Which feature blocks malware, phishing, and unacceptable requests to provide faster internet access to users in SD-WAN security solutions?

SaaS usage controls typically manage access to specific SaaS applications, monitor usage, or enforce policies within those applications, rather than blocking threats like malware or phishing at the network layer.

DNS-layer enforcement (like Cisco Umbrella) operates by intercepting DNS requests and comparing them against a global threat intelligence database. If a requested domain is associated with malware, phishing, or inappropriate content, the request is blocked at the DNS level, preventing the connection from ever being established and thus protecting users and improving security with minimal latency.

A cloud-delivered firewall provides broader network security, including packet inspection and intrusion prevention, but DNS-layer enforcement specifically targets threats before they reach the firewall by blocking at the domain resolution stage, which is faster for preventing initial connections.

Correlated threat intelligence is a source of information that enhances various security features, but it is not a direct feature that performs the blocking itself.