As the industry’s first Secure Internet Gateway in the cloud, Cisco Umbrella provides the first line of defence against threats on the internet. Because Umbrella is delivered from the cloud, it is the easiest way to protect all of your users in minutes. Cisco Umbrella uses the internet’s infrastructure to block malicious destinations before a connection is ever established. By delivering security from the cloud, not only do you save money, but we also provide more effective security. Umbrella learns from internet activity to automatically identify attacker infrastructure staged for current and emergent threats. We capture and understand relationships between malware, domains, IPs, and networks across the internet.

Global threat intelligence, advanced sandboxing and real-time malware blocking to prevent breaches are all provided by Cisco Advanced Malware Protection (AMP). But because you can’t rely on prevention alone, AMP also continuously analyses file activity across your extended network, so you can quickly detect, contain, and remove advanced malware.

Block more threats and quickly mitigate those that do breach your defences with the industry’s first threat-focused NGFW. Cisco’s Firepower NGFW appliances combine their proven network firewall with the industry’s most effective next-gen IPS and advanced malware protection. All so you can get more visibility, be more flexible, save more, and protect better. A user agent monitors up to five Microsoft Active Directory servers and reports logins and logoffs authenticated by Active Directory. The Firepower System integrates these records with the information it collects using traffic-based detection on managed devices.