Cisco Umbrella Reviews

One of the main use cases of Cisco Umbrella kicked in during the COVID pandemic, as a SASE deployment—secure access, secure edge. Most of the users within a company started working from outside the company and that is when Umbrella became deployed a lot.

One of the most important features is the security posture check which Umbrella offers when a user accesses any website. That is one of the most unique features that it offers.

I would like to see hardware-based integrations. If a hardware platform were provided for Umbrella, that would definitely improve the market for it. The solution is pretty good, but if a hardware-based solution came through, it would meet all the compliance standards in my country.

Especially when we are addressing governmental customers, they hesitate to connect to the cloud. That is where we need a hardware platform so that the solution can be used on-premises as well.

I have been deploying Cisco Umbrella for about five years.

It's quite stable. I've gotten very positive feedback from the customers who have deployed it within their environment. The feedback has been amazing. It's up and running 99.9 percent of the time, since it's a cloud-based solution. We have had no problems related to bugs or any issues like that.

It is very scalable. Although I'm not talking to the clients anymore, I'm sure that the organization I worked with is working with them to spread the solution to more users who were not covered in the initial deployment. There is an adoption roadmap for this product.

Technical support is included as part of the subscription. At any point in time, if you have any queries, there's a 24/7 TAC number available. You can just call and log a case.

I'm also very satisfied with the documentation provided for the solution.

Positive

The previous solution we used was Akamai, but Akamai was more costly compared to Umbrella, and the consumption model was not favorable. Cisco Umbrella cost at least 30 percent less compared to what Akamai offered.

One of the key aspects of Umbrella is the deployment. It takes a matter of just 30 minutes to deploy it in any enterprise and, as soon as it is deployed, it starts to work, so it is seamless. The benefits are realized immediately.

The implementation strategy is pretty straightforward. On the customer's existing hardware you just have to make the entries that will enable the connection to Umbrella and it starts to run. It's a single-person deployment, a single network engineer. That is the beauty of it; you don't require a huge team to deploy it.

Umbrella doesn't require any maintenance. All the updates happen automatically. The configuration is a one-time process.

It can be deployed on the public cloud and private cloud. These are two of the selling factors, although public cloud is more common. It's a multi-location solution but can also be used by a single headquarters. On average, our deployments are for 2,000 endpoints.

If you look at the ROI, Umbrella significantly reduces investment in hardware-based firewalls. For example, typically, an enterprise has to refresh its firewalls every five years. By using Umbrella, they don't have to change their firewalls, rather the security posture is shifted to a cloud-based provider.

There are no hidden costs with Umbrella. Everything is included in the package.

Other than Akamai, there weren't many providers available in India.

One important piece of advice would be to look at your existing framework and see which use cases Umbrella can address. That will make the adoption much easier.

Umbrella is the best product available as of now. 

I'm doing business for customers. I'm building customer networks. We have Cisco Umbrella and Cisco Secure Endpoint, and the use case is that we connect to the company network from all over the place, and we need to do it in a secure way. 

We are just a small company with about 300 employees. Everybody is using these products to securely connect to the corporate network. From there, we support our customers. It needs to be really secure so that no security problems spread from our network to the customers' network. This is something we absolutely need to avoid. That's why these products are really good for us.

For me, it's quite good for daily work. Mainly, I work from a home office, so I have it running all day. It's okay for me. There is not much noise about it. I don't need to pay a lot of attention to this. It's just running in the background, and that's what I need.

It enables mobile work from anywhere. If you are at home, at a customer, or traveling, it enables a secure way of accessing the corporate network.

As a user, everything is there for securing our infrastructure from end to end to detect and remediate threats. There's nothing else that I need.

It saves time for sure. It doesn't require much attention. Everybody can use it. The end-users don't need to have any special skills. It's just perfect. I don't have the metrics on time savings because it isn't easy to know how much time you would have spent if you had an unstable product or if you had to take care of all this. 

For me, it's important that I get a connection to my corporate network in a secure and fast way. This product just runs in the background and doesn't need any attention. For me, as a user, it's perfect. 

Overall, I'm quite happy with Cisco products, but there could be one place where you can check what's going on. There could be one place where you get all the information about these products so that you don't need to look around. You get the status, information about what lately happened, and if there was anything on the machine in one single place.

We've been using Cisco Umbrella for about a year and a half, and we've been using Cisco Secure Endpoint for somewhat longer. It has been about three years.

I haven't been in touch with them because it's just working.

We used other products such as separate virus scanners. Using all the products from Cisco simplified things. You don't need to worry about whether it's compatible or whether you need to do something special on the antivirus side. It simplified things for me.

I work for customers, and this was set up by our internal IT department. 

I would advise seriously looking into it because, for our users, it's just working perfectly. 

I would rate it a 10 out of 10. There are no complaints.

Our customers use Umbrella for a security network. They want to have DNS connectivity and drop traffic before it becomes dodgy. 

Clients implement Umbrella with the full proxy. 

Umbrella enables customers to be secure. We are happy with this and this is the most important benefit for customers.

DNS is the most valuable feature of Umbrella. We want to have DNS integration with data directories and we have customers asking about the Azure Integration. 

We try to fit all the Cisco Secure products together. This is the value the customers can see as well. We enable the Firewalls, Umbrella, and AMP so that the customer can see the whole view of what Cisco is doing. 

Our customers want to be able to work remotely. They want Umbrella to work securely from the office and to work securely outside of the office. 

We have been using Umbrella for years now. We have an Umbrella internally as well. I sell Umbrella to customers. We offer the full setup to them.

We are resellers and integrators.

The stability is getting better.

The scalability is fine. The central management, that comes with most solutions, is really good. It's easier for us to go from two devices to 20 devices.

We have had quite a good experience with their support so I can't complain about it. Most of the time TAC cases are quite straightforward and do not take a long time to fix.

Positive

Our clients deploy on public cloud, private cloud, hybrid cloud, on-premise, or SaaS.

I am an engineer and do the initial deployment for them and make tweaks until it works for them. 

The complexity of the deployment will depend on the client's requirements. Some of them have straightforward requirements and some of them are quite detailed. The implementation itself is fine but there can be details where we need to check the documentation and make sure we're following what they require. 

Customers use the Firewall Migration for the migration mostly from the ASAs. We do the ASA to FTD migration, which doesn't work well.

Two or three engineers are required for the deployment. The installation is done by different engineers.  

We also do the maintenance. So whatever we deployed, we also support. We do all the support requirements, updating and reviewing the deployment that we did. We do the config that is required. For example, for the migration, if we deploy something, we come back to review what we did because we want to make sure that the customer is more secure than it was before. So we just rerun the same configuration, trying to find out if there's a gap that we can fix and make sure that the customer is secure.

The pricing changes too fast. We get the license and we need to relicense it because they already made changes to it. We always need to be on top of the licenses because they're always changing.

Cisco Talos seems to be working fine for our customers. 

My advice to somebody considering this solution is to try it. It's probably the best option to try it and see if it works. Do a proof of concept and proof of value for the customer.

We use it for DNS security.

It is deployed on the Umbrella cloud dashboard.

Cisco Umbrella helped to improve security by detecting and prohibiting threats.

I like the API. I also like the way Cisco Umbrella uses DNS to block malicious sites before they are opened.

Its general ability to detect and remediate threats is quite good.

The documentation is good, and we have been able to resolve any issues ourselves.

It would be good to have more extensions to third-party products and a client for other device types.

We've been working with Cisco Umbrella for four years.

I have not had any issues with stability.

The initial setup is very easy.

The price is fair, and the licensing cost is based on the number of users. We have seen a good ROI.

Overall, on a scale from one to ten, with ten being the very best, I'd rate Cisco Umbrella at nine.

We use Umbrella to monitor user activity and make sure that our staff isn't clicking on malicious links. We also use it to protect us by being more proactive on links that are already known to cause harm or potential hacks. Overall, it's keeping everything in a safe box.

We had a lot of challenges with staff clicking on ad links, random Google search links. Most staff want to shop during the day or in their downtime and were clicking on random links and then causing potential network issues, bugs, and causing network downs. Umbrella has helped us limit that.

It has provided our organization with more stability. Even though staff would like to shop using certain links, it gives us the option to educate them: "Hey, some of these links, just don't click on those." We are pretty lenient. We understand people want to shop and do other things at work. We try to keep it work-related, but safe.

Everyone really just wants to be able to click and do what they do, just like at home. But for the IT side of it, it does benefit us by limiting all of the extra activity. It does give us some comfortability that we aren't going to wake up, or even come in in the afternoon, and the whole network is down because someone went to buy some shoes or they clicked on a malicious email and caused a chain reaction.

It's very important for our organization to support the hybrid workers because we're a health clinic. A lot of staff are going to be away, but with the COVID numbers still out there, we want to be able to provide the same support that we did before COVID. We want to give the same flexibility, the same availability to our patients, that we had in the past. Being remote or having hybrid, it does give us a different range of opportunities to implement different workflows. They can reach out with more telecommunication, more video conferencing, rather than having a patient drive out to a site to seek support. We can do remote assistance and, with Umbrella, it still gives us the opportunity to be secure through those communication links.

We don't really have metrics at this particular time for it, but just [anecdotally] from past troubleshooting, having to diagnose maybe five different areas, this saves us a lot of time and a lot of effort in isolating the actual issue. We can just open up Umbrella, go to the specific area that we feel is impacted, or just look at one of the key dashboards that are on the portal and identify the issue.

It's very easy to maintain network connectivity with Umbrella. Before, we were having a lot of issues, but since Umbrella has been implemented, we really haven't had to touch it. It's kind of self-sufficient.

The solution is a lot more proactive. It does have its own features where it constantly uploads known threats and blocks those. It takes a lot of the guesswork out of our environment, but it also gives us an opportunity, if there are some questionable links, to diagnose those without it impacting the environment.

The best feature is the visibility. We're able to see the specific user names of whoever clicked on a certain link. It also gives us a threat detection level. It allows us to maintain more [awareness of] who's doing what they shouldn't be doing. The most valuable asset of it is giving us the ability to categorize who should have access to what type of sites.

This solution does give us a single-pane-of-glass for this particular instance. We do have several products implemented that we manage, which this hasn't integrated with yet, but we have just been made aware of the SecureX implementation and we are looking into implementing that and bringing that into another single-pane-of-glass, but with more options available.

A single pane of glass saves time. It saves effort and the headache of having to open up multiple links and go to different dashboards for troubleshooting different areas. This does have a lot of options available for us to see who's doing what, what trends, what errors. We can set up our alerting through it as well. It is definitely a great dashboard.

The dashboard, the single pane, is very helpful, it's very visual. Everything is straightforward there; it's definitely important for management. Even when we bring it to upper management and explain why this product is beneficial for us, this gives us a good breakdown and makes a lot of details available for us.

So far, I haven't seen any areas that need improvement. As far as what we need it to do, it's doing just that. It's comfortable for us. It's working beyond our expectations. Something on our end that might make it better is alerting going to our ticketing system. It's not something that we have discussed, but that would be a proactive option for us to provide a learning experience for the staff.

We've had Umbrella implemented for about two years.

The stability is very great. Once it's deployed and you do your due diligence to make sure that everything is communicating and in sync, we've hardly had to touch it.

For our environment, it doesn't seem to have any issues with the amount of users and staff. We have been constantly growing since we deployed it without any impact. No negative impact is forecasted.

The support has been really good. I have only had to utilize support about three times. It's been more of a training area: "How do I get to this area?" and "What does this actually do? How can this benefit me?" From there, it still has been stable and smooth and doing everything that we expected it to do.

Positive

We had a different overall firewall solution, which was a Sophos firewall. But since we migrated away from that, we implemented the Firepower firewall and, in addition to that, added in Umbrella.

The reliability wasn't really there, with Sophos always having issues, even from the endpoint perspective. We had issues across the board and it was management's decision to look into a new solution.

We just did one deployment through a virtual machine and that manages all of our routers and all of our users. We haven't had to do multi-site configurations or deployments. It goes towards the organization, uploads all of our users, and all of our statistics, and maintains things from there.

I'm not sure of the actual cost that went into it, but it's definitely a productive product for us.

The solution doesn't require almost any maintenance, unless you're doing triple checks, upgrades, or just being proactive in different areas. But for the most part, once it's deployed, you just give it about a week or two to check your levels and make sure everything is the way that you intend the product to work.

As far as the IT infrastructure team goes, we're all happy with the product. It definitely takes a lot of load off of our plate. We don't have to deal with certain sites being blocked. We have been able to set expectations, where these particular users have access to these types of sites, and certain sites are just blocked. That's just the company standard. From the staff perspective, they want to be able to browse freely, but we were able to set those expectations and guidelines and that we're working in the best interests of the site.

I'll rate it a 10 out of 10. It's been functioning very efficiently and effectively, and it's doing everything we need it to do. It takes a lot of load off of our team.

Our primary use case is for filtering and security reasons. We send our DNS queries to Umbrella. It will see if we go to a site that has malware or a virus and it will stop it. It detects if the URL has malware.

The multilayers of defense have improved my organization. We have a lot of defensive layers and DNS queries from Cisco is one of them. 

The most valuable feature is its ability to detect if a URL has malware or is vulnerable.  

I would like for their support to be faster. 

We have been using Cisco Umbrella for six to seven years. 

I have never experienced a stability issue where the site went down. 

I would rate the scalability a ten out of ten. 

Support doesn't always get back to me right away but they'll send me an email with the solution. It's not critical. I don't have an issue with it. I would rate their support an eight out of ten. I took two points off because it can take a day or two for them to get back to me. 

Positive

The initial setup is easy. There is good documentation. I can deploy it within a day or two. There's a page that shows you the health of the agent. It makes me more comfortable knowing that my configuration is healthy. 

I did the deployment myself. 

We have definitely realized ROI through the protection Umbrella offers. 

The pricing is decent. The price is user-based, per month. 

I would rate Cisco Umbrella a nine out of ten. I also use it on a personal level. It helps me to protect my endpoints so that they won't go to a malicious site. 

Cisco has its own cloud that they manage Umbrella on. So Umbrella is not like any part of AWS or Azure or GPP. Our use case for Umbrella all depends on our customer's requirements. Cisco Umbrella has many packages to help address these requirements. The current package which we are working on incorporating more is Cisco Umbrella SIG, which is the Secure Internet Gateway. It has just been launched as part of Umbrella and we are currently exploring its capabilities and utility for our clients.  

There are a lot of use cases for Umbrella, and for us those use cases include the following:  

• One of the more important use cases for clients is using the product as a web proxy.  
  
• A second thing would be a situation where a customer wants to block access to an employee's personal email account and allow only corporate email accounts.  
  
• A third would be the cloud-delivered firewall. This would cover a situation where a customer would create a tunnel between their on-prem firewall to the Cisco Umbrella cloud. This would make it so that all the traffic is filtered by the Cisco Cloud Firewall.  
  
• We use it to support our MDM (Mobile Device Management) integration. Umbrella can be integrated with various MDM products, like AirWatch and MobileIron, and that category of products.  
  
• Umbrella supports family integrations. So we can search for information from AWS or Azure-based clouds and we can create family-based policies using Umbrella.  
  
• Umbrella provides support for some features of Kaspersky. For example, it can tell you what all apps are running on the endpoints and it can give you granular control over those apps.  

These are only a few of the use cases which I think are most important for us and our clients at this time when using Umbrella.  

The most valuable feature which I found in Umbrella is the segmentation of personal accounts from corporate accounts. In order to work with this, Umbrella has a feature where we add the ID of the customer's Gmail account or the Azure account. That ID is then used as a filter to separate access so that only corporate Gmail will be accessible and it can block personal accounts.  

The second very valuable feature is the web proxy part which is effective in determining if a feed may be malicious.  

Data reporting is something I would like to see improved.  

Cisco is currently rolling out data centers for this type of solution. Currently, they do not have data centers everywhere. For example, they do have one in Singapore but they do not have one in India. My clients are in India and they find an issue of slowness in the services from the Singapore data center. Cisco is working on building a data center in India to address the issue but information about the completion of that project are lacking details.  

In the next release of Cisco Umbrella, I would like to see a DLP solution. That could be a feature someone can addon. But it should be a real Data Leakage Prevention solution to more securely handle the data.  

I have been working with Umbrella for around three years now.  

This product is stable and it is very easy also to scale up.  

Usually, a product is really designed for small, medium, or big companies. I think Umbrella is good to serve any size customer. The range could start from 200 users and then you have an interface that can handle anywhere up to 5,000 to 6,000 users. I think anything is possible with Umbrella as far as scaling usage because of the package and licensing options.  

If you want to increase the number of users you just have to inform Cisco to tell them to increase the seat count on Umbrella. We can renew our licenses to be in compliance with the Cisco licensing policy.  

I had worked for Juniper support before and I worked for other tech support teams and I feel that Cisco's type of support is the best. The response time has been right on and then they isolate all of the issues. It is the best product support I have seen in a long time.  

The initial setup is very simple, you can set up Umbrella within two minutes I would say. You just have to point the DNS to Umbrella and that is it. So it is very easy to deploy and set up.  

Actually, I am from the research team. We make the solution requirements, then the product moves on to the process team. Once I have made a solution, then the product team takes care of rolling out the implementation.  

As this solution is a public cloud solution, there is very little maintenance which the customer has left to do. The setup is relatively easy and it is very good for the client.  

The licensing part for Umbrella is really flexible. If a customer purchases a thousand licenses, and if at any point the customer overshoots the available license count, Umbrella would not stop working for the additional users. Cisco would be informed that there is an attempt at overconsumption of the licenses and they would inform the customers that their license count has been increased. It will do this automatically. The customer can take action to renew those licenses. So it is flexible.  

There are three models for licensing. There is the Cisco Umbrella essential plan, then you have the advantage plan, and then they have the plan including SID. Every license comes with a different feature set.  

The advice that I would give someone looking at the Umbrella solution is that they can evaluate Umbrella because it is very easy to set up. You can get started discovering the product and do a little to check it out. They should make sure that all their use cases are covered by Umbrella.  

On a scale from one to ten (where one is the worst and ten is the best), I would rate Cisco Umbrella as somewhere between a seven-point-five to eight, personally. But I will give it a seven overall.  

We use Cisco Umbrella for web security and it's very good. It acts as web filtration combined with security and I am very supportive of it, especially with cybersecurity trending these days and the amount of malware and spyware out there. It's important for end-users to have some sort of protection when they're browsing the internet and this product does that. Before it lets you go, it filters and gives you the okay to move forward with the website you're looking for. A lot of customers tend to make typos when they're searching for websites, which then leads them to unknown websites that automatically download malware to their computer — now they're infected. That's why you need web security. 

We currently have about 1500 endpoints under Cisco Umbrella, but of course, we plan to increase our numbers. We offer Cisco Umbrella in our packages so whenever we get new customers on board, they get it. 

In the past, Cisco Umbrella has denied us access to secure websites. I haven't seen it lately, but they have blocked different legitimate websites. However, they have good tools that allow you to refresh and verify whether a website is legitimate or not. They have so many servers across the United States and even globally. I believe that it helps you to identify a website. 

In other words, the solution is good, we like it and we've been using it. We have a big customer of about 1,200 users and they're happy. The only thing I am not happy with is Cisco themselves. Not because of a technical or support issue, but because a division of Cisco poached one of my clients, stole them from me, which is completely unethical. When I talked to our account managers about it, they said there was nothing they could do about it because it was a different department. I said, "What do you mean different departments? This is my client and you guys went and provided them with a solution that I am already providing them?" So, that was a big deal for me. 

Also, I think Cisco Umbrella has an automatic push feature, which is the automated updating agent, but if I am wrong, they should get it.

I've been using Cisco Umbrella for roughly five years.

We have been using Cisco Umbrella for three years; it's very stable, reliable and does its job. We experience minor hiccups here and there, but it's nothing that our team cannot handle, and if for some reason they cannot, then they can always reach out to customer support.

Cisco Umbrella is very scalable. You can do anything and it's very useful for MSP. It's basically a single window that allows us to manage different servers and different clients. That's the beauty of it, no more logging in and out for different clients, which is nice.

For me personally, I consider Cisco to offer premier support. Currently, due to COVID-19, we cannot call them now for obvious reasons, but prior to COVID-19, Cisco support was one of the best, especially in regards to Umbrella. Honestly, we almost never have to contact them. I don't recall having to contact them even once over the last year or so.

For web filtration, we tried Websense before but now I believe the cloud solution is the way to go, it's much better. We had a customer and they needed to have different layers of protection, especially today with cybersecurity, and open DNS is one of them. I believe it's mandatory that you must have some sort of defense because it's is up in the air, there may be other solutions, but something needs to protect you from going to the wrong websites.

They have different setups. For example, you can integrate with the Cisco Firewall and I believe you can integrate with any platform with an agent, on each device. So, it really depends on how comfortable you feel with the setup. If you need to get more information and analytics, I believe it says the agent is the best way to go. The agent gives you every machine: for example, what has been blocked? What kind of security breaches have been attempted? Open DNS has defended this particular endpoint, but there are definitely many flexible, different integration methods to integrate a solution.

I am not sure, I don't have the numbers in front of me, but I think it's $1.00 or so per device/month.

I like this product and I'd really recommend it to everyone. Obviously, it's not the only product out there, but today, every endpoint should have multiple layers of security. You need to protect your users when they are browsing—open DNS. You need to protect them from emails, both inbound and outbound and you need to protect the endpoint from breaching. 

I would rate Cisco Umbrella a nine out of ten.