Our main use cases for Cisco Umbrella are like Blocking malicious websites and phishing attacks ,Securing users when they are outside the office and protecting against malware at the DNS level
Manager, Information Technology at a hospitality company with 5,001-10,000 employees
It Provides Centralized DNS security has reduced web threats and supports proactive policy management
Pros and Cons
- "Before using Umbrella, we had a lot of complaints about users accessing websites and malware being downloaded onto the user's device, but after using Umbrella, issues related to malware have really reduced, and we are now fully satisfied."
- "I want to highlight one concern: Umbrella can be bypassed by using the Play Store and other applications, which is something your team could look into, as users are bypassing the filter and accessing the websites."
What is our primary use case?
How has it helped my organization?
Cisco Umbrella has improved our security by blocking threats before they reach users. It also gives better visibility of internet activity, protects users even خارج office, and reduces IT workload with easy cloud management.
What is most valuable?
The best feature Umbrella offers is web filtering, which is crucial because the user can secure their laptops. Sometimes users try to access malicious websites, but Umbrella is really helpful and suddenly blocks these websites, which is really beneficial for us.
Before using Umbrella, we had a lot of complaints about users accessing websites and malware being downloaded onto the user's device, but after using Umbrella, issues related to malware have really reduced, and we are now fully satisfied.
Complaints about malware incidents were reduced by 40 to 50% after using Umbrella.
What needs improvement?
I want to highlight one concern: Umbrella can be bypassed by using the Play Store applications, which is something your team could look into, as users are bypassing the filter and accessing the websites by changing DNS and point to using application DNS.
I would suggest one more improvement regarding the mobile application: if we change the DNS server on our laptop and install the mobile application on our mobile after changing the DNS, Umbrella can be bypassed, allowing a user to access any website by sidestepping Umbrella protection. I think the team should check this, as I've talked to a few users in our organization who are making such attempts to bypass Umbrella protection.
Some changes are required regarding the user's ability to easily bypass the protection, and I think the team should work to resolve this so that we can ensure our users are secure and cannot bypass this protection.
Buyer's Guide
Umbrella
July 2026
Learn what your peers think about Umbrella. Get advice and tips from experienced pros sharing their opinions. Updated: July 2026.
906,887 professionals have used our research since 2012.
For how long have I used the solution?
We are Using Umbrella in our organization for the last four years, and it plays a vital role; it is a really great product, so I am fully satisfied.
What do I think about the stability of the solution?
Yes, Cisco Umbrella is very stable. It runs on a reliable cloud infrastructure, so there is minimal downtime. It continues to protect users even when they are outside the office network, making it consistent and dependable for daily use.
What do I think about the scalability of the solution?
Cisco Umbrella is highly scalable because it is cloud-based. We can easily add new users, devices, or locations without installing extra hardware. It grows with the organization and works well for both small and large environments with minimal effort.
How are customer service and support?
Global Team provide us technical support
Which solution did I use previously and why did I switch?
No
How was the initial setup?
Straightforward
What about the implementation team?
No
What was our ROI?
yes, definitely It has reduced security incidents like malware and phishing, which saves cost on recovery and downtime
What's my experience with pricing, setup cost, and licensing?
No Comment please
Which other solutions did I evaluate?
we only used Cisco Umbrella
What other advice do I have?
Cisco Umbrella is a strong and reliable security solution, especially for cloud and remote users. I would recommend it to organizations looking for easy deployment, good protection, and low maintenance. Start with proper policy planning to get the best results.
The cloud provider I use for Umbrella is Amazon Web Services (AWS).
I did not purchase Umbrella through the AWS Marketplace; We purchased it from our global team.
There are no additional improvements needed for Umbrella that I haven't already mentioned.
My review rating for this product is 9.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Jun 29, 2026
Flag as inappropriateAssociate Manager at Chevron
Strict URL blocking has protected our organization and continues to strengthen cyber defense
Pros and Cons
- "Umbrella positively impacts my organization by protecting us from cybersecurity threats and malware."
- "I think Umbrella can be improved regarding AI capabilities."
What is our primary use case?
My main use case for Umbrella is OpenDNS. I use Umbrella with OpenDNS in my organization by ensuring that all external URLs are denied by default. When a user requests access, they raise a ticket to us and we analyze it. If it is a valid URL, we allow the request to grant access. I chose to set it up this way for cybersecurity protection, which addresses a particular challenge we face.
What is most valuable?
The best features Umbrella offers in my experience include OpenDNS and the ability to block URLs. Umbrella positively impacts my organization by protecting us from cybersecurity threats and malware. I think Umbrella can be improved regarding AI capabilities.
What needs improvement?
I think Umbrella can be improved regarding AI capabilities. I believe some tasks need to be automated, especially the repetitive tasks.
For how long have I used the solution?
I have been using Umbrella since 2023, so it has been three years.
What other advice do I have?
I don't have anything else to add about my main use case with Umbrella. So far, I don't have a specific example of how the advanced URL blocking feature has helped my team or made things easier from the support perspective. I don't wish to add anything else about the features.
I don't have specific outcomes to share, but it has been helpful so far without seeing fewer incidents or noticeable changes in security metrics since using Umbrella. Regarding Umbrella's AI capabilities, I think its governance and security are good. I find the accuracy and reliability of Umbrella's AI output to be good, with an accuracy and reliability rating of eight overall. The accuracy and reliability of Umbrella's AI output is good, and it is fine without any improvements needed. My overall review rating for Umbrella is 9.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Jun 9, 2026
Flag as inappropriateBuyer's Guide
Umbrella
July 2026
Learn what your peers think about Umbrella. Get advice and tips from experienced pros sharing their opinions. Updated: July 2026.
906,887 professionals have used our research since 2012.
Data Security Consultant at a tech vendor with 10,001+ employees
Layered DNS security has protected users and simplifies URL whitelisting and blacklisting
Pros and Cons
- "Umbrella has positively impacted my organization by ensuring that if anyone wants to access any of the URLs, the URL will be blocked, and if they want to access that particular URL, it needs to be whitelisted."
- "However, there can occasionally be false positives where legitimate sites are blocked and require review or whitelisting."
What is our primary use case?
My main use case for Umbrella involves whitelisting and blacklisting of URLs. I want to provide feedback on Umbrella as it functions. Umbrella provides strong DNS layer security and blocks malicious domains before connections are established. We would like to whitelist or blacklist the URLs that we want to utilize on our client side. The dashboard is relatively easy to use and provides good visibility into DNS requests and security events. Integration with other Cisco security products is beneficial, and reporting and analytics could be more customizable. Policy management can become complex in larger environments with multiple user groups. Troubleshooting blocked domains sometimes requires a very deep investigation. More granular reporting and easier policy inheritance would improve administration. Roaming client protection is valuable for remote customers, and threat intelligence backed by Cisco Talos is a strong advantage.
I can provide a quick specific example of how I have used Umbrella for whitelisting or blacklisting URLs by checking in VirusTotal as well as a few of the McAfee sites, and based on that, we will blacklist or whitelist the URLs.
What is most valuable?
The best features Umbrella offers include content filtering, protection for remote users, and DNS security, malware, and phishing protection.
Out of those features, I find myself relying on DNS security the most because it is essential for my needs.
Umbrella has positively impacted my organization by ensuring that if anyone wants to access any of the URLs, the URL will be blocked. If they want to access that particular URL, it needs to be whitelisted. Umbrella will help us to block or whitelist the URL based on malicious activity.
A specific outcome that shows how Umbrella has benefited my organization is that it saved a lot of time, and before security events occur, it filters all the URLs. Whether they are malicious or phishing URLs, it will blacklist those and will not approve that.
What needs improvement?
While Umbrella provides good visibility, reporting and dashboard customization could be improved by being more flexible, especially for management and compliance reporting. When a domain is blocked, administrators sometimes need to navigate multiple logs and dashboards to identify the exact policy or rule responsible. Simplified troubleshooting would improve this experience.
More customizable reporting, simplified policy management for large environments, and enhanced troubleshooting capabilities could be included.
Regarding Umbrella's AI capabilities, its governance and security can use threat intelligence from Cisco Talos to identify malicious domains, phishing sites, and emerging threats. Machine learning and predictive analysis can be leveraged to detect newly registered or suspicious domains before they are widely known threats. For example, AI-powered investigation summarizes and explains why a domain was blocked.
Its accuracy and reliability of output are notable since it provides reliable threat detection using Cisco Talos threat intelligence, machine learning, and domain reputation analysis. In my experience, the accuracy is generally good with effective identification of malicious and phishing domains. However, there can occasionally be false positives where legitimate sites are blocked and require review or whitelisting. The platform is highly reliable for DNS layer protection, but providing more transparency into AI-driven decisions and improving the explanation of why a domain is flagged would further enhance administrative confidence.
For how long have I used the solution?
I have been using Umbrella for eight plus years.
What do I think about the stability of the solution?
Umbrella is stable.
What do I think about the scalability of the solution?
Regarding Umbrella's scalability, it is highly scalable and well-suited for organizations of different sizes from small businesses to large enterprises. Since it is a cloud-delivered service, it can support a growing number of users, devices, and locations without requiring significant on-premises infrastructure. In my experience, scaling protection to remote users and multiple sites is relatively straightforward through centralized policy management.
How are customer service and support?
The customer support was great, as they would solve the issue immediately based on the priority after we raise a request.
Which solution did I use previously and why did I switch?
I have not used any other solution; Umbrella is the only one I am using.
Before choosing Umbrella, we did not evaluate other options. Our client chose only Umbrella, and it has been the best option so far.
What other advice do I have?
My advice for others looking into using Umbrella is to consider that it would be helpful for all clients to better whitelist and blacklist the URLs that are malicious and phishing ones, as it will add more security or a layer of security to the companies. I would rate this product a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: May 31, 2026
Flag as inappropriateGlobal IT service Desk Analyst at Menzies Aviation
Secure access to internal apps has become seamless and supports single sign-on for all staff
Pros and Cons
- "Umbrella has positively impacted my organization because of its ease of use, and with the simple UI, our internal staff just click on the Umbrella icon to select from multiple VPN server profiles that we have uploaded, choosing their region and connecting."
- "Sometimes, Umbrella disconnects automatically without any notification, so I suggest that Cisco should work on this, although it works fine other than that."
What is our primary use case?
My main use case for Umbrella is for VPN purposes, and we are also using Cisco Meraki for our network.
One specific example of how I use Umbrella for VPN purposes in my daily work is that we have restricted some applications to our employees, so once they want to access our Menzies applications, they have to connect Umbrella VPN to their computer, and after that, they can access everything.
Uploading VPN profiles in Umbrella has greatly helped my team; for example, it is very easy to upload Umbrella VPN profile, as we just upload the XML file in Umbrella, and it automatically fetches the details and connects to our VPN server without any issue.
What is most valuable?
Umbrella offers an easy-to-use interface as the best feature in my experience, as we can add or upload profiles of our internal VPN server with just one click; we just go to our provided directory, and then our system will upload it after we post the XML file.
Umbrella has positively impacted my organization because of its ease of use, and with the simple UI, our internal staff just click on Umbrella icon to select from multiple VPN server profiles that we have uploaded, choosing their region and connecting; as we have set up SSO in our Microsoft organization, they just enter their official credentials in Umbrella, and after connecting and verifying, it automatically connects without any issue.
Ease of use and SSO integration have led to measurable improvements in our organization; for instance, since we have set up SSO for Umbrella, it helps connect all employees through a single portal.
What needs improvement?
To improve Umbrella, I think that every application needs ongoing improvements over time because technology continuously updates; sometimes, Umbrella disconnects automatically without any notification, so I suggest that Cisco should work on this, although it works fine other than that.
For how long have I used the solution?
I have been using Umbrella since 2024 in my previous organization and currently at Menzies Aviation.
What do I think about the stability of the solution?
I have mostly covered all the features that I have already used in Umbrella, but I would mention that sometimes we encounter an issue where the system will not disconnect automatically due to a network issue, requiring us to restart the application; otherwise, Umbrella is working very smoothly without any issue.
What other advice do I have?
My advice to others looking into using Umbrella is that I would definitely recommend Umbrella if any IT professional is seeking a VPN solution, as Cisco is a large organization that provides more support compared to others in the market.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Jul 15, 2026
Flag as inappropriateIT Analyst at a transportation company with 10,001+ employees
Blocking malicious sites has reduced daily security incidents and improves workforce productivity
Pros and Cons
- "The best feature that I have found useful in Umbrella is blocking website access to users, which significantly reduces our cybersecurity incidents, prevents computers from being attacked by malware, and stops users from accessing unproductive applications such as Netflix on their work laptops."
- "To improve the Umbrella experience, a dashboard or daily statistics along with visual widgets would be useful if they were added."
What is our primary use case?
The primary use case for Umbrella at Menzies Aviation is blocking malicious and unwanted websites at the DNS level. Whenever a user tries to access a website, Umbrella checks the domain before the connection is made, and if the domain is malicious, phishing-related, or against our company policies, it blocks it instantly. From a service desk analyst perspective, Umbrella protects us from phishing and malware that can come from websites, which reduces our security incidents related to our cybersecurity team. Every user is expected to follow best practices, and failing to do so means they won't be able to access specific websites, allowing access only to business-approved websites while working alongside Cisco VPN and Secure Client to maintain protection.
Recently, I encountered a user who received a suspicious email with a link that seemed to come from me.sharepoint. When the user was unsure about the email and attempted to click the link, Umbrella immediately blocked the domain access, identifying the site as potentially unsafe. The user received a prompt stating that the website was blocked by Menzies IT, and they could reach out to IT if they needed it unblocked. This represents the best recent use case I have encountered.
A unique aspect of Umbrella at Menzies Aviation is its ability to block websites combined with Cisco Secure Client and VPN, providing global workforce protection and enforcing strong policies. This means that regardless of the user, access to unsafe websites is blocked while allowing all compliant and business applications on the laptop.
What is most valuable?
The best feature that I have found useful in Umbrella is blocking website access to users, which significantly reduces our cybersecurity incidents, prevents computers from being attacked by malware, and stops users from accessing unproductive applications such as Netflix on their work laptops.
Umbrella positively impacts my organization by not allowing users to connect to suspicious or phishing emails, thus reducing incidents where users accidentally click on unsafe links and potentially get infected. This improvement in productivity results from preventing such incidents, which previously required us to clean up malware, saving valuable time for both users and IT support.
Before using Umbrella, we experienced around ten to twelve daily incidents at our company, which has more than seventy thousand employees. Each incident required us to reach out to the user, isolate their device, and check for malware, which wasted both the user's and the IT support's time. Since deploying Umbrella, it has significantly reduced the ability for users to access harmful websites.
What needs improvement?
To improve the Umbrella experience, a dashboard or daily statistics along with visual widgets would be useful if they were added.
For Umbrella to reach a ten out of ten rating, it should have a more user-friendly interface, additional widgets, and more customization options.
For how long have I used the solution?
I have been using Umbrella for more than one year.
What other advice do I have?
I definitely advise others to consider Umbrella, as we have deployed this tool and found it easy to manage, with significantly good benefits and advantages. I have given this review a rating of eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Jun 30, 2026
Flag as inappropriateNetwork Security Engineer at Syndicateinfo solution
Security platform has reduced phishing risks and provides silent DNS protection for remote users
Pros and Cons
- "Umbrella has positively impacted my organization primarily in two areas: risk reduction and operational efficiency, representing the overall positive impact."
- "Some aspects that my team often wishes were better include reporting depth, policy granularity, false positive whitelisting, integration with other tools, and cost considerations."
What is our primary use case?
Umbrella serves as my main DNS layer security and visibility tool, which is essential to the first line of defense for any outbound traffic day to day. Every DNS request is checked against Umbrella's threat intelligence before it resolves, meaning that malware, phishing, and command and control callbacks are blocked at an earlier stage. It typically fits into daily operations through web filtering and policy enforcement, enforcing acceptable use policies across the user and site, for example by blocking categories such as gambling or adult content while allowing business-critical domains. Threat protection automatically stops the connection to malicious domains, IPs, and URLs, reducing the number of incidents that reach firewall points, allowing the firewall SOC team to spend less time chasing alerts. Regarding visibility, Umbrella provides insight into traffic from laptops and mobile devices outside the corporate network, which is especially useful for distributed teams. My daily use includes reviewing Umbrella's dashboard for blocked requests, top destinations, and policy hits, with this report data often exported for compliance frameworks such as NIST or ISO. Umbrella integrates seamlessly with existing systems such as firewalls by Palo Alto, FortiGate, and Cisco ASA, not replacing them but acting as a complementary layer that reduces risks before traffic reaches those devices.
What is most valuable?
Umbrella has really helped my team specifically during a phishing campaign targeting remote users. A few employees received emails with links looking like a legitimate Microsoft 365 login page, which were crafted to bypass basic email filters. However, when users clicked them, Umbrella intercepted the DNS request and blocked the domain before the page could even load. Instead of relying on users to recognize the fake login, Umbrella's threat intelligence stopped the connection outright, preventing credential theft and saving the SOC team from having to run a full incident response cycle. This day-to-day difference shows the value of Umbrella's silent protection, which reduces downstream alerts in the firewall and SIEM team, providing confidence that even if something slips past email security, Umbrella will catch it at the DNS layer.
Umbrella fits into the workflow as a quiet backbone for security operations, providing baseline protection, reducing noise, covering the remote workforce, and enabling reporting compliance. These are key factors, as Umbrella is not something the team constantly interacts with but is woven into the workflow as a preventive visibility and driving layer, making everything downstream more effective.
The best features of Umbrella are its DNS layer security, cloud delivery, simplicity, and integrated threat intelligence, which together provide fast, reliable protection against malware, phishing, and ransomware. These features are valued most for blocking threats before connections are established, ensuring consistent security for both on-network and remote users. Key features include DNS layer security, cloud delivery protection, threat intelligence, visibility, Secure Web Gateway, Cloud Access Security Broker, Firewall as a Service, Data Loss Prevention, and Remote Browser Isolation.
Regarding how I use the Secure Web Gateway and Cloud Access Security Broker features, they extend Umbrella beyond just DNS filtering and are valuable because they give the team deeper control and visibility. Secure Web Gateway stops threats that hide behind legitimate domains or encrypted traffic, reducing reliance on decryption by catching malware at the gateway and giving confidence that even if the DNS layer allows a domain, the SWG layer will still inspect and block malicious payloads. Cloud Access Security Broker is useful for monitoring SaaS app usage, such as Office 365, Google Workspace, and Dropbox, helping identify shadow IT with employees using unsanctioned cloud apps, and enforcing policies such as blocking the upload of sensitive data to personal cloud storage. It prevents data leaks while providing visibility into cloud adoption threats across the workforce, balancing productivity with risk management. Together, SWG and CASB make Umbrella more than just a DNS filter, giving layered control over both traffic and application usage, critical in a hybrid workforce where employees continuously access SaaS platforms from different locations. In practice, SWG protects against external threats while CASB addresses internal risks such as data leaks, making them valuable to the team.
From a features point of view, I want to highlight core items that make Umbrella feel concerning a complete security platform rather than just a DNS filtering solution. Features such as Firewall as a Service, Data Loss Prevention, Remote Browser Isolation, reporting, and analytics work together with SWG and CASB to provide a layered defense model. DNS security stops threats at an early stage, while SWG inspects and filters web traffic, CASB controls SaaS usage, and prevents shadow IT, with Firewall as a Service, DLP, and RBI extending protection to border traffic and data leakage. This consolidation of multiple security functions into one cloud delivery platform reduces complexity while improving coverage, which is invaluable to the team.
Umbrella has positively impacted my organization primarily in two areas: risk reduction and operational efficiency, representing the overall positive impact. It essentially becomes a silent backbone, preventing incidents before they happen and reducing noise downstream in the firewall and SIEM. Umbrella provides measurable proof to stakeholders of improved security posture, allowing the team to spend less time firefighting and more time on proactive projects while leadership receives clear metrics showing ROI.
I see Umbrella's positive impact reflected in areas such as phishing incidents, SOC efficiency, and remote workforce coverage. For compliance and audit proof, during a phishing campaign, Umbrella blocked access to malicious domains at the DNS layer before users reached fake login pages, stopping requests instantly. This prevented credential theft and saved the SOC team from a full incident response cycle, clearly demonstrating both risk reduction and time savings. In summary, Umbrella has led to fewer incidents, faster audits, and more efficient SOC operations, with metrics that leadership can refer to as proof of ROI.
What needs improvement?
While Umbrella is strong, there are areas where it could improve based on daily use. Some aspects that my team often wishes were better include reporting depth, policy granularity, false positive whitelisting, integration with other tools, and cost considerations. Overall, Umbrella effectively blocks threats early and provides visibility, but if Cisco enhances reporting and policy flexibility and integration, it would make the platform even more powerful and reduce the need for workarounds. Improvements in reporting depth, such as enabling the team to find the root cause easily, would be beneficial, as would making reports more visually appealing with graphs and color combinations, similar to other platforms concerning Forti Manager and Palo Alto.
Regarding the needed improvements, I have noticed some key areas, particularly around integration and policy management, which tend to be pain points in daily use. Challenges include integration with third-party SIEMs, endpoint tools, SD-WAN, and managing multi-vendor firewall policies, as well as the regularity of whitelisting workflows. Although Umbrella excels at blocking threats early, if Cisco can enhance integration breadth and policy flexibility, it would alleviate frustrations for teams managing a hybrid multi-vendor environment, making Umbrella not just a strong security layer but also a smooth operational fit.
For how long have I used the solution?
I have been using Umbrella for the last three years, which has provided me more confidence in using it, and it is a very nice product.
What other advice do I have?
From my perspective, Umbrella's AI capabilities are designed with governance and security in mind, which is one reason it is trusted in enterprise environments. Governance ensures policy enforcement, shadow IT control, and compliance alignment, while the security aspect features threat intelligence at scale and adaptive blocking that reduces human error. For my team, Umbrella's AI means more than just blocking threats; it supports governed cloud usage and secures traffic intelligently. The governance side ensures compliance and visibility, while the security side guarantees resilience against evolving threats.
In summary, Umbrella's AI capabilities make it both a security shield and a governance tool, helping organizations stay compliant while reducing risk.
Regarding Umbrella's AI capabilities and the accuracy and reliability of its output, I find them generally very accurate and reliable, which is why they are trusted as the first line of defense. My overall rating for this review is nine out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Jun 16, 2026
Flag as inappropriateSenior Network & Security Engineer at a computer software company with 201-500 employees
Remote DNS security has protected hybrid users and provides clear visibility into web activity
Pros and Cons
- "Umbrella has positively impacted our organization by blocking some of the traffic, including some of the domains that were usually being generated."
- "Umbrella can be improved because whenever a VPN connection is established, Umbrella may or may not work properly, and in this case, we face a challenge."
What is our primary use case?
Umbrella is mainly used for DNS security, and since we are in a hybrid model, we use Umbrella to protect remote users from malicious websites and for web traffic control.
Generally, Umbrella helps us protect those remote users by working on an agent-based system, and we install it on end-user computers. Once we install the agent, all the traffic from the computer routes through DNS Umbrella. Therefore, everyone is protected, whether in the office or at home. We create specific rules for what traffic to allow and what to block. Generally, we allow only productivity and legitimate traffic and block all malicious content and unwanted traffic.
Also, for particular features that are hosted locally, we can add those as our internal domains to resolve them quickly and have no issues in the future.
What is most valuable?
The best features Umbrella offers are web DNS filtering, website filtering, and it has better insight and visibility of what applications users are working on. It gives an insight and a list of applications being used by the users, and it also provides the category of the applications. For example, if they are using a VPN, it shows the VPN category. If it is any document sharing, it shows the document sharing. Based on that category rating, we can block the sites and applications.
We use these insights for a weekly review on those application insights, so we will be blocking unproductive or malicious content or document-sharing websites that people are using. Based on those weekly reviews, we will be blocking the categories.
Umbrella has positively impacted our organization by blocking some of the traffic, including some of the domains that were usually being generated. We saw 10 to 15 of the domains were malicious, and we have blocked them immediately. We have also correlated the web logs with our Sophos XDR solution, which really helped.
What needs improvement?
Umbrella can be improved because whenever a VPN connection is established, Umbrella may or may not work properly, and in this case, we face a challenge. They have to improve this part.
If they have a dedicated feature where, even after connecting to a VPN, the Umbrella roaming client should be online and it should be able to detect and follow whatever policy is applied, that would make for no confusion, and we can prepare a whitelisting after connecting to the VPN.
For how long have I used the solution?
We have been using Umbrella for about three years now.
What other advice do I have?
That was the main challenge Umbrella helped us overcome for remote users, and it works fine. Our review rating for this product is 8.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Apr 19, 2026
Flag as inappropriatespecialty cybersecurity at a tech vendor with 10,001+ employees
Centralized DNS security has blocked phishing and protected remote users without VPN
Pros and Cons
- "Umbrella includes DNS-layer security, a secure web gateway, Cloud Access Security Broker, Firewall as a Service, and a central-based dashboard, all delivered through the cloud without requiring any hardware."
- "The user interface of Umbrella needs to provide more feasibility for understanding easily, as well as clearer details in the reports."
What is our primary use case?
Umbrella serves as a cloud-delivered DNS encryption platform for protecting the DNS layer security both off-network and on-network, which allows complete management of DNS, enabling policy management, troubleshooting, and monitoring for endpoint security operations.
Umbrella protects the DNS layers at the gateway and firewall level, and this is managed completely in the SASE platform, which provides a central dashboard for visibility and reporting on all information. The main components include DNS resolvers, intelligent proxies, identity integrations, and roaming clients, with a central policy engine managed through the platform.
What is most valuable?
Umbrella includes DNS-layer security, a secure web gateway, Cloud Access Security Broker, Firewall as a Service, and a central-based dashboard, all delivered through the cloud without requiring any hardware.
The feature I find myself relying on most is the one that blocks threats early at the DNS level, which is very useful. Umbrella works for remote users without connecting a VPN, which is important. It also allows for very quick deployment, as it is just DNS redirection, making deployment efficient. Additionally, centralized policy management allows me to monitor everything in one centralized console.
Umbrella has positively impacted my organization by blocking threats early at the DNS level. It works for remote users without a VPN and offers low latency compared to a full proxy. If a user clicks on phishing links, Umbrella blocks the DNS request, ensuring the user never reaches the malicious sites, which has been a great example of preventing malware downloads and data exfiltrations.
What needs improvement?
The user interface of Umbrella needs to provide more feasibility for understanding easily, as well as clearer details in the reports. Visibility is very important for an administrative user of Umbrella.
I chose a rating of eight out of ten because there are aspects that need implementation at the dashboard level and user management level, and improvements are needed in those areas, along with more categories and other features.
For how long have I used the solution?
I have been using Umbrella for more than three years.
What do I think about the stability of the solution?
We have seen many instances where users have clicked on a malicious URL, and Umbrella has taken action by preventing and blocking access. Umbrella has provided immediate notifications when a user has navigated to a certain link, and it was able to block access immediately. The agent disconnecting from the session has proven effective, and there have been no performance or latency issues observed.
What other advice do I have?
For others looking into using Umbrella, I would advise that it is very good and useful for DNS-level protections, especially in protecting against suspicious URLs in user interfaces. For example, if a user receives an email from an attacker with a suspicious URL, Umbrella can help protect users at the interface level. Everything is currently functioning well with Umbrella. My overall review rating for Umbrella is eight out of ten.
Which deployment model are you using for this solution?
Private Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Jun 17, 2026
Flag as inappropriateSenior Engineer at a computer software company with 51-200 employees
Web filtering has protected users from harmful sites and supports safe browsing every day
Pros and Cons
- "Umbrella is very user-friendly, the GUI is very understandable, and the traffic and detection are also fine and excellent."
- "One problem is that it sometimes blocks valid URLs."
What is our primary use case?
I have been using Umbrella for actual deployment at my client site and have also been maintaining it, so I have experience over the last one year.
My main use case for Umbrella is its excellent security feature for web security related to any type of URL blocking or dangerous sites, and it works well.
A specific example of how I use Umbrella's web security features is that end users visit many sites and do not know which sites are usually good for them, so using Umbrella DNS security automatically blocks the harmful sites.
I create policies for exceptional users and give them special permissions to visit any site.
What is most valuable?
In my opinion, DNS security is the best feature Umbrella offers.
The DNS security feature stands out for me because its deployment is easy and its maintenance is easy.
I hoped Umbrella would help make our company safe from dangerous sites, and after installing it, I found it very helpful for my company.
I saw many incidents happening and noticed that the best feature is its capability to block URLs that have a backend server, which I think is the best feature in Umbrella that works behind the scenes on the web server.
What needs improvement?
I think the accuracy and reliability of Umbrella's output is 100% in blocking all bad sites; however, one problem is that it sometimes blocks valid URLs. For example, regarding the backend where some URLs communicate with the backend, I want to manually check it and then allow it.
I acknowledge that every device has a downside, and I still do not know which sites are bad for the user.
I find Umbrella very user-friendly, so there are no challenges or confusing aspects.
For how long have I used the solution?
I am working almost five years in my current field.
What do I think about the stability of the solution?
Umbrella is stable.
What do I think about the scalability of the solution?
Umbrella easily handles more users or traffic, demonstrating good scalability.
How are customer service and support?
I have never used the customer support portal and find it very user-friendly, so I do not need to use it.
Which solution did I use previously and why did I switch?
Umbrella is my first solution; I have not used a different solution before.
What was our ROI?
I have not seen a return on investment since I do not get involved with business aspects, so I have no idea regarding saving money, time, or needing fewer employees because of Umbrella.
What's my experience with pricing, setup cost, and licensing?
I do not have any idea about the pricing, setup cost, and licensing because another team calculates it.
Which other solutions did I evaluate?
I did not evaluate other options before choosing Umbrella, as our client chose Umbrella.
What other advice do I have?
Umbrella is very user-friendly, the GUI is very understandable, and the traffic and detection are also fine and excellent. I give Umbrella a rating of nine out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Last updated: Jun 16, 2026
Flag as inappropriateManaging Director
Improved DNS filtering has protected users and now reduces malicious traffic for our organization
Pros and Cons
- "Umbrella has positively impacted my organization by allowing our IT team to know that our users and our remote locations are having safe traffic and lowering the risk of malicious active actions and people going to the wrong websites, giving us ease of mind."
- "Umbrella can be improved with easier migration and easier deployment, as we had to get some really specialized users in to deploy the software."
What is our primary use case?
My main use case for Umbrella is DNS filtering, traffic filtering, and security for our users.
I use Umbrella mainly for all our users to make sure that any kind of traffic that's malicious is blocked and that we can maintain confidential information without risk of hacking.
What is most valuable?
The best features Umbrella offers include proper filtration, it keeps our users safe, DNS filtering, filtering bad websites, and creating protection for users.
When I talk about DNS filtering and protection, I find the software overall especially helpful for my team.
Umbrella has positively impacted my organization by allowing our IT team to know that our users and our remote locations are having safe traffic and lowering the risk of malicious active actions and people going to the wrong websites, giving us ease of mind.
What needs improvement?
Umbrella can be improved with easier migration and easier deployment, as we had to get some really specialized users in to deploy the software.
For how long have I used the solution?
I have been using Umbrella for over four years across multiple organizations.
What do I think about the stability of the solution?
Umbrella is stable.
What do I think about the scalability of the solution?
Its scalability is good, as it was able to be scaled to our whole organization from the get-go.
How are customer service and support?
I find the customer support to be pretty good.
Which solution did I use previously and why did I switch?
Regarding return on investment, I cannot share that specifically as the security incidents are all confidential, but we have had less of them since this was deployed.
How was the initial setup?
Before choosing Umbrella, I did not really evaluate other options as Cisco was the standard, and we kind of went towards that fully.
What about the implementation team?
This piece of mind or reduction in risk has translated into fewer security incidents for my team.
What was our ROI?
I find the experience with pricing, setup cost, and licensing to definitely be expensive; setup was an expensive product to deploy, but worth it.
What's my experience with pricing, setup cost, and licensing?
On a scale of one to ten, I would rate Umbrella an eight because the deployment and the ease of use can always be improved, but the actual product itself is pretty well done.
What other advice do I have?
My advice to others looking into using Umbrella is to make sure it is for you before spending the money, as it is not cheap; it does give good results, but it is not for every use case. I give Umbrella an overall review rating of eight.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Apr 19, 2026
Flag as inappropriateBuyer's Guide
Download our free Umbrella Report and get advice and tips from experienced pros
sharing their opinions.
Updated: July 2026
Product Categories
Cloud Cost ManagementBuyer's Guide
Download our free Umbrella Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links





