Autonomous Business Monitoring by Anodot

Umbrella  is used mainly to track websites, block some sites, and malicious sites to safeguard the organization. Certain group policies are in place where for some applications, such as Google Drive , data loss prevention must be implemented and data should not be shared with other people or other cloud services. Google Drive  and any cloud-based services which are not safe are blocked, along with file transfers to other cloud-based tools. All of this is blocked, and AI-related websites which may be malicious and critical for the organization are also blocked.

Umbrella  is used for many things beyond AI. Various other content types are blocked as well.

Both features stand out as valuable. Umbrella is easy to set up as well as for creating a group policy or creating a proxy setup. Everything is easy in Umbrella when compared to other competitor sites or tools.

Previously, the organization did not have any type of security tool. The network was open and there was only a firewall which used to block additional websites or safeguard the sites. After introducing Umbrella, most of the malicious emails or malicious sites that users access have been very much secured. Most of the security threats are now blocked by Umbrella. A filter layer exists where a user can request a site to be unblocked from Umbrella. Once a ticket is raised through Umbrella, and because Umbrella has been automated through the service portal, a user can request to open the site if they might have some work. This feature is very easy and very much valued.

Umbrella could be improved with notifications. Currently, a site is completely blocked by Umbrella, but a user does not know. There is no notification that something is going wrong with Umbrella. At that point, Umbrella has to be disabled to cross-check if the site is blocked by Umbrella or not. Sometimes this happens without any notification. A notification indicating that a site is being tracked by Umbrella but is not notified to the end user would be a good option to get a notification to the end user.

There are some bugs or issues which need to be improved. Once these are improved, a higher rating could be provided.

Umbrella has been used for more than five years across two to three organizations.

Umbrella is stable.

Umbrella is very highly scalable. For example, even if it is a 100-user company, it is scalable. Even if the company needs to upgrade to 500 users, it is very scalable.

Customer service is quite good. Whenever issues arise and the cause is unclear, reaching out to customer care has provided very good support.

Previously, the organization did not have any type of security tool. The network was open and there was only a firewall which used to block additional websites or safeguard the sites.

Sophos and Sophos Endpoint  were used previously. Since Umbrella is very much a cloud-based solution and the move to Cisco products was necessary, the transition to Cisco Umbrella  was made.

Both features stand out as valuable. Umbrella is easy to set up as well as for creating a group policy or creating a proxy setup. Everything is easy in Umbrella when compared to other competitor sites or tools.

The implementation details completely go to the security team, so they make the decision on this. The work is to deploy the product and run the tests.

A recent attack on the organization resulted in some data being leaked because of phishing attempts where a user clicked on a malicious link. After introducing Umbrella security and many other security features, these incidents have been decreased. A return on investment has been achieved by the company.

The cost aspect is not something I focus on because security is something that cannot be equated to money when it comes to security. Time saved is significant. With a firewall, the slowness of site tracking is very noticeable when compared to Umbrella. When using Umbrella, there is no type of internet dependency, such as a reduction in internet speed. Everything runs fine. A lot of time is saved.

Sophos and the endpoint from Sophos were considered as alternate solutions.

Both features stand out as valuable. Umbrella is easy to set up as well as for creating a group policy or creating a proxy setup. Everything is easy in Umbrella when compared to other competitor sites or tools.

Governance  and security completely depend upon the policies that are created by the security team. This mostly goes to the security team. The governance management from the Cisco side is unclear, but it completely depends upon the deployment from the security end.

For accuracy, 60 to 70 percent accuracy is being achieved.

The brand name from Cisco is a main reason to advise for other companies or other colleagues, because Cisco has a good reputation with all organizations. The overall review rating for this product is 9 out of 10.

Our main use cases for Cisco Umbrella  are like Blocking malicious websites and phishing attacks ,Securing users when they are outside the office and protecting against malware at the DNS level

Cisco Umbrella  has improved our security by blocking threats before they reach users. It also gives better visibility of internet activity, protects users even خارج office, and reduces IT workload with easy cloud management.

The best feature Umbrella  offers is web filtering, which is crucial because the user can secure their laptops. Sometimes users try to access malicious websites, but Umbrella  is really helpful and suddenly blocks these websites, which is really beneficial for us.

Before using Umbrella, we had a lot of complaints about users accessing websites and malware being downloaded onto the user's device, but after using Umbrella, issues related to malware have really reduced, and we are now fully satisfied.

Complaints about malware incidents were reduced by 40 to 50% after using Umbrella.

I want to highlight one concern: Umbrella can be bypassed by using the Play Store applications, which is something your team could look into, as users are bypassing the filter and accessing the websites by changing DNS and point to using application DNS.

I would suggest one more improvement regarding the mobile application: if we change the DNS server on our laptop and install the mobile application on our mobile after changing the DNS, Umbrella can be bypassed, allowing a user to access any website by sidestepping Umbrella protection. I think the team should check this, as I've talked to a few users in our organization who are making such attempts to bypass Umbrella protection.

Some changes are required regarding the user's ability to easily bypass the protection, and I think the team should work to resolve this so that we can ensure our users are secure and cannot bypass this protection.

We are Using Umbrella in our organization for the last four years, and it plays a vital role; it is a really great product, so I am fully satisfied.

Yes, Cisco Umbrella is very stable. It runs on a reliable cloud infrastructure, so there is minimal downtime. It continues to protect users even when they are outside the office network, making it consistent and dependable for daily use.

Cisco Umbrella is highly scalable because it is cloud-based. We can easily add new users, devices, or locations without installing extra hardware. It grows with the organization and works well for both small and large environments with minimal effort.

Global Team provide us technical support

No

Straightforward

No

yes, definitely It has reduced security incidents like malware and phishing, which saves cost on recovery and downtime

No Comment please

we only used Cisco Umbrella

Cisco Umbrella is a strong and reliable security solution, especially for cloud and remote users. I would recommend it to organizations looking for easy deployment, good protection, and low maintenance. Start with proper policy planning to get the best results.

The cloud provider I use for Umbrella is Amazon Web Services  (AWS ).

I did not purchase Umbrella through the AWS Marketplace ; We purchased it from our global team.

There are no additional improvements needed for Umbrella that I haven't already mentioned.

My review rating for this product is 9.

Our main use case for Umbrella is DNS security.

With Umbrella as a product, we inspect all the DNS query traffic coming in. Anything that's going to the internet is inspected with Umbrella DNS security. The policies applied over and the SASE tool help us to inspect and either allow or block or do a private endpoint, which is trusted domain management. The architecture extends quite well with cloud, Azure cloud, on-prem, as well as the agent-based policies.

We are in a POC situation with Umbrella for enabling the SWG, which is an upcoming aspect.

The best features Umbrella offers include having an agent, simple installation, and a quick VA installation mode that provides a virtual tunneling sensor for any network. That is quite the best, and compared to real-time detections, it does good work in inspecting and protecting internet domains.

The agents residing as roaming clients in user machines are always on, either in the office or in home networks, doing major work for the protection of user laptops open to the internet. VA sensors are NAT-based connectors directly tunneling to the SaaS, playing a key role in resolving private domains in Azure and AWS.

Umbrella has positively impacted my organization because it has turned a different situation around; we see at least billions of traffic being protected and classified regarding what sort of traffic is going in and out. We also have a good SLT review chat exported as a report every month and week.

The reports help my team by showing both huge reductions in threats at the DNS query level and improved threat protection. The report states how much traffic flow is in the count of millions and billions and how much is blocked with our policies in place.

I see a couple of areas for improvement in Umbrella; currently, I do not have a direct option to disable or block the agent at the end-user machine level. That is one issue, and another lack is in the policies where I cannot bypass a set of categories. We have submitted a feature request for these two cases and will have to wait for an update.

I notice a lack of agent availability on Linux platforms; it would be better if we had agent-based protection for Linux machines as well.

Regarding Umbrella's AI capabilities, I think the backend work is not shown well to customers, as I see a lag in providing accurate categorization. The threat intel integrated in the backend does not achieve 100% accuracy since about 10% of domains vary between Cisco representation and other threat intel categorization, which I see as one gap.

The accuracy of Umbrella's output is slightly missing, around 10 to 15%, and it does not provide accurate categorization compared to available market threat intels.

I have been using Umbrella for close to eight years.

Umbrella is stable; although we experienced some deployment hiccups with agent specific to IPv4 and IPv6, these issues were resolved, resulting in a very stable solution.

Umbrella's scalability is easy to manage, requiring no major configuration changes and facilitated by alignment with the account team for deployment.

Customer support is excellent; we connect weekly with our Professional Services team as needed and extend our meetings based on ongoing projects.

I previously used Infoblox Threat Defense, specifically BloxOne Threat Defense, which lacked features compared to Umbrella. The transition occurred six to seven years ago due to major drawbacks in protection accuracy and management features.

Integrating Umbrella with our existing systems was easy; it involved integrating directly with NAT exits and external-facing IPs on Cisco SaaS without difficulty. We were in monitoring mode for a while before switching to protection mode, but redesigning the architecture would not be as straightforward.

We handle user training and onboarding for Umbrella primarily through Cisco Professional Services, who support us in every step, especially during situations such as recent MacBook agent deployments. Until we onboard online, they ensure our policies are updated and effective.

I have not seen a significant return on investment as the management perspective requires minimal administrators; once devices are deployed, they function largely on their own, protecting against threats at the DNS level.

My experience with pricing, setup costs, and licensing is neutral; it is not too good or bad, but reasonable for the market. Licensing is based on headcount in our organization, but now we need to consider the impact of adding SWG to our DNS security.

We evaluated Netscope and Akamai before choosing Umbrella based on price, features, and Gartner recommendations, which led us to that decision.

I rate Umbrella an eight overall, considering the feature requests submitted; I think it is doing well.

I rate it an eight because the score specifically relates to DNS security; I would not give a higher rating due to the two feature requests mentioned. Otherwise, the overall experience with Umbrella is good.

I advise others considering Umbrella to thoroughly test during their POC, especially if agent controls at the management plane and scalability on macOS are critical factors. While Umbrella excels in protection and ROI, these considerations warrant reevaluation.

I found this interview experience good and refreshing, allowing me to reflect on my journey with the product over the years; thank you for the opportunity to share feedback. My review rating for Umbrella is eight out of ten.

My main use case for Umbrella  is for our DNS security and proxy. This is what we are required to use to block any unwanted communications, domains, or certain categories which are available on the web internet that we want to restrict for our organization users so that they can avoid going into malicious sites and domains.

I can give a quick specific example of how I have used Umbrella  to block or restrict access in my organization through content filtering, by manually adding the domains, AI blocking, blocking of on-size, blocking of unwanted restricted sites, blocking of newly registered domains, blocking of social media platforms and various others.

Umbrella offers excellent features including usability; it is simple, easily accessible, and usable. The content filtering, reporting, and researching capabilities are very good and make it user-friendly for everyone.

Those reporting and researching capabilities have been really helpful in our day-to-day operations and have provided insights to understand what is happening so we can strategically plan based on our organization needs.

Umbrella has positively impacted my organization because previously, we were not having any visibility on what was coming in and what was going out. Currently, with the help of Umbrella, we are able to restrict what can go out and what can come inside, which is really helpful for each and every organization, not only for us. Umbrella is doing a great job in this area.

We have seen a couple of reductions in the sites and domains which users were visiting unwantedly or without having information, which drastically reduced, resulting in a positive impact. This is how it is increasing our security posture as well. This was the main objective for acquiring Umbrella within the organization, and the business is pretty much helpful with that.

I found Umbrella to be good, and it would be helpful if we could enhance some features related to the AIs and also provide some inputs on a weekly basis regarding what is going on in the market and your best recommendations; probably I am not getting it. We have not subscribed, but if you can guide me on where we can get that information, that would be really helpful.

Umbrella can be improved by providing something on a day-to-day basis so that users can be aware. The improvement of AI facilities or AI recommendations needs to be added, and they should provide the best recommendations based on the traffic they are seeing on a weekly or bi-weekly basis, such as what needs to be blocked and what can be looked after so that the business or the person who is looking into that can find it helpful. That is the main enhancement I can think of right now.

I think I have covered pretty much all the needed improvements for Umbrella that I have not mentioned yet.

I have been working in my current field for more than ten plus years. I have been using Umbrella for more than four years.

Umbrella is stable.

Umbrella customer support is good.

We were not using any solution previously; this is the first one we have purchased.

My experience with pricing, setup cost, and licensing has been good.

I have not found any challenges regarding pricing, setup cost, or licensing; everything is good.

I cannot calculate it based on specific metrics, but from a security perspective, it is the best investment and a good investment, probably what we need for our organization.

We have not evaluated other options before choosing Umbrella.

I would advise others looking into using Umbrella to definitely look for it and opt for it, as it is a good product based on the organization's needs; I would highly recommend it. I believe this review merits a rating of eight out of ten.