a CPU issue or a memory issue? So you can see that on the client side, is it actually on the Wi Fi?36:15Is it on the broadband or is it a is it actually the application itself that is actually the one that is causing the issue? So it provides you a way for you to be able to fix the problem and provide sort of that more resilient approach to zero trust networking that we want to be able to provide. Lastly, it also has historical performance recommendations so you could.36:35Kind of tweak some of these access policies for sort of that proactive nature that you want to get to eventually.36:55Alright, so let's see what this actually looks like inside of secure access. So let's go back to our secure access portal. And like I said a minute ago, one of the bet, one of the key things I want you to take away here is that this is not yet another UI or yet another portal that you're gonna have.37:02To go to to get some of these these pieces, experience insights is built right into the same secure access user interface. Now, once you get into experience insights, the 1st thing you'll notice is we're at we're monitoring the status for some key SaaS applications that are out of the box. Now you can see that we were monitoring from a.37:22Variety of locations. These are all the pop locations that we already have out of the box. So you can see that we're already sort of doing that 1st level of.37:42Visibility for enterprise applications, right? Now you could also get a an idea of, hey, how many endpoints are registered and what is the health of those individual endpoints? You can put this on a, on, put the, put that information obviously on a map so you could kind of get a sense of what those are. Now in this case, 1st and fore.37:50Almost I'm gonna show you the the view for Kara in this case. Now in this case, what we can see is Kara's endpoint is.38:10You can see things like, hey, what kind of operating system do they have, what is the last known location where we still saw them from and so on and so forth. But the pieces that are most critical for us to be able to sort of see here is things like the endpoint health, CPU usage, memory usage from an endpoint perspective. And you can see very, very easily here.38:19Is using that segment visualization, we can sort of see almost hop by hop details of every single sort of detail that we wanna see. Like what is the agent actually responding with? And when I say agent, this is the same secure client agent that you're using for the ZTNA experience for for internet access.38:39Taxes and so on. So not another agent. This is the same secure client agent that is actually giving us all of this information back to, back to experience insights here. Now you can sort of hover over each of these different elements for you to be able to see how you're sort of going from a visualization perspective. Like what is the in what how is the.38:59Connection actually happening. Now, what I want to sort of quickly show you here is one of the things that we've already sort of created here is a endpoint test. Now in this case, we're specifically looking for a segment visualization for how it is actually communicating with Yahoo dot.39:19JP, so in Japan, e.g.. So you can quickly see, hey, what's the link speed agent, internet communication? How did we actually get there? You know, it gives you a lot of metrics around things like, hey, did we see any loss, any sort of latency? If you're really, really getting into it, you can also find things like, hey, what is the time to 1st bite?39:36Did we get an actual response back and are there any other are there any other agents that are experiencing issues and so on? So very, very quickly you can sort of drill down and get into, very, very detailed metrics around how users are actually experiencing the this platform here.39:56Alright, so we touched on this really, really briefly a few minutes ago about the ability for us to be able to do some optimization around, the policies itself. So what, what I wanted to sort of go through here was, you know, inside of secure access.40:14We've created a much more easy to manage and sort of a unified rule based policy that goes across.40:33DNS goes across switch and firewall. Now, it is a, this is actually a really big lead in terms of how we're able to easily manage policies compared to how we did this in umbrella. Now you have, you have the ability to create policies obviously way faster, but it's also easier to maintain policies over time.40:41You do have the option to use something like the AI policy assistant that streamlines things like policy management and so on and so forth. So e.g., like in inside of an existing umbrella policy, we wanted to create something like a an exception and said, hey, we want to create a target for LinkedIn for HR or we have acquired a new.40:59Company domain.41:19And we want to be able to sort of accomplish that. We have, we would have to sort of duplicate the policy and then create an exception into the duplicate sort of in that sort of way. Now within secure access, we've created a much small, which we would create a much simpler way for us to be sort of more intent based where we could sort of say, hey, we want to be able to say.41:20You want to be able to say something like, hey, we want to create something for the HR team with LinkedIn and then allow.41:40This allows you to create a much simpler policy. Now this the regular generic company policy can obviously sit below it, but it's a very easy way for us to express intent of, hey, we we want to use it for HR and this is for the LinkedIn team with an action of allow. It's much simpler and sort of uses that unified role based policy.41:45So I'm just gonna give you a quick view of what that sort of looks like inside of secure access so you kind of get an idea of what I was describing here really quickly. So there are a couple of building blocks that I want to sort of just show you really fast. In terms of.42:05Resources. Now the think of these as like think of the resources that we're building as building blocks. Now, these could be internal networks, it could be SAS resources, internet resources, and so on or even private resources. Now once we created that resource or that definition of that resource, now we could go into our policy.42:22And you will notice once you go into access policy it is a unified engine, so there is a single engine that does both for internet access, for private access, which we're kind of unifying both of these elements. And if I pop open say this geo blocking rule that we've created here.42:41You can quickly see that you have all of the actions that we talked about, right? So if you want to allow it, you would allow it block, very easy to guess what that means. And then you could also create a warn action or isolate. Very, very easy for us to sort of create that. And this is the other piece I was talking about earlier where we if we want to be able to create a source or a destination.42:59It now we can sort of create that intent based policy where we could say, hey, we have users from say an Active Directory group.43:19An endpoint group or a network device or even say from a catalyst VPN ID or even from security group tags in ICE, and then you could create that two definition to say, hey, you can specify one or more destinations. Now in addition to that, if you want to be able to configure specific security requirements that must be met before the traffic.43:26Actually goes through. So e.g., if you want to do things like decryption, if you want to do the threat categories or file type blocking, you would actually enable that in here very, very easily for you to be able to sort of create that policy engine that we talked about. Alright, so we're getting close to the end of our section here.43:45I'm gonna switch back to the PowerPoint really fast. Now, Nikisa mentioned this a couple of minutes ago around the ability for us to also jump start your your private access journey. Now included with your, with the offer here is an ability for you to use a hundred seat.44:04A hundred seat free trial for secure private access. Now, why is this important? The reason this is important is because secure private access or private access or the ZTNA capability that we specifically are talking about.44:24Has a couple of key outcomes that we want to help drive. Now, number one is around reduced cybersecurity risk. This allows us to enforce things like zero trust access principles because we can we can sort of prevent lateral movement and protect these private applications without ever exposing to the internet. Now, second one is a frictionless.44:37User experience. Now, because we have a unified engine and a unified client on the end device, the private access capability actually provides very, very seamless a very seamless access to private apps from anywhere. Now this can be used there's also, it also minimizes the need.44:57For a user to decide whether this is going to go through VPN or this is going to go through ZTNA and so on and so forth. Now from an IT operators standpoint, there are some major benefits. Now, because we have that simplified unified policy that I talked about, it can help reduce complexity across a bunch of different products like ZTNA and VPN as a service, internet.45:16And you can really bring that into a unified engine.45:37And then you can also reduce hardware costs and maintenance by potentially moving your VPN to the cloud through our VPN as a service capability. And finally for the final aspect is around scalability and flexibility. Now, secure private access obviously delivers, you know, optimized security performance, but it also does it through routing between cloud and on prem.45:40Environments. Now this is a capability that is called hybrid private access, which we haven't covered really at the most for the most part today, but something that to keep in mind as you sort of go through this journey in evolution. So hopefully this gives you an idea that, you know, hey, we can actually do quite a bit with, with the, with the pro with the capabilities that are included.46:00Within secure internet access and also taking advantage of the private access capabilities. So with that, I will pass it on to Chris.46:20Hey everyone, Chris here with Cisco, and today we're going to walk through the upgrade process from Cisco Umbrella SIG to Cisco Secure Access. There's three main steps that we're going to be taking.46:421st, we'll create a Cisco Security Cloud control account. Then we'll activate the upgrade manager and umbrella. And finally, we'll migrate our traffic from Umbrella to secure access. Along the way, I'll throw in some helpful tips to make the upgrade process as smooth as possible. The only thing that you'll need other than admin access to your umbrella account.46:53Is a claim code. Now you can't use mine, but yours will be emailed to you on the start date chosen for your secure access subscription.47:13And with that, let's jump in. Here we are in the umbrella dashboard and we have an account with some roaming computers and network devices configured and traffic going from those identities out to the internet. We're pulling in users and groups from Duo using Skim, and we're using those identities for both our DNS and web policies. So we'll be able to see.47:21See how not only the identities are migrated but the policies as well.47:41Under licensing, we can see that this account has a SIG advantage license, and at the top we have an option to request an invitation to start the upgrade process. When we request it, an email will be sent to us with that invitation. This request can only be made once, so the admin that clicks it needs to complete the process of attaching the account to.47:46Security cloud control, and if we check in our inbox, we can see that there's a message with the required information. So let's go ahead and do that.48:06I don't already have a security cloud control tenant, so I'm gonna speed things up while I create a new one. Security cloud control provides centralized control and AI driven insights across the Cisco security cloud for any environment. It gives you a central interface to manage and integrate all of your Cisco security products, providing.48:14Seamless authentication across those products.48:34Now that we've created our account and activated MFA with Duo, we can access security cloud control and create our new organization. It's important to note that the name selected here will be the name used for the secure access account. So choose a name appropriately. Since Secure Access is a global platform, the region deployment won't be used for this migration.48:41But it's still a good idea to select an appropriate region since this tenant can be used to deploy other Cisco security products as well.49:01If we look under our product subscriptions, we see our invitation to attach secure access. The instance ID will be the same as our existing umbrella organization ID and this organization ID will stay the same after the upgrade. Once we finish, we can see a card for secure access in our product load.49:09List with the product attached, we can claim the subscription using our claim code. As a reminder, this claim code will be emailed to you on the start date of the subscription.49:28During this process, it's important to select attach existing instance since we are migrating an existing umbrella account. Selecting create new instance will create a new secure access account that needs to be deactivated from the subscriptions page before you can apply the license to the correct account.49:38After claiming the subscription, we can apply it to the secure access product instance, and we're all set to migrate our umbrella configuration. If create new instance was accidentally selected, this is where the new instance can be deactivated. The view details option will show the organization ID for verification.49:56In a moment, we'll configure Umbrella to use security cloud control for admin authentication. If you currently use SAML for admin authentication, you can configure your IDP under platform management and identity providers. This will require domain verification with a DNS text record to complete.50:16On the umbrella dashboard, I'm gonna refresh the page and a pop up will appear with the option to take us to the upgrade manager in addition to a new link being available in the menu bar. We have four steps we need to take care of before starting the upgrade.50:35The 1st one is to configure security cloud control as we mentioned. Since this is what Secure Access uses, we need to have Umbrella use it as well. We select configure SAML and when we test the configuration, since we're already logged into security cloud control, we don't have to log in again.50:50If we weren't already authenticated, we would just log in using our security cloud control credentials. To finish the configuration, we verify the conditions and click save and notify users. Remember that after this step, admins will need to use accounts created through security cloud control to access the umbrella dashboard.51:07Back at the upgrade manager, the next two prerequisites are to upgrade some of our connectors and devices. Clicking start will walk you through that process, but since I know all of mine are already on the latest versions, I'm gonna mark them as done. Finally, if we have SAML configured for end users, we need to update our IDP to include additional information for security.51:27Secure access. There is a new metadata XML file that needs to be uploaded to the IDP. Now we're ready to start the upgrade process that will migrate our configuration to secure access. Once clicking upgrade, it can take a bit to complete, so now's a good time to take your dog for that walk they've been begging for.51:47If an upgrade is being done as part of a renewal, this upgrade step is what needs to be completed for the new license to be fully applied. It's important to note that secure access has a unified policy that simplifies configuration across DNS, web, and firewall.52:07Because of that, there might be multiple rules per migrated policy, but the upgrade process does its best to match the outcome. We can see that the unified policy has our web rules on top followed by our DNS rules. Remember that the secure access policy matches on both source and destination and doesn't stop evaluation after the 1st.52:251st match.52:45If we look at one of the rules, we can see it's still using our directory groups and digging in, we can see all of our users are present in addition to our roaming computers. The important thing to note is that we've only migrated our configuration. All of our traffic is still being routed.52:46Through umbrella.53:06We can verify this by opening activity search and selecting Cisco Secure Access as the point of enforcement. No traffic is found. Confirming umbrella is still being used. To migrate traffic will return to the upgrade manager in umbrella, and click start on the redirect traffic step.53:07From here we can freely move individual identities to and from secure access so that we can migrate and test at whatever pace we need to. There's NO rush to move on from this step until we're comfortable with the upgrade. For now I'm going to redirect our network devices and roaming computers.53:26DNS traffic will redirect within a few minutes and web traffic will redirect the next time the client syncs its configuration. We can see that there is an alert about pack files. The hosted pack file URL is different between Umbrella and secure access.53:45To migrate networks using packed files, we need to copy the new URL from the Secure Access dashboard and update our devices using it. The org info file for secure client is the same between Umbrella and secure access and roaming computers will automatically redirect their traffic to secure access or umbrella based on the set.54:00Things in the upgrade manager.54:20Finally, we can see the umbrella root certificate was imported into our secure access account. If we had a custom root certificate, that would be imported as well. So NO certificate changes are needed to complete the upgrade. And now when we go to activity search and select secure access as our point of enforcement, we can see traffic using secure access in addition.54:24Do our other identities that are still using umbrella.54:43Once we've migrated our traffic to secure access, the last step is to close the Umbrella account. This is a one way action, so we want customers to migrate at their own pace. There's NO rush to complete this step. So make sure that you're comfortable with the upgrade, click close umbrella, and that's it. We've successfully upgraded from umbrella SIG to securex.54:47Okay, thank you so much Chris, for that great demo on how to migrate using our automated upgrade tool. I have a few more items for you all before we wrap up our webinar today. 1st I want to cover who's eligible for this migration to secure access.55:08So all umbrella DNS and SIG customers are eligible whether you're on the essentials or advantage packages, also our umbrella professional insights and platform customers are eligible. In order to migrate, you do need to opt in. This is a voluntary migration.55:28So you will need to notify your partner or your account team to get the process started.55:49Okay, I also want to make you all aware of some pricing changes that we've imple implemented as of 1 September for our umbrella SIG licenses. So to encourage your migration to secure access, we have implemented a 20 %.55:56Increase for umbrella SIG upon renewal. But the good news here is that customers can migrate to secure secure access SIA at NO additional cost. So SIA is priced at the same level as your previous umbrella SIG license.56:15So you can get all of the enhanced capabilities that we've talked about today, that Prabhu demoed without paying more. So really you want to start planning for your migration to ensure that you are on our latest platform at the same cost as before and entirely in avoiding that 20 %.56:35Increase at time of your renewal. So, as I mentioned earlier, definitely you want to add this to your project list, whether it's a month out or a few months out, to avoid for that additional cost at, at your renewal date.56:56If you have any further questions about this, if there's anything that you want more clarity on, any input you have for all of us on, the whole story around the umbrella migration and why you should be migrating to secure access, feel free to put those in the Q and A window. We welcome.57:12Welcome your your comments and your feedback, your questions, and we will continue to respond to those in the chat, in the Q and A window. Okay, I also want to share with you all that we also newly have available our secure access DNS defense EDU packages.57:32So, the a la carte is available now. The enterprise agreement is coming soon and the pricing as well as the capability list will be the same as secure access DNS defense, essentials, and advantage. We will not have an EDU SIG.57:52Skew. So if you are currently on SIG EDU, you should migrate to secure access SIA and my colleague Ezra will be, will be posting in the chat for all of your ordering guide, so you can take a look for additional details on these EDU packages there as well.58:12Wow.58:32Okay, so in closing here, a few quick next steps and important information I want to leave you with on our elevate offer. So this is our exclusive offer to take your umbrella investment further with secure access. There's two key elements here, and I've heard our customers.58:33Customers really describe this offer as a game changer in their decision to move from Umbrella to secure access. So the 1st component here is that you get up to full investment credit. So what that means is whether you have 90 days or two years left in your umbrella.58:53DNS, your umbrella SIG subscription excuse me, you're gonna get investment credit for that entire unused balance when you migrate to secure access SIA. And then the 2nd aspect here is that you have the flexibility to upgrade on your schedule, so we've hit on this.59:13It's a couple times throughout the session today. I want to reiterate it just one more time. This is completely on your schedule. You do not need to feel rushed to close out of umbrella. You're gonna have access to both tools. You're gonna have a dual view so you can take your time testing things out, making sure you're comfortable.59:33Comfortable reaching out to our team if you have any questions or concerns, and then whenever you're ready closing out of Umbrella to.59:53Completely make the move over to secure access. So if you are interested, which I really hope you all are, please reach out to your Cisco partner, your Cisco account manager to learn more about our elevate offer and the migration to Secure Access.01:00:03You can also complete this brief form. I'll put the link in the chat in just a moment for you all here, and that will help us reach out to have our sales team reach out to you to get the process started as well. If you prefer that route rather than reaching out to your account team or partner yourself.01:00:22So with that, thank you so much for joining our webinar today. Thank you for the great questions and the great input and, have a wonderful day and we look forward to helping you move over to secure access quickly, easily, and at NO extra, NO extra cost.01:00:42This will continue to hang out here, so please continue to put your questions in the chat.01:01:02Thank you, Nikisa, Pravu, Chris, a lot of content shared and a lot of great questions. As Nigisa mentioned, please submit any final questions in the Q and A at this time. We will be sure to address questions that may have not been able to be addressed before the session concludes in a few.01:01:10Few minutes, but as mentioned, please be sure to put them in so we can get them tackled. And additionally, this webinar has been recorded and will be sent out via email. If you do not receive, please feel free to reach out to us by responding to the invitational email.01:01:30Additionally, we do have a brief survey that you will receive upon exiting today's session. We do request and welcome your feedback. This helps us to continually improve and look at topics and feedback from you all so we can implement those for future webinar sessions.01:01:51Again, we'll be here for a few moments longer. For any final questions that you may have, we'll be happy to get those answered. And again, if you don't have any questions, you're welcome to exit, and you're also welcome to stay on to see if there are questions submitted by others that maybe of interest to you as well.01:02:10So we'll stay here for a moment and again thank you for your time. Thank you for your participation. It's greatly appreciated. Thank you.01:02:31Thanks again for your time and for joining us today. It's it's greatly appreciated as mentioned. We will be concluding today's session. We hope that you found a lot of helpful and impactful information. And again, we have a very brief survey that you'll receive right away when you exit today's webinar. We do re.01:02:43Request and welcome your feedback. We hope to see you at a future session. We will have those sent out via email and also in our monthly newsletter. Thanks again, and we hope you have a great rest of your Wednesday for your Thursday. Sorry about that. Take care.01:03:02Okay.01:03:22