What is most valuable?
DNS security used to be the main value for us. Looking forward, SASE-style use cases (the ability to connect to any endpoint, be it a corporate-managed device, or a privately managed device, to any SaaS service) seems to be the most important feature for the future, on top of DNS security.
What needs improvement?
Looking at the full umbrella suite in the light of SASE, Secure Access Service Edge, they are clearly lacking in the inline CASB. Any line cloud access security broker has an API-based cloud access security broker, which is called CloudLock, but they're lacking the inline components, which are able to intercept traffic.
An on-premise DLP solution or integration with an on-premise DLP solution would be a nice addition. Also, more broad operating system support for endpoints would be an advantage.
For how long have I used the solution?
I have been using Cisco Umbrella for the last three years.
What do I think about the stability of the solution?
Cisco Umbrella is absolutely stable. They put a lot of weight on the availability and reliability of the global footprint. So yes, they kind of set the standards for availability.
What do I think about the scalability of the solution?
Cisco Umbrella Is very easy to scale.
How are customer service and technical support?
I haven't been involved in providing support for it; however, I am not aware of any significant issues.
How was the initial setup?
The initial setup was quite straightforward.
Deployment depends on the number of features and the degree of integration you're looking for. Deployment can take anywhere from 30 seconds, simply to redirect your recursive DNS service, up to several days for a full-blown enterprise setup. So it depends on the use case.
What's my experience with pricing, setup cost, and licensing?
The pricing varies. If you're just after DNS security, it's rather expensive. If you are, however, after replacing parts of your enterprise security infrastructure (by moving from a legacy on-premise, security-based approach, to a more cloud-based approach), then you can replace a whole bunch of classic security devices and solutions. In short, you can basically consolidate your security functions. I think it's worth the money.
What other advice do I have?
I would definitely recommend Cisco Umbrella. Proof of concept is always the second step. The first step is coming up with your use cases. If Umbrella is the answer, what's the question? You should roadmap your immediate and long-term goals in terms of IT security, or information security. You should take into account your operational fitness for tackling the cloud as well, then pick the right features to suit your needs. This is all basically applicable to similar solutions. If you run into this with no plan, you're just shifting your existing problems.
On a scale from one to ten, I would give Cisco Umbrella a rating of eight.