Which endpoint solution protects a user from a phishing attack?

Cisco Identity Services Engine (ISE) is primarily a network access control solution and does not directly protect individual endpoints from phishing attacks by blocking malicious URLs.

The Cisco AnyConnect with ISE Posture module assesses an endpoint's security compliance for network access but does not provide active protection against phishing attempts by blocking malicious domains.

The Cisco AnyConnect with Network Access Manager module manages wired and wireless network connectivity for endpoints but does not offer specific protection against phishing attacks through URL blocking.

Cisco AnyConnect with the Umbrella Roaming Security module extends Cisco Umbrella's DNS-layer security directly to endpoints, regardless of whether they are on or off the corporate network. This module effectively intercepts DNS requests and blocks access to known malicious domains, including those used in phishing attacks, thereby preventing users from reaching harmful phishing sites and protecting them at the endpoint.