We're using Cisco Firepower to replace the ASAs as perimeter firewalls to the university's network. We're predominantly using Cisco Umbrella for web filtering of staff and student web traffic that is generated from the university campuses.
Network Security and Data Center Manager at a educational organization with 1,001-5,000 employees
Provides insights, protects our users, and has good value for money
Pros and Cons
- "The insight into what our users are doing via Cisco Umbrella is valuable. Knowing that we're protecting our users as they leave our network is also valuable now because we've got more hybrid working."
- "They should provide more integrations and bring things together so that there is a more standard feel to their platform. We also use Cisco ISE, and it has a very different feel from Cisco Umbrella."
What is our primary use case?
How has it helped my organization?
Cisco solutions are simple, efficient, and effective. We're definitely seeing that our users are protected by using these solutions. We're using Cisco Umbrella to protect around 1,500 staff and about 15,000 to 16,000 students. At any one time, on our campus, we could have 3,000 student endpoints protected and about 1,500 members of staff with laptops who are working hybrid since COVID. So, they're protected when they're on campus and when they're off campus. As a university in Edinburgh with three main campuses, we have two internet connections where firewalls protect us from bad stuff on the internet.
Cisco solutions have invariably saved us time. Without them, we would've had ransomware attacks and cyber attacks. So, they have helped protect us as much as they can. I don't have the metrics, but it's a university, so we're probably quite often under attack.
Our operating expenditures (OpEx) haven't really reduced. With moving to subscription-based, our OpEx has probably gone up rather than our CapEx coming down.
What is most valuable?
The insight into what our users are doing via Cisco Umbrella is valuable. Knowing that we're protecting our users as they leave our network is also valuable now because we've got more hybrid working. With Cisco Umbrella and Cisco Secure clients on all our hybrid working laptops, we know that our staff is secure even when they're working from home.
What needs improvement?
They should provide more integrations and bring things together so that there is a more standard feel to their platform. We also use Cisco ISE, and it has a very different feel from Cisco Umbrella. We also have some Meraki products which feel very different from others. It's like you have to learn something new with every product you buy.
Buyer's Guide
Cisco Umbrella
January 2026
Learn what your peers think about Cisco Umbrella. Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
879,477 professionals have used our research since 2012.
For how long have I used the solution?
We've had Cisco ASAs, but we're just in the process of replacing them with Firepower, so Firepower is quite new. We've been using Cisco Umbrella since 2020.
How are customer service and support?
We have a good Cisco partner called Ping Network Solutions in Scotland, so anytime we need to reach out for a bit of advice, we can ask them. We had good pre-sale support with Cisco as well to ensure that we get the right products that match our requirements. I'd rate their customer service a nine out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
Instead of Cisco Umbrella, we used Zscaler for web filtering, but we've always had Cisco firewalls.
When we switched in 2020, Zscaler didn't seem to be developing their product as well. It didn't match our requirements anymore.
How was the initial setup?
I was involved in its deployment although I had a technical team working underneath me. It was easier than Zscaler because Zscaler made us have two instances, one for staff and one for students. It was very complicated, and we had to route traffic in different ways. Being able to do it by DNS with Cisco Umbrella was just easy.
I managed the team that was deploying it. My role involved making decisions about what traffic and which groups of users we put through first, some early field tests, and things like that.
What about the implementation team?
We did it all by ourselves.
What was our ROI?
We have seen an ROI. With Zscaler, we had more operational issues than we've had with Cisco Umbrella.
What's my experience with pricing, setup cost, and licensing?
You get what you pay for.
What other advice do I have?
We use Cisco Firepower, and we use Cisco Umbrella. Currently, these two products are not very integrated. We don't have the complete suite of Cisco solutions. We just have two that aren't joined. We also work with other technology partners, such as Microsoft, but in terms of the perimeter of our network, it has always been a solid product like the Cisco firewall.
I'd rate Cisco Umbrella a nine out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
IT Director at a university with 10,001+ employees
Helps enable us to effectively detect and remediate threats, free up IT staff time, and improve cybersecurity resilience
Pros and Cons
- "I haven't needed to reboot the servers for years due to their excellent stability."
- "I am unsure if Cisco Umbrella offers a Windows option for running the server."
What is our primary use case?
We use Cisco Umbrella to protect our DNS queries and the traffic going out.
How has it helped my organization?
Cisco Umbrella is transparent to my users; they are unaware of its presence. The documentation they use is solely for the IT staff. It is functioning exceptionally well, to the point where I no longer require extensive documentation for its operation.
It has reduced malware and mitigated risks associated with email links and various other factors, resulting in cost savings.
Cisco Umbrella helps secure our infrastructure, enabling us to effectively detect and remediate threats. Apart from host-based firewalls or malware attempting to bypass threat detection, we currently do not have any other alternatives. Although there may be competing solutions available, we have been using Umbrella, and it has served us well.
Cisco Umbrella helps free up IT staff time indirectly by reducing the number of calls we receive regarding malware or bad calls.
Our organization improved its cybersecurity resilience by effectively blocking threats with Cisco Umbrella.
What is most valuable?
We used one feature, which is aimed at protecting our users from accessing malware-infected websites and encountering associated problems.
What needs improvement?
I am unsure if Cisco Umbrella offers a Windows option for running the server. However, since I am not familiar with Linux, I had to rely on someone else to handle that aspect. I'm not completely convinced that using Windows would be a superior solution, as Linux is generally regarded as more stable. However, it would benefit individuals like myself who are unfamiliar with Linux.
For how long have I used the solution?
I have been using Cisco Umbrella for seven years.
What do I think about the stability of the solution?
I haven't needed to reboot the servers for years due to their excellent stability.
What do I think about the scalability of the solution?
For the size we have, Cisco Umbrella has worked out really well in terms of scalability.
Which solution did I use previously and why did I switch?
The solution that was previously used was acquired by Cisco and turned into Umbrella.
What was our ROI?
I have seen a return on investment using Cisco Umbrella.
What's my experience with pricing, setup cost, and licensing?
The pricing model is easier compared to some of the other solutions, and it is also competitive.
What other advice do I have?
I rate Cisco Umbrella a nine out of ten.
I recommend that people try Cisco Umbrella because I believe it is the best option available.
I have never needed to utilize technical support because the solution has consistently functioned effectively.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Cisco Umbrella
January 2026
Learn what your peers think about Cisco Umbrella. Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
879,477 professionals have used our research since 2012.
IT Systems Engineer at a tech vendor with 501-1,000 employees
The solution is easy to use, you don't need an expert to operate it
Pros and Cons
- "The interface is well organized, so you can easily find everything. Even if you don't have much experience with Cisco, you can easily navigate the solution and find your way around. Everything has been done well, from the deployment to monitoring."
- "Cisco Umbrella hasn't integrated customized reporting yet. With Cisco Secure Endpoint Hub, I can see a report on user downloads and set it up to constantly get an email alert. Based on my understanding, Cisco Umbrella can't do that. You can set it up with third parties, but it would be better if that were built into the platform."
What is our primary use case?
Cisco Umbrella enables all of our end users to browse the internet and internal networks securely. It can block different things like sites and applications that they shouldn't access according to company policies. For example, we can block different applications or specific site categories.
We also use Cisco SecurePort and SecureX, which is a platform for integrating various Cisco products. We have already integrated Cisco Secure Endpoint and Cisco Umbrella through SecureX, which offers a single pane of glass so you can see all the problems. We have also integrated our Meraki firewalls and access points. We have 500 users, and each of them has the Umbrella agent installed. If you're working in the office, you don't need it because every computer is protected by Umbrella.
How has it helped my organization?
The main benefit of Cisco Umbrella is to prevent the end users from becoming victims of phishing attacks or malicious links in an email. It isn't necessarily about making the users more efficient or productive, but it could help with that. For example, if someone mistakenly clicks on a link and their device is infected, we may need to take it offline for a day or two in order to resolve it. We don't have these incidents, so we can ensure that users won't be affected by any malicious activities and can continue doing what they're doing without worrying about other departments getting infected.
Umbrella lets you inspect client Internet traffic as if it were flowing through a traditional data center security stack. The main thing you can do is check the destination they're trying to access, but you cannot inspect the package. You can see the URL, but you cannot fully inspect the way we're actually using it. The primary goal is to block or allow specific URLs. We don't do any inspection or use any proxy to inspect traffic.
I would say that we save money using this product because it's easy to use, so you don't need an expert to operate it. It requires some expertise, but it's simple to monitor and maintain. Also, when we want to set up offices in new areas, it's easy to integrate.
Umbrella is constantly discovering new vulnerabilities. The solution's ability to discover zero-day attacks without significant changes to the platform is crucial. For example, we prohibit certain categories of websites like gaming or gambling, and the categories are constantly updated. We don't need to update the categories to add new websites or constantly check those reports because we know that Umbrella does what it's supposed to.
What is most valuable?
The interface is well organized, so you can easily find everything. Even if you don't have much experience with Cisco, you can easily navigate the solution and find your way around. Everything has been done well, from the deployment to monitoring.
The application is really stable. We never have problems with Cisco not working for our end users. We have an internal communication hub. The office implementation is integrated with our security systems and firewalls, but we also have users worldwide working from home. Our employees are pleased with the user experience, and we've never had reports about Umbrella not working properly or being unable to access a site. It's integrated with Cisco AnyConnect, so our users can access it through a VPN solution.
Umbrella actively processes and blocks malicious DNS queries daily, which is helpful for us because we're a small team. We heavily depend on the tool to do its job properly. It works nicely out of the box. You have to do a little initial configuration, but after that, it blocks everything we want and nothing we don't. We've gotten some false positives with other products, but we've never experienced that with Cisco Umbrella.
Guest internet access is easy to configure. We set more restrictive policies for our guest users, but it hasn't been difficult to spin up consistent policies in three or four different offices. We just attached the policy that we have for guest users to a specific wireless SSID.
Umbrella combines multiple security functions into a single dashboard. If you use Cisco SecureX, there is a dashboard in Umbrella, but you have to look at different areas. In Cisco SecureWorks, you can add the tasks and dashboards you want to monitor, but Umbrella is more standardized, so you cannot make many changes. In addition to the dashboard, we have some daily reports and email alerts. It does what we want.
What needs improvement?
Cisco Umbrella hasn't integrated customized reporting yet. With Cisco Secure Endpoint Hub, I can see a report on user downloads and set it up to constantly get an email alert. Based on my understanding, Cisco Umbrella can't do that. You can set it up with third parties, but it would be better if that were built into the platform.
For how long have I used the solution?
I joined this company a year ago, but they had already been using Cisco Umbrella for more than three years.
What do I think about the stability of the solution?
I have never experienced any outages or downtime. It works all the time.
How are customer service and support?
I rate Cisco support nine out of 10. We had to open a ticket because we had some issues installing the agents, but we haven't had trouble since then. The technical team responded and fixed our issues quickly.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I used a similar SaaS solution by Palo Alto, but Cisco Umbrella seems to be quite unique because it's a DNS layer. I'm not sure if any other company is doing the same thing. We integrate Cisco Secure Endpoint and Cisco Umbrella to provide end-user detection and prevention. It does what it's supposed to do with most of a lot of admin work. It's a gateway.
How was the initial setup?
I wasn't part of the deployment, but it seems to be straightforward based on what I have seen. It requires a few adjustments to the firewalls and some integration, but it seems relatively simple. We needed to help the users working from home install the agents for Umbrella and AnyConnect, and this was also straightforward to deploy with Kandji, our MDM system.
After deployment, Umbrella doesn't require much maintenance because it's a SaaS application like Gmail. You don't have to do anything except the admin work, such as adding websites or categories. However, Umbrella uses an agent, so we need to update the engine. We can automate all these things, so the maintenance is minimal.
What was our ROI?
It's hard to quantify a return, but the cost of a malware attack or customers losing private information is potentially very high. I don't have the numbers for those things, but Cisco Umbrella helps us to avoid those issues. A breach can harm our reputation and damage the entire organization.
What's my experience with pricing, setup cost, and licensing?
Cisco Umbrella is reasonably priced for what it does. I don't have any numbers to compare it with because I don't recall what the other solutions cost.
What other advice do I have?
I rate Cisco Umbrella nine out of 10.
Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
Systems and Network Architect at a recreational facilities/services company with 1,001-5,000 employees
Prevented a countless number of attacks on our organization
Pros and Cons
- "We immediately block impersonating users from accessing services over Cisco Umbrella-controlled devices."
- "iOS devices and mobiles are huge in my environment right now, and I cannot run them on Cisco Umbrella 24/7."
What is our primary use case?
I use Cisco Umbrella mainly for content filtering. We use it to ensure that my users don't access something they shouldn't be accessing. It's just like pushing and scan prevention.
How has it helped my organization?
There are a countless number of attacks that Cisco Umbrella prevented from happening in our organization.
What is most valuable?
Suppose we see a very silly entry where a bad actor tries to impersonate a good website or service we continuously use. They buy the domain, misspell it somehow, and then inject that in a link. Suppose my email scanning tools did not detect or notice that for one reason or another, and we identified it later. We immediately block impersonating users from accessing services over Cisco Umbrella-controlled devices.
What needs improvement?
iOS devices and mobiles are huge in my environment right now, and I cannot run them on Cisco Umbrella 24/7. Each user has one desktop but three or four mobile devices on two iPads, and a phone or multiple phones and an iPad, or vice versa. I'd like to turn on my Cisco Umbrella on the network level, at least on my office premise. However, my security team would like to keep all devices on-network and off-network to be connected or managed by Cisco Umbrella all the time. So their use cases are higher and stronger than my mobile ones. Sometimes we try to work around my mobile ones with MDM, but sometimes it would be way more flexible to have both running side-by-side.
Also, in the Apple services or the Apple space, between my Cisco Umbrella and between my Apple updates, something breaks. I'm not sure if it's because of a policy that my company did before I joined them or if it's something that's happening due to a conflict in the configuration somewhere. So we always have to completely get the device or the endpoint out of any filtration to get the policies. We get everything pushed properly from Apple to the device and provision it afterward. Then we add the Cisco Umbrella roaming client to it.
For how long have I used the solution?
Cisco Umbrella has been running in my environment for about five years, and it was there even a couple of years before I joined my company.
What do I think about the stability of the solution?
We've never really seen any service outages or downtime with Cisco Umbrella. It is amazing for a product to be running such a long marathon for the amount of time that I have witnessed it.
What do I think about the scalability of the solution?
Cisco Umbrella is very flexible. Before, after, and during the years of the pandemic, my environment went up and down concerning headcount and use cases. Since Cisco Umbrella is pretty flexible, it was able to scale with us.
How are customer service and support?
On the technical side, we always get our questions answered in a reasonable turnover. There was an incident when I had two instances running, and I tried to research it first and run discovery with it. When I couldn't find the answer immediately, we called Cisco, and somebody over the phone was very helpful and told us within ten minutes that it wouldn't work for us.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup was pretty straightforward. The solution's documentation is great. My environment needed a little bit of customization to match the deployment configuration or documentation, and it worked fine.
What about the implementation team?
We implemented Cisco Umbrella through an in-house team.
What was our ROI?
We have seen a return on investment with Cisco Umbrella regarding the working hours and the ticketing. The tickets do not have to get escalated to a network engineer or to a network person to look at. They could be worked on by someone on the app on tier one or tier two before needing an escalation if it even needs it.
Which other solutions did I evaluate?
I was onboarded to an environment where Cisco Umbrella was already running. I'm sure my predecessor evaluated other products during the same time, and then they decided to start and stick with Cisco Umbrella for the past six-plus years for its efficiency.
What other advice do I have?
The security team deployed Cisco Umbrella in our organization. I deployed the solution briefly on my network infrastructure, and then we decided to switch that off because we noticed a conflict when we had it running at two different places.
I cannot really speak so much on the infrastructure because until recently, whenever we installed Cisco clients on a machine that's running a server, the machine broke. The reason for that is something that happens in the trust relationship between the server and the domain controller. We opened a support case with Cisco Umbrella, and they told us the server was not supported. Servers are not meant for browsing, and the environment that they are in should not be open to the entire world.
My network team is not that large. For content filtering, when a request comes in to unblock a website saying that it is misclassified, it's super easy to give enough access or limited access to the support desk agent or analyst that's getting your clients' calls. The turnover time is much quicker and much shorter. We do not have to deal with maintenance windows or change management times because it's easy to go to a portal or website and change it versus changing a configuration on a firewall. It helps a lot with hybrid environments, especially during the unprecedented times we had a couple of years ago when we all decided to work from home. My environment was 90% ready to work from home, and one of the reasons for that was Cisco Umbrella.
In a 2000-user environment, Cisco Umbrella has helped save at least 14 hours weekly.
Cisco Umbrella has changed the way that we have access to a tool. It helps us do content filtering. I do not need DNS servers running anymore on my network because I identify it on the Cisco Umbrella portal, and everybody gets the configuration within 30 seconds to a minute. I do not have to deal with DNS changes, especially for internal tools and websites.
Cisco Umbrella has helped our organization improve its cybersecurity resilience for the end clients by having that on-off network flexibility. I do not necessarily have everybody run on a VPN all the time.
The nearest product to Cisco Umbrella is not even comparable. Cisco Umbrella's feature richness and compatibility are becoming an industry standard. We do not ask if an environment has a DNS server running in it or not. Instead, today we ask whether that is a Cisco Umbrella environment.
Overall, I rate Cisco Umbrella ten out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
CEO at a tech services company with 11-50 employees
Integrates easily with Meraki and gives us peace of mind knowing that our traffic is secure
Pros and Cons
- "For us and for customers, it's the ease of integration with Meraki. It's just a couple of clicks. That allows us to deploy very fast, and it doesn't change the way a customer uses his service. It's just more secure."
- "For us, as an MSP, the initial licensing changes were a roadblock, and they still could be a lot clearer. Specifically, it's an honor-based licensing system. We'd like it to be more specific to our traffic or our users so that we can make sure that the customer is paying for all their licensing."
What is our primary use case?
We're an MSP. We implement it for customers, and we also use it in our organization.
How has it helped my organization?
I'm not a technical guy. From my perspective, as an executive, it gives us more peace of mind knowing that our traffic is secure. There's basically an extra layer of security for all our traffic, so our customers' data is secure, and our own data is more secure. There's just peace of mind for me.
It does a pretty good job of securing the infrastructure from end to end. We're happy with it. That's the internet gateway security that we sell. There are other competitors out there, but it's agnostic to equipment. It very easily integrates with our customer base, which is mostly Meraki. The dashboard and reporting are very easy and very transparent for our customers, so we can do a good job of explaining to them their issues, what's been mitigated, and what're the advantages. They have visibility over why they're paying for this service.
It has helped us to consolidate tools. We use most of Meraki. It's from top to bottom, so everything is in a single pane of glass.
It has definitely saved time and money. We're able to onboard a customer for a trial in minutes, so after a sales pitch call, we can onboard them the same day. That's pretty amazing.
It has improved our cybersecurity resilience to the point that we haven't had issues. In security, not having issues is very good. We're able to keep up with the threats with a partner like Cisco and make sure that the best practices are met both at the on-premise level with the firewalls and then over the cloud. When they're not in the office or when they're remotely working, everything is secure.
For our scope or type of customers, which are retail customers with many branches, as an MSP, we take care of everything related to security. It allows us to manage many customers at the same time, and it allows the customer to focus on the other aspects of their business and leave the cybersecurity and networking to us.
What is most valuable?
For us and for customers, it's the ease of integration with Meraki. It's just a couple of clicks. That allows us to deploy very fast, and it doesn't change the way a customer uses his service. It's just more secure.
What needs improvement?
For us, as an MSP, the initial licensing changes were a roadblock, and they still could be a lot clearer. Specifically, it's an honor-based licensing system. We'd like it to be more specific to our traffic or our users so that we can make sure that the customer is paying for all their licensing.
For how long have I used the solution?
We've been using Cisco Umbrella for about a year.
What do I think about the scalability of the solution?
We've implemented it for maybe a thousand users.
How are customer service and support?
That's pretty good. I'd rate them a nine out of ten. More Spanish would be better for our techs. We're based in Panama.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We've tried other products and other gateways from Fortinet and Arbor. We chose Cisco Umbrella. The most important thing for us is that we're fully Meraki stack. We have thousands of deployments of Meraki, so it's very easy for us to implement. Our customers are long-time Meraki users, so they're very comfortable with the Cisco stack.
How was the initial setup?
It's deployed on the cloud, but I wasn't involved in its deployment.
What was our ROI?
We've seen an ROI with this product.
What's my experience with pricing, setup cost, and licensing?
In terms of licensing, we're not able to be extremely clear with the customer because it's based on their reporting. It's not based on the actual traffic. If they say they have 50 users but they have 80, we'll just buy for 50 users. That's something where we'd like to have more flexibility.
What other advice do I have?
Overall, I'd rate Cisco Umbrella a nine out of ten. There's always room for improvement, but it's very good.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer. MSP/Reseller
Senior Product Manager Security B2B at a comms service provider with 1,001-5,000 employees
Video Review
Is easy to install, works seamlessly in the background, and is stable and easy to scale
Pros and Cons
- "One of the great advantages of Umbrella DNS is that it's really simple to deploy. It's easy to install, the users do not notice that it's there, and it doesn't interfere with your work. The simplicity and transparency are great advantages of Cisco Umbrella."
- "It would be good if the more complex versions of Umbrella are simplified so that we can offer them in a more standardized way. We, as a telco, do not operate the same as a traditional integration partner would, who can sell all its services. We try to have a standardized approach as much as we can so that we can sell the solution with as many services added to it as possible. If you look at the structure of businesses in Switzerland, 95% of them have 10 persons or less, and they do not have a security specialist. Therefore, the higher the automated and standardized features, the better it is for them."
What is our primary use case?
Cisco Umbrella is a first line of defense. It protects the users from going to sites that should be avoided. Cisco Umbrella also protects against malware and phishing. It's a simple and very effective product that works seamlessly in the background. It doesn't disturb you in any way unless you access a website you shouldn't. Then, it will interfere with it and stop you from going there.
What needs improvement?
It would be good if the more complex versions of Umbrella are simplified so that we can offer them in a more standardized way. We, as a telco, do not operate the same as a traditional integration partner would, who can sell all its services. We try to have a standardized approach as much as we can so that we can sell the solution with as many services added to it as possible. If you look at the structure of businesses in Switzerland, 95% of them have 10 persons or less, and they do not have a security specialist. Therefore, the higher the automated and standardized features, the better it is for them.
For how long have I used the solution?
We've been offering Umbrella for three to four years.
I've been working with Cisco's products for several years now. We in the B2B area of Sunrise work with Cisco kind of exclusively, it's really our main partner. I look after security products and Umbrella. The cloud-based security products around Umbrella have been the focus of my work.
As a reseller, the value we bring to our customers is the fact that instead of just selling them connectivity or access to the internet, we offer them a base level of security with it. I think that is highly valued by customers since security is typically a topic they struggle to deal with.
What do I think about the stability of the solution?
When it comes to the stability or performance of Umbrella, we have been very pleased. When you add security on top of unsecured transport, you may have certain delays, but our technical colleagues consider them to be not too bad. Stability has never come up in a customer context as an issue.
What do I think about the scalability of the solution?
When we look at the scalability of Umbrella, we can see the great advantage of it being a cloud-based service. Therefore, scalability is not an issue on our side. We can assume that it will always be around and that the performance will always be good.
How are customer service and support?
I've had very few interactions with Cisco support, and the ones I've had have been good. I'd give Cisco's technical support a rating of nine out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We sold a different solution previously, which provided a much simpler DNS protection. It did not have the power and is not really comparable to Umbrella. It was more of a consumer-level product that did not have much of an impact. I had it installed on my internet access at home, and it never intercepted anything I did. It's only once I installed Umbrella that I saw differences in the ways my DNS calls were intercepted. The main reason why we offer Umbrella is its business-grade security.
How was the initial setup?
One of the great advantages of Umbrella DNS is that it's really simple to deploy. It's easy to install, the users do not notice that it's there, and it doesn't interfere with your work. The simplicity and transparency are great advantages of Cisco Umbrella. Cisco could take Umbrella DNS as a good example and also improve on other products.
What's my experience with pricing, setup cost, and licensing?
Cisco solutions are generally perceived to be rather expensive. We have constant internal discussions as to whether we should offer lower-priced security solutions from some of the competitors.
What other advice do I have?
If you are looking for the first time at Umbrella, you should really understand what is behind the solution. Behind Umbrella is Cisco Talos, a research team within Cisco, which is one of the largest private ones in the world. All the input out of the activities of Talos goes into Umbrella and makes it a really valuable product.
As a service provider, we know that other service providers are using Cisco Umbrella, and that was a big factor for us in choosing it as well. Also, we had seen large telcos like TIM in Italy using it for many years and being satisfied with it.
Customers are always worried that somebody in their organization will click on something he or she should not click on. Umbrella does a good job of protecting a business from ruin in worst-case scenarios. It works in the background and is like an airbag.
I would rate Umbrella Easy Protect, which is the simplest on the Umbrella DNS side, at nine out of ten. Because Umbrella SIG is still under development and is very promising, I'd give it an eight out of ten.
Our partnership with Cisco is overall good. It has its ups and downs. Cisco is not always an easy beast to work with. Sometimes you see that traditionally they have a very strong enterprise focus, but we as a service provider have a different need than enterprises, and that sometimes has its challenges.
Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller
Principal Security Consultant at a computer software company with 51-200 employees
Video Review
Has easy single-pane-of-glass administration and is stable and scalable
Pros and Cons
- "Cisco Umbrella's integration with other solutions has been a great feature in terms of ease of administration. Administration and troubleshooting are faster. The single pane of glass is great as well. Another great feature of Cisco Umbrella is remote browser isolation. With this feature, you open a virtual browser, and it's seamless to the user. If the user ends up going to a bad website that's passed a policy and something bad tries to download, it will not download into the machine because it is a virtual window somewhere in the cloud. You are protected by this feature."
- "I would like to see more integrations with more products. Some of the integrations need to be simpler as well. For example, the integration with Cisco Secure Firewall could be simpler. It would be good to make reporting simpler. For those who don't use SecureX, it would be good to make Umbrella really simple to use upfront. It's not a difficult product, but it can be daunting for someone who isn't exposed to it because there are so many options."
What is our primary use case?
With Cisco Umbrella, our clients usually always start with simple needs such as URL filtering and move to providing a consistent experience whether the employees are at home or in the office. We also have clients with a large Cisco Meraki portfolio. Umbrella ties into Cisco Meraki. You can log into one place, configure your policies for your users when they're away from home, but then those policies can be pushed down to the Meraki deployments. So if you've got 100 branch offices, which some of our clients do, it's one click to edit a policy and have it be effective in all of the branches. It will also be effective for the home users. Through a single pane of glass, you can have a consistent policy everywhere. This comes down to the integration that Cisco has built into the different products.
What is most valuable?
Cisco Umbrella's integration with other solutions has been a great feature in terms of ease of administration. Administration and troubleshooting are faster. The single pane of glass is great as well. Another great feature of Cisco Umbrella is remote browser isolation. With this feature, you open a virtual browser, and it's seamless to the user. If the user ends up going to a bad website that's passed a policy and something bad tries to download, it will not download into the machine because it is a virtual window somewhere in the cloud. You are protected by this feature.
The integration between Cisco Secure products is a lot better now than it used to be, especially with Cisco SecureX knitting everything together. Previously, they were solutions on their own with a single dashboard, and it made troubleshooting difficult. You may have contained a threat from one place but not in another place. Cisco has worked hard over the last three or four years to allow these products to inter-operate, which makes troubleshooting and finding threats a lot faster.
The benefit we have seen from using the Cisco Secure suite is the threat response. When you have a product on its own, there might be a threat, and you can click a button, deal with it, and think it's done, but you would have to rely on someone to go and check the other products. With integration, you don't have to do that. You can log into a single dashboard like SecureX, which fits everything together. Even Umbrella ties in with Meraki, Cisco Secure Firewall, and Endpoint. Thus, you can be quite confident that if you contain the threat in one place that it's automatically contained in other places as well.
Threat hunting with Cisco Secure is easy with Cisco Threat Response and SecureX. When the suite of products are tied in with SecureX, you can then dive into one dashboard when there is an alert. With a couple of clicks, it will launch Cisco Threat Response. You will be able to stop the threat at the endpoint or firewall and also see what other devices are potentially compromised. If it's bad software, you can make sure that if it's detected again that it's never allowed into your network. The client that's compromised can be shut off completely. Before integration, you either wouldn't have been able to do that or it would've been a long-winded process. Then, the damage might have already been done because the threat response came too late. Integration has enabled faster threat responses.
What needs improvement?
I would like to see more integrations with more products. Some of the integrations need to be simpler as well. For example, the integration with Cisco Secure Firewall could be simpler.
It would be good to make reporting simpler. For those who don't use SecureX, it would be good to make Umbrella really simple to use upfront. It's not a difficult product, but it can be daunting for someone who isn't exposed to it because there are so many options.
For how long have I used the solution?
We've been using Cisco Secure products for 20 years, and we've been offering Cisco Umbrella since its inception.
We use several Cisco Secure solutions including Firewall, Analytics, Umbrella, Endpoint, and Client.
As an intermediary between Cisco and our customers, the value we add is not only the experience but also the relationships we hold within Cisco. We may know the answer to a customer's question because of our experience. If we don't, our relationship within Cisco is such that we can go straight to the person we need to ask. It shortens the process, and we can deliver the solution faster than the customer going directly to Cisco.
What do I think about the stability of the solution?
Cisco Umbrella's stability and availability have been 100% uptime since inception. This stat has never gone down.
What do I think about the scalability of the solution?
Because Umbrella is a cloud-based solution, it doesn't matter if you are putting five users through it or 5,000. All of the heavy work of processing is done on Cisco's cloud platform, and it'll always give you 100% uptime.
How was the initial setup?
Deploying Umbrella is really easy. The initial deployment can be done in one to two days. More advanced deployment including creating policies is also quick and can take a few hours to two days because it is cloud-based.
You don't always have to deploy Umbrella live straightaway. Umbrella can be deployed in monitor or audit mode so you can see what's going. You can then use the data to create the policies. That is, you can deploy it without affecting anyone initially just for the visibility and then build policies on the back of it.
Testing is easy as well, which means that you can test the data you've gathered on a small set of pilot users.
What other advice do I have?
To those thinking about Cisco Umbrella, my advice would be to take up the free trial. It takes just a few clicks to deploy it in monitor mode, and you won't be affecting live traffic or your user base. You will be able to see the level of data you get of what all your endpoints are doing.
Given where Umbrella is today and the benefits it offers, especially compared to the competition, I would rate it a nine out of ten.
Our partnership with Cisco is very positive, from our account management team to the systems and sales engineers, to TAC for support. This is because Cisco has a knack for getting us in front of the right person, which is so useful. Other vendors aren't always as good. With Cisco, if you say you need someone who's an expert in deploying Umbrella or Meraki, they'll get you that expert. And no matter what question you throw at them, they'll have the answer. If someone says they're going to get you an answer, they do. That's the power of the partnership with Cisco. They're sort of a trusted partner.
The benefits we get from partnering with Cisco are first of all access to Cisco's expertise to deploy these products. This means we get to know about the products in a bit greater detail than we would of if we weren't a partner. By knowing about the products in greater detail, we can then offer them to clients.
Being partners, you get partner benefits, discounts, and the like. But it's more the knowledge. If we know the products on a deeper level, we can offer them to a client. We can show the client the value add of Umbrella versus a competitor's product.
The benefit that Cisco gets from Vohkus being a trusted partner, is that they know when we deliver a solution, we deliver it right. We deliver it to a standard that Cisco would be happy with. Cisco benefits from this partnership as they get fewer TAC calls because if we've deployed it correctly, the customer won't have to speak with them. Equally, if we've deployed it correctly, we don't have to go speak to them, so we're cutting down on costs, but there is also the brand reputation that's being maintained. If we deployed a Cisco solution and did it badly, it'll look bad on us, but the client will think it could be the Cisco product. By us deploying it correctly with our experience and knowledge, Cisco would know that that solution's going in and the customer isn't going to think, "Oh, it's Cisco that's the problem," if something goes wrong. That brand integrity is maintained.
Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller
Is simple to administer and implement, and helps consolidate existing tools
Pros and Cons
- "The most valuable features are the dashboard, visibility, and reporting capabilities. Our customers can see how much Umbrella is protecting their organization. If you don't know what you've got, you can't protect it. With Umbrella, you get the visibility and see the protection that it's providing. We can get PDF reports on a weekly basis of any malware activities and any denial of service or command-and-control-type activities."
- "The firewall capabilities could be better. Cisco is starting to introduce some layer 7 capabilities now, but there's still some room to grow. They should continue with the development of Umbrella so that it is a full-blown cloud-managed firewall solution."
What is most valuable?
The most valuable features are the dashboard, visibility, and reporting capabilities. Our customers can see how much Umbrella is protecting their organization. If you don't know what you've got, you can't protect it. With Umbrella, we get visibility and see the protection that it's providing. We can get PDF reports on a weekly basis of any malware activities and any denial of service or command-and-control-type activities.
Cisco Umbrella is very simple to administer, and that's what our customers really like. They don't want the complexity that's normally associated with security.
Cisco Umbrella definitely reduced our clients' mean time to repair. It does what it says it does, and it does it effectively.
Cisco Talos is the secret sauce. It's the threat intelligence that feeds security solutions such as Cisco Umbrella. You can have a security solution, but if it is not backed by an organization like Talos and has not been fed, watered, and looked after, then it will be pointless.
Our clients have been able to consolidate applications and tools related to DLP, CASB, web proxy, and SSL decryption. These are natively built into the Umbrella platform. We're now on the cusp of looking at SASE and, maybe, migrating away from the traditional on-premises firewalls and merging more toward the cloud. In the future, as we start the transition to zero-trust network architecture as well as SASE it will certainly help our customers consolidate a lot of their existing tools.
What needs improvement?
The firewall capabilities could be better. Cisco is starting to introduce some layer 7 capabilities now, but there's still some room to grow. They should continue with the development of Umbrella so that it is a full-blown cloud-managed firewall solution.
For how long have I used the solution?
We've been using and selling Cisco solutions since Cisco acquired OpenDNS.
We like to use technology first ourselves. It makes it easier to talk about it and sell it. Also, it's a good reference for customers to see that we actually use it internally. Umbrella has been a fantastic solution for us and our customers.
How was the initial setup?
The initial deployment could take a couple of days depending on the deployment model. Cisco Umbrella could be up and running quickly. You can instantly point your DNS servers to use Umbrella's DNS as its recursive DNS, and immediately, you'll be protected by Umbrella. You can take it further and get more granular controls by using AD integration, which can take a little bit longer. From an engineering point of view, it's a very light touch, which is unusual for security solutions. They're normally pretty complex. Cisco Umbrella, however, is a simple but powerful solution.
Given that it's a cloud-delivered platform, Cisco takes care of the upgrades. It requires a pretty light touch in terms of maintenance.
What's my experience with pricing, setup cost, and licensing?
I think Cisco Umbrella is priced well. We have a mix of customers with different verticals such as education. We have clients in the commercial space as well. Umbrella is at a good price point for all of our customers.
What other advice do I have?
We choose to sell Cisco because it has done phenomenally well in terms of some of its acquisitions and the way they've integrated Umbrella. It could be a flagship security solution for Cisco. It's been a game-changer for us and has opened up new avenues and new revenue streams as well.
As a Cisco Secure reseller, we're able to articulate the benefits of the solution to the customer because we are a technically-led organization. We've got a lot of in-house skills within the cybersecurity space. We don't sell for the sake of selling. We want to provide the right solution, and Umbrella is absolutely the right solution as far as we're concerned. It is the leader, especially from a DNS level protection.
Cisco Umbrella is a phenomenal security solution. It's got the right balance between complexity and ease of use. Therefore, I would rate it at nine out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller
Buyer's Guide
Download our free Cisco Umbrella Report and get advice and tips from experienced pros
sharing their opinions.
Updated: January 2026
Product Categories
Domain Name System (DNS) Security Secure Web Gateways (SWG) Internet Security Cloud Access Security Brokers (CASB) Cisco Security PortfolioPopular Comparisons
Fortinet FortiGate
Cloudflare
Cisco Secure Firewall
Prisma Access by Palo Alto Networks
Cisco Identity Services Engine (ISE)
Zscaler Internet Access
Zscaler Zero Trust Exchange Platform
Cloudflare One
Netskope
Cato SASE Cloud Platform
Microsoft Defender for Cloud Apps
Cisco Secure Network Analytics
Cisco Duo
Buyer's Guide
Download our free Cisco Umbrella Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Which is the better security solution - Cisco Umbrella or Zscaler?
- Which product do you prefer: Cisco Umbrella or Palo Alto Networks DNS Security?
- Which is the better security solution - Cisco Umbrella or Microsoft Cloud App Security?
- What are the pros and cons of Cisco Umbrella vs. Zscaler SASE for a large global enterprise?
- What are the differences and similarities of Symantec Fireglass and Cisco Umbrella?
- Which solution is better: Cisco Umbrella or Palo Alto Networks DNS Security?
- When evaluating DNS Security, what aspect do you think is the most important to look for?
- Why is Domain Name System (DNS) Security important for companies?
- What DNS security tool do you recommend?
- Why is domain name system security important?


















