Umbrella's cloud-delivered firewall (CDFW) provides firewall services without the need to deploy, maintain, and upgrade physical or virtual appliances at a site. The Umbrella CDFW supports visibility and control of internet traffic across branch offices. Umbrella logs all network activity and blocks unwanted traffic using IP, port, and protocol rule criteria.

To forward traffic to Umbrella, establish an IPsec (Internet Protocol Security) IKEv2 (Internet Key Exchange, version 2) tunnel from any network device. Then, deploy the network tunnel in Umbrella and add the tunnel to an Umbrella firewall policy. As you add new tunnels to a firewall policy, Umbrella automatically applies and consistently enforces the rules defined in the policy.

Note: An Umbrella firewall policy only applies to traffic sent from a network tunnel.

Best Practices for the Data Loss Protection Policy < Manage the Firewall Policy > Add a Firewall Rule