Web Protection with Cisco Umbrella

Reflective IT's Web Protection service deploys Cisco Umbrella – the market-leading DNS-layer security platform – as your first line of defense against internet threats, blocking malicious sites before a connection is ever made.

Email and endpoint protection stop threats that arrive as attachments or links in your inbox. But once a user clicks through to the open internet – from a personal email, WhatsApp message, SMS or QR code – nothing is controlling where that connection goes. Web Protection closes that gap at the DNS layer, before a browser session is even established.

Reflective IT handles every aspect of your Cisco Umbrella deployment – from initial provisioning through to policy configuration, roaming client rollout and ongoing reporting – so you don't have to navigate DNS policies, content categories or client deployment alone.

Deploy Cisco Umbrella's cloud-delivered DNS-layer security across every device.
Block malicious domains, phishing sites and ransomware C2 servers before a connection is made.
Enforce web content filtering across 85+ domain categories.
Extend protection to roaming and hybrid staff, on or off the corporate network.
Provide visibility into blocked threats, VPN usage and shadow IT activity.
Contribute to your Cyber Essentials firewall, malware and secure configuration controls.

Your firewall stops at the office door – your users don't

Most businesses now rely on Microsoft Defender for email, identity, endpoint and Microsoft 365 data protection – but that leaves a gap that sits beyond all of it:

Nothing currently controls general web and DNS traffic once a user clicks a link.
Users can be reached via personal email, WhatsApp, SMS or a QR code – channels your email security never sees.
A firewall only protects users while they're on the corporate network – not at home, in a hotel, or on airport Wi-Fi.
Malware and ransomware command-and-control servers rely on DNS to communicate – and nothing is blocking those lookups.
Shadow IT, unsanctioned file-sharing tools and anonymisers go completely unnoticed.
The cost of a single phishing compromise or ransomware infection far outweighs the cost of closing this gap.

What's included in Web Protection

Reflective IT delivers a complete, end-to-end Cisco Umbrella deployment tailored to your organisation:

Cisco Umbrella Licensing & Deployment

We provision and license Cisco Umbrella for every user, deploying it as a cloud-delivered service with no additional hardware and negligible performance impact.

DNS-Layer Threat Blocking

Connections to malicious domains – phishing sites, malware hosts, ransomware C2 servers – are blocked at the DNS layer, before a connection is ever established.

Web Content Filtering

We configure policy-based filtering across 85+ domain categories, blocking file-sharing services, anonymisers, VPNs, gambling sites and newly-registered domains.

Protection On & Off the Network

Unlike a firewall, Umbrella follows the user – office, home, hotel or airport Wi-Fi – enforcing the same policy wherever hybrid and mobile staff work.

Reporting & Visibility

Ongoing reporting on blocked malware and phishing sites, VPN usage, DNS bypass attempts and shadow IT activity – visibility that would otherwise be invisible.

Ongoing Management & Support

Reflective IT manages the Umbrella platform on your behalf, reviewing reports and refining policy as part of your ongoing Secure Score updates.

Web Protection supports your Cyber Essentials and compliance obligations

Whether you're pursuing Cyber Essentials, maintaining ISO 27001, or reducing cyber insurance risk, DNS-layer security is a recognised control that auditors and insurers look for:

Firewalls & gateway protection – Umbrella extends DNS-level enforcement beyond your perimeter firewall.
Malware protection – malicious domains are blocked before a device can be infected.
Secure configuration – policy-based web filtering is enforced consistently across every device.
Strengthens internet gateway protection and secure browsing for regulated and financial services organisations.
Genuine defence-in-depth alongside Microsoft Defender, M365 Business Premium and Sentinel.
Demonstrates proactive security governance to clients, partners, and regulators.

Customer benefits

Partnering with Reflective IT for Web Protection means you benefit from:

Stops threats before they reach you

Malicious connections are blocked at the DNS layer, before a phishing site, malware host or ransomware server is ever reached.

Protects every user, everywhere

The same policy is enforced whether staff are in the office, at home, in a hotel or on client sites – on or off the corporate network.

Complements Microsoft Defender

Defender protects email, identity, endpoints and M365 data. Umbrella adds a layer focused on internet traffic, DNS requests and website access – genuine defence-in-depth.

Visibility into blocked threats & shadow IT

Reports on blocked malware and phishing sites, VPN usage, DNS bypass attempts and shadow IT activity – visibility that would otherwise be invisible.

Reduces the cost of a security incident

The cost of a phishing compromise, business email compromise or ransomware infection far outweighs the low monthly cost of DNS-layer protection.

Fully managed – zero overhead

We handle provisioning, policy configuration, roaming client rollout and ongoing reporting, so your team doesn't need to.

How it works

From review to ongoing management, we handle every stage of your Cisco Umbrella deployment, keeping you informed throughout.

Review & approve

Provision for all users

Deploy DNS policies

Ongoing reporting & reviews

Complementary services

Many businesses combine Web Protection with:

Ready to close the gap in your defences?

Get in touch with the Reflective IT team for a no-obligation conversation about deploying Cisco Umbrella across your organisation. We've been making IT effortless for businesses since 2003.

Request a Proposal

Contact us

Learn about Cyber Resilience Uplift

Learn more

Web Protection