Try our new research platform with insights from 80,000+ expert users

Cisco Umbrella vs McAfee Web Protection [EOL] vs Zscaler Internet Access comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Featured Reviews

Rohan Singh - PeerSpot reviewer
Protects endpoints wherever they are, always pushing people to the right locations to avoid malicious intent
The most valuable thing is how easy it is to deploy. We did it with 9,000 users at my last job, and it took a week to get to all the endpoints. Doing that without having to physically touch all those endpoints was very simple. The single pane of glass management makes it very easy to manage your rollout. We get a lot of "single panes of glass" and, eventually, you need a pane of panes of glass. But it's always good to have a clear and graphical view, and Umbrella's is nice and easy to read. Definitely, of the panes of glass that we do have, it's one of the easiest to use. The single pane of glass is good to group users together and separate people out. Some people need different types of security. Some people are more vulnerable. Some have more highly valuable assets, like C-suite people. It's really good to be able to have end-users defined inside of that. You don't have to jump around. You don't have to figure out who's who. It's all done through one pane of glass. What most people don't realize is that it's running in the background, which is a really nice aspect when it comes to security. Often, when you deploy a security tool, it takes up CPU performance. Everything slows to a grind. But Umbrella is so simple and easy and it doesn't affect the end-user experience. It's the best of all worlds. It's nice when people realize that they're being protected when they go to the wrong site. I think people are happy that they're protected, but it's nice that they rarely notice it. It's generally easy to maintain network connectivity, but with Umbrella, the nice part is that whichever connectivity you're on, you're always secure. With Umbrella, as long as you're online, you're going to be protected.
VivekGupta7 - PeerSpot reviewer
Secure, reasonably priced, and performs well
We used cloud services for testing purposes. We used Amazon cloud services. Depending on the solution, there are a variety of options. There are several options such as Endpoint, WAF, NAC, and SIEM are currently available. A variety of solutions are implemented. It was a third-party implementation by Inspira. McAfee also provides an endpoint solution. McAfee's DLP is also present. Previously, we had used Trend Micro and Symantec. There is a method we had to upgrade our systems, a solution was required, and it had to match the three, four solutions from one company that were going to be cheaper, and there is a bidding process, whoever comes first, based on quality and cost, wins the competition. The requirements were speed, quality, and cost. Because Symantec was about to be renewed, our renewal would be more expensive.
ShanavasVK - PeerSpot reviewer
Helps maintain a consistent posture of internet security while getting rid of VPN and hovering into zero trust
There could be a better way for the tool to categorize the traffic. For example, the tool does exceptions and everything overall. If I want to give guest access or provide access to guest users or any other internet access and if it does not go through the SSL inspection because, in our company, we can't have the root certificate on a device that we don't manage, which can be called out as an exception or an exclusion, but that doesn't provide a proper reflection of the picture of what is happening in the environment. There are granularities bringing it down. The tool I used or still have is Zscaler Cloud Connector to protect the cloud environment, which can have a bit more user-friendly installation and setup, and it would help a lot. The deployment process of Zscaler Cloud Connector needs to be more user-friendly. Improvements are required in the exception category. For example, suppose I report on a monthly basis what the breaches and traffic violating the SSL inspection area are coming from. In that case, I may find that half of them may be coming through some guest network, meaning the tool doesn't differentiate between the guest or normal networks or the corporate networks. Having options to differentiate different networks would be ideal so that it can show a true picture of things to users, as half of the things in the tool are not in our control and are not of our concern.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature is the ability to filter malware sites that could infect clients or allow them to download infected files."
"The most valuable feature is that it secures our network against blacklisted or malicious websites."
"It is a good cloud-based solution for DNS security."
"One of the great advantages of Umbrella DNS is that it's really simple to deploy. It's easy to install, the users do not notice that it's there, and it doesn't interfere with your work. The simplicity and transparency are great advantages of Cisco Umbrella."
"My overall rating for Cisco Umbrella is ten out of ten."
"Cisco Umbrella is absolutely stable."
"For me, it's important that I get a connection to my corporate network in a secure and fast way. This product just runs in the background and doesn't need any attention. For me, as a user, it's perfect."
"Umbrella, being one pane for managing, being all-encompassing, allows us to quickly go in, make a change, and it applies to either every location, if we want it to, or we can have policies in place that only apply to certain users or certain computers."
"McAfee Web Protection was a good tool because in the olden days when you had to use a proxy tool when browsing the internet. Today the logic has changed slightly, in the sense your protection's taken onto the cloud. You'll exit a predefined gateway on the cloud before your internet browsing happens and therefore you're secured."
"The most valuable feature of this solution is that it protects against threats that are coming from the web."
"The solution does what it's meant to do."
"It is functional. It has reduced risk and downtime while also ensuring regulatory compliance, which is critical."
"The product is quite an effective firewall."
"The most valuable is the blocking of blacklisted sites, a URL that is, either by intelligence or by McAfee, detected as a malicious site."
"The most valuable features of McAfee Web Protection are the reporter, and you have the option to have an agent installed in the notebooks or on the mobiles. You are able to have the same policies inside and outside of your organization which is a benefit."
"It's a solution that permits making a granular configuration and it is easier to deploy the same configuration on a lot of devices using the central console. It is the master of the product."
"One on the main benefits is protection all time from anywhere."
"The policies are very intuitive and easy to configure, with very little possibility of messing things up."
"The most valuable feature of the solution is SWG traffic."
"I would recommend Zscaler Internet Access due to its ease of use and deployment, with a user-friendly interface."
"We don't have to buy equipment to use it. And when our engineers set it up on our side, we just configured a few settings and we were in."
"Zscalar Internet Access is for Internet security, like an Internet security gateway. I like how it runs seamlessly in the background with a single sign-on. The controls you can have on devices for Internet security are good, and it doesn't impact speed wherever you're connected. Overall, I think it's very good so far."
"One feature that is valuable to me from an implementation point of view is that it's very easy to implement."
"The initial setup is very straightforward."
 

Cons

"Overall, I'm quite happy with Cisco products, but there could be one place where you can check what's going on. There could be one place where you get all the information about these products so that you don't need to look around. You get the status, information about what lately happened, and if there was anything on the machine in one single place."
"If the virtual appliances could also gather traffic bandwidth reports, that would be great."
"The pricing changes too fast. We get the license and we need to relicense it because they already made changes to it. We always need to be on top of the licenses because they're always changing."
"There are a couple of interface issues. I know that they say that there are feature enhancements that are noted. For example, we've got the Cisco Meraki security appliances, and there, we geofence our company to where we're allowed to send and receive traffic. So, in our case, by default, we only allow traffic to six different countries, which allows us to effectively prevent traffic for the majority of bad players in the world, but they don't give you an easy way to do that in Cisco Umbrella. With Cisco Meraki, I can specify or pick the countries. I can say that I want to only allow traffic from these six countries, and I'm done. With Cisco Umbrella, I have to rely on the fact that they're going to prevent traffic to other countries. They're going to decide if it's good or bad."
"iOS devices and mobiles are huge in my environment right now, and I cannot run them on Cisco Umbrella 24/7."
"Having ready-to-go templates with best practices is definitely something that would be an improvement. Deployment, from day one, is something that definitely needs to be improved for Cisco customers."
"The solution could be faster as the process is very slow."
"Something on our end that might make it better is alerting going to our ticketing system. It's not something that we have discussed, but that would be a proactive option for us to provide a learning experience for the staff."
"The manufacturerers should have more transparancy about exactly what is getting filtered when you use the product and why."
"There is a real need to make sure all the updates and improvements are in order to keep the security at top performance to continue defeating threats that come daily."
"I'm not sure if the solution itself is cloud-based or not. If it isn't they really need to begin to develop that out a bit."
"Endpoints are lightweight agents, eating too much of the host resources."
"We need a better customer experience and more flexibility in the product."
"In McAfee Web Protection there are gaps in the security design, in the overall architecture, the gaps need to be fixed."
"The configuration could be simplified because it is more complex to make the configuration on McAfee. What can be improved is the support of the agent on smartphones, IOS or Android. That still now is not available yet."
"We used a consultant to help us set it up. Unfortunately, he was not that good. They were out of McAfee people. He was a consultant and knew the product, but he was not a McAfee person. How they managed it and how they worked was not straightforward."
"One thing that needs to be improved is their presence in China. I'm not sure if that's a Zscaler thing or if it's a problem with all vendors in this space, but it would be nice to have better coverage in China. This concern is a common one for vendors across the board when dealing with the Chinese market."
"The solution's pricing is on the higher side. It would be better if it could be lower."
"Sometimes it's not easy to use during large deployments of workstations."
"The main issue with Zscaler Internet Access is proxy IP detection, which sometimes makes sites inaccessible."
"The pricing is an issue. It is expensive if you have all of your users in the same location. It is expensive compared to other firewalls on the market."
"The OS capabilities and WSL support could be improved."
"Zscaler Internet Access could improve by adding a VPN feature."
"Sometimes, support isn't available."
 

Pricing and Cost Advice

"Cisco should make the solution cheaper."
"The product is pricey compared to Cisco Firepower."
"I think it's worth the money."
"Cisco has a model called ELA. With ELA, if you buy the solution you will have the complete security portfolio and you can pay it yearly or after three years, it depends on the contract."
"The price depends on the use case, and it's a bit linear. But it depends on the customer's strategy and how Cisco plans to optimize the costs."
"Our costs were negotiated, and they are okay."
"The price could be lower."
"The licensing fee is paid on a yearly basis."
"The license number would be approximately $35,000."
"The pricing is cheaper than some of the other options that are available."
"$150 Canadian per year."
"It is not very expensive. It costs 100 Canadian Dollars per year per license. I buy one-year or two-year protection. The license covers my PC, laptops, and telephone. The cost is per user but for multiple devices. It has just the standard licensing fees. There are some options for extended protection. For example, if I wanted to have a VPN, there will be an extra cost. So, there are upgradable features, but I'm very happy with what it is giving me with the basic plan. It gives me the basic privacy protection that I need."
"In McAfee Web Protection you have the ability to install any appliance you want with the same license. If you need an appliance on-premise, you can install it with the same license because the license is for users, not for appliances. If you need one more, you can install it and you don't have problems with the license or need to change your environment."
"It is a few pounds per user per month."
"We have found the solution to be expensive."
"The price is competitive. It's not cheap and it's not expensive."
"The tool is moderately priced."
"The price of Zscaler Internet Access should improve, it is expensive."
"Licenses are available on a per-host basis. Some features like sandboxing require an additional fee, but most standard features are included in the license."
"Zscaler is an expensive solution, but it's worth the price. Their services are unmatched by competitors. Some may come with half the features that Zscaler can offer and be much cheaper. However, they do not have the global coverage that Zscaler has, and they will not provide the same low latencies and the same speeds that Zscaler can."
"It is quite expensive. It does its job, but it is quite expensive for what we need."
report
Use our free recommendation engine to learn which Internet Security solutions are best for your needs.
848,253 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
26%
Computer Software Company
17%
Financial Services Firm
7%
Manufacturing Company
7%
No data available
Educational Organization
22%
Computer Software Company
14%
Financial Services Firm
9%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better security solution - Cisco Umbrella or Zscaler?
Cisco Umbrella and Zscaler Internet Access are two broad-spectrum Internet security solutions that I have tried. Zs...
Which is the better security solution - Cisco Umbrella or Microsoft Cloud App Security?
Cisco Umbrella is an integral component of the Cisco SASE architecture. It integrates security in a single, cloud-nat...
What do you like most about Cisco Umbrella?
Cisco Umbrella is easy to monitor, manage, and deploy.
Do you recommend McAfee Web Protection?
I highly recommend McAfee Web Protection. In my opinion, it is a comprehensive web protection platform with a great f...
Which is better, Zscaler internet access or Netsckope CASB?
We researched Netskope but ultimately chose Zscaler. Netskope is a cloud access security broker that helps identify ...
What is your experience regarding pricing and costs for Zscaler Internet Access?
Although Zscaler Internet Access is recognized as an expensive solution, with a cost-effectiveness rating of seven ou...
 

Also Known As

OpenDNS
McAfee Web Gateway, McAfee SaaS Web Protection
ZIA
 

Overview

 

Sample Customers

Chart Industries, City of Aspen, Eastern Mountain Sports, FLEXcon, George Washington University, Jackson Municipal Airport Authority, Ohio Public Library Information Network, PTC, Richland Community College, Smart Motors, Tulane University, VeriClaim
Sicredi
Ulster-Greene ARC, BanRegio, HDFC, Ralcorp Holdings Inc., British American Tobacco, Med America Billing Services Inc., Lanco Group, Aquafil, Telefonica, Swisscom, Brigade Group
Find out what your peers are saying about Cisco, Zscaler, Forcepoint and others in Internet Security. Updated: April 2025.
848,253 professionals have used our research since 2012.