Try our new research platform with insights from 80,000+ expert users
reviewer2143209 - PeerSpot reviewer
Solutions Architect at a mining and metals company with 1,001-5,000 employees
Video Review
Real User
Top 10
Gives a single pane of glass, protects our users anywhere, and saves time
Pros and Cons
  • "The agent that gets installed on the endpoints or on people's laptops and devices is a Cisco AnyConnect Umbrella module. It's one of the most impressive things because you are able to protect your users anywhere they are."
  • "Its reliability and the response time of the support team can be better."

What is our primary use case?

I am a Solutions Architect in a mining company, and the size of the company is around five to 10,000 employees.

We wanted to replace an existing solution and give a better experience to our users, and we wanted to have a superior solution that could give us insights into how secure our users are and what their browsing behaviors are to track down and narrow down issues. Of course, the first and foremost use case is protecting our users. Cisco Umbrella gave us all those things in one and having it integrated into our environment was a very seamless process, and we're very happy using it right now.

How has it helped my organization?

It gives you a single pane of glass to see what's going on with your environment and your DNS queries. It has consolidated a lot of previous efforts into the visibility of what's going on.

It saves time. You're protecting your users in a manner that you don't need to do anything after. If, for example, somebody tries to open a malicious website or tries to download something, it just won't allow that. That's it. Previously, there were loopholes and ways for users to get around the proxy, which gives you more work. In that sense, we're saving the support team's time. When you're investigating a problem, it quickly gives you insights into what you're looking for as simple as possible. You can see when a user was accessing a website, was it blocked or was it allowed? Of course, you could test connectivity for specific users and computers. That saves time in troubleshooting. It saves hours per week in comparison to the previous solution. 

What is most valuable?

The agent that gets installed on the endpoints or on people's laptops and devices is a Cisco AnyConnect Umbrella module. It's one of the most impressive things because you are able to protect your users anywhere they are.

What needs improvement?

Its reliability and the response time of the support team can be better. 

In terms of features, I know Cisco Umbrella has a lot of potential, and I'm not sure if we're using it to its full potential. I'm not aware of all the functionality, and for the functionality for which we're using it, it has been great. There probably is one place for improvement. We'll love to see any new features, new functionalities, and maybe better integration with other cloud platforms, but for us, it's good as it's now.

Buyer's Guide
Cisco Umbrella
January 2025
Learn what your peers think about Cisco Umbrella. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.
825,661 professionals have used our research since 2012.

For how long have I used the solution?

We've been using Cisco Umbrella for around four and a half years.

What do I think about the stability of the solution?

In terms of availability, we've seen it down a couple of times. It has become very stable recently, but we've seen it down. Maybe that's one area that they can improve on. It was not for a long time, but it caused a little panic among our users.

What do I think about the scalability of the solution?

Scalability is happening with ease with Cisco Umbrella because you're either deploying another appliance in your branch office or another office, or you're pointing the endpoints to the existing appliances in your head office or any other place, and you're good to go. It's very scalable and easy to use, and you can have a new office ready in a day or less.

How are customer service and support?

It's great. We've had some cases and issues, but they were resolved quickly and in a timely manner, and we're happy with it. I'd rate them an eight out of ten. They could be a little quicker, but technically, they're great.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

The previous solution was a proxy solution. I'd not state the name of the solution, but it was a proxy solution. It was heavy. It was slow, and there was no easy way for tracking old things. And of course, you can't protect your users outside of the company environment.

How was the initial setup?

I found it easy to implement. Cisco Umbrella has great documentation and great support teams, and implementing it was very easy for us. We just deployed the appliances, and we got through the initial basic policies. We were prepared to do it, so for us, it was very easy.

What about the implementation team?

We did it ourselves. The documentation was good. We're experienced architects and network-oriented guys, so for us, it was just a great experience doing it.

What was our ROI?

The return on investment is in terms of time savings. It saves time and helps focus on other important things instead of digging into problems with users.

Which other solutions did I evaluate?

Because we're mostly Cisco-oriented, the solution was obvious. It was already integrated with all of our equipment. We already had Cisco AnyConnect, so it was just a matter of adding the module to it. We're Cisco-oriented, and that was just an obvious choice.

What other advice do I have?

Do your math and check the competitors, but in the end, you won't find a much better solution that's already integrated with your Cisco environment. If you are a Cisco company, that's the way to go.

I'd rate Cisco Umbrella an eight out of ten. 

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Network and security architect at Airbus Group
Real User
Good visibility, good support, and simple to deploy
Pros and Cons
  • "We can have a full overview and a quick overview of all the DNS requests. For us, it's quite important."
  • "They can maybe simplify the configuration. For example, sometimes, the proxy part is quite difficult, and that's why we didn't deploy that."

What is our primary use case?

It's for the VPN nomad connection. We capture all the DNS requests, log them, and check them in case of troubleshooting for security or malware issues.

How has it helped my organization?

Through Cisco Umbrella, we managed to deploy our M365 system and our connection. It was very good for deploying access to those cloud systems. It was a very important requirement to check all the connections from outside when the laptops are remote, and we managed to capture all the DNS requests. It was a security requirement.

It hasn't saved us time, but we managed to deploy the connectivity to the cloud system such as Azure or M365.

What is most valuable?

We can have a full overview and a quick overview of all the DNS requests. For us, it's quite important.

What needs improvement?

Cisco Umbrella is a good solution. It meets all of our needs. They can maybe simplify the configuration. For example, sometimes, the proxy part is quite difficult, and that's why we didn't deploy that.

For how long have I used the solution?

We've been using it for two years.

What do I think about the stability of the solution?

We have no issues at the moment. It has been two years, and we did not have any issues. So, for us, it's quite good.

What do I think about the scalability of the solution?

We have about 6,000 devices. So, I have no problem with scalability.

How are customer service and support?

Their support is very good. We have a lot of feedback from our partners and our Cisco contacts. They get in touch to be sure that we are using the product correctly and whether we have any questions. I have had no problem with them. It's super good. I'd rate them a ten out of ten.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

We didn't use any other solution previously. It's the first time we are using such a solution.

How was the initial setup?

We were already using Cisco AnyConnect, and for us, it was a simple plugin. We didn't spend much time. We did some tests. We worked with a local French team, and after that, we deployed it. For us, it was very simple to deploy.

What about the implementation team?

We deployed it ourselves with the help of a partner in France. The partner company is called Nomios, and we had a good experience with them. They know a lot of Cisco products, which is very good. They are into security and network architecture.

What was our ROI?

We haven't yet seen an ROI.

What's my experience with pricing, setup cost, and licensing?

Its price for us is quite expensive because it's a subscription, and we just use it for the DNS log. So, for us, it's quite expensive.

Which other solutions did I evaluate?

We didn't evaluate any other solution. We went for Cisco Umbrella because we already had Cisco AnyConnect. We just used the plugin, and it was very simple for us to deploy it.

What other advice do I have?

I'd rate Cisco Umbrella an eight out of ten. For me, it's quite a good product. 

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Buyer's Guide
Cisco Umbrella
January 2025
Learn what your peers think about Cisco Umbrella. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.
825,661 professionals have used our research since 2012.
reviewer1895550 - PeerSpot reviewer
Senior Network Engineer at a educational organization with 1,001-5,000 employees
Real User
We feel more confident knowing that we can block phishing attempts or any type of malware that is DNS-related
Pros and Cons
  • "It has improved our organization from a security posture perspective. We feel more confident now knowing that we can block phishing attempts or any type of malware that is DNS-related. This is a very nice feature that provides peace of mind."
  • "We would like them to add more features to Cisco Umbrella."

What is our primary use case?

We use Cisco Umbrella for DNS security. We also have the roaming clients deployed on user laptops.

We use it for roaming clients. We also push all our DNS traffic to Umbrella. We do not allow any other DNS traffic. That is kind of how we have fully implemented Umbrella.

We were looking to bridge the gap for DNS security, especially for mobile clients. We wanted to be able to put that roaming client on their PCs and kind of bring that together.

How has it helped my organization?

It has improved our organization from a security posture perspective. We feel more confident now knowing that we can block phishing attempts or any type of malware that is DNS-related. This is a very nice feature that provides peace of mind.

Umbrella has absolutely helped us remediate threats more quickly. In fact, it has blocked a lot of threats that may have been able to go through in some instances. Knowing that they are blocking it and being able to find the PC that potentially has the threat on it, that has been very beneficial.

Umbrella has been very good for employee morale. It makes our job a little bit easier.

Cybersecurity resilience is very important for our organization right now. Umbrella does a good job of blocking ransomware, malware, bad threat actors, and phishing attempts.

What is most valuable?

Being able to control policy sets has been a very nice feature. Being able to have appliances that are separate, where we can send DNS traffic, has been very beneficial as well.

It is a good product for helping workers feel safe, secure, supported, and included. Having the roaming client is probably one of the key factors in being able to do that.

Cisco Umbrella provides single-pane-of-glass management, which is pretty important for my organization. We have a lot of products, including security products, that we manage. Being able to see a lot of those data sets in a single pane of glass is very beneficial for my team. We enjoy having it. It is very easy to use.

It is not very difficult to maintain network connectivity. 

What needs improvement?

We would like them to add more features to Cisco Umbrella.

For how long have I used the solution?

We have been using Umbrella for about four years.

What do I think about the stability of the solution?

Stability has been great. Obviously, there have been some hiccups here and there on the connectivity side. That is out of our control, but it is understandable, as things are in the cloud. I have had more issues with Amazon than I have had issues with Umbrella, where I have had a very good experience.

What do I think about the scalability of the solution?

It is very scalable. If I had more sites, all I would have to do is deploy more VMs and point traffic that way, which is very nice.

We are using roaming clients. We are also using the DNS appliances that we have deployed. I have over 15,000 users and 10 locations. We have deployed each appliance at every location, and then point traffic to that. There are 20 different servers that we are using for Umbrella.

How are customer service and support?

The technical support has been very good. I have not had to open many tickets. I have only opened two in the five years that we have had it. Those two times, the support was very nice and supportive. I would rate them as 10 out of 10.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

We have actually been using Umbrella since it came out. Previously, we just ran our own DNS. From a security product perspective, Umbrella has been the only DNS solution that we've used.

How was the initial setup?

The initial setup is very straightforward. There is a lot of documentation available.

What about the implementation team?

It was deployed in-house.

What was our ROI?

We have seen ROI. We can show our leadership that we are blocking and preventing things from coming into our network. Not only that, but from a threat perspective, if any of those things were able to infiltrate, then possibly the remediation damages would be way more than the cost that I am paying for Umbrella today.

What's my experience with pricing, setup cost, and licensing?

As an educational partner, we get better licensing structures. We are very happy with that. It has been very nice that Cisco has partnered with the educational sector to bring that. 

What other advice do I have?

Look for all the gaps that you have in your network, then try to find a product that is more rounded to essentially fill those gaps.

I would rate Umbrella as 10 out of 10.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Chief Technologies Officer at Astorg Partners
Real User
Top 5
A highly stable solution that can be used for DNS filtering and as a secure gateway
Pros and Cons
  • "We use Cisco Umbrella for DNS filtering and as a secure gateway."
  • "I would like to have more applications being recorded."

What is most valuable?

We use Cisco Umbrella for DNS filtering and as a secure gateway.

What needs improvement?

Users need to have a bit of understanding regarding setting policies in Cisco Umbrella. I would like to have more applications being recorded. If you want to do things the right way in the console, functions have to be more automated in terms of classification, application, and recording.

For how long have I used the solution?

I have been using Cisco Umbrella for three years.

What do I think about the stability of the solution?

I rate the solution a nine out of ten for stability.

What do I think about the scalability of the solution?

Around 170 users are using Cisco Umbrella in our organization.

I rate the solution an eight out of ten for scalability.

How are customer service and support?

The solution should provide more helpful technical support to help us understand some settings.

How would you rate customer service and support?

Neutral

How was the initial setup?

The solution’s initial setup is straightforward.

On a scale from one to ten, where one is difficult and ten is easy, I rate the solution's initial setup a seven out of ten.

What about the implementation team?

A basic setting can be done in minutes. If you want to go deep, it would take several hours. The solution's deployment time depends on how deep you want to go.

What's my experience with pricing, setup cost, and licensing?

The solution’s pricing is reasonable.

What other advice do I have?

Cisco Umbrella filters more traffic and gives us insights into what's being accessed. Cisco Umbrella is useful for protecting endpoints and internet access. Cisco Umbrella is deployed on the cloud in our organization.

Cisco Umbrella is detecting threats more often because we've set it up more effectively than the other security solutions we have in place. It's catching threats in the first place because it's more strict.

We're using the Meraki firewall. Some Cisco Umbrella settings are directly linked to the Meraki console, which was quite easy for us.

Cisco Umbrella is very efficient and needs to be deployed on all endpoints. The solution requires some settings. Depending on how much you set it up, you should check its usage because it would require some day-to-day administration.

Overall, I rate Cisco Umbrella an eight out of ten.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Walter Poole - PeerSpot reviewer
IT Manager at Infinite Energy Center
Real User
Allows us to see threats in real time and be more proactive
Pros and Cons
  • "If it didn't have a single pane of glass, we would not be using it. The single pane of glass gives you a one-stop shop. It's like going to Home Depot. You find all your stuff there. You can see all your threats and your endpoints. It's a very important feature and makes things very simple."

    What is our primary use case?

    In general, we use it for the security of our network.

    How has it helped my organization?

    We wanted to get an idea of what's happening outside of our network and what's coming to our network. We had no way to know before and we were just sitting there waiting for something to happen. At least now we can be proactive.

    It has helped us to be more secure. Cisco Umbrella allows us to see threats in real time. We can also see if there are any bad actors inside of our network who are trying to do malicious things. It gives us a quick glance at the situation, at where we are and how vulnerable we are.

    Another definite benefit is that it has helped us to remediate threats more quickly.

    What is most valuable?

    It's very important that the solution helps support hybrid work. In the past, we might have had one or two people who were working from home because of illness or pregnancy. Now, with 60 percent of our people working from home, Cisco Umbrella has really helped us out with threats that they might not even know exist on their side. We can monitor them and be proactive about them.

    Also, if it didn't have a single pane of glass, we would not be using it. The single pane of glass gives you a one-stop shop. It's like going to Home Depot. You find all your stuff there. You can see all your threats and your endpoints. It's a very important feature and makes things very simple.

    Another point is that it's very easy to maintain network connectivity.

    For how long have I used the solution?

    I have been using Cisco Umbrella for about eight years.

    What do I think about the stability of the solution?

    The stability of Cisco Umbrella is very good.

    What do I think about the scalability of the solution?

    I haven't had to scale it, but I would assume the scalability would be good.

    How are customer service and support?

    We haven't contacted them from the time we were up and running.

    Which solution did I use previously and why did I switch?

    We did not have a previous solution.

    How was the initial setup?

    The deployment was straightforward.

    What about the implementation team?

    I used an integrator, Harness LLC, and the experience with them was all good.

    What was our ROI?

    Our ROI is due to the level of threats that we don't have to deal with, threats that are being blocked by Cisco Umbrella.

    What's my experience with pricing, setup cost, and licensing?

    There is room for improvement when it comes to the cost.

    Which other solutions did I evaluate?

    We looked at Trend Micro, but that was several years ago.

    What other advice do I have?

    Look for programs that have a track record and that are proven. No matter what any individual might say, that person can't do it by themselves. They have to have support, and Cisco Umbrella is a good support.

    Resilience in cyber security is like raising kids. You really can't stop. You have to be resilient continually. Every day is a different challenge. Just because you're good on Tuesday doesn't mean you're going to be good on Wednesday.
    Cyber security resilience has been key for us, with people going home to work or to other places to do their jobs. That resilience keeps them working and keeps our network safe.

    I love it. It's almost like trying to look at WiFi. You can't see the WiFi signal with your naked eye. It's the same with threats. You can't see them by just walking around the building. With a tool like Cisco Umbrella, you can see what you have and how to fix it.

    For our employees, it means that their systems are working. They have no idea what we're doing behind the scenes to keep their systems working, unfortunately. I wish I could say, "Hey, guys, today Cisco Umbrella stopped 84 threats."

    Which deployment model are you using for this solution?

    Private Cloud
    Disclosure: I am a real user, and this review is based on my own experience and opinions.
    PeerSpot user
    Tim Woodhouse - PeerSpot reviewer
    IT Operations Manager at a manufacturing company with 201-500 employees
    Real User
    Easy to install, doesn't use too many resources, and is highly effective for adding another layer of security around your company
    Pros and Cons
    • "I was able to implement it myself. It was really easy to install. You could install it on a server locally if you want to. If you have the biggest site, you would do that, but for my site, it was just directing all the traffic out through the Cisco Umbrella DNS. It was really handy. When the owners of the company went overseas, I knew that they would be secure because even if they were not on the company network, they would still go through the Cisco Umbrella servers. It was a complete solution for protecting the company with outgoing data."
    • "It had the ability to do a lot of app control. So, every single app that went through that portal was registered, but there is a general issue with the whole app control. As soon as you add a mobile phone to your network, all of the apps get registered through the system, and you can approve, reject, or just let them go through. When I looked at it, it was impossible to manage app control. There was just so much data. I didn't apply that service because I just didn't have the time to manage it. It would be good if there was a way to categorize applications."

    What is our primary use case?

    I had implemented Cisco Umbrella at a previous company. I'm now working at another company where I'm not using this solution. We've got another solution here.

    The policy of the company was to make sure all outgoing traffic was sent through a filtering service, and OpenDNS, and then Cisco Umbrella, was chosen for that purpose. Once it was taken over by Cisco Umbrella, it had far more capacity and far more functionality written into it. 

    In terms of the deployment model, I just used Cisco services. It would be through Cisco's private cloud. My site wasn't big enough. So, I didn't deploy the Cisco service on-premises. 

    How has it helped my organization?

    It was really valuable to me in protecting the outgoing data of the company. It was good for reporting. Every computer had the Cisco Umbrella program installed. So, I had good reporting on any issues related to outgoing data, such as whether there were any phishing or dodgy sites connected. It protected that part of the business.

    A combination of Cisco ASA, Cisco Umbrella, and Cisco AMP connecting to the SecureX portal gave me all-around security for the site because they all reported into a central reporting server. If there were any issues, I could have got full details, even if a crypto locker attempt was made. I never had any security incidents that I'm aware of. So, it was a very effective tool.

    It kept itself updated. So, I didn't have to worry about continuing to push out new installs of the program.

    I felt safe, supported, and secure, and so did the owner of the company. It worked silently in the background, and no one else really knew it was working on their computers. When we went into lockdown with COVID, I was happy knowing that all the computers that left the business had the app installed and were going to be functioning securely. We got no viruses and no issues on any computer on the network, which is quite unusual. A lot of other people or a lot of other companies I spoke to reported that they had quite a few issues.

    It worked 100% in terms of applying and maintaining network connectivity consistently across all workplaces. We never had any issues. The only issues we had were when sites might have been blocked because they were suspected of being within a filtering group. It would report back to the user and say, "This site is currently blocked by your administrator. Please click this button. An email will be sent to your administrator, and they can resolve the issue." I would then get the email, and I'd look at the site, and then I'd release it through whitelisting. It was very user-friendly in that regard.

    It certainly helped to remediate threats more quickly because I was able to stay free of any virus outbreaks. It definitely locks out that part of the transmission where the virus will go out and attempt to download a package.

    It worked silently and didn't use too many computer resources. It was really silent in its operation on the network. It had a really good impact on me. I'd love to put it in my new company, but we've gone down a different pathway. That's being resolved through Office 365 now, and I'm not proposing to change that technology.

    What is most valuable?

    I wanted to ensure that all outgoing traffic went through Cisco AMP servers. So, if we did get a crypto locking incident or any malicious sites that wanted to direct traffic to particular websites, they would be unable to do that because they would be blocked by the Cisco Umbrella DNS servers.

    It also did website filtering for preventing access to porn sites and gambling sites. It had all other standard features. It had a good section where you could whitelist and blacklist websites.

    I was able to implement it myself. It was really easy to install. You could install it on a server locally if you want to. If you have the biggest site, you would do that, but for my site, it was just directing all the traffic out through the Cisco Umbrella DNS. It was really handy. When the owners of the company went overseas, I knew that they would be secure because even if they were not on the company network, they would still go through the Cisco Umbrella servers. It was a complete solution for protecting the company with outgoing data.

    The other useful feature was that if we were to get a malicious actor onto a server or service running somewhere, it would still have to go out through the Umbrella servers. So, it would more likely be blocked through there. It had multiple features that were super handy.

    What needs improvement?

    It had the ability to do a lot of app control. So, every single app that went through that portal was registered, but there is a general issue with the whole app control. As soon as you add a mobile phone to your network, all of the apps get registered through the system, and you can approve, reject, or just let them go through. When I looked at it, it was impossible to manage app control. There was just so much data. I didn't apply that service because I just didn't have the time to manage it. It would be good if there was a way to categorize applications. However, that's dangerous too because you can be turning off an app in a group because you don't know what it is doing. It could be a vital company app. So, App control is the main area in which they need to keep working.

    For how long have I used the solution?

    Originally, Cisco Umbrella was called OpenDNS. I have used OpenDNS and Cisco Umbrella for about six years.

    What do I think about the stability of the solution?

    It is very stable. I never had any issue with it.

    What do I think about the scalability of the solution?

    It is highly scalable. You don't even have to install it on your computers. You just change your DNS, and it'll start to work internally immediately. I never had any issues with performance or anything like that. I'm sure it would suit larger companies as well, but larger companies would install their own Umbrella service on their own systems and deal with the capacity that way. So, it is very scalable.

    How are customer service and support?

    Their support is good. They always got back to me and answered issues. They showed me how to do my own debugging. They were always very professional and helpful. I would rate them a 10 out of 10.

    How would you rate customer service and support?

    Positive

    Which solution did I use previously and why did I switch?

    We previously used proxy servers, but I wanted a more modern interface, and that's why I chose Umbrella.

    How was the initial setup?

    It was super easy. I'm a general IT person, and I was able to deploy it. I read the documentation, changed some settings, changed the DNS on my servers, and then rolled it out to the team. It was a pain-free implementation.

    What about the implementation team?

    I deployed it. It was pretty intuitive. I didn't have a consultant help me. I was able to implement the solution myself and manage it myself. That's a really good rating for an application. There are different systems you get to manage these days, and you can't have training on all of them. Because I rolled it out, I knew I rolled it out properly, and the system was working effectively. It was good. I liked using it.

    What was our ROI?

    The return on investment was that we kept the company secure. Nothing happened, which is the ultimate return on investment.

    What's my experience with pricing, setup cost, and licensing?

    It was a little bit expensive on a per seat basis, but the company I was running was only a midsize Australian company, and it was a reasonable budget per computer for that system.

    It started off being a free product, and then Cisco bought it, and it went to a reasonable price. I was using Cisco AMP as well. So, my per computer cost was reasonably high, but for a small company, it was within an acceptable level.

    Not having reviewed other systems, I can't tell how they compare, but I know that when you do special security licensing with Microsoft, it is on par. So, it is probably standard within the industry.

    Which other solutions did I evaluate?

    At the time, we were using OpenDNS, and then OpenDNS went to Cisco Umbrella. Because we'd had such success with OpenDNS, we just stayed on with the product. So, I didn't evaluate any other products at that time.

    What other advice do I have?

    It is just another layer that you need to wrap around your company to keep it safe unless you could just shut off that possible attack vector from external parties.

    To leaders who want to build more resilience within their organization, I would say that they've got to keep doing it, and they've got to keep working on it. I'm constantly looking for better ways to secure the company. Cisco Umbrella would be a very useful addition to their set of tools. 

    A part of my plan in the long term was to implement the full suite. I never got around to that, but it was really good to know that I could go right down to app-level control. It was a very successful product, and I'd certainly recommend it to any business looking to just add another layer of security around their company.

    In terms of providing a single pane of glass management, security does involve multiple systems, and I could log them all into the Cisco SecureX system. From there, I could get my single point where I could resolve issues with viruses, et cetera. So, in itself, it was a single pane of glass for DNS protection. It was fine, but I don't think there is ever going to be a single pane of glass anywhere. You're always going to have many different systems that you're using, but overall, it had a lot of features. It did the job it needed to do.

    I would rate it a 9 out of 10. It is just app control that I want them to develop more.

    Disclosure: I am a real user, and this review is based on my own experience and opinions.
    PeerSpot user
    Director of Security
    Real User
    Helped us monitor activity and find bad actors who had managed to grab and control some of our domains
    Pros and Cons
    • "Any time someone went off the network, the AnyConnect client had the Umbrella agent built in, and it would realize when their computer connected that they were not on the corporate network. It would monitor and they would have pretty close to the same rules that they had to follow when they were in the office, regarding what kind of website browsing they could do."
    • "The design of the screens could be improved. Sometimes you're trying to look for information, for what you think is critical that should be on that first screen of the dashboard so that you can quickly take screenshots to have people help out, but you have to hop between screens to find little pieces of evidence."

    What is our primary use case?

    In my previous company, there was a gap in being able to put controls on users when they were away from the network. We thought, "Okay, Umbrella can do this for us," and it was at a reasonable cost for our security budget.

    How has it helped my organization?

    With Umbrella, it didn't matter if the users were in the office or they were going to go out. When I trained them I said, "If you go to Target, Starbucks, or anywhere else you can get on a hotspot, you're going to be covered with our rules, so we can make sure you're protected and that our company device is protected."

    It gave our users, from all of our sites, something like a first line of defense, including monitoring all the exit points of our offices. We also used Cisco AnyConnect on everybody's laptop so that any time they were out, we were making sure to secure their machine and keep an eye on it.

    Having a single pane of glass allowed us to quickly monitor and find out what was happening at that moment. We could see active connections going to a public address on the internet. At one point there were so many of them, thousands and thousands to one public address, which was more than normal. I had to contact Cisco support, and say, "This is what I'm seeing. Something's not right," and they said, "You're right." In the main screen, we switched over to investigation and we found that it was a bad actor. The bad actor was checking for domains that are flying around, and he found a few of ours that weren't paid for. He bought them and then he started controlling where they were going by redirecting them. That raised a big red flag for our company. They never had any idea that that had been going on for a very long time.

    There were other bad actors who had some of our domain names as well. I had to work with legal and we actually purchased back a few domain names from people. As a result, we taught our guys internally, "When you do a domain and you're going to do tests in the lab, make sure that we put purchase orders in. It's so cheap, let's buy them so that we have control of them, and not allow this again." That was a big awakening.

    Another benefit of Cisco Umbrella was related to our wireless. If we had a vendor come to our company, I'd have to get permission for him to use our wireless. I'd have to put in a ticket with his machine name, the IP he would have, and ask for a two-hour window. But I could tell that vendor, "In the same way that you are helping us with the product we purchased from your company, we're going to help protect you at no charge. When you get on our wireless, we're going to have it set up so that everything you do is monitored, just like everybody else here in the company. Even though you don't work for our company, you'll be protected and that will help protect us." They would stare at me, and I'd say, "I know a lot of companies don't do that, but we're doing that because we want to make sure you have a good experience and that we have a good experience by staying safe."

    What is most valuable?

    I was able to make use of Cisco Umbrella because it acts like a proxy. The company also had content security, which I used on-prem with Blue Coat products. Any time someone went off the network, the AnyConnect client had the Umbrella agent built in, and it would realize when their computer connected that they were not on the corporate network. It would monitor and they would have pretty close to the same rules that they had to follow when they were in the office, regarding what kind of website browsing they could do.

    The single pane of glass management was one of the really good features. From that single pane, not only could you look at what was happening security-wise, such as what was being blocked by domains and IPs, but you could check for your roaming users. With a deployment of AnyConnect, or just the Umbrella agent, on 5,000 machines, you could watch the main glass and see how many roaming users were out there that had it on their machines. And even if they were in the office, it was always active, talking to Cisco's cloud.

    You could see numbers. I was able to watch, as we were deploying, how many people were getting the agent. I could see activity such as how many blocks we were getting, what types of blocks they were, and whether they were in categories. I would ask why those users were going to those categories that they shouldn't be going to. Maybe we needed to just refresh them with an email saying, "Hey, remember, we don't do this kind of thing."

    Cisco's Umbrella client product is superb. It worked so well for us and was easy to deploy.

    What needs improvement?

    The design of the screens could be improved. Sometimes you're trying to look for information, for what you think is critical that should be on that first screen of the dashboard so that you can quickly take screenshots to have people help out, but you have to hop between screens to find little pieces of evidence.

    They should work with their customers to find out, when they're troubleshooting, if they're going through multiple screens just to get little pieces of information. Maybe they could design an overall security screen for an event and pull that stuff in so that it's on one screen, rather than having to go search for it. Right now, you're always going back and looking on the left-hand side, going down the column, and trying to remember where something you need is. You have to click all over the place to go find what you're looking for.

    For how long have I used the solution?

    I used it at my previous company for about four years.

    What do I think about the stability of the solution?

    It was always up. We never had any problems. It was always there.

    What do I think about the scalability of the solution?

    Scaling was very simple. Since we were using a VPN, we had Cisco AnyConnect on all the user machines, with Umbrella built into it, and that deployment was just blasted out and it was seamless.

    How are customer service and support?

    The Cisco Umbrella support group was wonderful; very strong. I loved it. I never had one issue with them. They were willing to be there with us, and walk us through things every bit of the way.

    How would you rate customer service and support?

    Positive

    Which solution did I use previously and why did I switch?

    We didn't have a whole lot going on in terms of security and when I got a new manager, he asked, "How do we protect the people when they're out in a store?" That's when we saw that's where the flaw was. We were protecting everything on-prem but the gap we found was that when users were traveling around, we were not seeing where they were going. We were holding them to a standard internally, but when they were outside they were doing whatever they wanted.

    How was the initial setup?

    What a simple product. It's a fast deployment. Then, you can start designing how you want to do your policies and what you're going to block. But once we told them what public addressing they were going to see, within a few hours we would see them go green. We said, "It's already seeing the data. Let's start applying policies, and we can start controlling all this."

    What was our ROI?

    We looked at metrics. As I mentioned, one of the benefits we received was finding the bad actors who had collected our domains that weren't paid for. That helped us to put the magnifying glass to use and say, "Hey, we have something going on." 

    I also worked with an outside company that Cisco purchased. I sent them our data from Umbrella and they actually mapped out our data and found bots on our network. There weren't many, but there were a few. The guy shared that with me on the screen and said, "If you buy the service to have us be part of your Cisco deployment, we'll take your data, continually analyze it, and give you reports." 

    There was one bot in particular that was just sitting there. The guy at the other company said, "That bot that you're seeing, it's asleep. Look again in a few hours," and it popped up. He said, "It just woke up at that point to try to do a command call." He said, "But we're blocking them, so you're not getting any threats." We didn't know that we had bots in there, and that was a big benefit.

    I also had to run numbers for reports. One of them looked at our category-blocking on Umbrella, such as blocks of alcohol sites, social media, weapons, government. I would provide monthly reports to show how many blocks we had from our users trying to go to these types of categories, and it really woke up management: "Wow. That thing is blocking." 

    Our investment in this worked, and we were showing it by numbers. It wasn't only that we found bots and bad actors, but we were also controlling things  by blocking phishing and categories. It was protecting us and no one was able to get past those blocks.

    What's my experience with pricing, setup cost, and licensing?

    The pricing was marvelous. We only had to pay for licenses and they worked a very nice deal with us. It was a much better way to go because it was within budget. It was an easy cost for us to handle.

    Which other solutions did I evaluate?

    We did not evaluate any other options. We invited Cisco to come in and do a demonstration, and it was so strong. I also come from a Cisco background of many years. In addition, the industry reviews rated them very well and we took that as our lead.

    When they came in and showed us what they could do and how easy it was to monitor every one of our sites within a day, after we put in our external public addresses, it was a no-brainer. It was up and live by the next day, after just a few hours. It was easy to use and set up and we could use it like our internal proxies. We could manage the content and know what was going on and investigate things. We knew what sites people were going to. It was wonderful. Everything we needed was there. We didn't have to go any further, and we knew Cisco would have our back.

    What other advice do I have?

    All the users understood why we were putting the security control in place, to show that not only were they going to be protected at work on company-owned devices, but whenever they would go outside, we were also going to help. We had to mitigate the chances that they would get something on their machines and make sure that we stopped anything that shouldn't come in and affect our network or expose us to anything.

    With Cisco Umbrella, employee morale was very high. We hardly had any complaints at all. One of the reasons is that, when doing regular security troubleshooting, we would go to Umbrella as our first line investigation. We might find a domain or IP that was being blocked by Cisco, something they consider a risk. We would check it out and if it didn't look to be bad we could bypass the block and allow that AD group or set of users to go to that site, because they had to do business as usual. With that ability, we had very few problems, if at all. Overall, it was smooth, with everybody happy, including management. They were happy that we had our first line of defense and that it worked out very well.

    I introduce Umbrella to any company that I'm involved with. Cisco is already taking the correct steps right now, as a CASB for any cloud activity as well as DLP. Once they circled around to help companies with protection when they move to the cloud, that was the right direction. I'm not using Umbrella every day anymore, but I'm a proponent of it as a first defense for your company at a reasonable cost. And you don't have hardware to manage. You just rely on Cisco, get your support contract, and work with them to have them help fix things.

    I'm a firm believer in Cisco Umbrella and I would definitely use it everywhere I go. I'm speaking to companies in the health industry and telling them, "Guys, you can't just have four people working on security and think you're going to do everything in the world to protect your hospital. You're going to end up on the news." I try to introduce them to this type of solution, to at least have something there to mitigate and help out.

    Disclosure: I am a real user, and this review is based on my own experience and opinions.
    PeerSpot user
    Sabbir Ahmed - PeerSpot reviewer
    Director at Infosonik Systems Ltd
    Reseller
    Top 10
    Blocks threats before they reach the user's device
    Pros and Cons
    • "Cisco Umbrella offers DNS layer security, a secure web gateway, and cloud access security broker functionality."
    • "Cisco's support is fantastic, providing assistance when needed, especially during the initial installation process."
    • "Cisco Umbrella can be improved in terms of limited coverage and wind vulnerability."
    • "Cisco Umbrella can be improved in terms of limited coverage and wind vulnerability. The product can only shield a small area, making it less effective for larger spaces or multiple users."

    What is our primary use case?

    Our primary use case for Cisco Umbrella is to provide DNS layer security, secure web gateway, and cloud access security broker functionality. We also utilize its integration with other security solutions, policy management, and mobile device support. Customers use Cisco Umbrella for these features to enhance their cybersecurity measures.

    What is most valuable?

    Cisco Umbrella offers DNS layer security, a secure web gateway, and cloud access security broker functionality. It provides threat protection by blocking threats before they reach the user's device. The firewall and integration capability with other security solutions are valuable for effective security management. Customers choose Cisco Umbrella for its DNS layer security, policy management, and mobile device support.

    What needs improvement?

    Cisco Umbrella can be improved in terms of limited coverage and wind vulnerability. The product can only shield a small area, making it less effective for larger spaces or multiple users. 

    Additionally, strong winds can disrupt its functionality, and the opening and closing mechanism can be awkward in tight spaces.

    For how long have I used the solution?

    We have been working with Cisco Umbrella for two years. My technical team has been handling the Cisco portfolio for the last fifteen years.

    What do I think about the stability of the solution?

    I have not experienced any major stability issues with Cisco Umbrella. Occasionally, troubleshooting and firmware upgrades are required, however, overall, the solution is stable.

    What do I think about the scalability of the solution?

    I rate the scalability of Cisco Umbrella as seven out of ten. It is a scalable solution but requires improvement in specific areas.

    How are customer service and support?

    The customer and technical support for Cisco Umbrella are very good. Cisco's support is fantastic, providing assistance when needed, especially during the initial installation process.

    How would you rate customer service and support?

    Positive

    How was the initial setup?

    The initial setup of Cisco Umbrella is not very complex. Certified resources trained for two to three days can easily implement the solution. On a scale from one to ten, I would rate the setup experience as a six.

    What was our ROI?

    Our customers have seen a return on investment since implementing Cisco Umbrella. It effectively enhances security and meets customer requirements.

    What's my experience with pricing, setup cost, and licensing?

    The pricing for Cisco Umbrella is average. The only cost associated is the license cost unless additional solutions need to be integrated with Umbrella, which would incur extra costs.

    Which other solutions did I evaluate?

    We also evaluated Infoblox for DNS, as Cisco does not offer DDI (DNS, DHCP, and IP address management) capabilities. Infoblox offers a more comprehensive solution for these functions.

    What other advice do I have?

    I would recommend Cisco Umbrella for its overall functionalities but not specifically for DNS purposes. For a complete security management solution, Infoblox is a better option for DNS management. 

    Overall, I rate Cisco Umbrella six out of ten.

    Which deployment model are you using for this solution?

    Hybrid Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Other
    Disclosure: My company has a business relationship with this vendor other than being a customer:
    Flag as inappropriate
    PeerSpot user
    Buyer's Guide
    Download our free Cisco Umbrella Report and get advice and tips from experienced pros sharing their opinions.
    Updated: January 2025
    Buyer's Guide
    Download our free Cisco Umbrella Report and get advice and tips from experienced pros sharing their opinions.