# Cisco Umbrella > Cloud DNS filtering and secure web gateway for multi-site networks and roaming users. Cisco Umbrella is a cloud DNS filtering platform with optional secure web gateway and CASB features, priced per user per year and quoted through Cisco partners. Listing updated 6 September 2026. Checked by MSP Software 5 September 2026. - Page: https://mspsoftware.net/software/cisco-umbrella - Vendor: Cisco, https://mspsoftware.net/vendors/cisco, website https://umbrella.cisco.com/ - Categories: DNS and web filtering (primary), Identity and access - Free version: no. - Deployment: cloud. Platforms: Windows, macOS, iOS, Android and web. HQ: United States. - Support: phone, email, knowledge base and help desk. Training: documentation, videos and webinars. ## From the vendor Cisco Umbrella is a cloud DNS filtering platform from Cisco for MSPs serving organisations with multiple sites or distributed users. It filters malicious destinations at the DNS layer using Cisco's Talos threat intelligence, with optional secure web gateway, firewall and cloud access security broker features for organisations that need more than DNS filtering alone. The platform integrates directly with Cisco routers and switches when present, simplifying deployment at network edges, and supports roaming client software for devices accessing from outside the network. Pricing is per user per year, quoted through Cisco partners rather than published on a public price list, with packages bundling different combinations of DNS filtering, secure web gateway and CASB features to suit varying client needs and budgets. Cisco Umbrella is now positioned as the DNS Defence component of Cisco Secure Access, Cisco's unified security service edge and zero-trust access platform launched during 2024-2026, though Umbrella itself remains available and sold independently through Cisco's partner channel. The product suits MSPs managing multiple client locations or supporting hybrid and remote workforces, where consistent policy enforcement across dispersed users justifies the partner-quoted pricing structure. Umbrella integrates with Cisco Duo for identity and multi-factor authentication, allowing DNS policies to adapt based on device trust and user context. It also connects to security information and event management platforms for larger organisations running security operations centres. The MSP evaluating Umbrella should consider whether a specific client truly needs the secure web gateway and CASB add-ons, since those increase both licensing cost and configuration complexity that smaller organisations with straightforward DNS filtering needs may not require. For clients already invested in Cisco networking equipment, Umbrella's native integration with Cisco Meraki and other Cisco switches and routers provides operational simplification and faster deployment than solutions requiring separate appliances. ## Pricing Cisco Umbrella does not publish a list price. ## Features | Feature | Supported | Note | | --- | --- | --- | | DNS-layer blocking | yes | DNS-layer blocking of malicious and policy-violating destinations using Talos threat intelligence. | | Content category filtering | yes | Content filtering by category with customisable policies per site and user group. | | Roaming agent for off-network devices | yes | Roaming client software extends DNS policy to laptops and remote users off the corporate network. | | Secure web gateway | yes | Optional secure web gateway layer with HTTPS inspection and data loss prevention. | | Multi-tenant dashboard | yes | Multi-tenant console for MSPs to manage DNS policies across multiple client organisations. | | Per-site policy | yes | Per-site policy allows different DNS filtering rules for each client location or business unit. | | Threat intelligence feed | yes | Uses Cisco Talos threat intelligence to identify and block malicious destinations in real time. | | Reporting and audit log | yes | Reporting dashboard and audit logs show DNS requests, blocked destinations and policy violations. | | Custom block and allow lists | yes | Custom allow and block lists per organisation or per site within an organisation. | | Network-wide router deployment | yes | Network-wide deployment through Cisco routers, switches, and firewalls where present. | | Multi-factor authentication | yes | Integrates with Cisco Duo for multi-factor authentication and device trust assessment. | | Conditional access and device trust | yes | Conditional access rules based on device trust, user role and network context through Duo integration. | ## Integrations - Cisco Duo, https://mspsoftware.net/software/duo - Cisco Meraki Dashboard, https://mspsoftware.net/software/meraki-dashboard - Cisco Secure Endpoint, https://mspsoftware.net/software/cisco-secure-endpoint - Microsoft 365, https://www.microsoft.com/microsoft-365/ Listed products that integrate with Cisco Umbrella: Cisco Duo, Cisco Secure Email and Cisco Secure Endpoint. ## Alternatives - Infoblox Threat Defense: Cloud-native DNS security with predictive threat intelligence and agentless deployment. https://mspsoftware.net/software/infoblox-threat-defense - Cloudflare Gateway: DNS and web gateway filtering via Cloudflare's global edge network, with policy-based access control. https://mspsoftware.net/software/cloudflare-gateway - DefensX: Browser security with AI protection and DNS filtering for MSPs, quote-only pricing with flexible tiers. https://mspsoftware.net/software/defensx - DNSFilter: AI-powered DNS filtering and threat blocking for networks and roaming devices. https://mspsoftware.net/software/dnsfilter. Compare: https://mspsoftware.net/compare/cisco-umbrella-vs-dnsfilter ## FAQ ### How much does Cisco Umbrella cost? Cisco Umbrella does not publish a list price. No MSP price reports have been approved yet. ### Does Cisco Umbrella offer a free trial? There is no free version. ### What does Cisco Umbrella integrate with? Cisco Umbrella lists integrations with Cisco Duo, Cisco Meraki Dashboard, Cisco Secure Endpoint and Microsoft 365. ### What integrates with Cisco Umbrella? Cisco Duo, Cisco Secure Email and Cisco Secure Endpoint list an integration with Cisco Umbrella. ### Is Cisco Umbrella cloud or on-premises? Cisco Umbrella is cloud-hosted; there is no on-premises version. ### Who is Cisco Umbrella for? MSPs report using Cisco Umbrella at sizes of 16-50, 51-200 and 200+ technicians. ### Does Cisco Umbrella require Cisco networking equipment? Cisco Umbrella works as a standalone cloud DNS security service without Cisco routers or switches. However, if a client already has Cisco Meraki or other Cisco network devices, Umbrella integrates directly with them, which simplifies policy deployment to network edges. Clients on other network vendors can use Umbrella with roaming client software or by pointing DNS upstream to Cisco Umbrella resolvers through manual configuration or DHCP. ### How is Cisco Umbrella priced? Cisco Umbrella pricing is per user per year and is quoted through Cisco partners or distributors rather than published on Cisco's website. The final cost depends on which package a client chooses, since organisations can purchase DNS filtering alone or bundle it with secure web gateway and cloud access security broker features at different price tiers. MSPs should obtain a partner quote from a Cisco reseller to confirm pricing for a specific client's needs. ### What is the difference between Cisco Umbrella and Cisco Secure Access? Cisco Umbrella is now positioned as the DNS Defence component of Cisco Secure Access, which is Cisco's unified security service edge and zero-trust access platform launched in the 2024-2026 period. Cisco Secure Access adds secure internet access and network access control on top of DNS filtering. Organisations can purchase Umbrella as a standalone DNS filtering service through Cisco partners, or adopt the broader Secure Access platform for a more integrated approach to secure connectivity. ### Does Cisco Umbrella integrate with Cisco Duo? Yes. Cisco Umbrella integrates with Cisco Duo for multi-factor authentication and device trust, since both are part of Cisco's security portfolio. When integrated, Umbrella can apply DNS filtering policies based on device trust signals from Duo, and organisations can enforce MFA as part of their access control strategy alongside DNS policy.