Cisco Umbrella Reviews

In general, we use it for the security of our network.

We wanted to get an idea of what's happening outside of our network and what's coming to our network. We had no way to know before and we were just sitting there waiting for something to happen. At least now we can be proactive.

It has helped us to be more secure. Cisco Umbrella allows us to see threats in real time. We can also see if there are any bad actors inside of our network who are trying to do malicious things. It gives us a quick glance at the situation, at where we are and how vulnerable we are.

Another definite benefit is that it has helped us to remediate threats more quickly.

It's very important that the solution helps support hybrid work. In the past, we might have had one or two people who were working from home because of illness or pregnancy. Now, with 60 percent of our people working from home, Cisco Umbrella has really helped us out with threats that they might not even know exist on their side. We can monitor them and be proactive about them.

Also, if it didn't have a single pane of glass, we would not be using it. The single pane of glass gives you a one-stop shop. It's like going to Home Depot. You find all your stuff there. You can see all your threats and your endpoints. It's a very important feature and makes things very simple.

Another point is that it's very easy to maintain network connectivity.

I have been using Cisco Umbrella for about eight years.

The stability of Cisco Umbrella is very good.

I haven't had to scale it, but I would assume the scalability would be good.

We haven't contacted them from the time we were up and running.

We did not have a previous solution.

The deployment was straightforward.

I used an integrator, Harness LLC, and the experience with them was all good.

Our ROI is due to the level of threats that we don't have to deal with, threats that are being blocked by Cisco Umbrella.

There is room for improvement when it comes to the cost.

We looked at Trend Micro, but that was several years ago.

Look for programs that have a track record and that are proven. No matter what any individual might say, that person can't do it by themselves. They have to have support, and Cisco Umbrella is a good support.

Resilience in cyber security is like raising kids. You really can't stop. You have to be resilient continually. Every day is a different challenge. Just because you're good on Tuesday doesn't mean you're going to be good on Wednesday.
Cyber security resilience has been key for us, with people going home to work or to other places to do their jobs. That resilience keeps them working and keeps our network safe.

I love it. It's almost like trying to look at WiFi. You can't see the WiFi signal with your naked eye. It's the same with threats. You can't see them by just walking around the building. With a tool like Cisco Umbrella, you can see what you have and how to fix it.

For our employees, it means that their systems are working. They have no idea what we're doing behind the scenes to keep their systems working, unfortunately. I wish I could say, "Hey, guys, today Cisco Umbrella stopped 84 threats."

We use Cisco Umbrella to secure our gateway. All of the DNS forwarding coming out of the company from any site or all the DNS requests are forwarded through Cisco Umbrella, and then they determine if that is a safe address and if the content coming back is safe. They will either reject the addressing out of hand, or they'll look at the Layer 7 content and reject that from making it back to us.

We are using the Secure Internet Gateway (SIG) Advantage package. In terms of deployment, effectively, it's deployed from our private cloud. It's in our data closet on our servers.

It enables us to finally allow laptops to be used as workstations and allow data to leave the building. In the past, laptops were only used for VPN access, but they would connect back to their data inside the company. This has allowed us to have a level of confidence that they're protected as if they were behind our firewall. So, now, we've got work-from-home people who literally have their workstations with them.

We have six sites with 60 to 70 users. The baseline configuration allows for additional protection for any DNS requests as they leave those sites, and then the secondary policy is for the mobile devices as they leave the premises. When they're connected to public WiFi, they have an additional policy that kicks in for that time that they're not connected back to the company. So, when they're on public WiFi without a VPN, the tool will actually put that second policy in place that's more aggressive and offers a higher level of protection when it's not sitting behind the firewall. All that is automated. It's all built into the agent.

We don't allow WiFi inside of our network for connection to our actual business network. As soon as a device is docked, it disables WiFi on that mobile device.

When we have laptops that leave the building, they could connect to public WiFi before they establish a VPN connection back into the company. For that duration or that period of time when they're not docked in the network or on a VPN, they effectively don't have that full layer of security that I provide inside the building. This tool stands in during that period of time, and we extend the security settings through their basic firewall or their cloud-based firewall at that time. So, we do content filtering and control access, but they also are looking at new domains, IP addresses, and bad requests. They're blocking them on my behalf when a laptop is not sitting behind our security appliances.

There are a couple of interface issues. I know that they say that there are feature enhancements that are noted. For example, we've got the Cisco Meraki security appliances, and there, we geofence our company to where we're allowed to send and receive traffic. So, in our case, by default, we only allow traffic to six different countries, which allows us to effectively prevent traffic for the majority of bad players in the world, but they don't give you an easy way to do that in Cisco Umbrella. With Cisco Meraki, I can specify or pick the countries. I can say that I want to only allow traffic from these six countries, and I'm done. With Cisco Umbrella, I have to rely on the fact that they're going to prevent traffic to other countries. They're going to decide if it's good or bad. I can't geofence out. I can plot top-level domains, but .com and .net go global. I can certainly block a China (CN) or a Russia (RU) domain, but that doesn't give me the same level of granularity. 

Apparently, Cisco Umbrella has got that as a feature request to allow an administrator to say, "I specifically only want traffic to and from these countries. Everything else should be dumped." That way, when they're sitting behind my network or they go out in the wild, they have that same level of traffic being blocked.

I have been using it for 14 to 15 years.

We've had no issues. It has done exactly what it's supposed to do.

It is cloud-based. So, scalability should not be an issue. 

Any increase in its usage is all relative to the growth of our staff. Currently, we deploy the laptops for people who need to work from home or are traveling between the banks. That's roughly about 20% of our total staff. Some people aren't going to be working from home, and some of their jobs can't be done from home. They have no need for mobile devices. If there is a need to work from home, its usage will increase. It is there if we need it to scale, but at this point, it is not scheduled to change.

Once I became a paying customer, it was much better. The preliminary training is there, but when you get into the nuances and the details of some of its capabilities, you need to talk to tech support. Once you're a paid customer, you get direct access, and then it's good. When I'm able to get a hold of them, their technical support is a 10 out of 10.

Positive

I didn't use any similar solution previously. 

I was a hundred percent involved in its deployment. We had a couple of issues. The proof of concept was done without a lot of planning. So, there were some mistakes made along the way. If I was doing it again the second time, I wouldn't make the same mistakes. 

The default configurations have your baselines. Those are never supposed to get changed, and I changed and tweaked those for our proof of concept. After a couple of weeks, I had some additional guidance from the Cisco Umbrella team. You leave the baseline configuration, and then you clone and create a new configuration that sits in front of it. So, everyone gets the baseline, and you don't change that. If you want to change it, you make a new policy and then make the changes to that. If you change the baseline default policy and you make a mistake in it, you've to back that all out. If you make it in the new policy, in the worst case, you just delete it, and automatically everyone goes back to baseline. So, there's still a policy in effect. That was a training issue that should have been resolved. Now that I've done it, if somebody asks me, I would say that this is the way you've got to do it.

It was just me taking care of its deployment. In terms of maintenance, once it's configured, unless you're retweaking and adding or removing something that was blocked, it pretty much runs itself.

I have less maintenance to resolve, fix, and reconfigure VPN clients personally, and the feedback from the end-users is that they're more productive.

We were using the free version, and we implemented the paid version about two months ago.

I'm paying a fair price, but everything is negotiable with Cisco. One of the benefits that I got by having Cisco Umbrella is the licensing of the Cisco AnyConnect VPN client. There has always been an issue for years and years with Cisco Meraki in terms of VPN clients and using the native built-in Windows client. It keeps reconfiguring itself. By using Cisco AnyConnect as the VPN client, it's not affected by Windows patching or people typing in passwords by mistake. It's more resilient and doesn't change. With just Meraki solution, there was an extra expense for the Cisco AnyConnect VPN client. By having Cisco Umbrella, that licensing is now included.

There were a couple of other options, and I discussed them with another consultant. As a regulated industry, we have to do vendor management, and vendors have to be vetted. So, Cisco was already a vetted vendor. There are other companies that do the same thing, but Cisco didn't require me to do any more vetting. They were already a vendor.

When it's configured the way it's supposed to work, it turns itself on and off based on the status of the VPN or the dock condition. Once it's configured, it does exactly what it's supposed to do. 

If you're doing a proof of concept on it, fully understand how the policies are configured and what the flow is. You should understand the hierarchical status of the policies to configure it right the first time. You don't really want to guess it.

I would rate it a 10 out of 10.

Our primary use case for Cisco Umbrella is for content filtering and for different access lists. We have different lists for different departments of what they can access.

It makes it really easy to accomplish content filtering. We don't have to do a lot of customization. You just click the box for the content category and it's up to date. 

This ability is very important to my organization because we're in the financial sector and security is at a premium. 

Cisco Umbrella is pretty straightforward and simple to use. We recently did social media blocking and it was really easy for our marketing department to access it. It's pretty straightforward. 

It helped free up IT staff for other projects. It saves us a lot of time by blocking potential breaches. It's very reliable.

Umbrella has definitely helped us improve our cybersecurity resilience by blocking malicious links and adware.

I would like for them to continue building on IPS and IDS functionalities. 

We have been using Cisco Umbrella for five years. 

It's been very reliable. I haven't had any issues with it. 

The scalability is easy. It's deployed through group policies. 

We're a Cisco shop. We have a lot of their products.

We have seen ROI through its pop-up blocking. 

We hope that Cisco will help us consolidate tools more than it is now by incorporating more IPS and IDS functionality. 

My advice to someone considering Cisco Umbrella would be to focus on how easy is to use the GUI and how easy it is to navigate. You pretty much just click a box and the content categories work. 

I would rate Cisco Umbrella a ten out of ten. 

If your needs vary by department, I would advise making different groups for different departments. It's easier to do it that way than to set it up and go back to tie it to different AV groups. 

I'm doing business for customers. I'm building customer networks. We have Cisco Umbrella and Cisco Secure Endpoint, and the use case is that we connect to the company network from all over the place, and we need to do it in a secure way. 

We are just a small company with about 300 employees. Everybody is using these products to securely connect to the corporate network. From there, we support our customers. It needs to be really secure so that no security problems spread from our network to the customers' network. This is something we absolutely need to avoid. That's why these products are really good for us.

For me, it's quite good for daily work. Mainly, I work from a home office, so I have it running all day. It's okay for me. There is not much noise about it. I don't need to pay a lot of attention to this. It's just running in the background, and that's what I need.

It enables mobile work from anywhere. If you are at home, at a customer, or traveling, it enables a secure way of accessing the corporate network.

As a user, everything is there for securing our infrastructure from end to end to detect and remediate threats. There's nothing else that I need.

It saves time for sure. It doesn't require much attention. Everybody can use it. The end-users don't need to have any special skills. It's just perfect. I don't have the metrics on time savings because it isn't easy to know how much time you would have spent if you had an unstable product or if you had to take care of all this. 

For me, it's important that I get a connection to my corporate network in a secure and fast way. This product just runs in the background and doesn't need any attention. For me, as a user, it's perfect. 

Overall, I'm quite happy with Cisco products, but there could be one place where you can check what's going on. There could be one place where you get all the information about these products so that you don't need to look around. You get the status, information about what lately happened, and if there was anything on the machine in one single place.

We've been using Cisco Umbrella for about a year and a half, and we've been using Cisco Secure Endpoint for somewhat longer. It has been about three years.

I haven't been in touch with them because it's just working.

We used other products such as separate virus scanners. Using all the products from Cisco simplified things. You don't need to worry about whether it's compatible or whether you need to do something special on the antivirus side. It simplified things for me.

I work for customers, and this was set up by our internal IT department. 

I would advise seriously looking into it because, for our users, it's just working perfectly. 

I would rate it a 10 out of 10. There are no complaints.

We use it for DNS security.

It is deployed on the Umbrella cloud dashboard.

Cisco Umbrella helped to improve security by detecting and prohibiting threats.

I like the API. I also like the way Cisco Umbrella uses DNS to block malicious sites before they are opened.

Its general ability to detect and remediate threats is quite good.

The documentation is good, and we have been able to resolve any issues ourselves.

It would be good to have more extensions to third-party products and a client for other device types.

We've been working with Cisco Umbrella for four years.

I have not had any issues with stability.

The initial setup is very easy.

The price is fair, and the licensing cost is based on the number of users. We have seen a good ROI.

Overall, on a scale from one to ten, with ten being the very best, I'd rate Cisco Umbrella at nine.

Our clients use Cisco Umbrella compared with SD-WAN or Meraki solutions. They use layer 7 firewall and web proxy in most use cases and fewer DNS security functionalities.

Cisco Umbrella has replaced on-premises firewalls in our client's branches. Our client had one central cloud solution, and now, they no longer need the local firewall.

Our clients have found that Cisco Umbrella increases its security posture because there is a central policy that fits everything.

Though Cisco Talos is usually part of the backend, it is mandatory to have a good solution.

We've been implementing Cisco Umbrella for three years.

I have not seen any issues with scalability.

Cisco's technical support is pretty good. When a solution is available, they will find it. On a scale from one to ten with ten being the best, I'd rate Cisco's technical support at nine.

Positive

We sell both Cisco and Zscaler. If the client already has a Cisco solution, then Umbrella is usually a better fit. In cases when a customer already uses Zscaler, has another SD-WAN solution, or has a different vendor, Zscaler may be the first choice.

As a Cisco Secure reseller, we bring value to our customers through our technicians and engineers who consult with them and implement the solution. This is a benefit from our partner side.

The initial deployment is quite easy. It's internal, and with a few clicks, Cisco Umbrella can be up and running.

Cisco should make the solution cheaper.

The locks and management could be better. The product is fairly new, and it may take some time to get all the features up and running.

Overall, I would rate Cisco Umbrella an eight on a scale from one to ten.

It's usually used for DNS security, to block malicious websites and URLs, and for URL filtration.

It enables us to control access to malicious websites and block them from the start. And the URL filtration enables us to permit some URLs and block others.

You can manage and create policies based on a group of users. It can permit some URLs and block others. For example, we can block Facebook and YouTube.

From the DNS perspective, you can control and block malicious URLs. DNS security is the best way to use it to protect against malicious websites.

Cisco Umbrella provides a cloud management system. We can manage every client from a single workspace because they're in our portal. The single pane of glass management is user-friendly.

I would like to see improvement in the user and group policies. Sometimes it is not very accurate and they apply only to specific users in a group. It needs to be more accurate.

Also, the reporting needs some enhancements.

Finally, the integration with other solutions is a little complex. If you want to integrate with something like ArcSight or LogRhythm or Splunk, you need to do a lot of configuration. There are no easy ways to implement it.

I have been using Cisco Umbrella since 2016. As a solution partner, I implement Cisco Umbrella for customers. I have designed the implementation multiple times for different customers.

I have never heard of an outage in the service. The stability is good. The performance and accessibility are very good. The service is always operational because it runs on multiple servers and multiple load balancers.

It's scalable. Scaling depends on the licensing you have and the number of users. If you want to add a user or an endpoint, they can provide it.

Cisco's support is very good. They provide solutions and they don't take much time to resolve issues.

Positive

When our clients switch to Umbrella, it's either because I suggest it to them or they know about the product and they ask to have it brought into their organizations.

The implementation is easy.

We have a centralized security policy. For the end user traffic from the firewall to go out to the Internet, it traverses through the secure SD-WAN going back to the data center. It passes a lot of proxies, firewalls, and different security checks. Hence, there are some performance issues. Therefore, we asked Cisco to come in and see if there were any products that could improve this situation for the local Internet breakout, and this was the solution that they brought to the table.

We have a remote location that uses Viptela SD-WAN in conjunction with Umbrella.

It adds a lot of value to the environment. The end user has been much happier with their application performance after using it. I don't see any drawbacks with this solution. 

Hybrid work is also kind of important. Some users may be working from home these days, especially after COVID, as they don't necessarily have to come back to the centralized location for security checks. They can have security going out local from their home environment as well. 

The performance has been greatly improved, especially for some of the end users who kept creating tickets and complaining that it was really slow when everything had to go through the central tool for security checks. Now, everything is locally broken out. Also, security now has all the right filters and malware checks.

The malware piece protects the network from malicious attacks. We have had a lower case of security breaches. Therefore, that brings a lot of value to the table.

The content filtering piece is something that really ties back to what my customer is using because they do have some sites that they don't want end users to go to, in order for the security to be locally available, allowing the users to break out to the Internet. The content filtering is a key piece that our customers want to test and use. So, we tested, and it was successful.

The single-pane-of-glass management is very important. Management wants to look at a single frame, then expand it to get the information that they need, without relying on engineers to take it out. Sometimes, engineers need to go down multiple levels to get the information and package it, and then it is possibly not the information that they are looking for. So, it has to be done again.

I have been using the solution for about six months.

We haven't encountered any issues.

The scalability is good. There aren't any limitations with its scalability. We can scale it out.

We have had some tech cases. However, a lot of times we have our account engineers who help out. They are very savvy and knowledgeable. If something is unknown, they will reach out to internal Cisco for help. They are pretty good. I would give them 9 out of 10.

Positive

We did previously use a different solution. 

We wanted to do the local breakout, but our previous solution wasn't able to do it. We spent quite a bit of time testing the other solution, but it just didn't work. This is why we reached out to Cisco.

We did some testing. Network connectivity was a bit of a challenge at the beginning, but we were able to get the right help from Cisco. The POC probably took a month or so

Application performance has greatly improved and there are less operational issues. Productivity has been going up because we have less operational issues. Also, we have happy customers.

Usually when we have a good solution, we share it with our peers who can then bring it to their customer's attention, if they need to solve the same problem.

I would rate this solution anywhere between 8 and 9 out of 10 because it addresses the needs of my customer, but leaving room for improvement.

One of the main use cases of Cisco Umbrella kicked in during the COVID pandemic, as a SASE deployment—secure access, secure edge. Most of the users within a company started working from outside the company and that is when Umbrella became deployed a lot.

One of the most important features is the security posture check which Umbrella offers when a user accesses any website. That is one of the most unique features that it offers.

I would like to see hardware-based integrations. If a hardware platform were provided for Umbrella, that would definitely improve the market for it. The solution is pretty good, but if a hardware-based solution came through, it would meet all the compliance standards in my country.

Especially when we are addressing governmental customers, they hesitate to connect to the cloud. That is where we need a hardware platform so that the solution can be used on-premises as well.

I have been deploying Cisco Umbrella for about five years.

It's quite stable. I've gotten very positive feedback from the customers who have deployed it within their environment. The feedback has been amazing. It's up and running 99.9 percent of the time, since it's a cloud-based solution. We have had no problems related to bugs or any issues like that.

It is very scalable. Although I'm not talking to the clients anymore, I'm sure that the organization I worked with is working with them to spread the solution to more users who were not covered in the initial deployment. There is an adoption roadmap for this product.

Technical support is included as part of the subscription. At any point in time, if you have any queries, there's a 24/7 TAC number available. You can just call and log a case.

I'm also very satisfied with the documentation provided for the solution.

Positive

The previous solution we used was Akamai, but Akamai was more costly compared to Umbrella, and the consumption model was not favorable. Cisco Umbrella cost at least 30 percent less compared to what Akamai offered.

One of the key aspects of Umbrella is the deployment. It takes a matter of just 30 minutes to deploy it in any enterprise and, as soon as it is deployed, it starts to work, so it is seamless. The benefits are realized immediately.

The implementation strategy is pretty straightforward. On the customer's existing hardware you just have to make the entries that will enable the connection to Umbrella and it starts to run. It's a single-person deployment, a single network engineer. That is the beauty of it; you don't require a huge team to deploy it.

Umbrella doesn't require any maintenance. All the updates happen automatically. The configuration is a one-time process.

It can be deployed on the public cloud and private cloud. These are two of the selling factors, although public cloud is more common. It's a multi-location solution but can also be used by a single headquarters. On average, our deployments are for 2,000 endpoints.

If you look at the ROI, Umbrella significantly reduces investment in hardware-based firewalls. For example, typically, an enterprise has to refresh its firewalls every five years. By using Umbrella, they don't have to change their firewalls, rather the security posture is shifted to a cloud-based provider.

There are no hidden costs with Umbrella. Everything is included in the package.

Other than Akamai, there weren't many providers available in India.

One important piece of advice would be to look at your existing framework and see which use cases Umbrella can address. That will make the adoption much easier.

Umbrella is the best product available as of now. 

The first thing that I found most valuable is that there is much differentiation within the licensing so if anyone wants DNS security from the DNS security log, we are there already, and if anyone wants to go to a secure internet gateway, that is also available. We can get the integrated cloud DLP license keys. That is a good benefit with Cisco Umbrella. You can get a complete solution in a single licensing.

Additionally, the cloud firewall is available to integrate if you want. Also, you can create side to side within everything in the cloud.

Right now there are modules just like cloud DLP that are implemented very well. You can just log onto the site, upload and download with the multiple options that are available. That is a good option with Umbrella. Also, you can integrate it with a Cisco Meraki switch as a firewall. That is also a good benefit with Cisco Umbrella.

In terms of what can be improved, it should have more integrations with multiple end user OEMs.

Also, the Linux agent is a big challenge because multiple companies are going with Linux. There is no Linux right now for people working from home and they are looking for security which is not available via Linux. That needs to improve.

I have been using Cisco Umbrella for the last two years.

In terms of the stability, if you're talking about DNS Security, it is very stable. They recently launched Cloud DLP,  so I can't comment on that. We are now working with it, but I do not have too much experience. DNS security is a stable product. There is no issue with that.

Cisco Umbrella is a scalable product. That means, when you have 4,000 users you can take the license for 4,000 users. If they just have 1,500 or 2,000, you can go for that license. Also, on the lower level, if you want 10 licenses, that is also available. That's scalability.

Cisco's technical support is always number one compared to other OEMs.

Deployment and implementation are straightforward for anyone going for the basic certificate for networking, meaning CCNS or CCNP security. The implementation resources are readily available for it. We don't think Cisco has a difficult deployment. Umbrella is very easy. Everything is straightforward. There is no need to Google much for every feature because there is a tab where you can go and configure them. One thing I would like to improve in Umbrella is to have a Linux client available.

On a scale of one to then, I would rate Cisco Umbrella just an eight.

I would recommend it. If you have a Cisco environment, then I must recommend Cisco Umbrella if you have a Cisco Meraki or a Cisco Router solution. There is the option available to integrate and use the firewall, as well. You can deploy policies from the cloud.