Cisco Umbrella is a cloud-delivered security platform that blocks malicious domains, IP addresses, and risky cloud applications before connections are made. It combines DNS-layer security, Secure Web Gateway (SWG), cloud-delivered firewall, and Cloud Access Security Broker (CASB) capabilities into a single service, enabling consistent internet and cloud policy enforcement for users wherever they work.
Cisco Umbrella
Cisco Umbrella – Licensing, Pricing & Deployment for Secure Internet Gateway & Zero Trust Security
Get expert guidance on Cisco Umbrella licence tiers, subscription structure and Enterprise Agreement alignment while deploying DNS-layer security, Secure Web Gateway and CASB in a single cloud-delivered platform.
Replace fragmented web filtering and perimeter security tools with a cloud-native security service that protects users everywhere – on-network, remote, and across roaming devices.
View more Cisco solutions
No obligation. Clear, commercially aligned guidance tailored to your environment.
What is Cisco Umbrella?
Cloud-Delivered DNS Security and Secure Internet Gateway
Why Traditional Perimeter Security Is No Longer Enough
Traditional security models were built for office-based users and centralised internet traffic. Today, users connect directly to cloud applications from multiple locations, reducing visibility and weakening policy control. This increases exposure to phishing, malware, and risky applications, while backhauling traffic to a data centre firewall adds latency and operational complexity.
How Cisco Umbrella Strengthens Cloud and Internet Security
Cisco Umbrella closes these gaps by enforcing DNS and web security in the cloud, ensuring consistent protection for users wherever they connect.
- Blocks threats at the DNS layer
Stops malicious domains, IP addresses, and command-and-control callbacks before a connection is established. - Secures web and cloud application usage
Applies Secure Web Gateway and CASB controls to reduce exposure to phishing, malware, and unsanctioned SaaS platforms. - Extends protection beyond the network perimeter
Enforces consistent internet security policies for users on-network, remote, or roaming. - Reduces reliance on perimeter firewalls
Minimises traffic backhaul to data centres, improving performance and simplifying architecture. - Provides centralised visibility and reporting
Gives IT and security teams unified oversight of user activity and policy enforcement.
Key Features
Cisco Umbrella brings together multiple cloud-delivered security controls into a single, centrally managed platform designed to reduce risk and simplify internet security.
- Always-On Intelligent VPN: Automatically selects the optimal tunnelling protocol (TLS, DTLS, or IPsec IKEv2) and reconnects seamlessly — ensuring users remain protected without manual intervention.
- Zero Trust Access (ZTNA): Verifies user identity and device posture continuously before granting access. Applications are hidden from unauthorised users, reducing your attack surface.
- Unified Security Agent: Consolidates VPN, Secure Endpoint (EDR), Network Visibility, and cloud-delivered security into a single agent — one install, one console, one policy framework.
- Network Visibility Module: Captures endpoint telemetry — including application usage and traffic flows — both on and off network. Integrates with SIEM and analytics platforms to accelerate threat detection.
- Per-Application VPN: Routes only specified application traffic through the VPN tunnel, reducing bandwidth load while keeping sensitive app traffic secure
- Licence Flexibility: Available in VPN Only, Advantage, and Premier tiers — scale features and cost to match your organisation’s needs.
Cisco Umbrella is available in several tiers, with annual and term-based subscription models. We help to assess the correct structure based on your filtering and DNS requirements, and Enterprise Agreement alignment.
| Licence Tier | Validity | Best For | Key Capabilities |
|---|---|---|---|
| DNS Security Essentials | Subscription-based (annual/term) | Organisations needing foundational DNS-layer protection | DNS-layer threat blocking (malware, phishing); fast cloud delivery; basic content filtering and enforcement at DNS resolution. |
| DNS Security Advantage | Subscription-based (annual/term) | Mid-tier deployments wanting deeper threat defence | All Essentials features plus enhanced DNS threat intelligence, shadow IT visibility, app discovery, deeper inspection and filtering controls at the DNS level. |
| SIG (Secure Internet Gateway) Essentials | Subscription-based (annual/term) | Organisations needing broader web security beyond DNS | Includes DNS security plus full cloud-delivered Secure Web Gateway (SWG), cloud firewall, CASB, and advanced threat intelligence. |
| SIG (Secure Internet Gateway) Advantage | Subscription-based (annual/term) | Organisations needing the most comprehensive cloud security stack | All SIG Essentials capabilities with additional advanced controls and threat services; highest tier of protection and control in Umbrella portfolio. |
Licensing for Cisco Umbrella is primarily per-user, with options to include it within a Cisco Enterprise Agreement. We validate entitlement structure, subscription terms, and feature alignment to optimise cost control and avoid unnecessary tier upgrades.
Use Cases & Business Outcomes
Who Benefits | How Cisco Umbrella Helps |
IT Managers & Network Teams | Enforce consistent internet and cloud usage policies across all users without deploying additional on-premises appliances. Reduce complexity by managing DNS, web, and firewall controls from a single dashboard. |
Security Leadership | Reduce exposure to phishing, malware, and command-and-control threats by blocking attacks at the DNS layer. Gain consolidated reporting and improved visibility across roaming and office-based users. |
CIOs & C-Suite | Consolidate multiple web filtering and security tools into a unified cloud platform. Improve risk posture while maintaining predictable, subscription-based costs. |
Distributed & Hybrid Workforces | Protect users wherever they connect — at home, in branch offices, or on public networks — without requiring traffic backhaul to a central firewall. |
Regulated Industries | Organisations in financial services, healthcare, legal, manufacturing, and public sector environments can enforce internet controls and cloud visibility to support compliance and data protection requirements. |
How We Support Your Cisco Subscription Licensing
As a certified Cisco partner, we provide structured, commercially aligned oversight across Cisco subscription licensing.
Our focus is on ensuring entitlement accuracy, Enterprise Agreement optimisation, and long-term cost control across your Cisco estate.
| Our service | What to expect |
|---|---|
| Subscription & Entitlement Review |
We assess whether your licences match how the platform is actually deployed. + Detailed review of licence model (user-based, device-based, throughput, or tiered) + Validation of active entitlement against live deployment + Identification of under-licensing, over-licensing, or compliance gaps + Clear recommendation on optimal subscription structure |
| Enterprise Agreement (EA) Alignment |
Where subscriptions sit within a Cisco Enterprise Agreement, we review how they are structured and billed to ensure the agreement is working in your favour. + Assessment of whether subscriptions should sit inside or outside the existing EA + Review of current licence quantities to identify portfolio consolidation opportunities + Alignment of renewal dates to reduce fragmented contracts and expenses + Preparation for EA renewals and true-up events to prevent unexpected cost increases |
| Commercial Structuring & Term Optimisation |
We structure subscription terms to align with your financial planning and procurement process. + Comparison of 1, 3, and 5-year term options to align with budget cycles + Assessment of financial impact of early renewal, extension, or co-term adjustments + Cost forecasting across the full subscription term + Structured procurement and approval support |
| Renewal & Lifecycle Management |
We track your subscriptions throughout the term so renewals are planned, not rushed. + Advance notice of upcoming renewals with time to review requirements + Review of licence quantities as users or devices increase + Ongoing licence audits to ensure compliance and cost efficiency + Strategic planning to align future Cisco investment with budget and growth plans. |
Cisco Umbrella Licensing, Deployment & Ongoing Support – Official Cisco Partner
As an official Cisco partner, we manage Cisco Umbrella procurement and licensing on your behalf. Our team provides structured guidance on selecting the correct licence tier – whether DNS-layer protection or full Secure Internet Gateway – and aligning subscriptions to your wider Cisco Enterprise Agreement.
By working with us, your team will receive:
- Accurate licence tier alignment
Ensure you select the correct Umbrella package based on your security model and workforce requirements. Cisco-certified technical support
Pre- and post-sales guidance from accredited Cisco specialists with extensive experience across networking, infrastructure, and enterprise architecture.Commercial negotiation and pricing clarity
Optimised pricing aligned to subscription structures and Enterprise Agreement eligibility — helping control long-term licensing and operational costs.Renewal and lifecycle management
Ongoing licence tracking, renewal coordination, and support to prevent compliance gaps.Established Cisco partnership since 2018
Cisco has been our strategic partner since 2018. Our sustained partnership reflects long-term investment in Cisco architecture, licensing strategy, and enterprise infrastructure delivery.
Whether you are evaluating Cisco Umbrella pricing, reviewing licence tiers, or planning phased deployment across hybrid environments, we provide clear, commercially aligned guidance from assessment through to renewal.
Ready to Protect Your Distributed Users?
Request a Cisco Umbrella licensing and access review to align security capability, subscription structure, and Enterprise Agreement strategy to your organisation’s needs.