Cisco Umbrella uses the internet infrastructure to block connections to malicious destinations before any connections to those destinations can be established.