Cisco Cloudlock

Cisco Cloudlock is the cloud-native Cloud Access Security Broker (CASB) and cloud cybersecurity platform that helps accelerate use of the cloud, including the apps you buy and build. Cloudlock secures your cloud users, data, and apps across Software as a Service (SaaS) and Platform as a Service (PaaS).

Cisco Cloudlock is a frictionless solution that combats cloud account compromises, data breaches, and cloud malware and actionable cybersecurity intelligence across an organization’s entire cloud infrastructure. Cloudlock orchestrates existing security investments to provide a coordinated, thorough security solution.

Cisco Cloudlock is part of Cisco Cloud Security, which includes Cisco Umbrella™ and combines to provide effective security that is simple, open, and automated. Cisco Umbrella helps to secure access to the cloud while Cisco Cloudlock helps to secure usage of the cloud. This combines both breadth and depth to provide you with the security you need, where you need it.

The core functionality of Cisco Cloudlock covers the following use cases:

·         Data Loss Prevention (DLP): Cisco Cloudlock provides DLP functionality that monitors cloud environments to detect and secure sensitive information through out-of-the-box policies as well as highly tunable custom policies. Automated response actions can remediate risk in the instance of policy violation, including, but not limited to, end-user notifications, transfer of ownership, and quarantines.

·         User and Entity Behavior Analytics (UEBA): Cisco Cloudlock provides cross-platform UEBA functionality for cloud application environments. Cisco Cloudlock leverages advanced machine learning algorithms to detect anomalies based on factors such as activities outside of whitelisted countries and actions across distances. (NOTE: Not applicable to Cisco Cloudlock CASB Security Platform for Federal.)

·         Apps Firewall: Certain Cisco Cloudlock applications enable discovery of cloud applications connected to your corporate environment via an open authorization (OAuth) connection and provide a crowd-sourced Community Trust Rating for individual applications, as well as the ability to ban or whitelist them based on risk profile and access scope, increase employee awareness with email alerts, and revoke application use in bulk across the entire user base.

·         App Discovery: App Discovery is an optional standalone service that provides visibility into cloud applications (SaaS, PaaS, IaaS) used or visited by individuals through a customer’s network (applications accessed outside of an OAuth connection) via the then-current supported data sources. App Discovery provides risk scoring leveraging Cisco Cloudlock’s research-driven Cloud App Security Index (CASI).