Try our new research platform with insights from 80,000+ expert users

Cisco Umbrella vs Infoblox BloxOne Threat Defense comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 28, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Umbrella
Ranking in Domain Name System (DNS) Security
1st
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
123
Ranking in other categories
Secure Web Gateways (SWG) (1st), Internet Security (1st), Cloud Access Security Brokers (CASB) (2nd), Cisco Security Portfolio (1st)
Infoblox BloxOne Threat Def...
Ranking in Domain Name System (DNS) Security
7th
Average Rating
8.0
Reviews Sentiment
5.9
Number of Reviews
18
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of February 2026, in the Domain Name System (DNS) Security category, the mindshare of Cisco Umbrella is 20.8%, down from 25.1% compared to the previous year. The mindshare of Infoblox BloxOne Threat Defense is 4.8%, up from 4.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Domain Name System (DNS) Security Market Share Distribution
ProductMarket Share (%)
Cisco Umbrella20.8%
Infoblox BloxOne Threat Defense4.8%
Other74.4%
Domain Name System (DNS) Security
 

Featured Reviews

BB
Senior Network Engineer at Mintz, Levin, Cohn, Ferris, Glovsky and Popeo, P.C.
Ensures comprehensive protection with seamless threat logging and efficient policy management
My favorite feature of Cisco Umbrella is probably just the DNS and the fact that when a security threat happens, all of that gets logged in their Umbrella portal, and it's very easy to find who's been accessing the site and how many people have accessed it, so that we can go to them and make sure they're not compromised. The features of Cisco Umbrella benefit my company by providing less time to search for things through logs, to look for what we need. It's just one place to go, and we just search for it, and we find it really fast. The fact that there's a virtual database that has all that information is great on our portal.
reviewer2703357 - PeerSpot reviewer
Analyst at a educational organization with 10,001+ employees
Valuable analytics integration improves data insights but needs fewer restrictions
What is valuable about the Infoblox BloxOne Threat Defense is especially the monitoring and reporting, which provides valuable information. The integration with any SIEM is very valuable for getting DNS query analytics, and this is very important. The threat analytics tools in the Infoblox BloxOne Threat Defense improve security response through integration with another platform, allowing you to gain insights on your own data happening within your own Infoblox BloxOne.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"When we have laptops that leave the building, they could connect to public WiFi before they establish a VPN connection back into the company. For that duration or that period of time when they're not docked in the network or on a VPN, they effectively don't have that full layer of security that I provide inside the building. This tool stands in during that period of time, and we extend the security settings through their basic firewall or their cloud-based firewall at that time. So, we do content filtering and control access, but they also are looking at new domains, IP addresses, and bad requests. They're blocking them on my behalf when a laptop is not sitting behind our security appliances."
"The most valuable thing is how easy it is to deploy. We did it with 9,000 users at my last job, and it took a week to get to all the endpoints. Doing that without having to physically touch all those endpoints was very simple."
"Provides dependable DNS monitoring of external devices."
"The reports and notifications are the most useful part of the platform. As soon as you deploy the security layers, the reporting is very comprehensive. It helps you to have, at a glance, a clear view of what's going on."
"It has helped reduce my unit's security events."
"Meraki features and cloud-based functionality are advanced and easy to manage centrally."
"The implementation is pretty easy."
"The most valuable feature is the website protection capabilities because it prevents end-users from entering bad sites that potentially have malware or could be used for phishing."
"The most useful aspect of Infoblox BloxOne Threat Defense is its user-friendly interface and its powerful analytic reporting."
"The most valuable feature is blocklisting. It's good at what I like to describe as the "silly side cases." We have this annoying security architecture that says we must do this, that, and the other, so we try to make it easier on ourselves."
"With the model we have, we are able to scale very easily if we need to."
"BloxOne provides automatic sharing of network context data, which affects our speed of threat response and provide real-time threat intelligence. Our security operations needs this to do their work. It makes us feel safer."
"Our ability to detect data exfiltration was minimal before Infoblox and the cloud portal was instituted for us. In terms of DNS security as a whole, we had some capability with our firewalls, but this is a lot more specialized because we're sending all of our DNS requests to Infoblox. I'd say we improved 100%."
"The reporting ability is helpful. It allows us to control what our users are able to resolve, and then be able to see reports on that."
"Using the reporting, we can tell that we have gained an extra layer of protection. Just by looking at it, we can see what is being blocked before it even makes it to the firewall. It is definitely working."
"The product is stable."
 

Cons

"The major issue is that sometimes when you install the client, it shows you protected and displays that it is live with the backend servers and everything; however, in reality, it was not getting any feed from the main client and is just sending your traffic to open DNS, which sometimes causes an issue because the protection you have implemented can be breached by users."
"I feel that the application needs other characteristics that are available with other applications in the market."
"Missing a real data leakage prevention solution."
"In the next release, I would like to see the integration of VDI NSX with Cisco Umbrella."
"Its DNS service does not support IPv6 query."
"One of the issues with Umbrella is as you get into endpoint detection and response, such as EDR point solutions, some of them will not integrate well with Umbrella. Sometimes when you want to use technology, such as Always On VPN, it will not work. There are some looming issues as one type of technology starts to crossover with Umbrella. That is the challenge and Umbrella should find a way to be more compatible with some of the endpoint response solutions that are coming out on the market."
"The rule-making process for blocking sites or for blocking characteristics can use some simplification."
"We would like to see the enhancements made to the EDR, as we see features that are running endpoint management."
"The integration of threat intelligence with other solutions is challenging. If I want to expose threat intelligence, I cannot do it via taxi services. I have to call the API, but the customers are not into creating the APIs. The integration of embedded threat intelligence with other platforms should be better. Infoblox should work on this, and it should be easier for the end user to integrate it. It is very easy to deploy this solution. We should be able to integrate it with other platforms, such as the Next-Generation Firewall, with the same ease."
"Within the past two years, we discovered certain bugs in their products. The resolution of these bugs took a little too much time, especially if our production environment is down for a certain amount of time, then we are losing money. That is hard to convey to Infoblox support, e.g., we actually need the system up and running again within two or three hours. The awareness of these so-called production down incidents is not really easy to convey."
"The product is slightly more expensive compared to other DNS solutions."
"A lot of their documentation needs improvement."
"The initial setup is not a simple "click-click-next" installation. It requires some level of experience ."
"The research side and the reporting side need improvement. Both of those are items on the menu. They could use a little bit of cleanup to make their respective information more easily understood."
"They could work on the UI of their website and make their website more user-friendly."
"The dashboard and reporting features need improvement. The user needs more informative dashboards so they can get to the results directly without getting deep in the report to get to the information."
 

Pricing and Cost Advice

"You get what you pay for."
"We have a security Enterprise Agreement with Cisco, so the pricing is good."
"The price should be slightly lower than the current price because if you look at the whole solution, it is simply a threat intelligence solution to block blacklisted things. The price should be lower looking at the features provided by the solution. The price isn't too high either, but it could be lower."
"We did a good negotiation, and at the moment, its price is fine."
"It has a reasonable price. It is certainly not as expensive as it used to be. It is in line with other offerings on the market. There are a number of different flavors of Umbrella. They could bring Umbrella SIG down a bit because its price is a little bit high for what it does, but I also understand why its price is high."
"In terms of licensing, we're not able to be extremely clear with the customer because it's based on their reporting. It's not based on the actual traffic. If they say they have 50 users but they have 80, we'll just buy for 50 users. That's something where we'd like to have more flexibility."
"You get what you pay for if you break the solution up into tiers."
"Our licensing fees are on a yearly basis."
"The licensing is set up such that you pay for the number of active users that you're defending at the moment."
"There is a significant charge for this product but I think that it's worth it when we look at what it's able to prevent."
"It's a pricey solution because it's for the advanced kind of customer."
"Infoblox BloxOne offers pretty good documentation. Check its documentation, then do a PoC. Infoblox is very good at providing PoCs."
"When you buy the subscription, there are no additional costs to add any additional buttons."
"It is a very expensive system. You need to go over the licensing before purchase to make sure you're getting what is needed, not anything extra."
"If you only wanted the DNS filtering and none of the other products built into Threat Defense, it would be nicer if they could do that a la carte since we are not really using a lot of the solution."
report
Use our free recommendation engine to learn which Domain Name System (DNS) Security solutions are best for your needs.
882,594 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Manufacturing Company
9%
Financial Services Firm
9%
Comms Service Provider
6%
Financial Services Firm
16%
Manufacturing Company
8%
Healthcare Company
7%
Computer Software Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise30
Large Enterprise51
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise3
Large Enterprise12
 

Questions from the Community

Which is the better security solution - Cisco Umbrella or Zscaler?
Cisco Umbrella and Zscaler Internet Access are two broad-spectrum Internet security solutions that I have tried. Zscaler Internet Access is a good option for carrying out multiple security functi...
Which is the better security solution - Cisco Umbrella or Microsoft Cloud App Security?
Cisco Umbrella is an integral component of the Cisco SASE architecture. It integrates security in a single, cloud-native solution, unifying multiple features like DNS-layer security, threat intelli...
What do you like most about Cisco Umbrella?
Cisco Umbrella is easy to monitor, manage, and deploy.
What do you like most about Infoblox BloxOne Threat Defense?
The most valuable feature is policy redirecting and security reports.
What is your experience regarding pricing and costs for Infoblox BloxOne Threat Defense?
Infoblox BloxOne Threat Defense can be expensive for the commercial sector, particularly in Egypt, as this sector does not have a huge budget compared to banking or oil and gas, as the regulations ...
What needs improvement with Infoblox BloxOne Threat Defense?
If Infoblox invests in network observability, especially from the perspective of DNS and IP address observability, it could be a significant improvement.
 

Also Known As

OpenDNS
BloxOne Threat Defense, Infoblox ActiveTrust, Infoblox ActiveTrust Cloud
 

Overview

 

Sample Customers

Chart Industries, City of Aspen, Eastern Mountain Sports, FLEXcon, George Washington University, Jackson Municipal Airport Authority, Ohio Public Library Information Network, PTC, Richland Community College, Smart Motors, Tulane University, VeriClaim
Council Rock School District, EagleView, Schneider Electric, Baptist Memorial Health Care, American University
Find out what your peers are saying about Cisco Umbrella vs. Infoblox BloxOne Threat Defense and other solutions. Updated: February 2026.
882,594 professionals have used our research since 2012.