Cisco Secure Access
Cloud-delivered SSE platform with ZTNA, SWG, CASB, and DLP for securing hybrid workforces from a single console.
Data Protection That Moves with Your Users
Traditional DLP appliances inspect traffic on the corporate network but miss data leaving through cloud applications, personal devices, or off-network connections. Cisco Umbrella DLP enforces data protection policies in the cloud — covering all users, all locations, and all cloud services through a single unified policy engine.
Complete Visibility into Data Movement
The Umbrella DLP dashboard gives security teams a real-time view of data policy violations, sensitive data transfers, and user activity across web and cloud channels. Incidents are logged with full context — user, destination, content type, and action taken.
- Real-time incident detection and alerting
- Content inspection using 80+ pre-built dictionaries (PII, PCI, PHI)
- Custom dictionaries and regular expressions for proprietary data types
- Block, warn, or log based on policy severity and user context
- Exportable reports for compliance audits and investigations
Defense in Depth
A Layered Approach to Data Protection
Effective DLP requires more than blocking file uploads. Umbrella delivers a layered approach that combines DNS-layer security, cloud-delivered firewall, secure web gateway inspection, and DLP enforcement — creating multiple enforcement points that work together to keep sensitive data inside your organization.
- Layer 1: DNS-layer security checks for malicious domains
- Layer 2: Cloud-delivered firewall (CDFW) checks IP, port, protocol, and application rules
- Layer 3: Secure web gateway (SWG) checks all web traffic for malware and policy violations
- Layer 4: DLP monitors and blocks sensitive data transmission
Core DLP Capabilities
Umbrella cloud DLP delivers the detection, enforcement, and reporting capabilities organizations need to meet compliance requirements and protect sensitive data across modern hybrid work environments.
Content Inspection
Deep content inspection identifies sensitive data within files, web forms, and uploads using exact data matching, data identifiers, and custom patterns. Covers structured and unstructured data.
Real-Time Policy Enforcement
Policies evaluate every transfer in real time. Violations can be blocked immediately, coached with a user warning, or logged for review — with actions configurable per policy, destination, and user group.
Cloud Application Coverage
Apply DLP policies to uploads into personal cloud storage (Dropbox, Google Drive, OneDrive personal), collaboration tools, webmail, and any other web destination — not just managed SaaS applications.
Compliance Frameworks
Pre-built policies support GDPR, HIPAA, PCI DSS, and other regulatory frameworks. Start with a framework template and customize rules to match your organization’s specific data classification standards.
User and Group Policies
Apply different DLP rules to different user groups — more permissive for trusted finance teams, stricter for contractors or high-risk roles. Policies integrate with Active Directory and cloud identity providers.
Incident Reporting
Every DLP incident is logged with user identity, destination, data type, and action taken. Detailed reports support security investigations, compliance audits, and risk assessments.
The Next Evolution
Cisco Umbrella Is Evolving to Cisco Secure Access
Building on Cisco Umbrella’s proven security with more than 30,000 customers globally, Cisco Secure Access delivers an intuitive user experience, simplified IT management, and powerful new capabilities — for the same price.
Explore Cisco Secure AccessStop Sensitive Data Leaks Before They Become Incidents
Our Cisco-certified team can help you design, configure, and deploy Umbrella DLP policies aligned to your compliance requirements and data classification framework. We’ll get you from zero visibility to active enforcement fast.
- Pre-built templates for GDPR, HIPAA, and PCI DSS
- Real-time blocking with user coaching options
- Covers all users — on-network, remote, and mobile
- Response from a certified Cisco specialist within one business day