Cisco Secure Access
Cloud-delivered SSE platform with ZTNA, SWG, CASB, and DLP for securing hybrid workforces from a single console.
Security Convergence for Distributed, Hybrid Organizations
As workforces become more distributed and SaaS adoption accelerates, organizations need security that follows the user — not the network perimeter. Cisco Umbrella SIG Essentials delivers that convergence. By combining DNS security, full-proxy SWG, CASB, cloud-delivered firewall, and more into a single SASE-ready service, SIG Essentials reduces complexity, cuts risk exposure, and improves performance — all from one cloud dashboard. More than 100 million users worldwide rely on Cisco Umbrella every day.
Why Organizations Move to a Secure Internet Gateway
Three Core Challenges That SIG Essentials Solves
Organizations adopting SIG are typically responding to one of three core challenges. SIG Essentials addresses all three in a single, cloud-delivered package.
- Improved Security Coverage — Point solutions leave gaps between security layers. SIG Essentials closes those gaps by enforcing policy at the DNS layer, the web layer, and the network layer simultaneously, across all users and devices.
- Centralized Policy Across Remote Locations — A single cloud-native policy engine enforces consistent security controls for office workers, remote employees, and branch locations without backhauling traffic through a data center.
- Better Performance and User Experience — Umbrella’s Anycast routing architecture routes traffic to the nearest data center automatically. Users get fast, reliable internet access with security enforced transparently in the background.
Six Security Capabilities in One Package
SIG Essentials bundles the critical security services that organizations typically purchase separately — into a single subscription, a single dashboard, and a single management experience.
Secure Web Gateway
Full proxy with SSL/TLS inspection logs and inspects all web traffic. Content filtering by URL or category, file type blocking, malware scanning via Cisco Secure Endpoint engine, and granular app-level controls block risky activity across all web destinations.
Data Loss Prevention
Inline data inspection across web and cloud traffic identifies and blocks sensitive data before it leaves your organization. Includes 80+ built-in classifiers for PII, PCI, and PHI — with customizable thresholds and user-defined dictionaries. Available as an add-on in SIG Essentials.
Cloud-Delivered Firewall
Layer 3/4 firewall enforces policies across all ports and protocols for traffic destined for the internet. Managed and reported through the unified Umbrella dashboard. Layer 7 application visibility and IPS available in SIG Advantage.
Cloud Access Security Broker
Discover and control cloud application usage across your environment. Identify shadow IT, assess app risk scores, block inappropriate apps, and restrict tenant access for sanctioned SaaS applications to prevent data exfiltration.
Digital Experience Monitoring
Powered by ThousandEyes, DEM gives you visibility into user experience across applications and networks. Identify where performance issues originate — in your network, the ISP, or the cloud service — and correlate DEM data with security telemetry for faster resolution.
DNS-Layer Security
Block requests to malicious destinations before a connection is established. Protects all devices across all locations — office, remote, and mobile — using Cisco Talos threat intelligence updated in real time.
Generative AI Security Controls
Secures the use of generative AI tools with AI-powered controls. Monitor, restrict, and enforce acceptable use policies for ChatGPT, Copilot, and other generative AI services across your organization.
SASE and SD-WAN Ready
A Simple, Secure Path to SASE
SIG Essentials is designed to anchor your SASE strategy. Integrate with Cisco SD-WAN to replace expensive MPLS backhaul with direct-to-internet connections — protected at every hop by Umbrella.
- Seamless integration with Cisco SD-WAN for direct internet access
- Single cloud-delivered service replaces multiple point solutions
- Consistent policy across branch, remote, and mobile users
- Reduced complexity and fewer resources required to manage
- Scales to thousands of locations without infrastructure changes
The Next Evolution
Cisco Umbrella SIG Is Evolving to Secure Access — Secure Internet Access (SIA)
Building on Cisco Umbrella’s proven security with more than 30,000 customers globally, Cisco Secure Access delivers an intuitive user experience, simplified IT management, and powerful new capabilities — for the same price.
Explore Cisco Secure AccessReady for More Coverage?
Expand Your Protection With SIG Advantage
SIG Advantage builds upon Essentials to include a layer 7 firewall with IPS, full data loss prevention (DLP), unlimited malware sandbox analysis, advanced CASB with unlimited cloud app scanning, and Remote Browser Isolation (RBI) — all fully included in a single subscription.
Deploy SIG Essentials with Expert Guidance
Our Cisco-certified team can help you consolidate your security stack with Umbrella SIG Essentials — from package sizing and licensing to SD-WAN integration and deployment planning.
- SIG Essentials vs. SIG Advantage comparison and sizing
- SD-WAN and SASE architecture planning
- Migration from legacy security point products
- Response from a certified Cisco specialist within one business day