Cisco Umbrella Review

Customization allows us as consultants to tune web content filtering for the SMB market.


What is most valuable?

Custom whitelist/blacklist/block page allows us as consultants to tune web content filtering for the SMB market.

How has it helped my organization?

OpenDNS supplements other security solutions to allow for blocking through DNS requests, which is common for malware to use to bypass other security mechanisms.

What needs improvement?

This product needs policy scheduling for enforcement by category. Notice in all the packages, there’s no scheduling. In the Insights or Platform package offerings, you can now essentially have multiple ‘policies’ per AD user or network group. What’s missing is that I still can’t set enforcement to block certain website use at this time of day or these days of the week. For instance, a company may allow streaming audio sites for music only for night shift workers to help them keep awake and versus dayshift workers.

For how long have I used the solution?

I have been using the web-based, small-teams edition since 2007 (nine years).

What was my experience with deployment of the solution?

We have never encountered issues with general deployment.

How are customer service and technical support?

We would rate customer service and tech support after the Cisco acquisition a 5 out of 10.

Which solution did I use previously and why did I switch?

We’ve used and deployed ZScaler, Websense, and other UTM-based blocking solutions. This product is not always the best if you need complex policy and scheduling, and other user soft-pass through authentication.

How was the initial setup?

Initial OpenDNS setup is straightforward if you have a static IP address and you apply the DNS forwarders appropriately. This is literally a five-minute-or-less change.

What about the implementation team?

We always implement for ourselves and for others in-house because of ease of use. Implementation-wise, companies should be aware that changing DNS forwarders might impact their global DNS operational needs. OpenDNS servers are also slower than something like Google DNS.

What's my experience with pricing, setup cost, and licensing?

Pricing needs to be reduced for SMB based on the blocking capabilities and the lack of other features that you just cannot do in DNS, such as authentication-based filtering.

Also, scalability-wise, the pricing is more of a challenge for enterprise-class environments because of the pricing model.

What other advice do I have?

OpenDNS is either a good complement to your existing web content filtering solution at the enterprise level, or it is a good free or easy-to-deploy alternative for home and SMB use.

**Disclosure: I am a real user, and this review is based on my own experience and opinions.
More Cisco Umbrella reviews from users
...who work at a Financial Services Firm
...who compared it with Zscaler Internet Access
Add a Comment
Guest
1 Comment

author avatarit_user800895 (Developper at CacheGuard Technologies Ltd)
User

Is it possible to have your own white or black list of URLs? What about the maintenance process of those lists?