79%
of organizations are shifting to direct internet access
Web Security That Goes Beyond DNS
DNS-layer security stops threats at the domain level, but a full proxy inspects every URL, file, and connection. Cisco Umbrella’s SWG decrypts, inspects, and logs all web traffic — including encrypted HTTPS — so you can enforce granular access policies and detect threats that bypass DNS blocking.
The Industry Is Moving to Cloud-Delivered Web Security
76%
prefer a multi-function security platform
67%
expect all proxies will be cloud-based in the future
An Integrated Secure Web Gateway Built for the Cloud
Umbrella’s SWG is fully integrated with DNS-layer security, CASB, and cloud firewall in a single platform. There are no separate appliances to manage — all inspection happens in the cloud, and policies follow users wherever they go.
- Full SSL/TLS decryption and inspection of all web traffic
- URL and application-level access controls
- File inspection with antivirus and sandboxing
- Integrated with CASB for cloud app visibility and control
- Unified logging and reporting across all user activity
Designed for Operational Efficiency
Umbrella’s cloud-native architecture eliminates the operational overhead of traditional on-premises web proxies while delivering greater inspection coverage and scalability.
Direct Internet Access
Enforce full web inspection policies for users working directly from branch offices or remote locations without routing traffic through headquarters. Reduces backhaul costs and latency.
Cloud-Based Console
Manage all web access policies, review logs, and configure threat protections from a single cloud dashboard. No separate management servers or proxy appliances to patch or maintain.
Comprehensive Protection
SWG, CASB, DNS security, and cloud firewall in one subscription. Eliminate point products and reduce the complexity of managing separate proxy, URL filter, and CASB solutions.
Threat Intelligence Powered by Cisco Talos
Umbrella SWG is backed by Cisco Talos — one of the world’s largest commercial threat intelligence organizations. Talos analyzes over 600 billion security events daily to keep Umbrella’s threat feeds current and effective against the latest attacks.
1.5M
Unique malware samples analyzed daily
20B
Threats blocked daily
World-Class Researchers
Talos’ team of 350+ full-time threat researchers and data scientists monitors the global threat landscape around the clock, identifying new attack techniques and updating protections before threats spread widely.
Deep Malware Analysis
Files passing through Umbrella SWG are analyzed using multi-engine antivirus and cloud sandbox detonation. Unknown files are executed in a safe environment to detect zero-day malware.
Automatic Threat Blocking
Malicious URLs, compromised domains, and identified malware are blocked automatically as Talos identifies them — with no manual rule updates required from your security team.
Flexible Connectivity
Simple Deployment via IPSec Tunnel or Agent
Forward traffic to Umbrella’s cloud proxy using an IPSec tunnel from your existing router, firewall, or SD-WAN device — or deploy the lightweight Umbrella client on managed endpoints. Both methods enforce the same policies with the same cloud-based management.
- IPSec tunnel support for network-level traffic forwarding
- Lightweight roaming client for managed endpoints
- PAC file support for browser-level proxy configuration
- Native integration with Cisco SD-WAN and Meraki
Unified Management
One Console for All Web Security Policies
The Umbrella dashboard consolidates web access logs, policy controls, threat events, and user activity reports in a single interface. Security teams get complete web traffic visibility without juggling multiple tools or parsing disparate log sources.
See a Demo
The Next Evolution
Cisco Umbrella Is Evolving to Cisco Secure Access
Building on Cisco Umbrella’s proven security with more than 30,000 customers globally, Cisco Secure Access delivers an intuitive user experience, simplified IT management, and powerful new capabilities — for the same price.
Explore Cisco Secure AccessDeploy Cloud-Native Web Security Without the Complexity
Our Cisco-certified team will help you evaluate, license, and deploy Umbrella SWG across your organization. We can help you migrate from legacy on-premises proxies or build a new cloud security architecture from the ground up.
- Full SSL inspection with no performance penalty
- Covers remote, branch, and on-premises users in a single policy
- Talos-powered threat intelligence updated continuously
- Response from a certified Cisco specialist within one business day