Cisco Umbrella is a cloud-delivered Secure Access Service Edge (SASE) solution that provides the first line of defense against internet threats. By deploying the Umbrella roaming client on corporate laptops, an organization can enforce security policies for users regardless of their location. Administrators can create and apply policies that block access to specific content categories, such as social media and personal webmail, at the DNS layer. This directly addresses the requirement to prevent remote employees from accessing non-work-related sites on company-owned devices, enforcing the policy effectively even when users are off the corporate network.

A. Cisco TrustSec: This solution provides network segmentation and access control based on user/device identity (SGTs) within the corporate network, not web content filtering for remote users.

B. RADIUS server: A RADIUS server is used for centralized Authentication, Authorization, and Accounting (AAA) services, such as for VPN or Wi-Fi access, but does not filter web content.

D. network monitoring tool: This type of tool provides visibility and analysis of network traffic. It can report on policy violations but does not actively enforce policies by blocking access.

---

1. Cisco Umbrella Documentation, "Manage Policies": "Content categories organize destinations—domains, IPs, and URLs—into categories based on the type of content they host... You can block all destinations that fall into a content category." This document explicitly details the feature used to block categories like social media. (Source: Cisco Umbrella Documentation, "Content Categories" section).

2. Cisco Press, "CCNP and CCIE Security Core SCOR 350-701 Official Cert Guide": Chapter 22, "Cisco Umbrella," states, "Cisco Umbrella provides the first line of defense against threats on the internet... It can be used to protect employees both on and off the corporate network... Umbrella allows administrators to create policies to allow or block access to specific domains or categories of domains." (ISBN: 978-0135971970, Page 785).

3. Cisco, "Cisco TrustSec Solution Design Guide": This guide describes TrustSec's function: "The Cisco TrustSec solution provides software-defined segmentation to simplify the provisioning of network access, accelerate security operations, and consistently enforce policy across the network." Its focus is on network segmentation via SGTs, not URL/content filtering. (Source: Cisco Design Zone for Campus, "Cisco TrustSec Solution Design Guide," Introduction).