Umbrella's cloud-delivered firewall provides firewall services without the need to deploy, maintain and upgrade physical or virtual appliances at each site. In addition to firewall filtering based on layer 3, 4 and 7 (application visibility & control). All your internal traffic can be forwarded through IPSEC Tunnel between your edge device and cisco umbrella and apply Layer 3, 4 and 7 filtering.
Now IPS in the umbrella cloud can be deployed within the firewall policy to enforce your protection. Cisco Umbrella IPS uses the latest Snort 3 technology similar to firepower and similar system default policies such as Connectivity over Security, Balanced between Connectivity and Security.
