The Cisco Umbrella roaming client is a cloud-delivered security service for Cisco’s next-generation
firewall that protects employees when they are off the VPN. No additional agents are required.
Simply enable the Umbrella functionality in the Cisco AnyConnect client. One of the advantages of
the Umbrella roaming client is that it provides visibility into IP-based threats by tunneling suspicious
IP connections to the Umbrella cloud for inspection and blocking. This way, the roaming client can
prevent malware, phishing, and command-and-control callbacks from reaching malicious domains
and IPs, regardless of the port or protocol. The Umbrella roaming client also provides DNS-layer
security when the VPN is off, and proactive blocking of emerging threats using real-time data
analysis. Reference:
Cisco Umbrella Roaming
3 Benefits of Using Roaming Client with Cisco Umbrella
Secure remote workers with the Cisco Umbrella roaming client
Implementing and Operating Cisco Security Core Technologies (SCOR) v1.0 (Module 5.1.1)