My company's biggest use case for Cisco Umbrella is for DNS security protection for five years. A year and a half ago, we were able to upgrade and upsell a project to Umbrella's SIG. So, now we're working on a new upgrade to new packages, including Citrix ZTNA.
Security Architect at Logicalis
Helped customers consolidate any tools and applications
Pros and Cons
- "Stability-wise, I rate the solution a nine out of ten...Cisco's support is better nowadays."
- "I'm hoping for the conversion of Cisco ZTNA's features from Duo to Umbrella."
What is our primary use case?
What is most valuable?
In my opinion, DNS protection is basic for most customers. But the simplest way to protect web traffic is with its functionality, like SWG.
L7 and the firewall in the cloud are good features. We always hear good feedback from our customers.
What needs improvement?
I'm hoping for the conversion of Cisco ZTNA's features from Duo to Umbrella. This feature was announced at Cisco Live. I think Cisco is now on the right way to being the most competitive against some vendors like Netskope and Zscaler.
For how long have I used the solution?
I have been using Cisco Umbrella since somewhere between 2014 and 2015.
Buyer's Guide
Cisco Umbrella
July 2025

Learn what your peers think about Cisco Umbrella. Get advice and tips from experienced pros sharing their opinions. Updated: July 2025.
860,711 professionals have used our research since 2012.
What do I think about the stability of the solution?
Stability-wise, I rate the solution a nine out of ten. I only saw an impact once on its stability, and that was when I was working five years ago in the support in Johnson & Johnson environment, and Johnson uses SIP security for everything. So, one of the things was that in the bank that uses it, it was miscategorized in Cisco Umbrella. After I did investigations, I found that the problem was not in Cisco Umbrella. The problem was with the bank because they needed to split the data centers in Umbrella, and Umbrella could not recognize the object.
How are customer service and support?
Compared to the past, in my opinion, Cisco's support is better nowadays. The policies have decreased a little, in my opinion, but it still offers the best support in IT. This is common feedback from customers, including the ones that complain about Cisco's partners, but at the same time, they say its support is better than all different competitors. I rate the support an eight out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
In my company, we are partnered with one of the competitors of Cisco Umbrella.
We sell Cisco since we are one of the biggest partners of Cisco in our region, Latin America. Also, I think that Umbrella is a good solution. But Cisco should have considered improving it in the last few years. For example, if you compare Cisco Umbrella against McAfee, Zscaler, or Netskope, three years ago, Umbrella had a lot of the main features for the market drive, SSE, DLP, l7 firewall, and ZTNA. So, now I think Cisco Umbrella has everything to show and be the next leader partner.
How was the initial setup?
I wasn't involved in the solution's setup phase. I do the sales in my company, and the ones responsible for deployment in my company are from another sales team. In the past, during the initial years of Cisco, I was involved in deployment.
Regarding the ease of deployment, I am 100 percent sure that it is the easiest solution. Also, I have already worked before, even in Cisco Portfolio.
What was our ROI?
My customers have seen an ROI using the solution, mainly considering the time it shows the attacks and what the threats are. Personally, I saw a presentation to suppliers with the title stating SaaS is the newest SOC's best friend, and this is a reality. I have a customer, the biggest bank in Brazil, and they adopted Cisco Umbrella's DNS Security Advantage as one of the main features in the SOC, which is integrated into the bank, which is one of the most valuable for the customer.
What's my experience with pricing, setup cost, and licensing?
Cisco Umbrella now has a good price in the basic packages. When it comes to Cisco Umbrella SIG Essentials package and Cisco Umbrella Secure Internet Gateway (SIG) Advantage package, it depends on whether the project has a good price or not. For example, we are not able to choose the SWG feature without l3 and l4 firewalls. Some vendors have that possibility. So, we know this has a price, and this has value for the customer. But most of my customers that are using Umbrella SIG Essentials don't have l3 and l4 firewalls. So, this is a problem.
With the new features that are being introduced in Cisco Umbrella, I think we will have a new price list, and maybe things could change. Considering Umbrella for the SIG Advantage package and full feature competition against ZScaler or Netskope, they need to add all their packages. Usually, the SIG Advantage package has a markup price.
What other advice do I have?
When it comes to securing my customer's infrastructure from end to end so that they can detect and remediate threats, I would say that, in general, I have had a good experience. Sometimes, just enabling Cisco Umbrella POV and the fact that DNS trust is going through Cisco Umbrella is the easiest way to show and close a lot of bad traffic nowadays. Also, 80 percent of campaigns use any kind of malicious DNS infrastructure. So now, it's very, very easy to detect such traffic.
Cisco Umbrella has helped customers consolidate any tools and applications. I say this because, with Umbrella, it is very easy to see what the users are using through the internet, especially with the basic packages.
Speaking about what effect Cisco Umbrella's ability to consolidate tools or applications has, I would say that, in general, it is easy to see what Umbrella is blocking. In some cases, for example, customers who have used traditional endpoint security solutions sometimes think that they are safe because they didn't have any alerts using that. But when these customers implement Cisco Umbrella, they realize the real scenario. It has a positive impact because today, it is able to see the real traffic and the really bad things that are inside their networks.
Regarding whether Cisco Umbrella helped to improve cybersecurity, I would say that with Cisco Umbrella, it is easier to handle the incidents because they have more information that should handle the problems and improve security in general. The base, or the first layer, I think, is the way you improve resilience.
I rate the overall solution a nine out of ten. After Cisco Channel Partner program's release, I may probably rate it a ten out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller

Senior Network Engineer at Cykor LLC
Offers good DNS protection, domain blocking, SIP component, and roaming client features
Pros and Cons
- "DNS protection, domain blocking, SIP component, and the Cisco Umbrella roaming client are the valuable features of Cisco Umbrella."
- "Cisco Umbrella should add some more documentation on proxies."
What is our primary use case?
We use Cisco Umbrella to deploy policies and configurations for our company internally and some customers.
How has it helped my organization?
We use a lot of different Cisco products like Endpoint and Umbrella. With Cisco Umbrella, we get a total picture of security internally, especially for external sources or malware threats. I've only deployed it on one customer, and it's working well so far. We're still going through the full deployment process, but the customer likes the solution, which has worked well.
What is most valuable?
DNS protection, domain blocking, SIP component, and the Cisco Umbrella roaming client are the valuable features of Cisco Umbrella. With the way the industry is now, even if you're not in the network, you could still get the policies for your organization applied to your computer via the actual hardware or the user.
What needs improvement?
Cisco Umbrella should add some more documentation on proxies. Different organizations utilize proxies in their environment. With Umbrella, based on my experience, there are some deployment issues. It would be good to have some more documentation that can walk you step by step. The tech support is about 90% and needs to provide more step-by-step processing of the procedure and also a little more background on the solution.
For how long have I used the solution?
I have been using Cisco Umbrella for about a year.
What do I think about the stability of the solution?
Cisco Umbrella has good stability.
What do I think about the scalability of the solution?
Cisco Umbrella's scalability works fine. If it's in the cloud and you're pointing to the Cisco Umbrella DNS servers, the more users you have, you add a bigger package or a bigger tier.
How are customer service and support?
Cisco Umbrella's technical support is pretty good. The biggest thing with Cisco support is that you need to ensure you provide all the necessary information. If you give a vague problem, they will give you a lot of potential solutions. With Cisco support, if you get more granular with your information and accurate documentation, you should be able to find a good solution. They usually are very helpful and useful.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
Our company chose Cisco Umbrella because it's a SaaS solution. We're working to incorporate different elements into our network internally. That helps us give prospective clients or customers real-life experiences.
What was our ROI?
The basic package of Cisco Umbrella with the DNS component has been implemented in our customer's network and started working right away. I check the logs, and both the logs and the policy are working. You get a good return on investment from the very basic package in the beginning. You get those same benefits as you move up to the top tiers.
What's my experience with pricing, setup cost, and licensing?
Cisco Umbrella has four tiers, and with each tier, there are different levels of abilities in those packages. You get what you pay for if you break the solution up into tiers.
What other advice do I have?
Cisco Umbrella is deployed via the cloud in our organization.
I would give Cisco Umbrella nine out of ten for securing our infrastructure from end to end. The solution does what it's stated that it would do. With different packages, you get different levels of security. However, the main component of Cisco Umbrella was the DNS component or the DNS protection, which it does very well.
Once you first deploy Cisco Umbrella, you might not have to go back and update the policy config. However, in and of itself, it still requires a level of project time, deployment, design, documentation, and implementation.
I deployed an integration between SecureX and Umbrella for one of our customers. I can jump on SecureX and see if there's any block. I can read the information on SecureX, and then if I need to go to Umbrella, I can click the launch icon, and it will take me right there. That's pretty good and useful.
Cisco Umbrella's ability to consolidate tools has had a good effect on our customer's security infrastructure. SecureX is a big component for a lot of Cisco security suites, and they can integrate all that together. We've integrated a lot of our Cisco products into that one SecureX platform. I don't particularly deal with the internal because that's more our IT department. However, I've viewed the dashboard, and it's very useful. With the customer, we deployed Endpoint, we deployed Umbrella, and we'll be deploying Duo, and then those things can be integrated into SecureX.
Cisco Umbrella's DNS and SecureWeb Gateway components have helped improve our organization's cybersecurity resilience. More granular policies could be built for security, implementation, and ensuring no threats enter our internal organization.
If you're looking for DNS protection without a bunch of firewall commands and configurations, a simple deployment, and a policy build, Cisco Umbrella is a good way to go. It's deployed in the cloud and not hard to deploy. So if you want to get something up and going right away, Cisco Umbrella is a good bet.
Implementing Cisco Umbrella into our environment was pretty easy. I worked on it, and once they gave me access, I did my research and built the policies in adherence to whatever they asked.
Overall, I rate Cisco Umbrella a nine out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller
Buyer's Guide
Cisco Umbrella
July 2025

Learn what your peers think about Cisco Umbrella. Get advice and tips from experienced pros sharing their opinions. Updated: July 2025.
860,711 professionals have used our research since 2012.
Network Security and Data Center Manager at Napier University
Provides insights, protects our users, and has good value for money
Pros and Cons
- "The insight into what our users are doing via Cisco Umbrella is valuable. Knowing that we're protecting our users as they leave our network is also valuable now because we've got more hybrid working."
- "They should provide more integrations and bring things together so that there is a more standard feel to their platform. We also use Cisco ISE, and it has a very different feel from Cisco Umbrella."
What is our primary use case?
We're using Cisco Firepower to replace the ASAs as perimeter firewalls to the university's network. We're predominantly using Cisco Umbrella for web filtering of staff and student web traffic that is generated from the university campuses.
How has it helped my organization?
Cisco solutions are simple, efficient, and effective. We're definitely seeing that our users are protected by using these solutions. We're using Cisco Umbrella to protect around 1,500 staff and about 15,000 to 16,000 students. At any one time, on our campus, we could have 3,000 student endpoints protected and about 1,500 members of staff with laptops who are working hybrid since COVID. So, they're protected when they're on campus and when they're off campus. As a university in Edinburgh with three main campuses, we have two internet connections where firewalls protect us from bad stuff on the internet.
Cisco solutions have invariably saved us time. Without them, we would've had ransomware attacks and cyber attacks. So, they have helped protect us as much as they can. I don't have the metrics, but it's a university, so we're probably quite often under attack.
Our operating expenditures (OpEx) haven't really reduced. With moving to subscription-based, our OpEx has probably gone up rather than our CapEx coming down.
What is most valuable?
The insight into what our users are doing via Cisco Umbrella is valuable. Knowing that we're protecting our users as they leave our network is also valuable now because we've got more hybrid working. With Cisco Umbrella and Cisco Secure clients on all our hybrid working laptops, we know that our staff is secure even when they're working from home.
What needs improvement?
They should provide more integrations and bring things together so that there is a more standard feel to their platform. We also use Cisco ISE, and it has a very different feel from Cisco Umbrella. We also have some Meraki products which feel very different from others. It's like you have to learn something new with every product you buy.
For how long have I used the solution?
We've had Cisco ASAs, but we're just in the process of replacing them with Firepower, so Firepower is quite new. We've been using Cisco Umbrella since 2020.
How are customer service and support?
We have a good Cisco partner called Ping Network Solutions in Scotland, so anytime we need to reach out for a bit of advice, we can ask them. We had good pre-sale support with Cisco as well to ensure that we get the right products that match our requirements. I'd rate their customer service a nine out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
Instead of Cisco Umbrella, we used Zscaler for web filtering, but we've always had Cisco firewalls.
When we switched in 2020, Zscaler didn't seem to be developing their product as well. It didn't match our requirements anymore.
How was the initial setup?
I was involved in its deployment although I had a technical team working underneath me. It was easier than Zscaler because Zscaler made us have two instances, one for staff and one for students. It was very complicated, and we had to route traffic in different ways. Being able to do it by DNS with Cisco Umbrella was just easy.
I managed the team that was deploying it. My role involved making decisions about what traffic and which groups of users we put through first, some early field tests, and things like that.
What about the implementation team?
We did it all by ourselves.
What was our ROI?
We have seen an ROI. With Zscaler, we had more operational issues than we've had with Cisco Umbrella.
What's my experience with pricing, setup cost, and licensing?
You get what you pay for.
What other advice do I have?
We use Cisco Firepower, and we use Cisco Umbrella. Currently, these two products are not very integrated. We don't have the complete suite of Cisco solutions. We just have two that aren't joined. We also work with other technology partners, such as Microsoft, but in terms of the perimeter of our network, it has always been a solid product like the Cisco firewall.
I'd rate Cisco Umbrella a nine out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Network Security Architect at Lake Trust Credit Union
Video Review
Protects users whether in the office or out, and we get the same policy in both locations
Pros and Cons
- "The single-pane-of-glass management is very important. We have a very small team. We can't spend a lot of time going from product to product to product to either investigate or set up policy. We need to have one place that we can go to and set everything up."
- "The only thing I can think of is that I'd like to see a little more flexibility in policy creation. The way that policy is currently structured is like a "first hit succeeds" kind of policy. It would be nice if it were more hierarchical."
What is our primary use case?
We use Umbrella to front-end all of our DNS requests and that way they protect any of our end-users from going to any kind of malicious site. It doesn't matter if they're in-house in one of our locations, or if they're remote and working from home. That was the biggest part was the fact that we could protect our end-users, even when they're not in the office.
How has it helped my organization?
We were actually trying to solve other challenges, which included just to protect the onsite, but once COVID hit, it pretty much made it a very easy transition for us. At one point, when COVID was at its highest peak, we had everyone working remotely. We didn't have to worry about how we were going to restrict our access on the internet, because Umbrella was already handling that for us.
It made us more secure, which is a very important thing for a financial institution.
The support for hybrid work was the biggest thing. It protects our users, whether they're in the office or they're out of the office. We get the same policy in both locations. We can assign policies based on individual group memberships and it travels with them no matter where they go. It helps no matter where they are.
Since it's based on user DNS requests, it's right from the endpoint all the way through the network to be able to identify those locations and restrict access if necessary. It's not just the malware sites, which is very important, but it's also just content in general. There are business reasons for restricting access to certain content.
Since we implemented Umbrella, we are seeing a fairly significant amount of threats being blocked. A good 20 percent of all the activity, on average, that we see is actually being blocked by Umbrella, because it's either violating policy or it's some kind of malware.
What is most valuable?
Both monitoring the activity, so that we can investigate anything that may pop up, and the ability to restrict the access, or filter out what content end-users can view or go to [are valuable features of Umbrella]. Also, the fact that it blocks them from any known malicious locations.
It works really well and the best part about it is the fact that it's transparent to the users until they try to go somewhere that's either restricted because of content or restricted because of the fact that it's malicious. Then they simply get a popup and that's all there is to it. So from their perspective, it's very easy. They don't have to do anything in order for it to work.
There is a single portal that we go to that handles being able to set up policy, look at activity, or even manually add sites that we think that we want to restrict, even if it's not considered a particular category or a particular malware. The single-pane-of-glass management is very important. We have a very small team. We can't spend a lot of time going from product to product to product to either investigate or set up policy. We need to have one place that we can go to and set everything up.
It's really easy. It's an easy portal to go to, it's cloud-based, so we can get to it from anywhere. The ability to set up the policy is pretty straightforward. There are a lot of tie-ins with other products, like SecureX and other things, that make it just as easy.
It's cloud-based, so as long as you can get to the cloud, you're golden.
What needs improvement?
The only thing I can think of is that I'd like to see a little more flexibility in policy creation. The way that policy is currently structured is like a "first hit succeeds" kind of policy. It would be nice if it were more hierarchical.
For how long have I used the solution?
I have been using Cisco Umbrella for about four years now.
What do I think about the stability of the solution?
It's been extremely stable. In the last four years, I do not recall a single outage. There has been nothing that I can think of that actually affected the performance of the system at all in the last four years.
What do I think about the scalability of the solution?
We've never had an issue with scale. We've scaled it up to every user that we have in-house. When we deployed the gateways, we deployed two for HA purposes, but from a scale perspective, it's DNS queries. It doesn't take much. Our whole organization is on it.
How are customer service and support?
Support for Umbrella is very good. There's a way to contact them directly from within the portal and we use that periodically.
I give them about a nine out of 10. There are issues with Cisco's tech support, like all the rest of them.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
Umbrella was actually the first [solution we used in this area]. Once we discovered that that was a big hole we had—we didn't have anything that was controlling content for our internal end-users—we could run into problems with regulation, problems with compliance. It could run into issues with HR, as well as security issues associated with malware. We knew it was a hole, that we were missing. Umbrella filled that hole for us.
How was the initial setup?
There were two pieces of the deployment. One was the cloud deployment, which got us set up in the cloud to begin with. We also had gateways that were installed on-prem, in-house.
We were able to get the gateways up and running in about an hour. The cloud deployment was all done by the Umbrella organization on the back-end side. To deploy to the end users, all we needed to do is set up a policy that said, "This is what you use for DNS." Once that was set up, we were done. Deploying that was done in a group policy and that group policy was pushed in a matter of minutes. The entire solution was probably deployed in just a few hours.
What about the implementation team?
We did it all ourselves. Cisco handled the back-end side with the portal itself, but the rest of it, we did ourselves.
What was our ROI?
I think we got our return on investment within the first month of its use, because of the increased security that we had in the organization; the ability to have a product that is protecting our end-users. We do educate our end users today, but Umbrella doesn't require us to go through as in-depth an education process to say, "Okay, you're going to have to do the research. You're going to have to figure out what sites are bad. You're going to have to figure out where not to go." We don't have to do any of that. That's all handled by Umbrella. We just need to let them know that we're protecting them on the back-end side.
What's my experience with pricing, setup cost, and licensing?
Its value exceeds its pricing.
Which other solutions did I evaluate?
We looked around to see what was available. There were a lot of content filtering solutions available, but one of the things that Umbrella brings, in addition to content filtering, is that awareness of known threat sites. Their tie-in with Talos, Talos being that organization that does all that research and feeds that into Umbrella, means that we not only have known malware sites from six months ago, but we're getting feeds from Talos within hours.
What other advice do I have?
The impact on our employees' morale has been good. Anytime the employees understand that we're doing something from a technology standpoint to secure the organization more, that makes them happy. It's something that they don't have to concern themselves with as much and it improves morale quite a bit.
Resilience in cyber security is extremely important. We're a financial institution, so cyber security is very high on our organizational goals, all the time. Making sure that cyber security is resilient against any of the latest attacks that are coming out is extremely important. It's a constant thing. Cyber attacks are increasing every single year. The methods that are being used are increasing every single year. If something were to happen, not only would we have a financial impact, but we have a reputational impact. For a financial institution, a reputational impact could be just as devastating as a financial one.
Umbrella helps us with that overall security. It gives one less attack vector for the bad guys to get into. We're protecting those end-user devices and we're protecting those end-users from going to places that could be malicious. The fact that it's doing that for those end-users increases our overall security without us having to rely specifically on end-user education in that particular attack vector.
For leaders who are looking to increase resilience within their organizations, I would say that what is necessary is to do as much security, in-depth, as you can. That includes using Umbrella to protect your users and using lots of other security products and being able to secure every aspect of your organization.
I would rate Umbrella absolutely a 10 out of 10. It's literally a lifesaver when it comes to being able to protect our endpoints.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
senior technical administrator at Ogma Consulting
A very efficient and on-point solution that controls the whole network and settings on one page
Pros and Cons
- "Cisco is a very efficient and on-point solution that controls the whole network and settings on one page. We can monitor the entire network."
- "The solution could be faster as the process is very slow."
What is our primary use case?
Cisco is a very efficient and on-point solution that controls the whole network and settings on one page. We can monitor the entire network.
What needs improvement?
The solution could be faster as the process is very slow.
For how long have I used the solution?
I have been using Cisco Umbrella as a reseller for four to five years.
What do I think about the stability of the solution?
I rate the solution’s stability an eight and a half out of ten.
What do I think about the scalability of the solution?
We have deployed it to small businesses.
I rate the solution’s scalability an eight out of ten.
How was the initial setup?
The initial setup is straightforward and takes few hours to complete.
I rate the initial setup a nine out of ten, where one is difficult, and ten is easy.
What was our ROI?
ROI is pretty good. I rate it as eight out of ten.
What's my experience with pricing, setup cost, and licensing?
You need to buy an additional license for customer services. The licensing is moderate.
What other advice do I have?
I recommend the solution.
Overall, I rate the solution as eight and a half out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller
IT Director at a university with 10,001+ employees
Helps enable us to effectively detect and remediate threats, free up IT staff time, and improve cybersecurity resilience
Pros and Cons
- "I haven't needed to reboot the servers for years due to their excellent stability."
- "I am unsure if Cisco Umbrella offers a Windows option for running the server."
What is our primary use case?
We use Cisco Umbrella to protect our DNS queries and the traffic going out.
How has it helped my organization?
Cisco Umbrella is transparent to my users; they are unaware of its presence. The documentation they use is solely for the IT staff. It is functioning exceptionally well, to the point where I no longer require extensive documentation for its operation.
It has reduced malware and mitigated risks associated with email links and various other factors, resulting in cost savings.
Cisco Umbrella helps secure our infrastructure, enabling us to effectively detect and remediate threats. Apart from host-based firewalls or malware attempting to bypass threat detection, we currently do not have any other alternatives. Although there may be competing solutions available, we have been using Umbrella, and it has served us well.
Cisco Umbrella helps free up IT staff time indirectly by reducing the number of calls we receive regarding malware or bad calls.
Our organization improved its cybersecurity resilience by effectively blocking threats with Cisco Umbrella.
What is most valuable?
We used one feature, which is aimed at protecting our users from accessing malware-infected websites and encountering associated problems.
What needs improvement?
I am unsure if Cisco Umbrella offers a Windows option for running the server. However, since I am not familiar with Linux, I had to rely on someone else to handle that aspect. I'm not completely convinced that using Windows would be a superior solution, as Linux is generally regarded as more stable. However, it would benefit individuals like myself who are unfamiliar with Linux.
For how long have I used the solution?
I have been using Cisco Umbrella for seven years.
What do I think about the stability of the solution?
I haven't needed to reboot the servers for years due to their excellent stability.
What do I think about the scalability of the solution?
For the size we have, Cisco Umbrella has worked out really well in terms of scalability.
Which solution did I use previously and why did I switch?
The solution that was previously used was acquired by Cisco and turned into Umbrella.
What was our ROI?
I have seen a return on investment using Cisco Umbrella.
What's my experience with pricing, setup cost, and licensing?
The pricing model is easier compared to some of the other solutions, and it is also competitive.
What other advice do I have?
I rate Cisco Umbrella a nine out of ten.
I recommend that people try Cisco Umbrella because I believe it is the best option available.
I have never needed to utilize technical support because the solution has consistently functioned effectively.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
IT Operations Manager at a manufacturing company with 201-500 employees
Easy to install, doesn't use too many resources, and is highly effective for adding another layer of security around your company
Pros and Cons
- "I was able to implement it myself. It was really easy to install. You could install it on a server locally if you want to. If you have the biggest site, you would do that, but for my site, it was just directing all the traffic out through the Cisco Umbrella DNS. It was really handy. When the owners of the company went overseas, I knew that they would be secure because even if they were not on the company network, they would still go through the Cisco Umbrella servers. It was a complete solution for protecting the company with outgoing data."
- "It had the ability to do a lot of app control. So, every single app that went through that portal was registered, but there is a general issue with the whole app control. As soon as you add a mobile phone to your network, all of the apps get registered through the system, and you can approve, reject, or just let them go through. When I looked at it, it was impossible to manage app control. There was just so much data. I didn't apply that service because I just didn't have the time to manage it. It would be good if there was a way to categorize applications."
What is our primary use case?
I had implemented Cisco Umbrella at a previous company. I'm now working at another company where I'm not using this solution. We've got another solution here.
The policy of the company was to make sure all outgoing traffic was sent through a filtering service, and OpenDNS, and then Cisco Umbrella, was chosen for that purpose. Once it was taken over by Cisco Umbrella, it had far more capacity and far more functionality written into it.
In terms of the deployment model, I just used Cisco services. It would be through Cisco's private cloud. My site wasn't big enough. So, I didn't deploy the Cisco service on-premises.
How has it helped my organization?
It was really valuable to me in protecting the outgoing data of the company. It was good for reporting. Every computer had the Cisco Umbrella program installed. So, I had good reporting on any issues related to outgoing data, such as whether there were any phishing or dodgy sites connected. It protected that part of the business.
A combination of Cisco ASA, Cisco Umbrella, and Cisco AMP connecting to the SecureX portal gave me all-around security for the site because they all reported into a central reporting server. If there were any issues, I could have got full details, even if a crypto locker attempt was made. I never had any security incidents that I'm aware of. So, it was a very effective tool.
It kept itself updated. So, I didn't have to worry about continuing to push out new installs of the program.
I felt safe, supported, and secure, and so did the owner of the company. It worked silently in the background, and no one else really knew it was working on their computers. When we went into lockdown with COVID, I was happy knowing that all the computers that left the business had the app installed and were going to be functioning securely. We got no viruses and no issues on any computer on the network, which is quite unusual. A lot of other people or a lot of other companies I spoke to reported that they had quite a few issues.
It worked 100% in terms of applying and maintaining network connectivity consistently across all workplaces. We never had any issues. The only issues we had were when sites might have been blocked because they were suspected of being within a filtering group. It would report back to the user and say, "This site is currently blocked by your administrator. Please click this button. An email will be sent to your administrator, and they can resolve the issue." I would then get the email, and I'd look at the site, and then I'd release it through whitelisting. It was very user-friendly in that regard.
It certainly helped to remediate threats more quickly because I was able to stay free of any virus outbreaks. It definitely locks out that part of the transmission where the virus will go out and attempt to download a package.
It worked silently and didn't use too many computer resources. It was really silent in its operation on the network. It had a really good impact on me. I'd love to put it in my new company, but we've gone down a different pathway. That's being resolved through Office 365 now, and I'm not proposing to change that technology.
What is most valuable?
I wanted to ensure that all outgoing traffic went through Cisco AMP servers. So, if we did get a crypto locking incident or any malicious sites that wanted to direct traffic to particular websites, they would be unable to do that because they would be blocked by the Cisco Umbrella DNS servers.
It also did website filtering for preventing access to porn sites and gambling sites. It had all other standard features. It had a good section where you could whitelist and blacklist websites.
I was able to implement it myself. It was really easy to install. You could install it on a server locally if you want to. If you have the biggest site, you would do that, but for my site, it was just directing all the traffic out through the Cisco Umbrella DNS. It was really handy. When the owners of the company went overseas, I knew that they would be secure because even if they were not on the company network, they would still go through the Cisco Umbrella servers. It was a complete solution for protecting the company with outgoing data.
The other useful feature was that if we were to get a malicious actor onto a server or service running somewhere, it would still have to go out through the Umbrella servers. So, it would more likely be blocked through there. It had multiple features that were super handy.
What needs improvement?
It had the ability to do a lot of app control. So, every single app that went through that portal was registered, but there is a general issue with the whole app control. As soon as you add a mobile phone to your network, all of the apps get registered through the system, and you can approve, reject, or just let them go through. When I looked at it, it was impossible to manage app control. There was just so much data. I didn't apply that service because I just didn't have the time to manage it. It would be good if there was a way to categorize applications. However, that's dangerous too because you can be turning off an app in a group because you don't know what it is doing. It could be a vital company app. So, App control is the main area in which they need to keep working.
For how long have I used the solution?
Originally, Cisco Umbrella was called OpenDNS. I have used OpenDNS and Cisco Umbrella for about six years.
What do I think about the stability of the solution?
It is very stable. I never had any issue with it.
What do I think about the scalability of the solution?
It is highly scalable. You don't even have to install it on your computers. You just change your DNS, and it'll start to work internally immediately. I never had any issues with performance or anything like that. I'm sure it would suit larger companies as well, but larger companies would install their own Umbrella service on their own systems and deal with the capacity that way. So, it is very scalable.
How are customer service and support?
Their support is good. They always got back to me and answered issues. They showed me how to do my own debugging. They were always very professional and helpful. I would rate them a 10 out of 10.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We previously used proxy servers, but I wanted a more modern interface, and that's why I chose Umbrella.
How was the initial setup?
It was super easy. I'm a general IT person, and I was able to deploy it. I read the documentation, changed some settings, changed the DNS on my servers, and then rolled it out to the team. It was a pain-free implementation.
What about the implementation team?
I deployed it. It was pretty intuitive. I didn't have a consultant help me. I was able to implement the solution myself and manage it myself. That's a really good rating for an application. There are different systems you get to manage these days, and you can't have training on all of them. Because I rolled it out, I knew I rolled it out properly, and the system was working effectively. It was good. I liked using it.
What was our ROI?
The return on investment was that we kept the company secure. Nothing happened, which is the ultimate return on investment.
What's my experience with pricing, setup cost, and licensing?
It was a little bit expensive on a per seat basis, but the company I was running was only a midsize Australian company, and it was a reasonable budget per computer for that system.
It started off being a free product, and then Cisco bought it, and it went to a reasonable price. I was using Cisco AMP as well. So, my per computer cost was reasonably high, but for a small company, it was within an acceptable level.
Not having reviewed other systems, I can't tell how they compare, but I know that when you do special security licensing with Microsoft, it is on par. So, it is probably standard within the industry.
Which other solutions did I evaluate?
At the time, we were using OpenDNS, and then OpenDNS went to Cisco Umbrella. Because we'd had such success with OpenDNS, we just stayed on with the product. So, I didn't evaluate any other products at that time.
What other advice do I have?
It is just another layer that you need to wrap around your company to keep it safe unless you could just shut off that possible attack vector from external parties.
To leaders who want to build more resilience within their organization, I would say that they've got to keep doing it, and they've got to keep working on it. I'm constantly looking for better ways to secure the company. Cisco Umbrella would be a very useful addition to their set of tools.
A part of my plan in the long term was to implement the full suite. I never got around to that, but it was really good to know that I could go right down to app-level control. It was a very successful product, and I'd certainly recommend it to any business looking to just add another layer of security around their company.
In terms of providing a single pane of glass management, security does involve multiple systems, and I could log them all into the Cisco SecureX system. From there, I could get my single point where I could resolve issues with viruses, et cetera. So, in itself, it was a single pane of glass for DNS protection. It was fine, but I don't think there is ever going to be a single pane of glass anywhere. You're always going to have many different systems that you're using, but overall, it had a lot of features. It did the job it needed to do.
I would rate it a 9 out of 10. It is just app control that I want them to develop more.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
CEO at Ovnicom
Integrates easily with Meraki and gives us peace of mind knowing that our traffic is secure
Pros and Cons
- "For us and for customers, it's the ease of integration with Meraki. It's just a couple of clicks. That allows us to deploy very fast, and it doesn't change the way a customer uses his service. It's just more secure."
- "For us, as an MSP, the initial licensing changes were a roadblock, and they still could be a lot clearer. Specifically, it's an honor-based licensing system. We'd like it to be more specific to our traffic or our users so that we can make sure that the customer is paying for all their licensing."
What is our primary use case?
We're an MSP. We implement it for customers, and we also use it in our organization.
How has it helped my organization?
I'm not a technical guy. From my perspective, as an executive, it gives us more peace of mind knowing that our traffic is secure. There's basically an extra layer of security for all our traffic, so our customers' data is secure, and our own data is more secure. There's just peace of mind for me.
It does a pretty good job of securing the infrastructure from end to end. We're happy with it. That's the internet gateway security that we sell. There are other competitors out there, but it's agnostic to equipment. It very easily integrates with our customer base, which is mostly Meraki. The dashboard and reporting are very easy and very transparent for our customers, so we can do a good job of explaining to them their issues, what's been mitigated, and what're the advantages. They have visibility over why they're paying for this service.
It has helped us to consolidate tools. We use most of Meraki. It's from top to bottom, so everything is in a single pane of glass.
It has definitely saved time and money. We're able to onboard a customer for a trial in minutes, so after a sales pitch call, we can onboard them the same day. That's pretty amazing.
It has improved our cybersecurity resilience to the point that we haven't had issues. In security, not having issues is very good. We're able to keep up with the threats with a partner like Cisco and make sure that the best practices are met both at the on-premise level with the firewalls and then over the cloud. When they're not in the office or when they're remotely working, everything is secure.
For our scope or type of customers, which are retail customers with many branches, as an MSP, we take care of everything related to security. It allows us to manage many customers at the same time, and it allows the customer to focus on the other aspects of their business and leave the cybersecurity and networking to us.
What is most valuable?
For us and for customers, it's the ease of integration with Meraki. It's just a couple of clicks. That allows us to deploy very fast, and it doesn't change the way a customer uses his service. It's just more secure.
What needs improvement?
For us, as an MSP, the initial licensing changes were a roadblock, and they still could be a lot clearer. Specifically, it's an honor-based licensing system. We'd like it to be more specific to our traffic or our users so that we can make sure that the customer is paying for all their licensing.
For how long have I used the solution?
We've been using Cisco Umbrella for about a year.
What do I think about the scalability of the solution?
We've implemented it for maybe a thousand users.
How are customer service and support?
That's pretty good. I'd rate them a nine out of ten. More Spanish would be better for our techs. We're based in Panama.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We've tried other products and other gateways from Fortinet and Arbor. We chose Cisco Umbrella. The most important thing for us is that we're fully Meraki stack. We have thousands of deployments of Meraki, so it's very easy for us to implement. Our customers are long-time Meraki users, so they're very comfortable with the Cisco stack.
How was the initial setup?
It's deployed on the cloud, but I wasn't involved in its deployment.
What was our ROI?
We've seen an ROI with this product.
What's my experience with pricing, setup cost, and licensing?
In terms of licensing, we're not able to be extremely clear with the customer because it's based on their reporting. It's not based on the actual traffic. If they say they have 50 users but they have 80, we'll just buy for 50 users. That's something where we'd like to have more flexibility.
What other advice do I have?
Overall, I'd rate Cisco Umbrella a nine out of ten. There's always room for improvement, but it's very good.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer. MSP/Reseller

Buyer's Guide
Download our free Cisco Umbrella Report and get advice and tips from experienced pros
sharing their opinions.
Updated: July 2025
Product Categories
Domain Name System (DNS) Security Secure Web Gateways (SWG) Internet Security Cloud Access Security Brokers (CASB) Secure Access Service Edge (SASE) Cisco Security PortfolioPopular Comparisons
Cisco Secure Firewall
Cisco Identity Services Engine (ISE)
Prisma Access by Palo Alto Networks
Zscaler Internet Access
Lookout
Zscaler Zero Trust Exchange Platform
Cloudflare One
Microsoft Defender for Cloud Apps
Netskope
Cato SASE Cloud Platform
Cisco Duo
Cisco Secure Network Analytics
Cisco Secure Client (including AnyConnect)
Buyer's Guide
Download our free Cisco Umbrella Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Which is the better security solution - Cisco Umbrella or Zscaler?
- Which product do you prefer: Cisco Umbrella or Palo Alto Networks DNS Security?
- Which is the better security solution - Cisco Umbrella or Microsoft Cloud App Security?
- What are the pros and cons of Cisco Umbrella vs. Zscaler SASE for a large global enterprise?
- What are the differences and similarities of Symantec Fireglass and Cisco Umbrella?
- Which solution is better: Cisco Umbrella or Palo Alto Networks DNS Security?
- When evaluating DNS Security, what aspect do you think is the most important to look for?
- Why is Domain Name System (DNS) Security important for companies?
- What DNS security tool do you recommend?
- Why is domain name system security important?