Cisco Umbrella is a cloud DNS filtering platform with optional secure web gateway and CASB features, priced per user per year and quoted through Cisco partners.
Listing updated . Checked by MSP Software .
Cisco Umbrella is a cloud DNS filtering platform from Cisco for MSPs serving organisations with multiple sites or distributed users. It filters malicious destinations at the DNS layer using Cisco's Talos threat intelligence, with optional secure web gateway, firewall and cloud access security broker features for organisations that need more than DNS filtering alone. The platform integrates directly with Cisco routers and switches when present, simplifying deployment at network edges, and supports roaming client software for devices accessing from outside the network.
Pricing is per user per year, quoted through Cisco partners rather than published on a public price list, with packages bundling different combinations of DNS filtering, secure web gateway and CASB features to suit varying client needs and budgets. Cisco Umbrella is now positioned as the DNS Defence component of Cisco Secure Access, Cisco's unified security service edge and zero-trust access platform launched during 2024-2026, though Umbrella itself remains available and sold independently through Cisco's partner channel. The product suits MSPs managing multiple client locations or supporting hybrid and remote workforces, where consistent policy enforcement across dispersed users justifies the partner-quoted pricing structure.
Umbrella integrates with Cisco Duo for identity and multi-factor authentication, allowing DNS policies to adapt based on device trust and user context. It also connects to security information and event management platforms for larger organisations running security operations centres. The MSP evaluating Umbrella should consider whether a specific client truly needs the secure web gateway and CASB add-ons, since those increase both licensing cost and configuration complexity that smaller organisations with straightforward DNS filtering needs may not require. For clients already invested in Cisco networking equipment, Umbrella's native integration with Cisco Meraki and other Cisco switches and routers provides operational simplification and faster deployment than solutions requiring separate appliances.
DNSFilter AI-powered DNS filtering and threat blocking for networks and roaming devices. No reviews yet · from US$1.00 vs DNSFilter| Feature | Supported | Note |
|---|---|---|
| DNS-layer blocking | yes | DNS-layer blocking of malicious and policy-violating destinations using Talos threat intelligence. |
| Content category filtering | yes | Content filtering by category with customisable policies per site and user group. |
| Roaming agent for off-network devices | yes | Roaming client software extends DNS policy to laptops and remote users off the corporate network. |
| Secure web gateway | yes | Optional secure web gateway layer with HTTPS inspection and data loss prevention. |
| Multi-tenant dashboard | yes | Multi-tenant console for MSPs to manage DNS policies across multiple client organisations. |
| Per-site policy | yes | Per-site policy allows different DNS filtering rules for each client location or business unit. |
| RMM integration | unknown | Documented integrations with Cisco Meraki Dashboard; RMM integration not confirmed. |
| Threat intelligence feed | yes | Uses Cisco Talos threat intelligence to identify and block malicious destinations in real time. |
| SafeSearch enforcement | unknown | Vendor documentation does not confirm SafeSearch enforcement capability. |
| Reporting and audit log | yes | Reporting dashboard and audit logs show DNS requests, blocked destinations and policy violations. |
| Custom block and allow lists | yes | Custom allow and block lists per organisation or per site within an organisation. |
| Network-wide router deployment | yes | Network-wide deployment through Cisco routers, switches, and firewalls where present. |
| Feature | Supported | Note |
|---|---|---|
| Multi-factor authentication | yes | Integrates with Cisco Duo for multi-factor authentication and device trust assessment. |
| Single sign-on | unknown | Single sign-on capability not explicitly confirmed in vendor documentation. |
| Conditional access and device trust | yes | Conditional access rules based on device trust, user role and network context through Duo integration. |
| Privileged access management | unknown | |
| Passwordless and passkey support | unknown | |
| Directory sync | unknown | |
| Session and risk monitoring | unknown | |
| Legacy VPN and app support | unknown | |
| Self-service password reset | unknown | |
| Breach monitoring | unknown | |
| RADIUS and SAML support | unknown | |
| Admin audit log | unknown |
Cisco Umbrella works as a standalone cloud DNS security service without Cisco routers or switches. However, if a client already has Cisco Meraki or other Cisco network devices, Umbrella integrates directly with them, which simplifies policy deployment to network edges. Clients on other network vendors can use Umbrella with roaming client software or by pointing DNS upstream to Cisco Umbrella resolvers through manual configuration or DHCP.
Cisco Umbrella pricing is per user per year and is quoted through Cisco partners or distributors rather than published on Cisco's website. The final cost depends on which package a client chooses, since organisations can purchase DNS filtering alone or bundle it with secure web gateway and cloud access security broker features at different price tiers. MSPs should obtain a partner quote from a Cisco reseller to confirm pricing for a specific client's needs.
Cisco Umbrella is now positioned as the DNS Defence component of Cisco Secure Access, which is Cisco's unified security service edge and zero-trust access platform launched in the 2024-2026 period. Cisco Secure Access adds secure internet access and network access control on top of DNS filtering. Organisations can purchase Umbrella as a standalone DNS filtering service through Cisco partners, or adopt the broader Secure Access platform for a more integrated approach to secure connectivity.
Yes. Cisco Umbrella integrates with Cisco Duo for multi-factor authentication and device trust, since both are part of Cisco's security portfolio. When integrated, Umbrella can apply DNS filtering policies based on device trust signals from Duo, and organisations can enforce MFA as part of their access control strategy alongside DNS policy.
Reviews are moderated. How reviews work.
Share what it is like to use this product day to day. Your experience helps other MSPs choose with confidence.
Write the first review
