Firepower or Umbrella for blocking URLs, Applications, IP Addresses

[Alan Inman]

Folks

Is it best to use Umbrella or Firepower when blocking access to applications such as FB, Pandora and URLs/IPs to org banned destinations? Why one over the other. 

We have both FTDs and Umbrella and unfortunetly leave rules on both blocking different stuff making it messy. For example, Pandora might be blocked by Firepower while FB is being blocked by Umbrella. Is there an advantage to using one platform over the other? Any references will also be greatly appreciated. 

Thank you kindly, 

Alan

[Rob Ingram · Accepted solution]

@Alan Inman 

Well I'd use Umbrella, because you can use the same policies on and off the network. So remote users at home or on the road and not connected to the VPN can still be blocked from accessing undesired websites. With firepower you can only obviously restrict access to these URLs if the users device is connected to the network.

The reporting in Umbrella is more detailed than Firepower also. So you get better visibility with Umbrella.

[Marvin Rhoads]

Definitely Umbrella. For the reasons @Rob Ingram said as well as better integration with AD for identity - both in policy use and for visibility.

[Alan Inman]

Thank you, Marvin! Your opinion and time is always very much appreciated.