Sold by: Cisco Systems, Inc.
The leader in DNS-layer security As a trusted partner of over 24,000 companies, Cisco Umbrella provides the quickest, most effective way to improve your security stack. Gain a new layer of breach protection in minutes, with internet-wide visibility on and off your network, no matter your company size.
4.4
Overview
Enterprise security and networking are facing a significant transformation as organization embrace SASE, a Secure Access Service Edge. Wide-scale adoption of cloud applications, an increase in remote workers, and expansion of branch offices has rendered the centralized, on-premises security model impractical. The convenience, cost savings, and performance benefits of going direct to the internet is driving a new decentralized approach to networking. Yet with change comes risk and a new set of security challenges. Organizations require a broader set of protection that not only improves security, but simplifies management.
The Umbrella DNS Security Advantage package includes all the capabilities of DNS Security Essentials plus it enables organizations to proxy risky domains for URL blocking and file inspection using AV engines and Cisco AMP. For organizations looking for deeper context during incident investigations, DNS Security Advantage offers unmatched threat intelligence in the Investigate console and on-demand enrichment API.
For questions related to product, pricing or private offers, reach out to our team at cisco-security-inquiry@cisco.com
Highlights
- DNS-layer security - Umbrella uses DNS to stop threats over all ports and protocols. Stop malware earlier and prevent callbacks to attackers if infected machines connect to your network.
- App discovery & blocking - Umbrella provides visibility into cloud apps used across your organization, so you can identify potential risk and block specific applications easily.
- Web security via selective proxy - Umbrella routes requests to risky domains to a selective proxy for deeper URL and file inspection. Effectively protect without delay or performance impact.
Details
Sold by
Categories
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Umbrella DNS Advantage | Umbrella DNS Advantage with enhanced support, per user | $65.88 |
Vendor refund policy
Please refer to the seller's website.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
When customers purchase Umbrella, support is embedded
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Cisco Systems, Inc.
By Palo Alto Networks
By Netskope
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
DNS-Layer Threat Prevention
Utilizes DNS protocol to block threats across all ports and protocols, preventing malware callbacks from infected machines attempting to connect to attacker infrastructure.
Cloud Application Visibility and Control
Provides visibility into cloud applications deployed across the organization with capability to identify risks and block specific applications.
Selective Proxy-Based URL and File Inspection
Routes requests to risky domains through selective proxy for URL blocking and file inspection using antivirus engines and advanced malware protection.
Threat Intelligence and Investigation Capabilities
Offers threat intelligence data accessible through Investigate console and provides on-demand enrichment API for deeper context during incident investigations.
Internet-Wide Security Visibility
Delivers security visibility both on and off the network across internet-wide traffic regardless of user location or network connectivity.
Advanced Threat Prevention
Safeguards network from known and zero-day threats including exploits, malware, spyware, and command and control attacks using researcher-grade signatures and machine learning inspection engine.
Advanced URL Filtering
Defends against phishing, ransomware, and web-based attacks using inline machine learning-based web security engine with real-time detection of previously unseen threats and dynamic policy controls.
File-Based Threat Detection
Identifies file-based threats through inline static and dynamic analysis in the cloud with proprietary hypervisor technology for detection of sandbox-resistant malware.
DNS Security
Detects and prevents sophisticated DNS-layer network attacks and data exfiltration attempts.
Dynamic Policy Management
Applies policy definitions to cloud assets based on AWS tags, Application IDs, User IDs, geographies, or zones with automatic adaptation to infrastructure changes without manual intervention.
Cloud Access Security Broker
Unified cloud access security broker (CASB) functionality providing visibility and control over access to managed and unmanaged cloud services with conditional, granular policy enforcement.
Secure Web Gateway
Next generation secure web gateway (SWG) capabilities delivering comprehensive threat protection for cloud and web services with context-aware access control.
Data Loss Prevention
Data-at-rest and data-in-motion inspection with DLP violation detection, malware scanning in cloud storage, and data exfiltration prevention to unmanaged cloud infrastructure.
Cloud Infrastructure Monitoring
Continuous security assessment monitoring of cloud infrastructure for risky misconfigurations including data exposure across AWS and other cloud providers with inventory and configuration visibility.
Compliance and Remediation Automation
Pre-defined compliance profiles aligned with CIS, PCI, and NIST standards, advanced RBAC, scheduled reporting, alert notifications, exception handling, and automated remediation capabilities accessible via REST APIs.
Standard contract
No
No
No
Customer reviews
Subhajji S.
Straightforward Policy Creation with Templates Across Cloud Proxy and Prisma
Reviewed on May 09, 2026
Review provided by G2
What do you like best about the product?
Creating policies using templates is straightforward. You can create user-based policies that apply on the cloud proxy, and you can do the same on Prisma as well.
What do you dislike about the product?
The Umbrella selected proxy feature felt unreliable. It sometimes allows URL access, but other times it blocks the same URLs, and we couldn’t whitelist them. We got stuck in that situation.
What problems is the product solving and how is that benefiting you?
Cloud proxy with URL blocking and whitelisting, helping safeguard the environment over a VPN network.
Aman A.
Reliable DNS-Level Protection Anywhere, with Windows Agent and Mobile App
Reviewed on Apr 23, 2026
Review provided by G2
What do you like best about the product?
It does what it states. Protection at a DNS level, it has its own agent for Windows and app for mobile. Where you are connected to office network or not, you are still protected. A great layer of defense on top of AV systems.
What do you dislike about the product?
Cannot thick of anything. Just because you are working at a DNS layer. You need to know what you are configuring to avoid any service disruption.
What problems is the product solving and how is that benefiting you?
It adds defense in depth in our environment. This way we are not just relying on AV. It also adds great visibility in the AI world where everyone wants to access all the AI websites out there. Also they are pretty fast in updating their database about new websites.
Information Technology and Services
Light weight content filter
Reviewed on Apr 09, 2026
Review provided by G2
What do you like best about the product?
Creating policies and testing policies is a breeze
What do you dislike about the product?
Mostly cost, and its proxying behavior did negatively impact some traffic.
What problems is the product solving and how is that benefiting you?
URL filtering on the corporate network and outside of it.
Dnyanesh M.
Proactive Security and Seamless Integration
Reviewed on Apr 05, 2026
Review provided by G2
What do you like best about the product?
I really appreciate Cisco Umbrella for its proactive nature in blocking DNS hits to malicious websites. It does a wonderful job by maintaining a list of malicious links and promptly blocking them when an unaware employee clicks on such links. This feature is very proactive and helps safeguard our organization from malicious exposure. I also find the DNS management aspect impressive, as Cisco handles all the technical parts, making it easy for us to just plug the solution into our endpoints and ensure everything is safeguarded. The onboarding process was pretty straightforward with neat documentation, and using the cloud-based solution made it perfect and easy to deploy. I must say, I rate it 10 out of 10 for recommendations.
What do you dislike about the product?
There was a lack of AI innovation in Cisco Umbrella. When I was using it, there was no AI in that solution. That's something they can improve on. FYI I used cisco unbrella from 2021 to early 2025. They may have improved in this space in last 2 year.
What problems is the product solving and how is that benefiting you?
Cisco Umbrella secures DNS by managing blacklist and malicious website lists, saving us the complexity and cost of doing it manually. It proactively blocks threats, safeguarding our employees from malicious exposure with ease of setup and integration into our systems.
MANI CHANDRA T.
Powerful Threat Management, Needs Better Search Functionality
Reviewed on Mar 24, 2026
Review provided by G2
What do you like best about the product?
I like Cisco Umbrella because its interface is neat and makes finding options easy. It's also straightforward to block things globally. Plus, it's easy to set up.
What do you dislike about the product?
Search options need to be improved since I can't search the required URLs easily. Smarter filtering options like user + device + location together would help.
What problems is the product solving and how is that benefiting you?
I use Cisco Umbrella to block malicious domains and URLs, check on malicious URL clicks, and access reports on high phishing links, enhancing our cyber team's security.