What is the difference between UTD and Umbrella?

[wmendozaOpenlink]

We want to bring to a customer a solution with SASE, using Cisco Umbrella components, this looks very complete,but i see that there is quite a difference between Cisco Umbrella and UTD, is that correct? Can someone guide me to understand the main differences between both?

[M02@rt37]

Hello @wmendozaOpenlink,

UTD is a broader concept that refers to the integration of multiple security technologies into a unified and coordinated defense strategy. It involves combining various security components, such as firewalls, IPS, AMP, SEG, and more...innto a comprehensive security architecture. UTD aims to provide a holistic approach to security by leveraging multiple security tools that work together to defend against a wide range of threats.

Cisco Umbrella is a cloud-native security platform that provides secure access to the internet for users, regardless of their location. It operates at the DNS and IP layers to provide advanced threat protection, secure web gateway functionality, and cloud-delivered firewall capabilities. 

Cisco Umbrella can be a component within UTD architecture, providing specific security capabilities for secure web access and DNS-level threat protection.

In the context of SASE, Cisco Umbrella can be a key component in delivering secure web access and threat protection for users connecting to the internet. It provides cloud-based security services as part of the overall SASE architecture, which combines networking and security functionalities to enable secure and scalable access to applications and data.

[wmendozaOpenlink]

Hello friend

Is there any benefit of using UTD or Umbrella? I mean is there an benefit one over the other? Until now I have only been able to see that in a particular case, for a small team that does not support UTD due to hardware requirements, Umbrella would be more scalable, and of course, if you want to use client roaming for your users, which seems to be something that could not be done. do with utd...

[M02@rt37 · Accepted solution]

@wmendozaOpenlink,

The choice between Umbrella and UTD depends on the specific security requirements, network architecture, and organizational needs. Umbrella is often favored for its cloud-based scalability, DNS-layer security, and ease of deployment. UTD, on the other hand, is suitable for organizations seeking comprehensive network security features and control over their security infrastructure.

It's important to evaluate your organization's requirements, existing network infrastructure, and security priorities to determine which solution aligns best with your needs.