Guide to Application Attributes in the Cisco Umbrella App Discovery report

The Application Attributes feature in the Cisco Umbrella App Discovery Report assists with risk assessment capabilities. 

Application attributes significantly broaden the contextual information delivered by Cisco Umbrella for every identified app, empowering Cisco Umbrella customers to make well-informed policy decisions that align with their needs.

With these application attributes, Cisco Umbrella admins can build additional context on newly discovered applications in their environment while significantly reducing the time to decide and block risky applications.

Using up to thirty-eight application attributes across six categories, Cisco Umbrella administrators possess an extensive array of supplementary insights about applications, complementing the existing risk classification. These insights encompass:

1. Compliance - Existence of certifications like PCI-DSS, GDPR, HIPPA, and FEDRAMP for both the vendor and the application.
2. Vulnerabilities – Known TLS/SSL vulnerabilities linked with the Application like PODDLE and BEAST.
3. Access Control - Supported Access control mechanisms like SSO and MFA.
4. Data Security – Data in-transit specifications like TLS version support, weak ciphers, and more.
5. Auditability – Auditing availability.
6. Email Authenticity – Measures to control email authenticity.
   
   

How do I determine if the attributes information is up to date?

Each application attribute has both creation and update dates to help admins determine whether the information is relevant to their decision-making.  

How do I access this feature? 

You can access the application attributes by navigating to Reporting > Core Reports > App Discovery > [Application] > Attributes.

Supporting Documentation

Cisco Umbrella SIG Guide

Cisco Umbrella DNS Guide