Cisco Umbrella CASB Overview

Implementing Cisco Umbrella CASB

A Cloud Access Security Broker (CASB) works as an intermediary between cloud providers, cloud-based applications, and cloud users. Its role is to enforce the usage of security policies to make data safe and secure.

Cisco Umbrella can block risky and unwanted applications and activities.

Specifically, core technology from Cisco Cloudlock, Cisco CASB solution, has been built into Cisco Umbrella to help expose shadow IT by detecting and reporting on the cloud applications in use across the organization environment. It automatically generates overview reports on the vendor, category, application name, and the volume of activity for each discovered Application. The drill-down reports include risk information, such as the web reputation score, financial viability, and relevant compliance certifications.

This insight enables better management of cloud adoption, risk reduction, and the ability to block the use of offensive or inappropriate cloud applications in the work environment.

Cisco Umbrella also enables a core set of granular activity controls for popular software (SaaS) applications, such as uploads to Box or Dropbox, posts or shares to Facebook and Twitter, and attachments to Gmail.

Cisco Umbrella data loss prevention (DLP) helps organizations reduce the risk of sensitive data exfiltration and defends against losses of customer data, intellectual property, or other types of sensitive information when using cloud applications. Customers can monitor and enforce in real time. They can create flexible, customizable policies with more than 80 pre-built dictionaries. 

Cisco Umbrella offers both inline DLP functionality natively in Umbrella and out-of-band (API-based) functionality from Cloudlock, depending on specific customer use cases.

Cisco Umbrella malware detection enables data scanning at rest in cloud applications for potential malware infections. Admins can quickly quarantine or remove files before a malware infection takes place.

CASB Types 

There are two types of CASB .  out of band/API and Inline/Proxy. Details of both types are provided in below figure. 

Inline DLP

Cisco Umbrella DLP solution can solve security data protection requirements using a new, native Umbrella DLP service. Umbrella DLP analyzes data inline to provide visibility and control over sensitive data leaving the organization network.