No more typing reviews! Try our Samantha, our new voice AI agent.

Cisco Umbrella vs Palo Alto Networks DNS Security comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 29, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Umbrella
Ranking in Domain Name System (DNS) Security
1st
Average Rating
8.8
Reviews Sentiment
7.2
Number of Reviews
124
Ranking in other categories
Secure Web Gateways (SWG) (1st), Internet Security (1st), Cloud Access Security Brokers (CASB) (2nd), Cisco Security Portfolio (3rd)
Palo Alto Networks DNS Secu...
Ranking in Domain Name System (DNS) Security
3rd
Average Rating
8.6
Reviews Sentiment
6.1
Number of Reviews
16
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of September 2026, in the Domain Name System (DNS) Security category, the mindshare of Cisco Umbrella is 16.5%, down from 23.5% compared to the previous year. The mindshare of Palo Alto Networks DNS Security is 10.2%, up from 8.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Domain Name System (DNS) Security Mindshare Distribution
ProductMindshare (%)
Cisco Umbrella16.5%
Palo Alto Networks DNS Security10.2%
Other73.3%
Domain Name System (DNS) Security
 

Featured Reviews

SS
Sr. Technical Executive at a computer software company with 11-50 employees
Has required extensive customization for non-technical users and still needs better simplification
Customization for basic users can be complex, as it is targeted toward only technical users. It would be beneficial if Cisco simplifies the customization process while still ensuring strong security to prevent unauthorized access. Simplifying the customization part could enhance Cisco Umbrella, but overall, it is a good solution for me.
reviewer2695164 - PeerSpot reviewer
IT Security Specialist at a tech services company with 11-50 employees
Provides comprehensive protection for outgoing traffic and has improved management through AI features
I am currently working in IT security, focusing mainly on firewalls and IDS solutions. My primary focus is on Palo Alto Networks DNS Security. I only work with physical firewalls, specifically the 400 series and 1400 series, not with K2-Series firewall, Prisma Access, or CN-Series. We are using the URL Filtering license, Advanced Threat Prevention license, and DNS Security license. I think the price of Palo Alto Networks DNS Security is quite realistic; it's not too expensive, but of course, it's not cheap. Our clients are mainly using on-premises solutions. On a scale of 1-10, I rate Palo Alto Networks DNS Security an 8.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The customer experience is very good, and the product improves security posture."
"The single-pane-of-glass management is really important. In today's era, administration costs and operational expenses will cost you a lot, and it reduces that as well. You don't need extra resources to manage all your parameter firewalls, looking at every single device to allow resources internal access. By just introducing the single-pane-of-glass management, it has lifted the burden off of management, especially the network management."
"The security and access control features."
"It enables us to finally allow laptops to be used as workstations and allow data to leave the building."
"We use Cisco Umbrella for web security and it's very good."
"Cisco is a very efficient and on-point solution that controls the whole network and settings on one page. We can monitor the entire network."
"It provides centralized, device-agnostic management of the Internet experience."
"The interface is well organized, so you can easily find everything. Even if you don't have much experience with Cisco, you can easily navigate the solution and find your way around. Everything has been done well, from the deployment to monitoring."
"A lot is working well."
"DNS sinkhole is a valuable feature."
"DNS security is required to filter out the DNS traffic, any DNS-based attacks, DNS DDoS attacks, and DNS amplification attacks."
"I would rate the scalability a nine out of ten."
"Palo Alto Networks DNS Security is a stable solution."
"I think it's easy to manage Palo Alto Networks DNS Security compared to other firewalls, and the feature set is really good."
"We now have insight into our DNS requests and we can actively see how many thousands of malicious requests have gotten knocked down in the last day or week that we didn't have before. There's more insight for both security and more insight."
"The solution's most valuable features are data exfiltration and DNS tunneling."
 

Cons

"Security, overall, can always be improved."
"The pricing could be improved."
"There are a couple of interface issues. I know that they say that there are feature enhancements that are noted. For example, we've got the Cisco Meraki security appliances, and there, we geofence our company to where we're allowed to send and receive traffic. So, in our case, by default, we only allow traffic to six different countries, which allows us to effectively prevent traffic for the majority of bad players in the world, but they don't give you an easy way to do that in Cisco Umbrella. With Cisco Meraki, I can specify or pick the countries. I can say that I want to only allow traffic from these six countries, and I'm done. With Cisco Umbrella, I have to rely on the fact that they're going to prevent traffic to other countries. They're going to decide if it's good or bad."
"If the security issues are taken care of it would be better."
"We have had issues because of functionality that it didn't support at the time, which is why it has not been fully deployed yet."
"Pricing needs to be reduced for SMB based on the blocking capabilities and the lack of other features that you just cannot do in DNS, such as authentication-based filtering."
"It would be good to have more extensions to third-party products and a client for other device types."
"My biggest concern, and I'm sure everyone's biggest gripe with TAC, is just turnaround time. If you open a case in the evening, you might get an agent in another region, and then your ticket cycle only goes from 5:00 PM to 10:00 PM when you're out of work."
"Every vendor that sells DNS or firewalls needs to be able to protect against DNS look-up attacks and DNS naming hacks. This is true of Palo Alto as well as others."
"Palo Alto should explore agentless approaches to integrate DNS Security more easily and efficiently."
"I'm not really sure what needs improvement. The only hiccup I've really seen is a couple of the DNS requests get flagged as the Sophos traffic instead of DNS traffic, but that's more of their app detection in the DNS Security. I haven't really seen any issues with the DNS security."
"If the tool offers improved data security, I think it would be good."
"The product should provide email protection."
"The solution’s scalability could be improved."
"The number of hotfixes indicates that there are many bugs in the new releases. Comparing a few years earlier, a release contained much fewer hotfixes."
"Pricing is one of the areas of concern in Palo Alto Networks DNS Security since it is an expensive product. I feel that the product's pricing is an area that could be improved."
 

Pricing and Cost Advice

"Pricing and licensing of Cisco Umbrella is a bit confusing because you have to separate the DNS solution and the full-feature solution. Cisco in Portugal helped us understand which one was the right one for us."
"There is a subscription cost."
"The price should be slightly lower than the current price because if you look at the whole solution, it is simply a threat intelligence solution to block blacklisted things. The price should be lower looking at the features provided by the solution. The price isn't too high either, but it could be lower."
"Our licensing fees are on a yearly basis."
"The solution’s pricing is reasonable."
"Licensing fees are paid on a yearly basis."
"Pricing depends on the automation requirements of the organization."
"Cisco should make the solution cheaper."
"The product is expensive compared to Fortinet."
"If one is very cheap and ten is very expensive, I rate the tool's price as two."
"Palo Alto Networks DNS Security is an expensive product. I rate the product's pricing an eight on a scale of one to ten, where one is cheap, and ten points are expensive."
"It is not an expensive solution."
"The product is expensive. My company makes payments on a quarterly basis towards the solution's costs."
"The solution's pricing is equal to Cisco AMP or Cisco Umbrella."
"There aren't many vendors offering DNS security solutions, but generally, Palo Alto subscriptions tend to be more expensive than other security vendors."
"There is an annual license for the solution and I am satisfied with the pricing."
report
Use our free recommendation engine to learn which Domain Name System (DNS) Security solutions are best for your needs.
913,806 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Manufacturing Company
8%
Financial Services Firm
8%
Outsourcing Company
8%
Financial Services Firm
14%
Manufacturing Company
11%
Computer Software Company
9%
Performing Arts
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise31
Large Enterprise51
By reviewers
Company SizeCount
Small Business6
Large Enterprise10
 

Questions from the Community

Which is the better security solution - Cisco Umbrella or Zscaler?
Cisco Umbrella and Zscaler Internet Access are two broad-spectrum Internet security solutions that I have tried. Zscaler Internet Access is a good option for carrying out multiple security functi...
Which is the better security solution - Cisco Umbrella or Microsoft Cloud App Security?
Cisco Umbrella is an integral component of the Cisco SASE architecture. It integrates security in a single, cloud-native solution, unifying multiple features like DNS-layer security, threat intelli...
What is your experience regarding pricing and costs for Cisco Umbrella?
The pricing for Cisco Umbrella is fair compared to other platforms out there for DNS security. We acquired it as a bundle with other Cisco purchases.
What needs improvement with Palo Alto Networks DNS Security?
DNS Security protects us against threats, malware, and malicious domains or malicious navigation to the internet, which is where it can be improved the best. Palo Alto helps us with support, so I d...
What is your primary use case for Palo Alto Networks DNS Security?
I can describe my use cases for Palo Alto Networks DNS Security, which is used for protecting our network. I use this product, Palo Alto Networks DNS Security, with Palo Alto firewalls.
What advice do you have for others considering Palo Alto Networks DNS Security?
I don't have experience with Palo Alto Networks AutoFocus. Regarding the DNS Security, I have firewalls with the DNS Security module in the firewall. DNS Security is something we configure in our f...
 

Also Known As

OpenDNS
No data available
 

Overview

 

Sample Customers

Chart Industries, City of Aspen, Eastern Mountain Sports, FLEXcon, George Washington University, Jackson Municipal Airport Authority, Ohio Public Library Information Network, PTC, Richland Community College, Smart Motors, Tulane University, VeriClaim
Information Not Available
Find out what your peers are saying about Cisco Umbrella vs. Palo Alto Networks DNS Security and other solutions. Updated: September 2026.
913,806 professionals have used our research since 2012.