The Cisco Umbrella roaming client is a cloud-delivered security service for Cisco's next-generation firewall that protects employees when they are off the VPN. No additional agents are required. Simply enable the Umbrella functionality in the Cisco AnyConnect client. One of the advantages of the Umbrella roaming client is that it provides visibility into IP-based threats by tunneling suspicious IP connections to the Umbrella cloud for inspection and blocking. This way, the roaming client can prevent malware, phishing, and command-and- control callbacks from reaching malicious domains and IPs, regardless of the port or protocol. The Umbrella roaming client also provides DNS-layer security when the VPN is off, and proactive blocking of emerging threats using real-time data analysis. References:
* Cisco Umbrella Roaming
* 3 Benefits of Using Roaming Client with Cisco Umbrella
* Secure remote workers with the Cisco Umbrella roaming client
* Implementing and Operating Cisco Security Core Technologies (SCOR) v1.0 (Module 5.1.1)