Sold by: Cisco Systems, Inc.
The leader in DNS-layer security - As a trusted partner of over 24,000 companies, Cisco Umbrella provides the quickest, most effective way to improve your security stack. Gain a new layer of breach protection in minutes, with internet-wide visibility on and off your network, no matter your company size."
4.4
Overview
Enterprise security and networking are facing a significant transformation as organization embrace SASE, a Secure Access Service Edge. Wide-scale adoption of cloud applications, an increase in remote workers, and expansion of branch offices has rendered the centralized, on-premises security model impractical. The convenience, cost savings, and performance benefits of going direct to the internet is driving a new decentralized approach to networking. Yet with change comes risk and a new set of security challenges. Organizations require a broader set of protection that not only improves security, but simplifies management.
The Umbrella DNS Security Essentials package includes core DNS-layer security capabilities, to block requests to malicious domains before they reach your network or endpoints. You gain off-network protection and mobile support in this base package, as well as access to Umbrella APIs (policy, reporting and enforcement), log exporting, the multi-org console, integration with Cisco Threat Response, and identity- based policies (virtual appliance + Active Directory connector). Additionally, this package provides discovery and blocking of shadow IT (by domain) with the App Discovery report.
For questions regarding products, pricing, or private offers, please reach out to our team at cisco-security-inquiry@cisco.com
Highlights
- DNS-layer security - Umbrella uses DNS to stop threats over all ports and protocols. Stop malware earlier and prevent callbacks to attackers if infected machines connect to your network.
- Web security via selective proxy - Umbrella routes requests to risky domains to a selective proxy for deeper URL and file inspection. Effectively protect without delay or performance impact.
- App discovery & blocking - Umbrella provides visibility into cloud apps used across your organization, so you can identify potential risk and block specific applications easily.
Details
Sold by
Categories
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Umbrella DNS Essentials | Umbrella DNS Essentials with enhanced support, per user | $43.92 |
Vendor refund policy
Please refer to the seller's website.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
When customers purchase Umbrella, support is embedded
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
NTT Ltd Brazil can offer the Cisco Umbrella DNS Security Essentials solution at a lower cost based on a special program create by Cisco and AWS together for the clients.
Axity has the ability to provide the Cisco Umbrella DNS Security Essentials solution at a reduced rate through a unique program established by Cisco and AWS specifically for their customers.
The leader in DNS-layer security As a trusted partner of over 24,000 companies, Cisco Umbrella provides the quickest, most effective way to improve your security stack. Gain a new layer of breach protection in minutes, with internet-wide visibility on and off your network, no matter your company size.
NTT Ltd Brazil can offer the Cisco Umbrella DNS Security Advantage solution at a lower cost based on a special program create by Cisco and AWS together for the clients.
Customer reviews
KamranJameel
Secure browsing has protected users from DNS threats and improves malware defense
Reviewed on Feb 07, 2026
Review provided by PeerSpot
What is our primary use case?
In a previous organization at HBL, we were using Cisco Umbrella as well, so it has been a quite long time.
What is most valuable?
Cisco Umbrella is specifically designed for DNS protection, with features including a user-friendly console and the easiest installation. It offers very prominent threat feeding from different Talos sources, securing multiple platforms. Cisco Umbrella helps protect from malware and unsafe sites. It is especially useful in mitigating DNS attacks and ensuring secure browsing for end users.
What needs improvement?
The major issue is that sometimes when you install the client, it shows you protected and displays that it is live with the backend servers and everything. However, in reality, it was not getting any feed from the main client and is just sending your traffic to open DNS, which sometimes causes an issue because the protection you have implemented can be breached by users.
The primary thing that Cisco Umbrella lacked most of the time is their client. Previously, they had a separate Cisco client. Now they have merged everything into the Cisco Secure Endpoint client—one client for everything, for Cisco Endpoint, for Cisco AnyConnect, and for Cisco Umbrella, which they did probably in 2025.
For how long have I used the solution?
I have been using this solution for almost two years.
What do I think about the stability of the solution?
As a customer, I have never been satisfied with any product for a longer period of time, so that is a tricky question to answer.
What do I think about the scalability of the solution?
If you require 10 clients or however many you need or whatever expansion you require, they are just a click away.
How are customer service and support?
Cisco is always known for their best technical support, so there is no doubt about it.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
At that time I was working in HBL on the Symantec DLP product.
How was the initial setup?
Cisco Umbrella is specifically designed for DNS protection, and the features they have include a user-friendly console and probably the easiest installation.
Which other solutions did I evaluate?
If you go with the main competitor product, there is no doubt that Infoblox is the best product.
What other advice do I have?
There are a couple of products we are working on. We use Cisco EDR and XDR , for DLP we have Forcepoint, and for cyber threat intelligence, we have EPP.
We focus on DLP and the classification tool, which is for data visibility and DLP. It is kind of data protection that is used for classification.
For Cisco, we use FTDs. It is the Cisco Secure Endpoint , which is known as Cisco EDR, Endpoint Detection and Response.
We use Cisco Umbrella for DNS protection. In the current environment, cyber security resolves your addresses securely and protects from threats from outside. Most attacks happen over DNS, so those DNS queries can be mitigated if you have a secure way for browsing for your end users.
We are not using Cisco Umbrella for the proxy. We are using it from our DNS perspective. As a strategy, we are using it for outside communication through the DNS resolver. However, Cisco Umbrella has now combined with Secure Access, which comes with different features. Previously, Cisco had WSA for the proxy. Now they have come up with a proxy solution that gives Cisco Umbrella protection with remote proxy and cloud proxy solution, which is known as Secure Access.
As I mentioned earlier, they have very prominent threat feeding from different Talos sources, securing us on multiple platforms where, as an enterprise, you might not have those features and the feed to protect yourself. Cisco Umbrella is definitely a good product from that perspective and is going to help you protect from malware and from sites which are reputedly not marked as safe for the user. I would rate this review an eight out of ten.
Tejas J.
Great product for DNS Security and intrinsic component for Cisco's Zero Trust - SASE infrastructure.
Reviewed on Oct 11, 2025
Review provided by G2
What do you like best about the product?
Implemented Cisco Umbrella as our de-facto DNS security solution for outbound internet traffic. Saw immediate wins, by seeing drastic reduction in number of the DNS requests towards crypto mining sites, CnC sites. Helped enforce domain based filtering, providing domain reputation scores (which fed into TPRM assessments) for partners. Ease of use (all you need to do is configure Cisco Umbrella as DNS forwarder) .Easy to implement as all you need to do is configure the Cisco Umbrella anycast IPs as DNS forwarder. Cisco's customer support is proactive, however there are typically no issues considering the platform is fairly stable. The domain whitelisting / re-categorization turn around time is typically quick between 24-36 hours, for most of the cases we had. Easy to integrate with Cisco SIG, easy to implement the Cisco VAs, on different form factors - vSphere / AWS cloud, etc.
What do you dislike about the product?
There is no integration between Cisco Umbrella with third party next generation firewalls such as Palo Alto firewalls / Prisma Access or Fortinet firewalls, which implies that the encrypted channel established between Cisco Virtual Appliances (VAs) and Umbrella cloud cannot be decrypted if SSL decryption is enabled on the perimeter firewall.
What problems is the product solving and how is that benefiting you?
Securing DNS for both data center, cloud workloads and users in the corporate offices and remote users - roaming clients. Helped implement a uniform security posture for users and workloads irrespective of the location. Integrated with Cisco Talos which ensures real time threat intel feeds.
Anthony Manuel B.
Reliable Cloud Security and DNS Protection with Easy Deployment
Reviewed on Sep 24, 2025
Review provided by G2
What do you like best about the product?
Cisco Umbrella is very effective at providing DNS-layer protection, blocking malicious domains before threats can reach users or devices. The cloud-based approach makes deployment and scaling extremely simple, with minimal infrastructure overhead. The reporting dashboards are intuitive and provide valuable insights into threat activity, allowing administrators to act quickly. Integration with other Cisco products also strengthens the overall security ecosystem and enhances visibility across the network.
What do you dislike about the product?
While Cisco Umbrella is powerful, the pricing can be a barrier for smaller organizations, as costs increase with scale. Some advanced policy configurations require additional expertise to fine-tune properly. In addition, reporting customization could be more flexible to allow deeper drill-downs. Despite these points, the platform remains highly effective for enterprise-level protection.
What problems is the product solving and how is that benefiting you?
Cisco Umbrella helps our organization block malicious domains at the DNS layer, reducing the risk of phishing, malware, and ransomware attacks before they ever reach users or endpoints. It also provides secure web gateway capabilities, ensuring that all internet-bound traffic is inspected and controlled, even for remote or roaming users. This has improved our overall security posture, minimized incidents, and simplified policy enforcement across distributed teams. The centralized dashboard also provides valuable insights and reporting, which saves time during investigations and compliance audits.
Suresh-Sharma
Has required extensive customization for non-technical users and still needs better simplification
Reviewed on Sep 16, 2025
Review from a verified AWS customer
What is our primary use case?
The main use case for Cisco Umbrella is to protect our clients from various threats as it works on the DNS layer while firewalls and other security appliances work differently. We trust that no client should access any unverified website since it protects on the DNS layer to ensure their safety from malware and unknown sites. The Cisco Umbrella denies requests to untrusted websites, ensuring our clients are protected; we use it along with Hunters and firewalls for three layers of protection.
Cisco Umbrella is the first layer of security that protects me while surfing the net, identifying untrusted websites to prevent access. It guards against inside threats, while firewalls provide broader protection; Cisco Umbrella is especially useful for non-technical users who may not understand the risks.
What is most valuable?
Cisco Umbrella provides main benefits by not being too costly compared to other products, making it accessible for all clients, and I think it is essential for those who want complete safety.
The Intelligent Proxy feature of Cisco Umbrella is useful, though we do not elaborate much on this proxy feature.
The reporting and analytics capabilities in Cisco Umbrella are helpful, but since we have many clients, we cannot fully analyze everything. If any client objects to a website being protected, we analyze it and suggest whether they should proceed or not.
What needs improvement?
Customization for basic users can be complex, as it is targeted toward only technical users.
It would be beneficial if Cisco simplifies the customization process while still ensuring strong security to prevent unauthorized access.
Simplifying the customization part could enhance Cisco Umbrella, but overall, it is a good solution for me.
For how long have I used the solution?
I have been working with Cisco Umbrella for the last year, not more than a year.
What do I think about the stability of the solution?
I would rate the stability of Cisco Umbrella nine out of ten.
What do I think about the scalability of the solution?
For scalability, I would rate it nine out of ten, as the product is good.
The solution cannot be scaled because it serves primarily as endpoint security.
For enterprise-level companies, it is easy to expand the number of users as they provide a dashboard that allows monitoring and solution delivery for all clients in one place.
How are customer service and support?
Whenever we ask Cisco for support, they definitely provide it, and we create a ticket for any threats we encounter that bypass their system.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup for Cisco Umbrella is simple; you just download the application, input the license, and use it without needing complex servers.
What about the implementation team?
For clients who do not know how to set up Cisco Umbrella, we do the setup for them, and they trust us.
Which other solutions did I evaluate?
I still have not found a main competitor for Cisco Umbrella.
Once I find a better solution among prices, I may switch over, but I currently do not think its price is too much.
What other advice do I have?
Cisco Umbrella is a supportive solution I provide separately, depending on the requirements of the customer, and we ask them what they require first.
Cisco is continuously improving Cisco Umbrella, experimenting with better versions while keeping us informed about changes and upgrades at no cost.
Cisco Umbrella should be available on desktop or laptop to ensure trust and security for non-technical users.
I rate Cisco Umbrella nine out of ten.
Which deployment model are you using for this solution?
On-premises
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Roy L.
A good system for protecting against browsing malicious websites
Reviewed on Aug 03, 2025
Review provided by G2
What do you like best about the product?
When the system is implemented, there is automatic protection against malicious traffic from within the internal network.
What do you dislike about the product?
The management console is slow,There have been no improvements to the system over the years.
What problems is the product solving and how is that benefiting you?
Protection against browsing to malicious websites from the internal network