Introduction
This document describes the general availability of Umbrella data loss prevention (DLP).
Background Information
Cisco Umbrella is one of the core components of Cisco’s SASE architecture. It integrates multiple components that were once standalone security services and appliances in a single, cloud-native solution.
Today, we are excited to announce general availability of Umbrella DLP. The concept of data protection is certainly not new, but has become more complex as users connect directly to the internet and cloud apps and bypass traditional on-premises security. Cisco Umbrella data loss prevention helps to simplify that complexity. It sits in-line and inspects web traffic so you can monitor and block sensitive data in real time with flexible controls.
Define and Control
- Leverage 80+ pre-built data identifiers covering content such as personally identifiable information (PII), financial details, and personal health information (PHI) - customizable to target specific content and reduce false positives
- Create user-defined dictionaries using custom keywords such as project code names
- Create flexible policies for granular control - applying organization-specific data identifiers to target specific users, groups, locations, cloud apps, and destinations
Detect and Enforce
- Analyze sensitive data in-line with high throughput, low latency, and elastic scale
- Leverage the Umbrella SWG proxy for scalable SSL decryption
- Analyze sensitive data flows to select cloud apps and file uploads to any destination
- Discover and block sensitive data being transmitted to unwanted destinations and potential sensitive data exposure in sanctioned applications, preventing data exfiltration events from taking place
Monitor and Report
Get drill-down reports with detailed information including identity, file name, destination, classification, pattern match, excerpt, triggered rule, and more
Detailed information can be found in Umbrella documentation:
With cloud-native DLP functionality integrated into your Umbrella subscription, you can achieve your compliance goals while simplifying your security stack and taking the next step in your SASE journey.
Feedback