Introduction

👍

Umbrella Packages

Not all features described here are available to or compatible with all Umbrella packages. To determine your current package, navigate to Admin > Licensing. For more information, see Determine Your Current Package.

If you encounter a feature described here that you do not have access to, contact your sales representative for more information. See also, Cisco Umbrella Packages.

The Cisco Umbrella Roaming Security module provides always-on security on any network, anywhere, any time—both on and off your corporate VPN. When you install the Roaming Security module, it installs two services Cisco AnyConnect Umbrella Roaming Security Agent and Cisco AnyConnect SWG Agent. The Roaming Security Agent enforces security at the DNS layer to block malware, phishing, and command and control callbacks over any port. The SWG Agent enforces security at the URL layer, to provide security and visibility for web traffic. However, while installed, the SWG Agent is only enabled for Umbrella Secure Internet Gateway (SIG) platform users, which is dependent on your current subscription package.

The AnyConnect Roaming Security Agent can replace your existing Umbrella roaming client if you already have AnyConnect configured. The roaming module allows for full update control, and the Roaming Security Agent offers an option to disable automatically behind a full tunnel VPN connection. The Roaming Security Agent and also offers an option to disable on a trusted network.

The Roaming Security profile for AnyConnect Umbrella Roaming Security also applies to the AnyConnect SWG Agent, and the corresponding Roaming Security module profile (OrgInfo.json) associates each deployment with the corresponding service, and the corresponding protection features (based on your Umbrella package) are enabled automatically.

For more information about this solution, watch Cisco Product Manager Adam Winn discuss the solution here.

---

Introduction > Frequently Asked Questions