Not all features described here are available to or compatible with all Umbrella packages. To determine your current package, navigate to Admin > Licensing. For more information, see Determine Your Current Package.
If you encounter a feature described here that you do not have access to, contact your sales representative for more information. See also, Cisco Umbrella Packages.
The Cisco Umbrella Roaming Security module for Cisco AnyConnect provides always-on security on any network, anywhere, any time—both on and off your corporate VPN. The Roaming Security module enforces security at the DNS layer to block malware, phishing, and command and control callbacks over any port. Umbrella provides real-time visibility into all internet activity per hostname (and optionally AD username) both on and off your network or VPN. The client may optionally be disabled on network to defer to on network settings.
The Roaming Security module can replace your existing Umbrella roaming client if you already have AnyConnect configured. The roaming module allows for full update control, and an option to disable automatically behind a full tunnel VPN connection.
The Roaming Security module is available in a limited roaming security only package which provides only basic DNS-layer security. Looking for the full Umbrella experience? Cisco Umbrella subscriptions provide IP Layer Enforcement, access to the intelligent proxy for URL blocks, content filtering, multiple policies, robust reporting, active directory integration, and more. The same Umbrella Roaming Security module is used regardless of the subscription.
The Roaming Security module profile (OrgInfo.json) associates each deployment with the corresponding service, and the corresponding protection features are enabled automatically.
For more information about this solution, watch Cisco Product Manager Adam Winn discuss the solution here.
Introduction > The AnyConnect Plugin: Umbrella Roaming Security
Updated about a month ago