Hi,
The combination of Cisco DNA Advantage license and UMB-SEC-SUB (Cisco Umbrella Secure Internet Gateway Subscription) offers several benefits for your network infrastructure and security:
1. Comprehensive Network Management: With the Cisco DNA Advantage license, you gain access to DNA Center, a powerful network management platform. It provides centralized control, automation, and visibility across your network, making it easier to deploy, manage, and troubleshoot network devices and policies.
2. Enhanced Network Security: UMB-SEC-SUB (Umbrella Secure Internet Gateway Subscription) offers cloud-based security services, such as Secure Web Gateway (SWG), DNS and IP layer enforcement, and intelligent proxy. These security features protect your network from threats, prevent access to malicious websites, and enforce granular security policies for web traffic. The inclusion of a cloud firewall also adds an additional layer of network security.
3. Simplified Security Management: By combining the DNA Advantage license with UMB-SEC-SUB, you can manage network and security policies from a single platform. This simplifies your overall security management, reduces complexity, and allows for centralized policy enforcement and visibility.
4. Integrated Threat Intelligence: Cisco Umbrella leverages Cisco Talos threat intelligence, one of the largest threat intelligence networks in the world. This intelligence is constantly updated to identify and block emerging threats, providing an additional layer of protection for your network.
5. Improved User Experience: The integration of Cisco DNA Advantage and UMB-SEC-SUB helps enhance the user experience on your network. DNA Center's automation and assurance capabilities enable faster network provisioning and troubleshooting, while Umbrella's security services help prevent malware infections and enforce safe web browsing.
6. SASE Readiness: SASE (Secure Access Service Edge) is a network architecture that combines network and security services into a unified cloud-native platform. By deploying the DNA Advantage license with UMB-SEC-SUB, you are aligning your infrastructure with SASE principles, enabling you to deliver secure access to your network and cloud resources from any location.
It's important to note that the specific benefits and features may vary based on the version, subscription level, and updates provided by Cisco. So,based on the information you provided, it seems like combining the DNA Advantage license with the UMB-SEC-SUB SIG Advantage would be a suitable solution for deploying SASE (Secure Access Service Edge) in your two offices with C8200L-1N-4T and C1131X-8P devices. This combination would provide you with the full range of features you mentioned, such as creating layer 3/layer 4 policies to block specific IPs, ports, and protocols, as well as layer 7 protection and an Intrusion Prevention System.
If you find my reply solved your question or issue, kindly click the 'Accept as Solution' button and vote it as helpful.
You can also learn more about Cisco DNA Center through our live Ask the Experts (ATXs) session. Check out Cisco DNA Center ATXs Resources [https://community.cisco.com/t5/networking-knowledge-base/cisco-dna-center-ask-the-experts-resources/ta-p/4394489] to view the latest schedule for upcoming sessions, as well as the useful references, e.g. online guides, FAQs.
Regards,
Niranjana
