Security Policy Details

Comprehensive overview of available Cisco Umbrella protection levels

📋 Policy Overview

Each policy level provides increasing levels of security and control. Policies are applied at the device level through tagging, allowing for flexible deployment across your organization. Higher levels include all protections from lower levels plus additional security features.

B

BASIC

Essential protection against known threats and malicious content. Perfect for organizations starting their security journey.

Protection Features:

  • DNS-layer security
  • Malware protection
  • Phishing protection
  • Command & control blocking
  • Basic reporting
Recommended For:

Small businesses, basic security requirements, organizations new to web security

L

LOW

Balanced security with essential web filtering capabilities for moderate security requirements.

Protection Features:

  • All BASIC features
  • Content filtering
  • Cryptomining protection
  • Newly seen domains blocking
  • Improved visibility
  • Option for SafeSearch on supported search engines
Recommended For:

Growing businesses, schools, organizations requiring content control

M

MODERATE

Enhanced security with comprehensive content filtering and advanced threat protection for corporate environments.

Protection Features:

  • All LOW features
  • File reputation analysis
  • Advanced content categories
  • Social media controls
  • Streaming media filtering
  • P2P and file sharing blocks
Recommended For:

Corporate environments, organizations with productivity requirements, businesses with moderate compliance needs

H

HIGH

Maximum protection with strict security controls and comprehensive content filtering for high-security environments.

Protection Features:

  • All MODERATE features
  • Strict content filtering
  • Advanced file scanning
  • Zero-day threat protection
  • Enhanced analytics
  • Custom block pages
  • Detailed audit logs
Recommended For:

High-security environments, financial institutions, healthcare organizations, government agencies

C

CUSTOM

Tailored security policies designed specifically for your organization's unique requirements and compliance needs.

Custom Features:

  • Bespoke policy configuration
  • Industry-specific controls
  • Custom content categories and allow/block lists
Discuss Custom Policy Options
Recommended For:

For those with very specific policy requirements. Ideal for businesses that must adhere to a defined policy.

🛡️ Security Categories

These categories are active on every policy, from BASIC and up - no matter which level you choose, this is always covered:

Malware

Domains known to host or distribute malicious software, including viruses, worms, and trojans.

Phishing

Domains impersonating legitimate services - such as banks, Microsoft 365, or online stores - to trick users into handing over login or payment details.

Cryptomining

Domains associated with covert cryptomining, where a device's processing power is hijacked to “mine” cryptocurrency without the owner's knowledge - often with a noticeable performance hit.

Command & Control

Domains that already-infected devices use to communicate with their operators - for example to receive further instructions or send stolen data onward.

Newly Seen Domains

Domains observed for the very first time within the past 24 hours, across Cisco's global network. Attackers often register brand-new domains specifically for a single campaign, precisely because they aren't yet known to be malicious.

🏷️ Content Categories Overview

Cisco Umbrella categorizes web content into various categories, allowing for granular control over what users can access:

Added from LOW

Adult Content

Websites with pornographic or other sexually explicit content.

Child Protection

Blocks known websites containing illegal material that exploits or abuses children. This category is active from LOW and up.

🔍 SafeSearch

SafeSearch forces search engines that support the feature (e.g. Google and Bing) to always show filtered results without explicit content - regardless of what any individual user has set in their own browser. It can be added on LOW, MODERATE, HIGH, and CUSTOM, but isn't available on BASIC, since BASIC focuses purely on security without content filtering.

Added from MODERATE

Drugs

Websites covering illegal drugs, including buying, selling, or instructions for use.

Weapons

Websites about weapons, including sales and detailed instructions for use or manufacturing.

Terrorism

Websites promoting or supporting terrorism and extremist violence.

Gambling

Websites with online betting, casinos, and other gambling activity.

Dating

Dating sites and apps.

Added from HIGH

File Sharing

Services for uploading and sharing files, such as WeTransfer and similar - often used to bypass a company's own file-sharing systems.

Messaging Services

Chat and messaging services outside the company's approved communication tools.

Auction Sites

Online auction websites such as eBay.

Peer-to-Peer (P2P)

Traffic from P2P protocols, often used for file sharing and capable of putting unnecessary strain on the network.

Web-Based Email

Access to private webmail services such as Gmail and Hotmail from company devices.

Video Streaming

Streaming services for video and entertainment.

💡 Policy Selection Guidelines

Start Conservative: Begin with a BASIC or LOW policy and gradually increase security levels based on your organization's tolerance and requirements.

User Training: Higher security levels may require user education about blocked content and alternative workflows.

Testing: Policies can be tested on small groups before organization-wide deployment.

Flexibility: Policies can be adjusted at any time through the management console or by contacting Valeo support.