1. [Home](https://www.g2.com/) 2. ... 3. [Web Security Software](https://www.g2.com/categories/web-security) 4. [Secure Web Gateway Software](https://www.g2.com/categories/secure-web-gateways) 5. [Cisco Umbrella](https://www.g2.com/products/cisco-umbrella/reviews) 6. [Cisco Umbrella Claims vs Evidence](https://www.g2.com/products/cisco-umbrella/claims-vs-evidence) # Cisco Umbrella Claims vs Evidence ## Claim: “You’ll stop attacks and block ransomware, malware, trojans, and other threats, over any protocol or port — before they reach your network or endpoints.” ##### Mixed support from reviews. Reviewers consistently describe effective DNS-layer blocking of malicious domains before users or devices are reached. However, other reviewers note that protection is DNS-level, can be limited without internet, and cannot decrypt certain encrypted channels, which undermines the claim’s broader guarantee across any protocol or port. - “Cisco Umbrella is very effective at providing DNS-layer protection, blocking malicious domains before threats can reach users or devices.” [Read Full Review](https://www.g2.com/survey_responses/11721189) - “It does what it states. Protection at a DNS level, it has its own agent for Windows and app for mobile.” [Read Full Review](https://www.g2.com/survey_responses/12679658) - “the encrypted channel established between Cisco Virtual Appliances (VAs) and Umbrella cloud cannot be decrypted if SSL decryption is enabled on the perimeter firewall.” [Read Full Review](https://www.g2.com/survey_responses/11795189) - “without internet there will be limited protection.” [Read Full Review](https://www.g2.com/survey_responses/10715445) Last updated Sep 30, 2026 Source: [https://umbrella.cisco.com/solutions/cyber-threat-protection-for-financial-services](https://umbrella.cisco.com/solutions/cyber-threat-protection-for-financial-services) ## Claim: “Umbrella not only protects guest and employee devices against new malware infections, but also contains the ability of their infected devices from launching attacks via your networks.” ##### Supported by reviews. Relevant reviewers report blocking malicious links and domains, reducing requests to command-and-control sites, and automatically protecting against malicious traffic from within the internal network. These reviews support both protection against malware-related threats and limiting malicious outbound activity, although they do not describe the containment mechanism in technical detail. - “When the system is implemented, there is automatic protection against malicious traffic from within the internal network.” [Read Full Review](https://www.g2.com/survey_responses/10233974) - “Saw immediate wins, by seeing drastic reduction in number of the DNS requests towards crypto mining sites, CnC sites.” [Read Full Review](https://www.g2.com/survey_responses/11795189) - “It does a wonderful job by maintaining a list of malicious links and promptly blocking them when an unaware employee clicks on such links.” [Read Full Review](https://www.g2.com/survey_responses/12587113) Last updated Sep 30, 2026 Source: [https://umbrella.cisco.com/solutions/network-security-for-healthcare](https://umbrella.cisco.com/solutions/network-security-for-healthcare) ## Claim: “In minutes, your users will be protected against threats such as malware, ransomware, and C2 callbacks with no added latency.” ##### Mixed support from reviews. Reviewers report rapid deployment and immediate protection against malicious and CnC-related activity, supporting the general protection and speed aspects. However, one reviewer reported that proxying negatively affected traffic, and the reviews do not establish the specific “in minutes” timeframe or confirm no added latency. - “Saw immediate wins, by seeing drastic reduction in number of the DNS requests towards crypto mining sites, CnC sites.” [Read Full Review](https://www.g2.com/survey_responses/11795189) - “You can deploy easy and quickly to the new servers.” [Read Full Review](https://www.g2.com/survey_responses/9008869) - “its proxying behavior did negatively impact some traffic.” [Read Full Review](https://www.g2.com/survey_responses/6750880) Last updated Sep 30, 2026 Source: [https://umbrella.cisco.com/solutions/guest-wifi-security](https://umbrella.cisco.com/solutions/guest-wifi-security) ## Claim: “By analyzing and learning from internet activity patterns, Umbrella automatically uncovers attacker infrastructure staged for current and emerging threats, and proactively blocks requests to malicious destinations before a connection is even established.” ##### Supported by reviews. Relevant reviewers consistently report proactive DNS-layer blocking of malicious websites and domains before users or devices connect. The reviews support this observable blocking behavior, though they do not independently detail how Umbrella analyzes activity patterns or uncovers staged emerging-threat infrastructure. - “I really appreciate Cisco Umbrella for its proactive nature in blocking DNS hits to malicious websites.” [Read Full Review](https://www.g2.com/survey_responses/12587113) - “Cisco Umbrella is very effective at providing DNS-layer protection, blocking malicious domains before threats can reach users or devices.” [Read Full Review](https://www.g2.com/survey_responses/11721189) - “Its DNS-layer security is highly effective in blocking malicious domains before a connection is even established, offering a proactive first line of defense.” [Read Full Review](https://www.g2.com/survey_responses/6912213) Last updated Sep 30, 2026 Source: [https://umbrella.cisco.com/solutions/cybersecurity-for-small-business](https://umbrella.cisco.com/solutions/cybersecurity-for-small-business) ## Claim: “With Umbrella, customers can stop malware infections earlier, identify already infected devices faster, and prevent data exfiltration.” ##### Supported by reviews. Relevant reviewers consistently report proactive blocking of malicious domains and reduced connections to threat infrastructure, along with dashboards that provide threat visibility for quick action. The reviews support earlier threat prevention and faster response, but do not directly establish the specific prevention of data exfiltration. - “It does a wonderful job by maintaining a list of malicious links and promptly blocking them when an unaware employee clicks on such links.” [Read Full Review](https://www.g2.com/survey_responses/12587113) - “Saw immediate wins, by seeing drastic reduction in number of the DNS requests towards crypto mining sites, CnC sites.” [Read Full Review](https://www.g2.com/survey_responses/11795189) - “The reporting dashboards are intuitive and provide valuable insights into threat activity, allowing administrators to act quickly.” [Read Full Review](https://www.g2.com/survey_responses/11721189) Last updated Sep 30, 2026 Source: [https://umbrella.cisco.com/solutions/protect-mobile-users](https://umbrella.cisco.com/solutions/protect-mobile-users) ## Claim: “By enforcing security at the DNS layer, Umbrella stops threats before they ever reach your network or endpoints.” ##### Mixed support from reviews. Most relevant reviewers report DNS-layer blocking of malicious websites and domains before they reach users or devices, supporting the claim’s core direction. However, one reviewer notes that protection is limited without an internet connection, qualifying the claim’s absolute wording. - “It helps protect users from malicious websites, phishing attempts, and other online threats” [Read Full Review](https://www.g2.com/survey_responses/13240292) - “I really appreciate Cisco Umbrella for its proactive nature in blocking DNS hits to malicious websites.” [Read Full Review](https://www.g2.com/survey_responses/12587113) - “Cisco Umbrella is very effective at providing DNS-layer protection, blocking malicious domains before threats can reach users or devices.” [Read Full Review](https://www.g2.com/survey_responses/11721189) - “An expensive one, will need a great net connection since without internet there will be limited protection.” [Read Full Review](https://www.g2.com/survey_responses/10715445) Last updated Sep 30, 2026 Source: [https://umbrella.cisco.com/solutions/cybersecurity-for-small-business](https://umbrella.cisco.com/solutions/cybersecurity-for-small-business) ## Claim: “Umbrella for Government meets CISA’s Protective DNS mandate and goes beyond to shield roaming users and devices with Umbrella advanced DNS threat intelligence that quickly blocks threats over any port and protocol from Day One.” ##### Supported by reviews. Relevant reviewers consistently report roaming protection and proactive DNS-layer blocking of malicious domains for users and devices. However, these reviews do not independently establish the specific CISA mandate, coverage over every port and protocol, or the “Day One” timeframe. - “Where you are connected to office network or not, you are still protected.” [Read Full Review](https://www.g2.com/survey_responses/12679658) - “It does a wonderful job by maintaining a list of malicious links and promptly blocking them when an unaware employee clicks on such links.” [Read Full Review](https://www.g2.com/survey_responses/12587113) - “blocking malicious domains before threats can reach users or devices.” [Read Full Review](https://www.g2.com/survey_responses/11721189) Last updated Sep 30, 2026 Source: [https://umbrella.cisco.com/solutions/cybersecurity-for-government-and-public-sector](https://umbrella.cisco.com/solutions/cybersecurity-for-government-and-public-sector) ## Claim: “Cisco Umbrella solves this problem by bringing together secure web gateway, cloud-delivered firewall, cloud access security broker (CASB) functionality, DNS-layer security, and interactive threat intelligence in a single, integrated cloud service — to provide the most comprehensive protection for distributed networks and roaming users.” ##### Mixed support from reviews. Reviewers mention several claimed capabilities, including cloud-delivered firewall, secure web gateway, DNS-layer security, and global intelligence. However, another reviewer reports no integration with third-party next-generation firewalls, and the reviews do not directly establish the full claimed combination—including CASB functionality—or its being the most comprehensive protection. - “Cloud Security, DNS layer security, global Intelligence, Scalability” [Read Full Review](https://www.g2.com/survey_responses/9865573) - “There is no integration between Cisco Umbrella with third party next generation firewalls such as Palo Alto firewalls / Prisma Access or Fortinet firewalls” [Read Full Review](https://www.g2.com/survey_responses/11795189) Last updated Sep 30, 2026 Source: [https://umbrella.cisco.com/solutions/unified-threat-management](https://umbrella.cisco.com/solutions/unified-threat-management) ## Claim: “Our endpoint security footprints enforce policies at the DNS layer to prevent system compromise and data exfiltration – over any port or protocol.” ##### Supported by reviews. Relevant reviewers consistently report DNS-layer protection that blocks malicious domains and reduces connections to crypto-mining and command-and-control sites. However, these reviews do not specifically establish prevention of data exfiltration or protection over every port or protocol. - “Protection at a DNS level, it has its own agent for Windows and app for mobile. Where you are connected to office network or not, you are still protected.” [Read Full Review](https://www.g2.com/survey_responses/12679658) - “Cisco Umbrella is very effective at providing DNS-layer protection, blocking malicious domains before threats can reach users or devices.” [Read Full Review](https://www.g2.com/survey_responses/11721189) - “Saw immediate wins, by seeing drastic reduction in number of the DNS requests towards crypto mining sites, CnC sites.” [Read Full Review](https://www.g2.com/survey_responses/11795189) Last updated Sep 30, 2026 Source: [https://umbrella.cisco.com/solutions/securing-remote-and-roaming-users](https://umbrella.cisco.com/solutions/securing-remote-and-roaming-users)