Try our new research platform with insights from 80,000+ expert users

Cisco Umbrella vs Infoblox BloxOne Threat Defense comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 28, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Umbrella
Ranking in Domain Name System (DNS) Security
1st
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
123
Ranking in other categories
Secure Web Gateways (SWG) (1st), Internet Security (1st), Cloud Access Security Brokers (CASB) (2nd), Cisco Security Portfolio (1st)
Infoblox BloxOne Threat Def...
Ranking in Domain Name System (DNS) Security
7th
Average Rating
8.0
Reviews Sentiment
5.9
Number of Reviews
18
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of February 2026, in the Domain Name System (DNS) Security category, the mindshare of Cisco Umbrella is 20.8%, down from 25.1% compared to the previous year. The mindshare of Infoblox BloxOne Threat Defense is 4.8%, up from 4.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Domain Name System (DNS) Security Market Share Distribution
ProductMarket Share (%)
Cisco Umbrella20.8%
Infoblox BloxOne Threat Defense4.8%
Other74.4%
Domain Name System (DNS) Security
 

Featured Reviews

BB
Senior Network Engineer at Mintz, Levin, Cohn, Ferris, Glovsky and Popeo, P.C.
Ensures comprehensive protection with seamless threat logging and efficient policy management
My favorite feature of Cisco Umbrella is probably just the DNS and the fact that when a security threat happens, all of that gets logged in their Umbrella portal, and it's very easy to find who's been accessing the site and how many people have accessed it, so that we can go to them and make sure they're not compromised. The features of Cisco Umbrella benefit my company by providing less time to search for things through logs, to look for what we need. It's just one place to go, and we just search for it, and we find it really fast. The fact that there's a virtual database that has all that information is great on our portal.
reviewer2703357 - PeerSpot reviewer
Analyst at a educational organization with 10,001+ employees
Valuable analytics integration improves data insights but needs fewer restrictions
What is valuable about the Infoblox BloxOne Threat Defense is especially the monitoring and reporting, which provides valuable information. The integration with any SIEM is very valuable for getting DNS query analytics, and this is very important. The threat analytics tools in the Infoblox BloxOne Threat Defense improve security response through integration with another platform, allowing you to gain insights on your own data happening within your own Infoblox BloxOne.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The single-pane-of-glass management is really important. In today's era, administration costs and operational expenses will cost you a lot, and it reduces that as well. You don't need extra resources to manage all your parameter firewalls, looking at every single device to allow resources internal access. By just introducing the single-pane-of-glass management, it has lifted the burden off of management, especially the network management."
"​They have a wealth of articles in their knowledge base. This has given me the freedom to troubleshoot on my own time. ​​"
"One of the great advantages of Umbrella DNS is that it's really simple to deploy. It's easy to install, the users do not notice that it's there, and it doesn't interfere with your work. The simplicity and transparency are great advantages of Cisco Umbrella."
"Cisco Talos threat intelligence significantly influences my company's ability to act against emerging threats, giving us the chance to patch our side or take precautions when zero-day vulnerabilities emerge."
"Some clients only want DNS security, while others want more of the advanced features that it has available."
"The most valuable features are the dashboard, visibility, and reporting capabilities. Our customers can see how much Umbrella is protecting their organization. If you don't know what you've got, you can't protect it. With Umbrella, you get the visibility and see the protection that it's providing. We can get PDF reports on a weekly basis of any malware activities and any denial of service or command-and-control-type activities."
"You can manage and create policies based on a group of users. It can permit some URLs and block others."
"One of the most important features is the security posture check which Umbrella offers when a user accesses any website. That is one of the most unique features that it offers."
"The most valuable feature is policy redirecting and security reports."
"The dossier feature is perfect for starting an investigation."
"The most valuable feature is blocklisting. It's good at what I like to describe as the "silly side cases." We have this annoying security architecture that says we must do this, that, and the other, so we try to make it easier on ourselves."
"The most important features for us are preventing DDOS DNS attacks."
"When it comes to helping to detect DNS threats, BloxOne is good on all fronts. The number of false positives is very low, close to none. More than once it has detected new names or lookalike names and protected us and saved us from bad characters."
"BloxOne provides automatic sharing of network context data, which affects our speed of threat response and provide real-time threat intelligence. Our security operations needs this to do their work. It makes us feel safer."
"The stability of Infoblox BloxOne Threat Defense is near perfect at a rating of ten."
"The automatic blocklists are most valuable. A box can maintain several lists from which we can choose if we need to block more or less. We don't have to manually manage the lists ourselves. They're automatically updated."
 

Cons

"There are a couple of different pieces that have different portals. I know they're working on getting them all into one portal, but that's probably the biggest thing that needs improvement right now. It's not a single pane of glass yet."
"Security, overall, can always be improved."
"It is a value for money product for sure. However, it does not have that kind of awareness plus brand within the customer, as they are influenced more by brands such as Palo Alto or Fortinet."
"The design of the screens could be improved. Sometimes you're trying to look for information, for what you think is critical that should be on that first screen of the dashboard so that you can quickly take screenshots to have people help out, but you have to hop between screens to find little pieces of evidence."
"It could be more secure. It would be better if they provided a transferring proxy as an add-on and more integration."
"This solution does not give us full, 360-degree protection."
"If you wish to inspect all the traffic and it's integrated with Cisco AnyConnect, all the traffic basically goes through Cisco AnyConnect, which is not a good idea. That means you need to have more internet capacity as a data sampler, so in the case of a split tunnel, we cannot inspect the traffic that is being migrated through the local internet. I'm not sure whether there is a possibility wherein Cisco Umbrella can also inspect the traffic that is outside the AnyConnect tunnel."
"If a hardware platform were provided for Umbrella, that would definitely improve the market for it... Especially when we are addressing governmental customers, they hesitate to connect to the cloud. That is where we need a hardware platform so that the solution can be used on-premises as well."
"The dashboard and reporting features need improvement. The user needs more informative dashboards so they can get to the results directly without getting deep in the report to get to the information."
"The initial setup is not a simple "click-click-next" installation. It requires some level of experience ."
"The product is slightly more expensive compared to other DNS solutions."
"The integration of threat intelligence with other solutions is challenging. If I want to expose threat intelligence, I cannot do it via taxi services. I have to call the API, but the customers are not into creating the APIs. The integration of embedded threat intelligence with other platforms should be better. Infoblox should work on this, and it should be easier for the end user to integrate it. It is very easy to deploy this solution. We should be able to integrate it with other platforms, such as the Next-Generation Firewall, with the same ease."
"A lot of their documentation needs improvement."
"This is not just Infoblox, this could be any portal provider, cloud provider, sometimes they change the look of the customer-facing options and it's not completely clear why they make the change."
"They could work on the UI of their website and make their website more user-friendly."
"The research side and the reporting side need improvement. Both of those are items on the menu. They could use a little bit of cleanup to make their respective information more easily understood."
 

Pricing and Cost Advice

"You get what you pay for if you break the solution up into tiers."
"Its value exceeds its pricing."
"It was a little bit expensive on a per seat basis, but the company I was running was only a midsize Australian company, and it was a reasonable budget per computer for that system. It started off being a free product, and then Cisco bought it, and it went to a reasonable price. I was using Cisco AMP as well. So, my per computer cost was reasonably high, but for a small company, it was within an acceptable level."
"Cisco is expensive. For example, we are looking at Nexus Dashboard, and it's costing about 250,000 euros. I ask, "What do I get from it?" I'm still not convinced that we have to spend on it, so pricing is a problem."
"Cisco has a set price for a single license up to 100, but whenever we get over 100, we have to ask for a quote."
"There is a one-time cost of approximately $800 USD per user, and then a yearly support fee of about $50 per user."
"We did a good negotiation, and at the moment, its price is fine."
"I think Cisco Umbrella is priced well. We have a mix of customers with different verticals such as education. We have clients in the commercial space as well. Umbrella is at a good price point for all of our customers."
"The licensing is set up such that you pay for the number of active users that you're defending at the moment."
"Infoblox BloxOne offers pretty good documentation. Check its documentation, then do a PoC. Infoblox is very good at providing PoCs."
"It is a very expensive system. You need to go over the licensing before purchase to make sure you're getting what is needed, not anything extra."
"When you buy the subscription, there are no additional costs to add any additional buttons."
"There is a significant charge for this product but I think that it's worth it when we look at what it's able to prevent."
"If you only wanted the DNS filtering and none of the other products built into Threat Defense, it would be nicer if they could do that a la carte since we are not really using a lot of the solution."
"It's a pricey solution because it's for the advanced kind of customer."
report
Use our free recommendation engine to learn which Domain Name System (DNS) Security solutions are best for your needs.
882,886 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Manufacturing Company
9%
Financial Services Firm
9%
Comms Service Provider
6%
Financial Services Firm
16%
Healthcare Company
8%
Manufacturing Company
8%
Computer Software Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise30
Large Enterprise51
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise3
Large Enterprise12
 

Questions from the Community

Which is the better security solution - Cisco Umbrella or Zscaler?
Cisco Umbrella and Zscaler Internet Access are two broad-spectrum Internet security solutions that I have tried. Zscaler Internet Access is a good option for carrying out multiple security functi...
Which is the better security solution - Cisco Umbrella or Microsoft Cloud App Security?
Cisco Umbrella is an integral component of the Cisco SASE architecture. It integrates security in a single, cloud-native solution, unifying multiple features like DNS-layer security, threat intelli...
What do you like most about Cisco Umbrella?
Cisco Umbrella is easy to monitor, manage, and deploy.
What do you like most about Infoblox BloxOne Threat Defense?
The most valuable feature is policy redirecting and security reports.
What is your experience regarding pricing and costs for Infoblox BloxOne Threat Defense?
Infoblox BloxOne Threat Defense can be expensive for the commercial sector, particularly in Egypt, as this sector does not have a huge budget compared to banking or oil and gas, as the regulations ...
What needs improvement with Infoblox BloxOne Threat Defense?
If Infoblox invests in network observability, especially from the perspective of DNS and IP address observability, it could be a significant improvement.
 

Also Known As

OpenDNS
BloxOne Threat Defense, Infoblox ActiveTrust, Infoblox ActiveTrust Cloud
 

Overview

 

Sample Customers

Chart Industries, City of Aspen, Eastern Mountain Sports, FLEXcon, George Washington University, Jackson Municipal Airport Authority, Ohio Public Library Information Network, PTC, Richland Community College, Smart Motors, Tulane University, VeriClaim
Council Rock School District, EagleView, Schneider Electric, Baptist Memorial Health Care, American University
Find out what your peers are saying about Cisco Umbrella vs. Infoblox BloxOne Threat Defense and other solutions. Updated: February 2026.
882,886 professionals have used our research since 2012.