Sold by: Cisco Systems, Inc.
The leader in DNS-layer security As a trusted partner of over 24,000 companies, Cisco Umbrella provides the quickest, most effective way to improve your security stack. Gain a new layer of breach protection in minutes, with internet-wide visibility on and off your network, no matter your company size.
4.4
Overview
Enterprise security and networking are facing a significant transformation as organization embrace SASE, a Secure Access Service Edge. Wide-scale adoption of cloud applications, an increase in remote workers, and expansion of branch offices has rendered the centralized, on-premises security model impractical. The convenience, cost savings, and performance benefits of going direct to the internet is driving a new decentralized approach to networking. Yet with change comes risk and a new set of security challenges. Organizations require a broader set of protection that not only improves security, but simplifies management.
The Umbrella DNS Security Advantage package includes all the capabilities of DNS Security Essentials plus it enables organizations to proxy risky domains for URL blocking and file inspection using AV engines and Cisco AMP. For organizations looking for deeper context during incident investigations, DNS Security Advantage offers unmatched threat intelligence in the Investigate console and on-demand enrichment API.
For questions related to product, pricing or private offers, reach out to our team at cisco-security-inquiry@cisco.com
Highlights
- DNS-layer security - Umbrella uses DNS to stop threats over all ports and protocols. Stop malware earlier and prevent callbacks to attackers if infected machines connect to your network.
- App discovery & blocking - Umbrella provides visibility into cloud apps used across your organization, so you can identify potential risk and block specific applications easily.
- Web security via selective proxy - Umbrella routes requests to risky domains to a selective proxy for deeper URL and file inspection. Effectively protect without delay or performance impact.
Details
Sold by
Categories
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Umbrella DNS Advantage | Umbrella DNS Advantage with enhanced support, per user | $65.88 |
Vendor refund policy
Please refer to the seller's website.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
When customers purchase Umbrella, support is embedded
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Cisco Systems, Inc.
By Palo Alto Networks
By Netskope
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
DNS-Layer Threat Prevention
Utilizes DNS protocol to block threats across all ports and protocols, preventing malware callbacks from infected machines attempting to connect to attacker infrastructure.
Cloud Application Visibility and Control
Provides visibility into cloud applications deployed across the organization with capability to identify risks and block specific applications.
Selective Proxy-Based URL and File Inspection
Routes requests to risky domains through selective proxy for URL blocking and file inspection using antivirus engines and advanced malware protection.
Threat Intelligence and Investigation Capabilities
Offers threat intelligence data accessible through Investigate console and provides on-demand enrichment API for deeper context during incident investigations.
Internet-Wide Security Visibility
Delivers security visibility both on and off the network across internet-wide traffic regardless of user location or network connectivity.
Advanced Threat Prevention
Safeguards network from known and zero-day threats including exploits, malware, spyware, and command and control attacks using researcher-grade signatures and machine learning inspection engine.
Advanced URL Filtering
Defends against phishing, ransomware, and web-based attacks using inline machine learning-based web security engine with real-time detection of previously unseen threats and dynamic policy controls.
File-Based Threat Detection
Identifies file-based threats through inline static and dynamic analysis in the cloud with proprietary hypervisor technology for detection of sandbox-resistant malware.
DNS Security
Detects and prevents sophisticated DNS-layer network attacks and data exfiltration attempts.
Dynamic Policy Management
Applies policy definitions to cloud assets based on AWS tags, Application IDs, User IDs, geographies, or zones with automatic adaptation to infrastructure changes without manual intervention.
Cloud Access Security Broker
Unified cloud access security broker (CASB) functionality providing visibility and control over access to managed and unmanaged cloud services with conditional, granular policy enforcement.
Secure Web Gateway
Next generation secure web gateway (SWG) capabilities delivering comprehensive threat protection for cloud and web services with context-aware access control.
Data Loss Prevention
Data-at-rest and data-in-motion inspection with DLP violation detection, malware scanning in cloud storage, and data exfiltration prevention to unmanaged cloud infrastructure.
Cloud Infrastructure Monitoring
Continuous security assessment monitoring of cloud infrastructure for risky misconfigurations including data exposure across AWS and other cloud providers with inventory and configuration visibility.
Compliance and Remediation Automation
Pre-defined compliance profiles aligned with CIS, PCI, and NIST standards, advanced RBAC, scheduled reporting, alert notifications, exception handling, and automated remediation capabilities accessible via REST APIs.
Standard contract
No
No
No
Customer reviews
Tejas J.
Great product for DNS Security and intrinsic component for Cisco's Zero Trust - SASE infrastructure.
Reviewed on Oct 11, 2025
Review provided by G2
What do you like best about the product?
Implemented Cisco Umbrella as our de-facto DNS security solution for outbound internet traffic. Saw immediate wins, by seeing drastic reduction in number of the DNS requests towards crypto mining sites, CnC sites. Helped enforce domain based filtering, providing domain reputation scores (which fed into TPRM assessments) for partners. Ease of use (all you need to do is configure Cisco Umbrella as DNS forwarder) .Easy to implement as all you need to do is configure the Cisco Umbrella anycast IPs as DNS forwarder. Cisco's customer support is proactive, however there are typically no issues considering the platform is fairly stable. The domain whitelisting / re-categorization turn around time is typically quick between 24-36 hours, for most of the cases we had. Easy to integrate with Cisco SIG, easy to implement the Cisco VAs, on different form factors - vSphere / AWS cloud, etc.
What do you dislike about the product?
There is no integration between Cisco Umbrella with third party next generation firewalls such as Palo Alto firewalls / Prisma Access or Fortinet firewalls, which implies that the encrypted channel established between Cisco Virtual Appliances (VAs) and Umbrella cloud cannot be decrypted if SSL decryption is enabled on the perimeter firewall.
What problems is the product solving and how is that benefiting you?
Securing DNS for both data center, cloud workloads and users in the corporate offices and remote users - roaming clients. Helped implement a uniform security posture for users and workloads irrespective of the location. Integrated with Cisco Talos which ensures real time threat intel feeds.
Anthony Manuel B.
Reliable Cloud Security and DNS Protection with Easy Deployment
Reviewed on Sep 24, 2025
Review provided by G2
What do you like best about the product?
Cisco Umbrella is very effective at providing DNS-layer protection, blocking malicious domains before threats can reach users or devices. The cloud-based approach makes deployment and scaling extremely simple, with minimal infrastructure overhead. The reporting dashboards are intuitive and provide valuable insights into threat activity, allowing administrators to act quickly. Integration with other Cisco products also strengthens the overall security ecosystem and enhances visibility across the network.
What do you dislike about the product?
While Cisco Umbrella is powerful, the pricing can be a barrier for smaller organizations, as costs increase with scale. Some advanced policy configurations require additional expertise to fine-tune properly. In addition, reporting customization could be more flexible to allow deeper drill-downs. Despite these points, the platform remains highly effective for enterprise-level protection.
What problems is the product solving and how is that benefiting you?
Cisco Umbrella helps our organization block malicious domains at the DNS layer, reducing the risk of phishing, malware, and ransomware attacks before they ever reach users or endpoints. It also provides secure web gateway capabilities, ensuring that all internet-bound traffic is inspected and controlled, even for remote or roaming users. This has improved our overall security posture, minimized incidents, and simplified policy enforcement across distributed teams. The centralized dashboard also provides valuable insights and reporting, which saves time during investigations and compliance audits.
Roy L.
A good system for protecting against browsing malicious websites
Reviewed on Aug 03, 2025
Review provided by G2
What do you like best about the product?
When the system is implemented, there is automatic protection against malicious traffic from within the internal network.
What do you dislike about the product?
The management console is slow,There have been no improvements to the system over the years.
What problems is the product solving and how is that benefiting you?
Protection against browsing to malicious websites from the internal network
Jason J.
Umbrella for DNS
Reviewed on Jun 09, 2025
Review provided by G2
What do you like best about the product?
I like that it can go hand in hand with Cisco firewalls with protecting your network.
What do you dislike about the product?
There is nothing that I dislike about Umbrella.
What problems is the product solving and how is that benefiting you?
Umbrella is helping us by keeping users from going to restricted websites.
Andrés S.
Good
Reviewed on Apr 29, 2025
Review provided by G2
What do you like best about the product?
The defender that it provide to our customers
What do you dislike about the product?
The price that is not good scalable with the amount you get
What problems is the product solving and how is that benefiting you?
Its solving customer problema