Cisco Umbrella vs Zscaler SASE comparison

Cancel
You must select at least 2 products to compare!
Lookout Logo
315 views|255 comparisons
Cisco Logo
7,306 views|5,048 comparisons
Zscaler Logo
6,416 views|5,043 comparisons
Comparison Buyer's Guide
Executive Summary
Updated on Aug 1, 2023

We compared Cisco Umbrella and Zscaler SASE across several parameters based on our users' reviews. After reading the collected data, you can find our conclusion below:

  • Features: Cisco Umbrella is highly regarded for its seamless integration with existing infrastructure, extensive range of security features, and ability to centrally manage security. Zscaler SASE is commended for its proxy and content filtering abilities, secure application access, and providing an all-in-one platform for various tasks.

  • Room for Improvement: Cisco Umbrella could enhance security by adding a transferring proxy feature and improving its Linux agent for Linux-based companies. Zscaler SASE needs improvements in configuration and management and better visibility in the DX layer. Some users have also reported performance and latency issues with Zscaler SASE.

  • Ease of Deployment: Based on the feedback, Cisco Umbrella has a simple and user-friendly initial setup that can be completed quickly in around 30 minutes. Zscaler SASE has a straightforward setup, but the deployment time can vary depending on specific use cases and complexity. Zscaler provides excellent support during the process and effectively resolves any issues that may arise.

  • Service and Support: Customers have praised Cisco Umbrella's support, describing it as excellent and superior to the customer service of other vendors. Zscaler SASE's support received varied feedback. Some customers were satisfied, but others faced delays and expressed frustration with having to repeatedly explain problems.

  • Pricing: The cost of Cisco Umbrella differs based on the specific needs and approach of the customer, with flexible pricing and transparent charges. It is seen as reasonable and competitive by some, but a few perceive it as costly. Zscaler SASE is seen as expensive, with some users questioning its value. The cost of a gateway per data center is particularly high, making it a costly implementation compared to alternatives.

  • ROI: Cisco Umbrella has proven to be a valuable investment by addressing maintenance concerns, reducing expenses associated with hardware updates, and effectively thwarting threats. It offers enhanced visibility and aids in remediation efforts. Zscaler SASE offers enhanced team visibility and a favorable return on investment when compared to Fortinet.

Comparison Results: Users appreciate Cisco Umbrella for its easy setup, extensive security features, and ability to centrally manage security. Zscaler SASE offers an all-in-one platform with advanced proxy and content filtering abilities. However, Zscaler needs enhancements in configuration and management. Cisco Umbrella could improve its Linux agent. Cisco Umbrella is considered to be reasonably priced, but Zscaler SASE is regarded as expensive. 

To learn more, read our detailed Cisco Umbrella vs. Zscaler SASE Report (Updated: March 2024).
763,955 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The solution is stable.""The most valuable features are the antivirus as a whole, the anti-malware, and all of the protection features that scan our enterprise devices.""The protection offered by the product is the most valuable feature. It detects vulnerabilities or traps on our users' phones and then prompts them to clean up their devices. Tools we used previously would only discover, which required us to gather information on the backend, so Lookout is a welcome upgrade.""On the outside, the main differentiation is because Lookout ingest. They have ingested basically all of the apps for the last ten years and all the versions of all the apps, and we have that in a corporate database that allows us to do very large-scale machine learning and analysis on that data set. That's not something that any of the competitors really have the capability to do because they don't have access to the data set. A lot of the apps you can no longer get them because that version of the app is five or six years old, and it just doesn't exist anywhere anymore, except within our infrastructure. So, the ability to have that very rich dataset and learn from that dataset is a real differentiator."

More Lookout Pros →

"We use Cisco Umbrella for DNS filtering and as a secure gateway.""I like that it integrates with the infrastructure. I also like the kind of data and intelligence that's built-in. It helps create innovative reports for security.""Using this solution has meant that we've needed to make fewer firewall changes.""When it comes to hybrid work it's pretty effective. We've got the agents. We can protect people inside our building and, when they're using their laptops out in the field, they're still protected. It's working well.""​They have a wealth of articles in their knowledge base. This has given me the freedom to troubleshoot on my own time. ​​""I like the original functionality, which allows for providing secure DNS services.""Umbrella has helped my IT staff in two ways. First, our security team was able to get more insights into the users, their devices, and the sites they browse. Second, our system administration team was able to manage DNS resolutions in a way that is more accessible and less intrusive to our domain system.""Cisco Umbrella is easy to monitor, manage, and deploy."

More Cisco Umbrella Pros →

"Users get direct secure access to applications over the internet.""It does the job. What it is needed for. I can use it for VPN, I can use it for secure connections, I can use it as a firewall. So the solution does the job.""The scalability of the solution is great.""The solution offers a simplified network infrastructure and security functions and it enables secure remote access for the users""With SASE, we have a single platform that covers multiple task services with which we need to control access. All the features are equally valuable.""The most valuable feature is its ability to establish connectivity for remote users and remote endpoints. It offers a high level of granularity compared to typical VPNs, which also encapsulate a lot of I/O.""The most valuable features of this solution are the CASB solutions, which is protecting their Office 365.""Sandboxing, DLP, and SSL inspection engine are the most valuable features of Zscaler SASE."

More Zscaler SASE Pros →

Cons
"From the analysis that we've done, they do seem to be maybe a step behind in trying to enter the market with a new solution. But when they do pick up, they do come out with some good products.""We just submitted an enhancement request reflecting the main area we want to see improvement in; the APIs. Currently, we're able to build dashboards, but it's somewhat backward because we use our MDM API to create them. Lookout should provide API to customers so we can query our data and use it in our cloud, and this is the only outstanding area for improvement with the product right now.""Lookout was moving into the SSE space. And so their work on SecureWeb Gateway and SD-WAN is still sort of evolving.""The stability depends on the service from where you access it. Because sometimes, the place you are in, you have Gateway. You don't have Gateway. The gateway is overutilized. At the end, you need to go through their gateways. And this is the key point here. You have a tracking point. If it's not well orchestrated, and it scales up as you add more to the existing team, you will suffer"

More Lookout Cons →

"Network connectivity was a bit of a challenge at the beginning, but we were able to get the right help from Cisco.""Cisco Umbrella is difficult to manage and needs to include a dashboard. It needs to improve pricing as well.""The API is very Cisco orientated, which is absolutely fine if you're using Cisco Firepower and SecureX kind of products, but if you want to integrate with third parties, it is a bit tricky. There are some key API connectors for the more prevalent SIEM tools. I would really like to see in Cisco Umbrella the ability to create customized reports and then assign the rights to view these reports to people within a group. I should be able to create a customized report, which is viewable by anybody who has the rights. I should be able to create groups within Cisco Umbrella, and then assign reports to groups and have those reports split out automatically only to those groups. I can kind of do it by restricting my email list, but it is a half-complete way of doing it.""They can maybe simplify the configuration. For example, sometimes, the proxy part is quite difficult, and that's why we didn't deploy that.""The firewall capabilities could be better. Cisco is starting to introduce some layer 7 capabilities now, but there's still some room to grow. They should continue with the development of Umbrella so that it is a full-blown cloud-managed firewall solution.""I would like to see Cisco enable us to get objects from the internet. I would also like to be able to choose groups.""There are a couple of different pieces that have different portals. I know they're working on getting them all into one portal, but that's probably the biggest thing that needs improvement right now. It's not a single pane of glass yet.""They need to improve analytics so they report on more of the specifics of user activity."

More Cisco Umbrella Cons →

"It has a limitation, if you are creating a rule or something for a web application or something, you could only add five users, not more than that. Five or four users are only included in a rule. If you want to create a rule for more than five or four users, you have to go through other methods, not particularly with the application. Working within the application with this method would be quite easy as compared to listing a URL or a normal IP address.""We often face performance and latency issues with Zscaler SASE.""The granularity in blocking is not sufficient, as new domains are automatically blocked for 30 days without further information.""It has massive room for improvement. The Zscaler product itself is okay, but it doesn't give enough granularity for us as an organization to stipulate rules or processes, especially for data-driven services. For instance, we can stick on SSL inspection, but it's just a click box. It doesn't allow us to go any further into the detail of the SSL inspection. We also can't pull it out without having an additional logging server. It just doesn't give us enough granularity. They should give us more control over the interfaces because it is all backend. They weren't very open to discussing their backend architecture with us in terms of their own data centers. They can maybe a little bit more open about what components are there and how the backend infrastructure works alongside Zscaler. Its licensing can be better. Some of the additional licensing costs are quite high, and they should have certain features ready and available as a baseline rather than having to purchase additional licenses for it. Their support should also be improved. I initially had a consultant from Zscaler for its deployment, but the support that I had throughout the deployment of the project wasn't the best.""The interface needs a bit of work.""The area that requires improvement is their support. The current support is lacking.""An area for improvement would be the ease of configuration.""The DX layer could be better if it had improved visibility."

More Zscaler SASE Cons →

Pricing and Cost Advice
  • "The pricing is fair; it's comparable to our previous solution, and we carried out multiple POCs and POVs (proof of value). The product is worth the money we pay for it."
  • "Lookout is definitely on the lower end when it comes to price point and that seems to be the only differentiator. The technology is in place in this space and it's really about who is coming in at the better price point now."
  • "In terms of feature performance versus cost, they're a good value."
  • "The licensing costs are good. Prisma has much more options and support for security, but it has a higher cost. For example, Lookout costs 2/3rd of Prisma's licensing price."
  • More Lookout Pricing and Cost Advice →

  • "​The pricing is fair."
  • "You can request an evaluation license​."
  • "It needs a better price point."
  • "The product is pricey compared to Cisco Firepower."
  • "The price could be lower."
  • "There is a one-time cost of approximately $800 USD per user, and then a yearly support fee of about $50 per user."
  • "Our costs were negotiated, and they are okay."
  • "Our licensing fees are on a yearly basis."
  • More Cisco Umbrella Pricing and Cost Advice →

  • "It has been relatively reasonable for what it does. Some of the additional license costs based on the advanced next-generation firewall functions are quite high, and they should have certain features ready and available as a baseline rather than having to purchase additional licenses for it. Overall, the cost seems reasonable."
  • "The pricing is expensive and on the higher end. Honestly, in my opinion, it is not worth the price."
  • "There is definitely an ROI."
  • "The pricing is quite high, especially when it comes to the gateway."
  • "Zscaler SASE software is quite expensive compared to other solutions"
  • More Zscaler SASE Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Secure Access Service Edge (SASE) solutions are best for your needs.
    763,955 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:The licensing costs are good. Prisma has much more options and support for security, but it has a higher cost. For… more »
    Top Answer:The solution could improve identity integration as well. Zero trust, it's a good start as a zero-trust solution… more »
    Top Answer: Cisco Umbrella and Zscaler Internet Access are two broad-spectrum Internet security solutions that I have tried.… more »
    Top Answer:Cisco Umbrella is an integral component of the Cisco SASE architecture. It integrates security in a single, cloud-native… more »
    Top Answer:Cisco Umbrella is easy to monitor, manage, and deploy.
    Top Answer:It does the job. What it is needed for. I can use it for VPN, I can use it for secure connections, I can use it as a… more »
    Top Answer:Zscaler SASE is quite expensive compared to other solutions. The price is not fixed and it does not include all of the… more »
    Top Answer:The reports can be made easier. The solution takes time to fetch reports in the Database section. Otherwise, the… more »
    Comparisons
    Also Known As
    CipherCloud
    OpenDNS
    Learn More
    Overview

    Lookout is a well-established and powerful secure web gateway (SWG) solution that protects more than 200 million users from threats that can result from the penetration of unsecured web traffic into their networks. Lookout is designed to enable organizations to work remotely while maintaining a tight blanket of security over their confidential business data. It provides administrators with security that extends from their endpoints to the cloud service that they are using to run their organization’s network. 

    Users of Lookout are able to proactively detect threats and keep themselves secure from a field of threats that constantly evolves. IT teams can protect their organizations without having to rely on any other security solutions. This singular solution can run on multiple kinds of mobile devices. The privacy of individuals is preserved while keeping compliance rules intact. Additionally, users gain access to a number of tools that enable them to prevent security breaches from taking place.

    Lookout Benefits

    Some of the ways that organizations can benefit by deploying Lookout include:

    • Ease of deployment. Lookout is a solution whose design makes it easy for users to deploy it. It provides users with simple, step-by-step instructions that remove the need for organizations to devote extensive amounts of time to make sure that it is properly set up. Anyone can quickly set up the solution without undergoing technical training. 
    • Built-in support. Users of the Lookout application have access to built-in demos that can teach them how to use various solution features. Instead of spending time trying to figure out the application, users can watch the demo that is most relevant to them and see for themselves how that particular feature is used.
    • Easy-to-use user interface. Lookout’s user interface is laid out in an intuitive way that makes it easy for administrators to navigate. This interface is present in both the mobile and desktop versions of this solution. 
    • Settings customization. Lookout has a built-in settings customization menu. This makes it possible for administrators to easily customize their settings so that they best conform to their needs. 

    Lookout Features

    • Activity monitoring and activity tracking. Lookout’s activity monitoring and activity tracking capabilities enable users to keep a close eye on the activities that are taking place in their networks. IT teams and administrators have the ability to watch their networks for any unusual activity. These features ensure that organizations can keep ahead of any potential threats. They provide the kinds of insights and warnings that make the jobs of those IT teams and administrators much easier and more streamlined. 
    • Encryption. Organizations that employ Lookout can encrypt their networks and keep crucial business data from being read by unauthorized parties. This feature keeps the secrets organizations are trying to keep out of the wrong hands.
    • Anti-virus tools. Lookout provides users with tools to block threats from harming their networks. These tools can successfully block 99.6 percent of threats without raising false alarms. 

    Cisco Umbrella offers flexible, cloud-delivered security according to users’ requirements Cisco Umbrella includes secure web gateway, firewall, and cloud access security broker (CASB) functionality all delivered from a single cloud security service. Cisco Umbrella’s protection is extended to devices, remote users, and distributed locations anywhere. As company employees work from many locations and devices, Cisco Umbrella is the easiest way to effectively protect users everywhere in minutes.

    Cisco Umbrella uses machine learning to search for, identify, and even predict malicious domains. By learning from internet activity patterns, this DNS-layer security solution can automatically identify attacker infrastructure being staged for the next threat. These domains are then proactively blocked, protecting networks from potential compromise. Cisco Umbrella analyzes terabytes of data in real time across all markets, geographies, and protocols.

    Cisco Umbrella works with leading IT companies to integrate its security enforcement and intelligence. Built with a bidirectional API, Cisco Umbrella makes it easy to extend protection from on-premises security appliances to cloud controlled devices and sites.

    Cisco Umbrella is suitable for small businesses without dedicated security professionals, as well as for multinational enterprises with complex environments.

    Why use Cisco Umbrella?

    • Simplify security management: Cisco Umbrella is the fastest and easiest way to protect all users within minutes and reduces the number of infections and alerts sent from other security products by stopping threats at the earliest point. With no hardware to install and no software to manually update, ongoing management is simple

    • Reliable reporting: Cisco Umbrella reports show activity for each device or network in the system. Users gain a more complete picture of the security risks facing their organization and can take action to remedy them.

    • Manage and control cloud apps: Umbrella provides visibility into sanctioned and unsanctioned cloud services in use across the enterprise. Users can uncover new services being used, see who is using them, identify potential risk, and block specific applications easily.

    Reviews from Real Users

    Cisco Umbrella stands out among its competitors for a number of reasons. Some of the major ones are its DNS-based protection, ability to protect users no matter where they are located, stability, and high performance.

    Daniel B., a network specialist at Syswind Kft, writes, “We primarily use the solution as cloud security for our branches. It protects us from direct internet outbreaks. It makes for good flexibility. The solution is very easy to manage. We found the initial setup, for example, to be quite simple. Efficient protection on the DNS level and even higher. The sandboxing feature analyses and handles the complicated security risks.”

    Victor M., SOC & Security Services Director at BEST, notes, “It provides security for the remote workers and it helps to improve enterprise security in a very easy way. We mainly enjoy web software protection capabilities. It prevents the end-users from getting into bad sites or sites that potentially could have malware or could be phishing. It helps end-users avoid the wrong sites. The solution works very smoothly. The user interface is good.”

    OpenDNS is a part of Cisco providing a suite of consumer products aimed at making the internet faster, safer, and more reliable.

    For the last 30 years, networks have been connecting users to applications in the data center, which was surrounded by a secure perimeter to keep apps and data safe from the outside. But with applications moving to the cloud, IoT becoming more common, and users connecting from everywhere, network security is no longer able to solve the fundamental challenge of security and is instead adding significant complexity and cost.

    Sample Customers
    Chart Industries, City of Aspen, Eastern Mountain Sports, FLEXcon, George Washington University, Jackson Municipal Airport Authority, Ohio Public Library Information Network, PTC, Richland Community College, Smart Motors, Tulane University, VeriClaim
    Siemens, AutoNation, GE, NOV
    Top Industries
    VISITORS READING REVIEWS
    Computer Software Company20%
    Manufacturing Company10%
    Financial Services Firm10%
    Government7%
    REVIEWERS
    Financial Services Firm14%
    Comms Service Provider11%
    Computer Software Company9%
    Educational Organization6%
    VISITORS READING REVIEWS
    Computer Software Company18%
    Educational Organization16%
    Financial Services Firm9%
    Manufacturing Company7%
    REVIEWERS
    Computer Software Company40%
    Manufacturing Company20%
    Pharma/Biotech Company10%
    Consumer Goods Company10%
    VISITORS READING REVIEWS
    Computer Software Company18%
    Financial Services Firm11%
    Manufacturing Company10%
    Retailer5%
    Company Size
    VISITORS READING REVIEWS
    Small Business22%
    Midsize Enterprise16%
    Large Enterprise62%
    REVIEWERS
    Small Business38%
    Midsize Enterprise23%
    Large Enterprise39%
    VISITORS READING REVIEWS
    Small Business19%
    Midsize Enterprise26%
    Large Enterprise55%
    REVIEWERS
    Small Business31%
    Midsize Enterprise23%
    Large Enterprise46%
    VISITORS READING REVIEWS
    Small Business20%
    Midsize Enterprise15%
    Large Enterprise66%
    Buyer's Guide
    Cisco Umbrella vs. Zscaler SASE
    March 2024
    Find out what your peers are saying about Cisco Umbrella vs. Zscaler SASE and other solutions. Updated: March 2024.
    763,955 professionals have used our research since 2012.

    Cisco Umbrella is ranked 2nd in Secure Access Service Edge (SASE) with 55 reviews while Zscaler SASE is ranked 7th in Secure Access Service Edge (SASE) with 10 reviews. Cisco Umbrella is rated 8.8, while Zscaler SASE is rated 8.2. The top reviewer of Cisco Umbrella writes "We can see all of our locations in one place and only have to make changes once for all our locations". On the other hand, the top reviewer of Zscaler SASE writes "Allows for strict access control, granting access to specific applications at a URL level rather than at the physical IP level". Cisco Umbrella is most compared with Zscaler Internet Access, Microsoft Defender for Cloud Apps, Prisma Access by Palo Alto Networks, Palo Alto Networks DNS Security and TitanHQ WebTitan, whereas Zscaler SASE is most compared with Prisma Access by Palo Alto Networks, Cato SASE Cloud Platform, VMware SD-WAN, Netskope and FortiSASE . See our Cisco Umbrella vs. Zscaler SASE report.

    See our list of best Secure Access Service Edge (SASE) vendors.

    We monitor all Secure Access Service Edge (SASE) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.