Cisco Umbrella is a cloud-delivered security service that enforces DNS-layer protection before connections are established and adds secure web gateway inspection in the web traffic path. SCOR covers Umbrella's components, capabilities, and benefits for content security.
Cisco Secure Firewall (formerly Firepower) is Cisco's next-generation firewall providing stateful inspection, IPS, and application control managed by FMC or cloud.
A Next-Generation Intrusion Prevention System (NGIPS) inspects traffic against threat signatures and behavioral rules to block attacks inline.
Snort is the open-source intrusion-detection and prevention engine that powers Cisco's IPS with signature-based rules.
Cisco Umbrella is a cloud-delivered security service that enforces DNS-layer protection before connections are established and adds secure web gateway inspection in the web traffic path.
The Cisco Secure Web Appliance (formerly WSA) is a web proxy that enforces URL filtering, malware scanning, and acceptable-use policy.
Cisco Secure Client (formerly AnyConnect) is the endpoint agent that establishes remote-access VPNs and delivers posture and security modules.
A Virtual Private Network (VPN) secures traffic over untrusted networks using encryption, covering site-to-site (IPsec) and remote-access designs.
Cisco TrustSec enforces software-defined segmentation using Security Group Tags (SGTs) instead of IP-based ACLs.
The Identity Services Engine (ISE) is Cisco's policy engine for authentication, authorization, and network access control using 802.
AAA (authentication, authorization, and accounting) controls who accesses devices and networks and logs their actions, via TACACS+ or RADIUS.
Posture Assessment evaluates an endpoint's compliance (patches, antimalware, configuration) before granting network access.
Cisco Secure Endpoint (formerly AMP for Endpoints) provides endpoint antimalware, EDR, and retrospective detection.
Endpoint Detection and Response (EDR) continuously monitors endpoints to detect, investigate, and respond to threats, going beyond preventive EPP.
A Cloud Access Security Broker (CASB) enforces visibility, compliance, and threat protection for cloud application usage.
Cloud Security in SCOR covers the shared responsibility model, DevSecOps, and protecting applications and data across IaaS, PaaS, and SaaS.