We are using this solution for DNS filtering to try and make sure that users do not make ill-advised clicks and find themselves in harm's way. Once we started to implement it, we realized that just putting Cisco Umbrella appliances on the company's network was not good enough. The notebooks travel and the risk factor travels. We switched over and for some time now, we have deployed it predominantly on roaming clients.
Solutions Architect at Quartet Service Inc.
Effective site blocking, mature, and highly scalable
Pros and Cons
- "The most valuable feature is the ability to block users from reaching places that they should not even try to reach has been a boon."
- "One of the issues with Umbrella is as you get into endpoint detection and response, such as EDR point solutions, some of them will not integrate well with Umbrella. Sometimes when you want to use technology, such as Always On VPN, it will not work. There are some looming issues as one type of technology starts to crossover with Umbrella. That is the challenge and Umbrella should find a way to be more compatible with some of the endpoint response solutions that are coming out on the market."
What is our primary use case?
How has it helped my organization?
In the current environment, it is a good thing we had deployed the Cisco Umbrella before people started to work from home because of COVID. The risk factors went up and the amount of thoughtfulness that people put into, "Is this a real message or is this phishing?" People became lax. If we did not have this solution, the number of clients that we would be dealing with attack issues would have mushroomed to a much higher level than we had to deal with. Umbrella has been a godsend for that.
What is most valuable?
The most valuable feature is the ability to block users from reaching places that they should not even try to reach has been a boon.
Once we were given a roaming client and we did not only have Umbrella servers filtering the traffic as it left the perimeter. They were giving us what we want and did not have to worry anymore, I was happy with the solution. I view it as a mature solution that delivers what we need.
What needs improvement?
One of the issues with Umbrella is as you get into endpoint detection and response, such as EDR point solutions, some of them will not integrate well with Umbrella. Sometimes when you want to use technology, such as Always On VPN, it will not work. There are some looming issues as one type of technology starts to crossover with Umbrella. That is the challenge and Umbrella should find a way to be more compatible with some of the endpoint response solutions that are coming out on the market.
Buyer's Guide
Cisco Umbrella
March 2025

Learn what your peers think about Cisco Umbrella. Get advice and tips from experienced pros sharing their opinions. Updated: March 2025.
841,152 professionals have used our research since 2012.
For how long have I used the solution?
I have been using this solution for a long time since it was OpenDNA which was before Cisco bought it.
What do I think about the scalability of the solution?
There are no scalability problems with this solution. They do a good job of having updated servers around the world and at all hours of day.
How are customer service and support?
One of the issues with Cisco technical support is that it is all linked to them having all of the maintenance contracts always running. If you work with a customer base where not everybody always renews their subscriptions and you need to get support but you did not sell the solution, it can make reaching the support a challenge. There is no problem with the quality of the support. However, sometimes Cisco's arcane rules regarding how they register and do tracking make it difficult for a managed service provider to get the support they need.
We do not have a problem with getting support for Umbrella because we have a contract for that. It is trying to get support for all the various pieces of networking hardware that customers have not maintained properly difficult, Cisco is not easy to deal with in this regard.
How was the initial setup?
The initial setup is straightforward.
What's my experience with pricing, setup cost, and licensing?
When talking about Cisco solutions in general there pricing model is horrible. For example, you can sell a Meraki-based solution, but if the customer starts shopping around, someone is going to have access to the pricing at a level that you cannot compete because they do not have uniform pricing. Not everybody gets fair pricing. Unless you are one of the real major corporations selling the solution your ability to compete is impossible. Cisco will acknowledge the situation and assure you next time it will be in your favor but it never becomes favorable for you. Cisco is not very good in this regard. However, Umbrella is good.
What other advice do I have?
If you are not using some form of DNS filtering to guard against threats, you are not doing a good job on security in the current climate anymore.
I rate Cisco Umbrella a nine out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer: Reseller
Global Security at a manufacturing company with 501-1,000 employees
Weekly reporting, investigation, and the application management are equally great
Pros and Cons
- "The weekly reportings are great. The investigation is super and the application management is equally great."
- "The reporting could be improved by way of the information that's displayed. For example, when you pull a report, it shows an internal employee going to many websites, but you can spin that right down by saying a lot of it is being cached."
What is our primary use case?
Our primary use case is for protecting and defending against cyber-based threats. So anything on the internet emanating through DNS-type attacks and then also content filtering. It ensures that our employees are only going to know safe categories.
What is most valuable?
The weekly reportings are great. The investigation is super and the application management is equally great.
What needs improvement?
The reporting could be improved by way of the information that's displayed. For example, when you pull a report, it shows an internal employee going to many websites, but you can spin that right down by saying a lot of it is being cached. So for example, if you go to www.msn.com, that would then not only pull the MSN domain down, but it would also bring back all the ads and the adverts. It looks like you've been to 30, 40 websites when in actual fact you've only been to one. They should narrow it down.
For how long have I used the solution?
We have had Cisco Umbrella at my company for three years but I have been using it for six months.
What do I think about the stability of the solution?
The stability is great.
What do I think about the scalability of the solution?
We've got full coverage, but from an admin perspective, there are four users who use it on a daily basis.
How are customer service and technical support?
We've contacted their support once or twice and thy were great.
What's my experience with pricing, setup cost, and licensing?
It is 1,000 on a yearly basis. Everything is included in the standard license, there are no additional fees.
What other advice do I have?
It does not require maintenance. It is very light in that way.
Architecturally, for the deployment, you should consider if you want it on roaming clients or if you want it central. If people are connecting back through a VPN, it's then probably on every single client. Looking at how we're all working now with COVID, having a roaming client deployment gives you that added layer of protection because you're not dependent on the users connecting back to corporate VPN. They're always protected. Think about your deployment.
I would rate it an eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Cisco Umbrella
March 2025

Learn what your peers think about Cisco Umbrella. Get advice and tips from experienced pros sharing their opinions. Updated: March 2025.
841,152 professionals have used our research since 2012.
Network Manager at a performing arts with 501-1,000 employees
Reports provide insight into internet usage and information helpful in creating QoS rules
Pros and Cons
- "They have a wealth of articles in their knowledge base. This has given me the freedom to troubleshoot on my own time. "
- "Reports provide insight into internet usage and information helpful in creating QoS rules."
- "If the virtual appliances could also gather traffic bandwidth reports, that would be great."
What is our primary use case?
Protection and security provided by using Umbrella are the two top areas that I looked at when considering. With three campuses, Umbrella has proven itself with the detection and blocking of malware, viruses, and preventing users from visiting malicious sites. We have two Umbrella virtual appliances at each campus, with two campuses using Hyper-V, and the primary data center running VMware.
How has it helped my organization?
The reports have given us insight into what the Internet is being used for at all three campuses. They provide insight into internet usage and information helpful in creating QoS rules.
What is most valuable?
- My favorite feature is the command and control callback blocking. It provides protection from crypto attacks by blocking the connection back to the attacker's server giving an added layer of defense.
- Policies make the work easier by providing appropriate filters for locations.
- The interface is simple, easy to navigate and set up.
What needs improvement?
If the virtual appliances could also gather traffic bandwidth reports, that would be great.
For how long have I used the solution?
One to three years.
How is customer service and technical support?
The customer support is exceptional.
They have a wealth of articles in their knowledge base. This has given me the freedom to troubleshoot on my own time.
What other advice do I have?
Cisco Umbrella's interface is easy to use and the visibility of user activity is extremely useful.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Advisor at SCIS Security
Customization allows us as consultants to tune web content filtering for the SMB market.
What is most valuable?
Custom whitelist/blacklist/block page allows us as consultants to tune web content filtering for the SMB market.
How has it helped my organization?
OpenDNS supplements other security solutions to allow for blocking through DNS requests, which is common for malware to use to bypass other security mechanisms.
What needs improvement?
This product needs policy scheduling for enforcement by category. Notice in all the packages, there’s no scheduling. In the Insights or Platform package offerings, you can now essentially have multiple ‘policies’ per AD user or network group. What’s missing is that I still can’t set enforcement to block certain website use at this time of day or these days of the week. For instance, a company may allow streaming audio sites for music only for night shift workers to help them keep awake and versus dayshift workers.
For how long have I used the solution?
I have been using the web-based, small-teams edition since 2007 (nine years).
What was my experience with deployment of the solution?
We have never encountered issues with general deployment.
How are customer service and technical support?
We would rate customer service and tech support after the Cisco acquisition a 5 out of 10.
Which solution did I use previously and why did I switch?
We’ve used and deployed ZScaler, Websense, and other UTM-based blocking solutions. This product is not always the best if you need complex policy and scheduling, and other user soft-pass through authentication.
How was the initial setup?
Initial OpenDNS setup is straightforward if you have a static IP address and you apply the DNS forwarders appropriately. This is literally a five-minute-or-less change.
What about the implementation team?
We always implement for ourselves and for others in-house because of ease of use. Implementation-wise, companies should be aware that changing DNS forwarders might impact their global DNS operational needs. OpenDNS servers are also slower than something like Google DNS.
What's my experience with pricing, setup cost, and licensing?
Pricing needs to be reduced for SMB based on the blocking capabilities and the lack of other features that you just cannot do in DNS, such as authentication-based filtering.
Also, scalability-wise, the pricing is more of a challenge for enterprise-class environments because of the pricing model.
What other advice do I have?
OpenDNS is either a good complement to your existing web content filtering solution at the enterprise level, or it is a good free or easy-to-deploy alternative for home and SMB use.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Consultant at a computer software company with 1,001-5,000 employees
Can be used to provide more security when employees are working from home
Pros and Cons
- "I think recently with many people working from home, Cisco Umbrella has been very useful. For example, we can manage the device and the network when the employee is not working on the local host. Cisco Umbrella is very valuable for this kind of infrastructure."
- "I think it's a very basic solution, and because of that, Cisco Umbrella would not be a suitable solution for large companies."
What is our primary use case?
The customers that we provide this solution to are small businesses that have 10 to 25 employees.
Employees working from home normally don't have security, so through the cloud we can manage the devices, the endpoints, a mobile or notebook, etc. We can provide more security for these devices when the employee is not working on VPN, for example.
What is most valuable?
I think recently with many people working from home, Cisco Umbrella has been very useful. For example, we can manage the device and the network when the employee is not working on the local host. Cisco Umbrella is very valuable for this kind of infrastructure.
What needs improvement?
I think it's a very basic solution, and because of that, we provide it to the small business market. Cisco Umbrella would not be a suitable solution for large companies.
In the next release, integration or shoulder, for example, to a firewall on-premises using Cisco Umbrella to connect would be good. If possible, it would be good to take the weight off the shoulder of the solutions.
For how long have I used the solution?
I've been working with Cisco Umbrella for around one year.
What do I think about the stability of the solution?
Our customers have not had any problems with stability.
What do I think about the scalability of the solution?
The scalability of Cisco Umbrella is very good.
How are customer service and technical support?
When we had problems, technical support was 100% helpful, so I think it is very good.
How was the initial setup?
The initial setup is very simple. We usually have one engineer per customer for deployment and maintenance.
What other advice do I have?
I would recommend this solution to small businesses. Compared to the next-generation firewall, I think Cisco Umbrella is more basic than other solutions.
I would rate it at nine on a scale from one to ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
IT Systems Engineer at a financial services firm with 51-200 employees
Unifies our expanding environment, making troubleshooting and maintenance easier
Pros and Cons
- "The most valuable feature of this solution is its reliability."
- "Security, overall, can always be improved."
What is our primary use case?
We act as an MSP for our organization, and we use this solution as part of the service. We are the parent company and we acquire insurance agencies. Typically, these agencies have between twenty and one hundred and twenty people. We do not force them to move onto our system; However, we show them what value they will receive by us taking on their network infrastructure. This includes the firewall, switches, IP phones, email platforms, etc.
How has it helped my organization?
This solution allows us to manage our four hundred locations under the same umbrella, with the same configurations. It makes it easier to troubleshoot and provide the same solution to everyone.
What is most valuable?
The most valuable feature of this solution is its reliability.
What needs improvement?
Security, overall, can always be improved.
What do I think about the stability of the solution?
The stability is good, and we have had very few problems with the equipment. The problems that we've had have been with our carriers. I can, pretty much, put a solution in place and not even worry about it.
What do I think about the scalability of the solution?
My impression is that this solution is very scalable. It allows us to grow. We can add fifty sites per year, easily, and not really have to redesign from the ground up.
How are customer service and technical support?
When we need technical support, they're usually very responsive. I usually get a solution or an answer between thirty minutes and a couple of days, depending on what the technology is, and whether the issue is critical or not.
Which solution did I use previously and why did I switch?
The smaller sites typically use non-enterprise grade equipment, and we switched because it is easier to manage the solution, especially when it's set up to our standards.
How was the initial setup?
The initial setup can vary in complexity depending on the size of the agency, as well as other factors including what they already have in place.
What about the implementation team?
We do all of our integrations in-house.
What was our ROI?
We have most definitely seen ROI. In most cases, when we take over, we're always saving on monthly costs. The turnaround investment is usually under a year.
What's my experience with pricing, setup cost, and licensing?
There is a one-time cost of approximately $800 USD per user, and then a yearly support fee of about $50 per user. Our fees end up being about $150,000 USD per year.
Which other solutions did I evaluate?
We have one vendor, and interoperability is not an issue when we use Cisco.
What other advice do I have?
This solution had been pretty good and it fits our needs. If we have business needs change then we will look at whether the current solution can do it. If not then we have to reach out and find something else.
My advice to anybody who is researching this type of solution is to do their homework when it comes to comparing products. Compare apples to apples, and ensure feature parity. I would stress that the support organization behind the product is very important. For us, any of the other products that we've used just haven't performed up to the standards of what we are doing.
I would rate this solution a ten out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
NOC Lead at a tech services company with 11-50 employees
Protection from malware for roaming employees that comes recommended
Pros and Cons
- "Provides dependable DNS monitoring of external devices."
- "The initial setup is very easy and takes only a few minutes."
- "They need to improve analytics so they report on more of the specifics of user activity."
What is our primary use case?
I do not know what the latest version is that is currently installed, but it is cloud-based monitoring so it is one of the most recent versions.
The primary use case is for endpoint users who are not working on our office premises. They are remote employees who are roaming so they are not within our protected zone. They can be vulnerabilities if they are browsing content and there is malware included on those web sites. Umbrella allows this kind of monitoring on remote devices and we can block those sites. We can also block applications which we would like not to allow to be running in the organization.
With Umbrella our primary use is that we can monitor the endpoints for external devices. We will protect the users from malware phishing through email and the websites they are browsing. Umbrella is a solution for things like DNS (Domain Name System) protection, filtering, and security.
What is most valuable?
I think the one feature we are using that Umbrella provides that is the most valuable feature is the DNS security. It is used to watch all the traffic which we are routing through the endpoint and organization firewalls. The users and devices are diverted by our secure gateway which scans each and every DNS request. It notifies us if it is not safe and allows those that are. It is like an alarm center application near our firewall.
What needs improvement?
In the way we are using the solution it would be good for us if they would do some simplification of the analytics. They need to improve this feature so they have analytics to show the content of the user activity. I would like there to be some more analytics provided so that we can see the application routing and additional specific information. Those kinds of analytics can prove to be helpful in our security efforts. For me, this is the only thing that could be improved in Cisco Umbrella. They already have so many features that it is hard to imagine what else they can add.
For how long have I used the solution?
I have been using Cisco Umbrella for two years.
What do I think about the stability of the solution?
Ever since we started using this product last year, it has been stable. If any service is down, we can see on the dashboard whether all of the resources are online or not. If something is down because we are working on it for some reason, something could happen then. But in two years, I did not find any issues due to the product becoming unstable on its own.
What do I think about the scalability of the solution?
Right now, we are working as a startup and we have 13 members of the team who are using the Cisco Umbrella. They are using it directly during business hours with configurations and analysis and other maintenance and access. It is the product's job to watch all the traffic routing to data points throughout the nine hours as it is routed to pass through the Cisco Umbrella.
But whenever other users are trying to access the network — even in the non-business hours — if they are using their office laptop, all the traffic will be routed through DNS security. Umbrella is protection for the company devices from websites that may do something like data attacks on remote laptops. It handles all of these requests no matter how many concurrent users we have.
We will be adding DNS to all the endpoints. For this, we will update the Cisco Umbrella DNS software for all our data points to watch all the traffic that is going through the EndPoints. It seems it will be very scalable.
How are customer service and technical support?
I have not contacted the technical support, but I had a discussion with the sales and diagnostic people. The technical issues are mostly something I resolve on my own by looking at the documentation. But once, when I wanted to implement some tool for a new solution, I contacted the sales team and they asked me some questions about what exactly it was that I wanted to accomplish. After I answered the questions in the meeting with them, we came up with the solution and the process and put it to work. So the sales team knows the product well.
Which solution did I use previously and why did I switch?
Previously, in another organization, we used OpenDNS. That product was purchased by Cisco to be used as their product under the name of Umbrella. So I did not switch the product really, but the name and my company have changed.
How was the initial setup?
The initial setup is a simple process. If you build on-premises, the deployment will take half-an-hour. If you build on the cloud it is like 10 minutes. it could be even less than 10 minutes. It is really fast. It will take five minutes to sync to the endpoint, to the cloud, and to collect the data. The syncing is what takes the time.
I have gone through the documents for Cisco Umbrella. So I have been deploying the product myself without the help of a technician and we are doing the implementation on our own.
What about the implementation team?
The only maintenance we do is we need to update the latest version through our version management software. We just update the agents on the endpoints.
What's my experience with pricing, setup cost, and licensing?
Because it is a cloud product, Cisco uses subscription models for the pricing. There are three subscription plans for Umbrella. They have a standard plan and also an enterprise plan and another one. The different plans cover different features and options for different sized organizations. It gives you the option to compare the subscription plans and get the coverage that you need.
What other advice do I have?
My only real advice to people considering Umbrella is that I can recommend this solution. On a scale from one to ten where one is the worst and ten is the best, I can rate Cisco Umbrella as a nine-out-of-ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Engineering Director at a tech services company with 51-200 employees
Blocks internet access and restricts students from downloading content from malicious websites
Pros and Cons
- "Cisco Umbrella is easy to monitor, manage, and deploy."
- "The solution is very expensive in Brazil."
What is our primary use case?
We use Cisco Umbrella to block student access to pornographic and non-education websites. I also use the solution to block access and restrict student permission to download from malicious websites.
What is most valuable?
Cisco Umbrella is easy to monitor, manage, and deploy.
What needs improvement?
The solution is very expensive in Brazil.
For how long have I used the solution?
I have been using Cisco Umbrella for five to six years.
How was the initial setup?
The solution’s initial setup is easy.
What other advice do I have?
We have different profiles for students and tutors for internet access. Students cannot access applications like Instagram and WhatsApp, but tutors are permitted to access these applications. We use Cisco Umbrella for access security, and I don't use another layer of security.
Overall, I rate the solution a nine out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner

Buyer's Guide
Download our free Cisco Umbrella Report and get advice and tips from experienced pros
sharing their opinions.
Updated: March 2025
Product Categories
Domain Name System (DNS) Security Secure Web Gateways (SWG) Internet Security Cloud Access Security Brokers (CASB) Secure Access Service Edge (SASE) Cisco Security PortfolioPopular Comparisons
Infoblox Advanced DNS Protection
Palo Alto Networks DNS Security
TitanHQ WebTitan
Infoblox BloxOne Threat Defense
Akamai Edge DNS
F5 BIG-IP DNS
EfficientIP DNS Guardian
Heimdal Endpoint Security
DNSFilter
Akamai Secure Internet Access Enterprise
BlueCat Edge
Webroot DNS Protection
EfficientIP DNS Firewall
EfficientIP DNS Blast
Cisco OpenDNS
Buyer's Guide
Download our free Cisco Umbrella Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Which is the better security solution - Cisco Umbrella or Zscaler?
- Which is the better security solution - Cisco Umbrella or Microsoft Cloud App Security?
- What are the pros and cons of Cisco Umbrella vs. Zscaler SASE for a large global enterprise?
- What are the differences and similarities of Symantec Fireglass and Cisco Umbrella?
- Which product do you prefer: Cisco Umbrella or Palo Alto Networks DNS Security?
- Which solution is better: Cisco Umbrella or Palo Alto Networks DNS Security?
- When evaluating DNS Security, what aspect do you think is the most important to look for?
- Why is Domain Name System (DNS) Security important for companies?
- What DNS security tool do you recommend?
- Why is domain name system security important?
Is it possible to have your own white or black list of URLs? What about the maintenance process of those lists?