Cisco Umbrella – DNS Security & Secure Web Gateway

Cisco Umbrella is a cloud-delivered security platform that protects internet and cloud access by blocking threats before users connect. It combines DNS-layer security, secure web gateway controls and secure internet gateway protection to secure roaming users and branches while reducing the need to backhaul traffic.

Cisco's Umbrella diagram showing cloud connectivity and protection between endpoints.

Cisco Umbrella Key Platform Specifications

  • Platform Type: Cloud Security
  • Primary Function: DNS Security & Secure Web Gateway
  • Deployment Model: Cloud-Delivered
  • Management Scope: Internet & Cloud Access
  • Target Environment: Hybrid Workforce
  • Licensing Model: Subscription-Based
Starting from: £31.45 Ex. VAT
Request a free trial
SKU Cisco-Umbrella Categories , Brand:
View all software in this series: Zero Trust & Secure Access

Cisco Umbrella Overview

When users, branches and roaming devices reach the internet directly, security teams need early threat blocking, cloud app visibility and consistent policy without adding gateway complexity.

Cloud-Delivered Internet Security

Cisco Umbrella is a cloud-delivered security platform for DNS, web and internet access control across users, offices and remote devices. It supports direct internet access, branch breakout and cloud application governance without requiring traffic to be backhauled through an on-premises stack.

Stopping Risk at the First Request

Umbrella works at the first point of DNS resolution, where it can block malicious destinations before a web session starts or a payload is downloaded. For direct internet access, it combines DNS-layer security, secure web gateway and cloud firewall functions in one cloud-delivered control point. It also integrates with Secure Client, Meraki, SD-WAN and Microsoft Entra ID provisioning.

Operational Outcomes in Production

This approach helps reduce firewall and gateway management pressure while keeping protection consistent for roaming users and distributed sites. It also improves visibility into unsanctioned cloud services, so teams can identify risky SaaS usage and apply policy where it matters.

If you are evaluating Cisco Umbrella for internet security, cloud app control or branch protection, our team can help you assess fit and deployment options.

Cisco Umbrella Key Features​

Cisco Umbrella is a cloud-delivered security platform for hybrid workforces that protects internet access with DNS-layer controls, secure web gateway inspection, and cloud access policy enforcement.

Protect Internet Access Early

DNS-Layer Threat Blocking
Cisco Umbrella blocks malicious destinations at the DNS layer so users are stopped before connecting to risky internet resources.

Secure Web Traffic Inspection
The platform inspects and controls web traffic to help enforce internet security policy for users reaching cloud and public web services.

Secure Internet Gateway Enforcement
Cloud-delivered secure internet gateway capabilities provide DNS, web, and firewall controls without forcing traffic back through an on-premises gateway.

Roaming Device Protection
Cisco Umbrella extends protection to roaming devices so remote users keep consistent internet security outside the corporate network.

Control Cloud Access Risk

Cloud Application Access Policy
The platform supports policy control for cloud applications so risky SaaS usage can be identified and restricted.

Shadow IT Discovery Reporting
Cisco Umbrella provides visibility into unsanctioned cloud services to help security teams manage data risk, compliance pressure, and application sprawl.

Cisco Ecosystem Integration
Integrations with Secure Client, Meraki, SD-WAN, Microsoft Entra ID provisioning, APIs, and Cisco security operations tools support identity-aware protection across distributed environments.

Speak to a Cisco Security Specialist

If you need to block malicious domains, secure remote users, and control cloud access across branches and hybrid work, our Cisco experts can help align Umbrella to your internet security requirements.

Cisco Umbrella Use Cases

DNS-Layer Threat Protection

Cisco Umbrella is used at the first point of internet resolution, where its cloud-delivered DNS security blocks access to known malicious domains before a web session is established or a payload is downloaded. This makes it well suited to stop phishing, malware and command-and-control traffic early, with policy enforcement managed centrally across users, devices and locations.

Secure Internet Gateway

Cisco Umbrella suits secure internet gateway deployments because it provides a cloud-delivered gateway that combines DNS-layer security, secure web gateway inspection and cloud firewall capabilities for users and sites that go directly to the internet. It protects web traffic without forcing backhaul to an office firewall, giving consistent policy control and protection at scale through a single cloud service.

Cloud Application Access Control

Cisco Umbrella is well matched to cloud application access control because it identifies SaaS usage and applies controls to cloud apps, not just broad website categories. Using DNS and web traffic visibility, plus identity-aware integrations such as Microsoft Entra ID provisioning and APIs, it helps security teams govern sanctioned and unsanctioned application use across the organisation.

Remote User Web Protection

Cisco Umbrella fits remote user web protection by following roaming laptops and off-network users wherever they connect, with enforcement delivered from the cloud rather than tied to an office perimeter. Integration with Cisco Secure Client supports consistent DNS and web protection for remote workers, reducing the need to route traffic back through a central site.

Shadow IT Discovery

Cisco Umbrella is suited to shadow IT discovery because it reports cloud application activity seen through DNS and web traffic, helping IT and security teams uncover unsanctioned SaaS use. Its central cloud management and reporting give visibility into which applications users access, supporting review, policy decisions and safer application governance.

Branch Internet Security

Cisco Umbrella is a strong fit for branch internet security where sites use local internet breakout, because it delivers cloud-layer protection without deploying a full security stack at every location. It integrates with Meraki and SD-WAN environments to apply DNS, secure web gateway and firewall controls centrally, protecting branch users and devices while keeping branch connectivity simple.

Supported Cisco Umbrella Environments & Integrations

Cloud-Delivered Security Platform

Cisco Umbrella delivers cloud-based DNS, web and firewall controls with central policy enforcement for users, sites and roaming devices.

DNS-Layer Threat Protection

Cisco Umbrella blocks malicious domains at the first internet request, stopping risky connections before web traffic or downloads begin.

Secure Internet Gateway for Direct Internet Access

Cisco Umbrella secures direct internet access with DNS security, secure web gateway and cloud firewall functions in one cloud gateway.

Remote Users, Roaming Devices & Branch Sites

Cisco Umbrella protects laptops, remote workers and branch offices without backhauling traffic through an office firewall.

Cisco Secure Client, Meraki & SD-WAN Integrations

Cisco Umbrella integrates with Secure Client, Meraki and SD-WAN to extend identity-aware internet protection across Cisco-managed environments.

Microsoft Entra ID Provisioning, APIs & Cisco Security Operations

Cisco Umbrella connects with Microsoft Entra ID provisioning, APIs and Cisco security operations tools for identity-aware policy, telemetry and response.

Cisco Umbrella Licensing Options

DNS Security Essentials

Cisco Umbrella DNS Security Essentials is licensed per protected user, seat or device and covers DNS-layer threat blocking, basic category filtering and Investigate Lite for DNS-only deployments.

DNS Security Advantage

Cisco Umbrella DNS Security Advantage builds on Essentials with full Investigate, block-page customisation, stronger allow and block controls, user-level attribution and SAML SSO.

SIG Essentials

Cisco Umbrella SIG Essentials adds cloud-delivered Secure Web Gateway, cloud firewall, limited DLP and branch traffic forwarding for organisations that need broader internet control without backhauling traffic.

SIG Advantage

Cisco Umbrella SIG Advantage extends SIG Essentials with full inline DLP, Remote Browser Isolation, advanced CASB, sandboxing and Cisco XDR integration for SSE-grade requirements.

Subscription Licensing and Agreements

Cisco Umbrella is sold as one-, three- or five-year subscriptions, transacted directly or under Cisco Security EA, with licence counts aligned to protected users, seats or devices.

Licence Review & Optimisation

Our team can help assess protected user count, DNS-only versus full SSE need, branch IPsec or GRE on-ramp count, integration scope, Cisco Secure Access migration, EA versus transactional route and renewal or coterm dates.

Cisco Umbrella Implementation and Support

Solution Design & Planning

We help assess how Cisco Umbrella should be applied across users, offices and roaming devices, then define the right policy approach for DNS-layer protection, web controls and cloud access needs.

Deployment & Configuration

Our team can assist with Cisco Umbrella setup, policy configuration and protection rules so security teams can align web and internet controls with their day-to-day operating requirements.

Integration with Existing Environments

We support integration of Cisco Umbrella with Cisco Secure Client, Meraki, SD-WAN, Microsoft Entra ID and Cisco security operations tools so identity and internet protection fit your existing environment.

User Adoption & Operational Readiness

We can help prepare administrators for Cisco Umbrella handover by reviewing policy ownership, alert handling and support processes so the security team is ready to manage internet protection consistently.

Ongoing Support & Lifecycle Management

Our team supports Cisco Umbrella with ongoing service review, policy refinement, licence alignment and renewal planning, helping you manage subscription choices and maintain fit with changing security requirements.

Commercial Optimisation & Support for Cisco Umbrella

Subscription & Licence Reviews

We help review Cisco Umbrella subscriptions against how your teams use DNS security, secure web gateway and secure internet gateway controls, so the chosen per-user or per-device tier still matches the protection you need.

Enterprise Agreement Alignment

Where relevant, we can assess Cisco Umbrella as part of a wider Cisco Security EA or transactional portfolio, helping you align renewal timing, subscription structures and related Cisco security investments with greater clarity.

Commercial Optimisation

Our team can assess whether DNS Security, SIG Essentials or SIG Advantage remains the right commercial fit for your mix of remote users, branches and cloud access needs, including any separate add-ons or integrations that influence value.

Renewal Planning & Lifecycle Management

We support proactive renewal planning by reviewing changing user counts, branch coverage and security requirements over time, helping keep Cisco Umbrella aligned as your internet security estate evolves.

Adoption & Value Realisation

Long-term value depends on consistent use and ongoing optimisation, and we help with adoption planning, usage review and lifecycle guidance so Cisco Umbrella continues to support your broader security and access goals.

Related solutions for Cisco Umbrella

The software and technologies listed here support different requirements and are often used together as part of a wider IT stack.

As an official partner to vendors including Cisco, Juniper, HPE and Fortinet, we can help confirm which software or combination provides the capabilities your team needs, while avoiding under- or over-licensing.

You may also like…

Not sure which software or licensing tier you need?

Speak to our team for help matching the right solution and licence level to your requirements.

Speak to a specialist

Need a clearer view of your software costs?

We can review your current setup, licensing and renewal cycle to check whether your software is still doing what you need, where costs can be reduced, and where administration can be simplified.
Speak to a specialist
Can’t find what you’re looking for? We have more products available - just reach out to us directly! Found a better price elsewhere? Let us know - we’re happy to discuss price matching.