Our primary use case for Cisco Umbrella is for content filtering and for different access lists. We have different lists for different departments of what they can access.
Network Engineer at a financial services firm with 51-200 employees
Very easy to accomplish content filtering, we don't need to do a lot of customization for it
Pros and Cons
- "It makes it really easy to accomplish content filtering. We don't have to do a lot of customization. You just click the box for the content category and it's up to date."
- "I would like for them to continue building on IPS and IDS functionalities."
What is our primary use case?
How has it helped my organization?
It makes it really easy to accomplish content filtering. We don't have to do a lot of customization. You just click the box for the content category and it's up to date.
This ability is very important to my organization because we're in the financial sector and security is at a premium.
What is most valuable?
Cisco Umbrella is pretty straightforward and simple to use. We recently did social media blocking and it was really easy for our marketing department to access it. It's pretty straightforward.
It helped free up IT staff for other projects. It saves us a lot of time by blocking potential breaches. It's very reliable.
Umbrella has definitely helped us improve our cybersecurity resilience by blocking malicious links and adware.
What needs improvement?
I would like for them to continue building on IPS and IDS functionalities.
Buyer's Guide
Cisco Umbrella
April 2026
Learn what your peers think about Cisco Umbrella. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.
890,088 professionals have used our research since 2012.
For how long have I used the solution?
We have been using Cisco Umbrella for five years.
What do I think about the stability of the solution?
It's been very reliable. I haven't had any issues with it.
What do I think about the scalability of the solution?
The scalability is easy. It's deployed through group policies.
Which solution did I use previously and why did I switch?
We're a Cisco shop. We have a lot of their products.
What was our ROI?
We have seen ROI through its pop-up blocking.
What other advice do I have?
We hope that Cisco will help us consolidate tools more than it is now by incorporating more IPS and IDS functionality.
My advice to someone considering Cisco Umbrella would be to focus on how easy is to use the GUI and how easy it is to navigate. You pretty much just click a box and the content categories work.
I would rate Cisco Umbrella a ten out of ten.
If your needs vary by department, I would advise making different groups for different departments. It's easier to do it that way than to set it up and go back to tie it to different AV groups.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Global CTO at a wholesaler/distributor with 1,001-5,000 employees
Video Review
Hassle-free implementation, effective user safeguarding, and high level support
Pros and Cons
- "The primary advantage of Cisco Umbrella is its ability to safeguard our users no matter where they are working from - whether it's in the office or remotely, as per the new work model that has emerged globally. This integrated security solution has simplified our lives by combining all the necessary security measures in one product. Additionally, deploying the product is all it takes to protect all our users."
- "Although Cisco Umbrella has an excellent global network footprint, there is still room for improvement and growth in this area. Additionally, there are bandwidth limitations associated with the connectors that need to be addressed. To be a viable solution for larger offices, Cisco Umbrella must continue to expand and improve its capabilities in these areas."
What is our primary use case?
We started using the standard version of the Cisco Umbrella to upgrade to a newer version last year.
How has it helped my organization?
As a company with a global presence spanning over 110 countries, Cosentino requires a uniform security solution that can ensure the safety of its users. Our search for an ideal solution led us to seek one that was easily deployable, integrated seamlessly with our existing systems, and offered robust protection. After thorough market research, we found that Umbrella was the most suitable solution for our needs.
Cisco Umbrella has notably enhanced the perception of security among our users. The solution is seamless and transparent for them to use, and they feel protected at all times. This makes it an excellent solution for users in terms of their experience. Additionally, as mentioned earlier, the quick deployment time is critical for our organization, and Umbrella has significantly improved it.
Cisco Umbrella is an ideal product for our organization because it is a standardized solution that can be implemented uniformly across the entire organization. It adheres to industry standards and provides the same high level of security to all users, regardless of their location or role within the organization. This consistency in security measures ensures that every user in the organization is protected to the same degree.
Thanks to the standardized solution offered by Cisco Umbrella, our IT staff has been able to focus on other projects. Once deployed, we no longer have to worry about security in that particular area. The solution is easy to deploy and seamlessly integrated with our infrastructure, making our lives much easier in this regard. Overall, it has significantly reduced the burden on our IT staff and allowed them to focus on other critical projects.
Cisco Umbrella has enabled us to consolidate our various tools and applications by providing comprehensive security coverage for our users, whether they are working in our office or remotely from home. With Cisco Umbrella, we can address all our security needs related to browsing and network security. While it's not mandatory, we have eliminated the need for most physical firewalls worldwide by leveraging Cisco Umbrella's capabilities. This solution has proved to be a game-changer for us, as it simplifies the deployment process significantly, as previously discussed.
What is most valuable?
The primary advantage of Cisco Umbrella is its ability to safeguard our users no matter where they are working from - whether it's in the office or remotely, as per the new work model that has emerged globally. This integrated security solution has simplified our lives by combining all the necessary security measures in one product. Additionally, deploying the product is all it takes to protect all our users.
What needs improvement?
Although Cisco Umbrella has an excellent global network footprint, there is still room for improvement and growth in this area. Additionally, there are bandwidth limitations associated with the connectors that need to be addressed. To be a viable solution for larger offices, Cisco Umbrella must continue to expand and improve its capabilities in these areas.
For how long have I used the solution?
I have used Cisco Umbrella for approximately four years.
What do I think about the stability of the solution?
Cisco Umbrella has generally been a stable solution for us, although we have encountered some issues with the new connectors. Currently, we are experiencing some minor problems with disconnections or other issues, but these occurrences have been infrequent.
What do I think about the scalability of the solution?
While the solution is currently scalable, we recognize the need to continue expanding our connection points and bandwidth in order to accommodate future growth.
How are customer service and support?
The support provided by Cisco Umbrella is excellent. In addition to the standard support included with the product, we have also opted for an additional support layer provided directly by Cisco. We have been extremely pleased with the level of service we have received thus far.
While there are areas where improvements could be made, such as the RMA process, overall we are satisfied with the level of service provided by Cisco Umbrella.
I rate the support from Cisco Umbrella an eight out of ten.
How would you rate customer service and support?
Positive
How was the initial setup?
Deploying Cisco Umbrella proved to be a hassle-free experience for us. Since our SD-WAN is based on Cisco Meraki products, integrating Cisco Umbrella with Cisco Meraki was an effortless process. This integration has enabled us to implement the first SASE solution in our organization, and the combined solution of Cisco Umbrella and Cisco Meraki has helped us to set up new offices in less than 30 days, which is a significant improvement compared to the five to six months it used to take us earlier. This has led to a remarkable enhancement in our deployment speed, which is truly amazing.
What was our ROI?
Calculating the return on investment for a security solution is a challenging task, as it can be difficult to measure. While we have not performed a formal assessment of the return on our Umbrella implementation, I am confident that it has yielded a favorable outcome for our organization.
What's my experience with pricing, setup cost, and licensing?
The licensing and pricing structure of Cisco Umbrella is in line with standard systems on the market, and we have no specific requirements in this area. Overall, we have found it to be an acceptable pricing model for our organization.
Which other solutions did I evaluate?
One of the main reasons we chose to implement Umbrella over its competitors was due to its extensive global network footprint, which closely matched our own footprint at Cosentino. Additionally, Umbrella's user-friendly interface was preferred by our users over other solutions, making it a more appealing option overall.
What other advice do I have?
My advice to others would be to ensure that the Cisco Umbrella footprint aligns with the organization's needs. This is a crucial factor in ensuring that the product works well for the company.
I rate Cisco Umbrella a nine out of ten.
My main goal with Cisco Umbrella is to ensure protection for my users, regardless of their location. Additionally, the solution provides a positive user experience and is overall a great product.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Cisco Umbrella
April 2026
Learn what your peers think about Cisco Umbrella. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.
890,088 professionals have used our research since 2012.
Has DNS integration with data directories and enables our customers to be secure
Pros and Cons
- "Umbrella enables customers to be secure. We are happy with this and this is the most important benefit for customers."
- "The pricing changes too fast. We get the license and we need to relicense it because they already made changes to it. We always need to be on top of the licenses because they're always changing."
What is our primary use case?
Our customers use Umbrella for a security network. They want to have DNS connectivity and drop traffic before it becomes dodgy.
Clients implement Umbrella with the full proxy.
How has it helped my organization?
Umbrella enables customers to be secure. We are happy with this and this is the most important benefit for customers.
What is most valuable?
DNS is the most valuable feature of Umbrella. We want to have DNS integration with data directories and we have customers asking about the Azure Integration.
We try to fit all the Cisco Secure products together. This is the value the customers can see as well. We enable the Firewalls, Umbrella, and AMP so that the customer can see the whole view of what Cisco is doing.
What needs improvement?
Our customers want to be able to work remotely. They want Umbrella to work securely from the office and to work securely outside of the office.
For how long have I used the solution?
We have been using Umbrella for years now. We have an Umbrella internally as well. I sell Umbrella to customers. We offer the full setup to them.
We are resellers and integrators.
What do I think about the stability of the solution?
The stability is getting better.
What do I think about the scalability of the solution?
The scalability is fine. The central management, that comes with most solutions, is really good. It's easier for us to go from two devices to 20 devices.
How are customer service and support?
We have had quite a good experience with their support so I can't complain about it. Most of the time TAC cases are quite straightforward and do not take a long time to fix.
How would you rate customer service and support?
Positive
How was the initial setup?
Our clients deploy on public cloud, private cloud, hybrid cloud, on-premise, or SaaS.
I am an engineer and do the initial deployment for them and make tweaks until it works for them.
The complexity of the deployment will depend on the client's requirements. Some of them have straightforward requirements and some of them are quite detailed. The implementation itself is fine but there can be details where we need to check the documentation and make sure we're following what they require.
Customers use the Firewall Migration for the migration mostly from the ASAs. We do the ASA to FTD migration, which doesn't work well.
Two or three engineers are required for the deployment. The installation is done by different engineers.
We also do the maintenance. So whatever we deployed, we also support. We do all the support requirements, updating and reviewing the deployment that we did. We do the config that is required. For example, for the migration, if we deploy something, we come back to review what we did because we want to make sure that the customer is more secure than it was before. So we just rerun the same configuration, trying to find out if there's a gap that we can fix and make sure that the customer is secure.
What's my experience with pricing, setup cost, and licensing?
The pricing changes too fast. We get the license and we need to relicense it because they already made changes to it. We always need to be on top of the licenses because they're always changing.
What other advice do I have?
Cisco Talos seems to be working fine for our customers.
My advice to somebody considering this solution is to try it. It's probably the best option to try it and see if it works. Do a proof of concept and proof of value for the customer.
Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller
Is simple to administer and implement, and helps consolidate existing tools
Pros and Cons
- "The most valuable features are the dashboard, visibility, and reporting capabilities. Our customers can see how much Umbrella is protecting their organization. If you don't know what you've got, you can't protect it. With Umbrella, you get the visibility and see the protection that it's providing. We can get PDF reports on a weekly basis of any malware activities and any denial of service or command-and-control-type activities."
- "The firewall capabilities could be better. Cisco is starting to introduce some layer 7 capabilities now, but there's still some room to grow. They should continue with the development of Umbrella so that it is a full-blown cloud-managed firewall solution."
What is most valuable?
The most valuable features are the dashboard, visibility, and reporting capabilities. Our customers can see how much Umbrella is protecting their organization. If you don't know what you've got, you can't protect it. With Umbrella, we get visibility and see the protection that it's providing. We can get PDF reports on a weekly basis of any malware activities and any denial of service or command-and-control-type activities.
Cisco Umbrella is very simple to administer, and that's what our customers really like. They don't want the complexity that's normally associated with security.
Cisco Umbrella definitely reduced our clients' mean time to repair. It does what it says it does, and it does it effectively.
Cisco Talos is the secret sauce. It's the threat intelligence that feeds security solutions such as Cisco Umbrella. You can have a security solution, but if it is not backed by an organization like Talos and has not been fed, watered, and looked after, then it will be pointless.
Our clients have been able to consolidate applications and tools related to DLP, CASB, web proxy, and SSL decryption. These are natively built into the Umbrella platform. We're now on the cusp of looking at SASE and, maybe, migrating away from the traditional on-premises firewalls and merging more toward the cloud. In the future, as we start the transition to zero-trust network architecture as well as SASE it will certainly help our customers consolidate a lot of their existing tools.
What needs improvement?
The firewall capabilities could be better. Cisco is starting to introduce some layer 7 capabilities now, but there's still some room to grow. They should continue with the development of Umbrella so that it is a full-blown cloud-managed firewall solution.
For how long have I used the solution?
We've been using and selling Cisco solutions since Cisco acquired OpenDNS.
We like to use technology first ourselves. It makes it easier to talk about it and sell it. Also, it's a good reference for customers to see that we actually use it internally. Umbrella has been a fantastic solution for us and our customers.
How was the initial setup?
The initial deployment could take a couple of days depending on the deployment model. Cisco Umbrella could be up and running quickly. You can instantly point your DNS servers to use Umbrella's DNS as its recursive DNS, and immediately, you'll be protected by Umbrella. You can take it further and get more granular controls by using AD integration, which can take a little bit longer. From an engineering point of view, it's a very light touch, which is unusual for security solutions. They're normally pretty complex. Cisco Umbrella, however, is a simple but powerful solution.
Given that it's a cloud-delivered platform, Cisco takes care of the upgrades. It requires a pretty light touch in terms of maintenance.
What's my experience with pricing, setup cost, and licensing?
I think Cisco Umbrella is priced well. We have a mix of customers with different verticals such as education. We have clients in the commercial space as well. Umbrella is at a good price point for all of our customers.
What other advice do I have?
We choose to sell Cisco because it has done phenomenally well in terms of some of its acquisitions and the way they've integrated Umbrella. It could be a flagship security solution for Cisco. It's been a game-changer for us and has opened up new avenues and new revenue streams as well.
As a Cisco Secure reseller, we're able to articulate the benefits of the solution to the customer because we are a technically-led organization. We've got a lot of in-house skills within the cybersecurity space. We don't sell for the sake of selling. We want to provide the right solution, and Umbrella is absolutely the right solution as far as we're concerned. It is the leader, especially from a DNS level protection.
Cisco Umbrella is a phenomenal security solution. It's got the right balance between complexity and ease of use. Therefore, I would rate it at nine out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller
Solution Architect at Philips
Improves security and has good integration capability and stability
Pros and Cons
- "The integration features within, for example, the Cisco VPN product and the Umbrella module are valuable."
- "The main issue that we have is with the final steps or the full integration and getting rid of Zscaler. The company still has to fall back to Zscaler when something in Umbrella is not working as expected, such as when we enable SSL inspection. When something is not working 100%, the company is falling back to Zscaler."
What is our primary use case?
We are using the Cisco Umbrella proxy product. Cisco Umbrella is part of our ongoing project for moving, more or less, to the full Cisco suite. We have Cisco ISE, DNAC, and SD-LAN. We are getting the new SD-WAN from Cisco. It's part of the whole portfolio we are getting from Cisco.
What is most valuable?
The integration features within, for example, the Cisco VPN product and the Umbrella module are valuable. The new features, mainly the security ones, are also valuable. It improves our security, and it's much more integrated and better than the one we have from Zscaler.
What needs improvement?
The main issue that we have is with the final steps or the full integration and getting rid of Zscaler. The company still has to fall back to Zscaler when something in Umbrella is not working as expected, such as when we enable SSL inspection. When something is not working 100%, the company is falling back to Zscaler. We have very good support, and I don't know whether this can be improved, but that is one thing to do for the final steps to get rid of the other product.
Its scalability could also be improved.
For how long have I used the solution?
I've been using this solution for two years.
What do I think about the stability of the solution?
The stability of the solution is very good.
What do I think about the scalability of the solution?
It could be improved mainly because the proxy is based on countries, and when you have no point to connect in a country, you can create issues. So, the spread around the world could be better.
We have 80,000 end users, and it's all over the globe.
How are customer service and support?
Their TAC support is very good, but it always depends on people. So, there is no in-general there, but the people we are dealing with are very good. I'd rate them a nine out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
For proxy services, we have been using Zscaler, and for SD-WAN, we have been using Nokia Nuage. For the SD-WAN solution, we made a switch because we had a lot of issues with Nokia Nuage. Don't use Nokia Nuage. It's pretty bad.
For proxy services, we are replacing the Zscaler solution with Umbrella proxy services, but I'm not sure about the reason. It's probably for more security features where using Cisco Umbrella helps us improve our security within. It's much better than the one we have from Zscaler for securing our infrastructure from end to end.
How was the initial setup?
It was very complex because of a little bit of immaturity of the Cisco Umbrella solution in the beginning. All the features were not already enabled. In addition, we also had a moving target where we said, "We would like to have this, and we would like to have that," and when it was not there, we insisted to have it in. It was very difficult and challenging.
What about the implementation team?
We are using BT. I would define our experience with them as big trouble. It's in the name.
On our side, we have three to five people, but it depends on following the sun. We probably have five people worldwide who are supporting this solution.
What other advice do I have?
I'd advise looking into your needs and then comparing those with the features that are really valuable. It has been improved over the last two years, but just look at your needs and what the solution can really deliver.
I'd rate Cisco Umbrella an eight out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Network and security architect at Airbus Group
Good visibility, good support, and simple to deploy
Pros and Cons
- "We can have a full overview and a quick overview of all the DNS requests. For us, it's quite important."
- "They can maybe simplify the configuration. For example, sometimes, the proxy part is quite difficult, and that's why we didn't deploy that."
What is our primary use case?
It's for the VPN nomad connection. We capture all the DNS requests, log them, and check them in case of troubleshooting for security or malware issues.
How has it helped my organization?
Through Cisco Umbrella, we managed to deploy our M365 system and our connection. It was very good for deploying access to those cloud systems. It was a very important requirement to check all the connections from outside when the laptops are remote, and we managed to capture all the DNS requests. It was a security requirement.
It hasn't saved us time, but we managed to deploy the connectivity to the cloud system such as Azure or M365.
What is most valuable?
We can have a full overview and a quick overview of all the DNS requests. For us, it's quite important.
What needs improvement?
Cisco Umbrella is a good solution. It meets all of our needs. They can maybe simplify the configuration. For example, sometimes, the proxy part is quite difficult, and that's why we didn't deploy that.
For how long have I used the solution?
We've been using it for two years.
What do I think about the stability of the solution?
We have no issues at the moment. It has been two years, and we did not have any issues. So, for us, it's quite good.
What do I think about the scalability of the solution?
We have about 6,000 devices. So, I have no problem with scalability.
How are customer service and support?
Their support is very good. We have a lot of feedback from our partners and our Cisco contacts. They get in touch to be sure that we are using the product correctly and whether we have any questions. I have had no problem with them. It's super good. I'd rate them a ten out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We didn't use any other solution previously. It's the first time we are using such a solution.
How was the initial setup?
We were already using Cisco AnyConnect, and for us, it was a simple plugin. We didn't spend much time. We did some tests. We worked with a local French team, and after that, we deployed it. For us, it was very simple to deploy.
What about the implementation team?
We deployed it ourselves with the help of a partner in France. The partner company is called Nomios, and we had a good experience with them. They know a lot of Cisco products, which is very good. They are into security and network architecture.
What was our ROI?
We haven't yet seen an ROI.
What's my experience with pricing, setup cost, and licensing?
Its price for us is quite expensive because it's a subscription, and we just use it for the DNS log. So, for us, it's quite expensive.
Which other solutions did I evaluate?
We didn't evaluate any other solution. We went for Cisco Umbrella because we already had Cisco AnyConnect. We just used the plugin, and it was very simple for us to deploy it.
What other advice do I have?
I'd rate Cisco Umbrella an eight out of ten. For me, it's quite a good product.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Senior Network Security Engineer at a tech vendor with 201-500 employees
We don't need to access multiple devices in order to give access to our internal resources
Pros and Cons
- "The single-pane-of-glass management is really important. In today's era, administration costs and operational expenses will cost you a lot, and it reduces that as well. You don't need extra resources to manage all your parameter firewalls, looking at every single device to allow resources internal access. By just introducing the single-pane-of-glass management, it has lifted the burden off of management, especially the network management."
- "We are not using a DNS solution, but we have been using the firewalls and all the proxy firewalls instead, which has really helped us since we now know that the entire network environment is being secured by Umbrella."
- "We faced an issue regarding virtual appliances (VAs) during deployment. They could improve the quality and management of the virtual appliances offered right now. You can't see much because it is a Linux machine, and they have customized it. You don't have any route access to the machine, only seeing limited things in it. When we opened a ticket, they didn't know much about VAs themselves. So, that is where it is lacking right now. I know this will improve in the long run."
- "We faced an issue regarding virtual appliances (VAs) during deployment. They could improve the quality and management of the virtual appliances offered right now."
What is our primary use case?
We have deployed an on-prem virtual appliance for Active Directory (AD) and user mapping. We have integrated our AD with it as well as all the pre-reqs that come with it.
How has it helped my organization?
It is a DNS solution. It stops us at the first layer of Layer 7, stopping at the DNS level. It just removes the burden for opening a connection, then looking at the firewalls and all the parameter devices. It has a single pane of glass that keeps you secure.
It has helped us in terms of the roaming client. That has helped us in terms of security. Whereas, previously the roaming client was bothering us, which got us into this solution. That has helped the end user with laptops and devices for different sites. This keeps us secure at all times wherever they go.
We are not using a DNS solution, but we have been using the firewalls and all the proxy firewalls instead, which has really helped us since we now know that the entire network environment is being secured by Umbrella. It gives us a real pat on the back that we are being backed by the Talos cloud and its security. We are monitoring in real-time. It works by itself to assess all the security features and parameters through Talos, which is really interesting and good for our environment.
What is most valuable?
The most valuable features are actually the reporting with all the visibility. It gives a hawk-eye view when we map AD with Umbrella. It gives us the visibility of every user, e.g., which sites and content are being used and who is accessing what. That has really been a good new addition for me.
We don't need to access multiple devices in order to give access to our internal resources. We are secured in having everything on a single pane of glass, which keeps us secure as well. We can enter the configuration to reach our destinations based on the main names. Other than that, it also secures us by not looking at only the destination, but also the predefined security parameters that Cisco Umbrella has provided. For example, if I coded command and control centers (CNCs), then most phishing websites, where there are known websites caught by Talos, are being categorized as the bad domain. That is where it gives us a nice, handy lift.
The single-pane-of-glass management is really important. In today's era, administration costs and operational expenses will cost you a lot, and it reduces that as well. You don't need extra resources to manage all your parameter firewalls, looking at every single device to allow resources internal access. By just introducing the single-pane-of-glass management, it has lifted the burden off of management, especially the network management.
It gives us a quick view into what we are looking at. We don't need to go to the different devices and see where our traffic is starving, etc. So, we have better visibility, when using Umbrella, from its single pane of glass.
What needs improvement?
We faced an issue regarding virtual appliances (VAs) during deployment. They could improve the quality and management of the virtual appliances offered right now. You can't see much because it is a Linux machine, and they have customized it. You don't have any route access to the machine, only seeing limited things in it. When we opened a ticket, they didn't know much about VAs themselves. So, that is where it is lacking right now. I know this will improve in the long run.
For how long have I used the solution?
I have been using it for seven or eight months.
How are customer service and support?
We used support when we were deploying the VAs. So, we have opened tickets a couple of times when we were stuck.
The technical support is alright. I would rate it as eight of 10. There was one time when I opened a ticket regarding the VAs, which didn't go quite well. However, it has been a good experience overall.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We did not previously use another DNS solution. This solution was our first.
How was the initial setup?
It is very easy to maintain network connectivity. For medium- and large- enterprises, it is not going to take more than a week or so to deploy the solution. Or, you can deploy it with fewer complexities in a couple of hours. Therefore, it is not that hard to gel it into your existing network. So, it works like a charm for us.
In our environment, all traffic was going to the data center. It didn't take us much time, or the complexity of the network wasn't much, so it didn't bother us to pre-plan its migration. We just had to change all our DNSs on the perimeter firewalls and point them towards Umbrella, and that was it.
What was our ROI?
It has helped us to remediate threats more quickly.
It is pretty much handy in terms of what it offers. Actually, it is all about how it caters to your security. Every solution has their pros and cons, but Cisco Umbrella catches all the vulnerabilities and things that could hit any organization.
Which other solutions did I evaluate?
Previously, we were not tracking roaming clients, which were changing networks every time. I was wondering if something was hitting the endpoints, because we wouldn't know. When Cisco Umbrella joined our network, it explored all our networks. This was really interesting and a key part of why we chose it.
What other advice do I have?
The end user isn't tech-savvy and doesn't care what is being done. As far as the system admin and network admins are concerned, their work has been reduced in terms of management and managing the entire network.
I would rate the solution as nine out of 10.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller
Director of Security
Helped us monitor activity and find bad actors who had managed to grab and control some of our domains
Pros and Cons
- "Any time someone went off the network, the AnyConnect client had the Umbrella agent built in, and it would realize when their computer connected that they were not on the corporate network. It would monitor and they would have pretty close to the same rules that they had to follow when they were in the office, regarding what kind of website browsing they could do."
- "Cisco's Umbrella client product is superb, it worked so well for us and was easy to deploy."
- "The design of the screens could be improved. Sometimes you're trying to look for information, for what you think is critical that should be on that first screen of the dashboard so that you can quickly take screenshots to have people help out, but you have to hop between screens to find little pieces of evidence."
- "The design of the screens could be improved. Sometimes you're trying to look for information, for what you think is critical that should be on that first screen of the dashboard so that you can quickly take screenshots to have people help out, but you have to hop between screens to find little pieces of evidence."
What is our primary use case?
In my previous company, there was a gap in being able to put controls on users when they were away from the network. We thought, "Okay, Umbrella can do this for us," and it was at a reasonable cost for our security budget.
How has it helped my organization?
With Umbrella, it didn't matter if the users were in the office or they were going to go out. When I trained them I said, "If you go to Target, Starbucks, or anywhere else you can get on a hotspot, you're going to be covered with our rules, so we can make sure you're protected and that our company device is protected."
It gave our users, from all of our sites, something like a first line of defense, including monitoring all the exit points of our offices. We also used Cisco AnyConnect on everybody's laptop so that any time they were out, we were making sure to secure their machine and keep an eye on it.
Having a single pane of glass allowed us to quickly monitor and find out what was happening at that moment. We could see active connections going to a public address on the internet. At one point there were so many of them, thousands and thousands to one public address, which was more than normal. I had to contact Cisco support, and say, "This is what I'm seeing. Something's not right," and they said, "You're right." In the main screen, we switched over to investigation and we found that it was a bad actor. The bad actor was checking for domains that are flying around, and he found a few of ours that weren't paid for. He bought them and then he started controlling where they were going by redirecting them. That raised a big red flag for our company. They never had any idea that that had been going on for a very long time.
There were other bad actors who had some of our domain names as well. I had to work with legal and we actually purchased back a few domain names from people. As a result, we taught our guys internally, "When you do a domain and you're going to do tests in the lab, make sure that we put purchase orders in. It's so cheap, let's buy them so that we have control of them, and not allow this again." That was a big awakening.
Another benefit of Cisco Umbrella was related to our wireless. If we had a vendor come to our company, I'd have to get permission for him to use our wireless. I'd have to put in a ticket with his machine name, the IP he would have, and ask for a two-hour window. But I could tell that vendor, "In the same way that you are helping us with the product we purchased from your company, we're going to help protect you at no charge. When you get on our wireless, we're going to have it set up so that everything you do is monitored, just like everybody else here in the company. Even though you don't work for our company, you'll be protected and that will help protect us." They would stare at me, and I'd say, "I know a lot of companies don't do that, but we're doing that because we want to make sure you have a good experience and that we have a good experience by staying safe."
What is most valuable?
I was able to make use of Cisco Umbrella because it acts like a proxy. The company also had content security, which I used on-prem with Blue Coat products. Any time someone went off the network, the AnyConnect client had the Umbrella agent built in, and it would realize when their computer connected that they were not on the corporate network. It would monitor and they would have pretty close to the same rules that they had to follow when they were in the office, regarding what kind of website browsing they could do.
The single pane of glass management was one of the really good features. From that single pane, not only could you look at what was happening security-wise, such as what was being blocked by domains and IPs, but you could check for your roaming users. With a deployment of AnyConnect, or just the Umbrella agent, on 5,000 machines, you could watch the main glass and see how many roaming users were out there that had it on their machines. And even if they were in the office, it was always active, talking to Cisco's cloud.
You could see numbers. I was able to watch, as we were deploying, how many people were getting the agent. I could see activity such as how many blocks we were getting, what types of blocks they were, and whether they were in categories. I would ask why those users were going to those categories that they shouldn't be going to. Maybe we needed to just refresh them with an email saying, "Hey, remember, we don't do this kind of thing."
Cisco's Umbrella client product is superb. It worked so well for us and was easy to deploy.
What needs improvement?
The design of the screens could be improved. Sometimes you're trying to look for information, for what you think is critical that should be on that first screen of the dashboard so that you can quickly take screenshots to have people help out, but you have to hop between screens to find little pieces of evidence.
They should work with their customers to find out, when they're troubleshooting, if they're going through multiple screens just to get little pieces of information. Maybe they could design an overall security screen for an event and pull that stuff in so that it's on one screen, rather than having to go search for it. Right now, you're always going back and looking on the left-hand side, going down the column, and trying to remember where something you need is. You have to click all over the place to go find what you're looking for.
For how long have I used the solution?
I used it at my previous company for about four years.
What do I think about the stability of the solution?
It was always up. We never had any problems. It was always there.
What do I think about the scalability of the solution?
Scaling was very simple. Since we were using a VPN, we had Cisco AnyConnect on all the user machines, with Umbrella built into it, and that deployment was just blasted out and it was seamless.
How are customer service and support?
The Cisco Umbrella support group was wonderful; very strong. I loved it. I never had one issue with them. They were willing to be there with us, and walk us through things every bit of the way.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We didn't have a whole lot going on in terms of security and when I got a new manager, he asked, "How do we protect the people when they're out in a store?" That's when we saw that's where the flaw was. We were protecting everything on-prem but the gap we found was that when users were traveling around, we were not seeing where they were going. We were holding them to a standard internally, but when they were outside they were doing whatever they wanted.
How was the initial setup?
What a simple product. It's a fast deployment. Then, you can start designing how you want to do your policies and what you're going to block. But once we told them what public addressing they were going to see, within a few hours we would see them go green. We said, "It's already seeing the data. Let's start applying policies, and we can start controlling all this."
What was our ROI?
We looked at metrics. As I mentioned, one of the benefits we received was finding the bad actors who had collected our domains that weren't paid for. That helped us to put the magnifying glass to use and say, "Hey, we have something going on."
I also worked with an outside company that Cisco purchased. I sent them our data from Umbrella and they actually mapped out our data and found bots on our network. There weren't many, but there were a few. The guy shared that with me on the screen and said, "If you buy the service to have us be part of your Cisco deployment, we'll take your data, continually analyze it, and give you reports."
There was one bot in particular that was just sitting there. The guy at the other company said, "That bot that you're seeing, it's asleep. Look again in a few hours," and it popped up. He said, "It just woke up at that point to try to do a command call." He said, "But we're blocking them, so you're not getting any threats." We didn't know that we had bots in there, and that was a big benefit.
I also had to run numbers for reports. One of them looked at our category-blocking on Umbrella, such as blocks of alcohol sites, social media, weapons, government. I would provide monthly reports to show how many blocks we had from our users trying to go to these types of categories, and it really woke up management: "Wow. That thing is blocking."
Our investment in this worked, and we were showing it by numbers. It wasn't only that we found bots and bad actors, but we were also controlling things by blocking phishing and categories. It was protecting us and no one was able to get past those blocks.
What's my experience with pricing, setup cost, and licensing?
The pricing was marvelous. We only had to pay for licenses and they worked a very nice deal with us. It was a much better way to go because it was within budget. It was an easy cost for us to handle.
Which other solutions did I evaluate?
We did not evaluate any other options. We invited Cisco to come in and do a demonstration, and it was so strong. I also come from a Cisco background of many years. In addition, the industry reviews rated them very well and we took that as our lead.
When they came in and showed us what they could do and how easy it was to monitor every one of our sites within a day, after we put in our external public addresses, it was a no-brainer. It was up and live by the next day, after just a few hours. It was easy to use and set up and we could use it like our internal proxies. We could manage the content and know what was going on and investigate things. We knew what sites people were going to. It was wonderful. Everything we needed was there. We didn't have to go any further, and we knew Cisco would have our back.
What other advice do I have?
All the users understood why we were putting the security control in place, to show that not only were they going to be protected at work on company-owned devices, but whenever they would go outside, we were also going to help. We had to mitigate the chances that they would get something on their machines and make sure that we stopped anything that shouldn't come in and affect our network or expose us to anything.
With Cisco Umbrella, employee morale was very high. We hardly had any complaints at all. One of the reasons is that, when doing regular security troubleshooting, we would go to Umbrella as our first line investigation. We might find a domain or IP that was being blocked by Cisco, something they consider a risk. We would check it out and if it didn't look to be bad we could bypass the block and allow that AD group or set of users to go to that site, because they had to do business as usual. With that ability, we had very few problems, if at all. Overall, it was smooth, with everybody happy, including management. They were happy that we had our first line of defense and that it worked out very well.
I introduce Umbrella to any company that I'm involved with. Cisco is already taking the correct steps right now, as a CASB for any cloud activity as well as DLP. Once they circled around to help companies with protection when they move to the cloud, that was the right direction. I'm not using Umbrella every day anymore, but I'm a proponent of it as a first defense for your company at a reasonable cost. And you don't have hardware to manage. You just rely on Cisco, get your support contract, and work with them to have them help fix things.
I'm a firm believer in Cisco Umbrella and I would definitely use it everywhere I go. I'm speaking to companies in the health industry and telling them, "Guys, you can't just have four people working on security and think you're going to do everything in the world to protect your hospital. You're going to end up on the news." I try to introduce them to this type of solution, to at least have something there to mitigate and help out.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Download our free Cisco Umbrella Report and get advice and tips from experienced pros
sharing their opinions.
Updated: April 2026
Product Categories
Domain Name System (DNS) Security Secure Web Gateways (SWG) Internet Security Cloud Access Security Brokers (CASB) Cisco Security PortfolioPopular Comparisons
Fortinet FortiGate
Cloudflare
Cisco Secure Firewall
Cloudflare One
Prisma Access by Palo Alto Networks
Zscaler Zero Trust Exchange Platform
Zscaler Internet Access
Cisco Identity Services Engine (ISE)
Cato SASE Cloud Platform
Netskope
Check Point Harmony SASE (formerly Perimeter 81)
Mimecast Email and Collaboration Threat Protection
Cisco Secure Network Analytics
Buyer's Guide
Download our free Cisco Umbrella Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Which is the better security solution - Cisco Umbrella or Zscaler?
- Which product do you prefer: Cisco Umbrella or Palo Alto Networks DNS Security?
- Which is the better security solution - Cisco Umbrella or Microsoft Cloud App Security?
- What are the pros and cons of Cisco Umbrella vs. Zscaler SASE for a large global enterprise?
- What are the differences and similarities of Symantec Fireglass and Cisco Umbrella?
- Which solution is better: Cisco Umbrella or Palo Alto Networks DNS Security?
- When evaluating DNS Security, what aspect do you think is the most important to look for?
- Why is Domain Name System (DNS) Security important for companies?
- What DNS security tool do you recommend?
- Why is domain name system security important?















