Try our new research platform with insights from 80,000+ expert users

Cisco Umbrella vs Palo Alto Networks DNS Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 9, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Umbrella
Ranking in Domain Name System (DNS) Security
1st
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
113
Ranking in other categories
Secure Web Gateways (SWG) (1st), Internet Security (1st), Cloud Access Security Brokers (CASB) (2nd), Secure Access Service Edge (SASE) (3rd), Cisco Security Portfolio (2nd)
Palo Alto Networks DNS Secu...
Ranking in Domain Name System (DNS) Security
3rd
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
14
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of May 2025, in the Domain Name System (DNS) Security category, the mindshare of Cisco Umbrella is 22.2%, down from 28.0% compared to the previous year. The mindshare of Palo Alto Networks DNS Security is 12.4%, down from 15.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Domain Name System (DNS) Security
 

Featured Reviews

Rohan Singh - PeerSpot reviewer
Protects endpoints wherever they are, always pushing people to the right locations to avoid malicious intent
The most valuable thing is how easy it is to deploy. We did it with 9,000 users at my last job, and it took a week to get to all the endpoints. Doing that without having to physically touch all those endpoints was very simple. The single pane of glass management makes it very easy to manage your rollout. We get a lot of "single panes of glass" and, eventually, you need a pane of panes of glass. But it's always good to have a clear and graphical view, and Umbrella's is nice and easy to read. Definitely, of the panes of glass that we do have, it's one of the easiest to use. The single pane of glass is good to group users together and separate people out. Some people need different types of security. Some people are more vulnerable. Some have more highly valuable assets, like C-suite people. It's really good to be able to have end-users defined inside of that. You don't have to jump around. You don't have to figure out who's who. It's all done through one pane of glass. What most people don't realize is that it's running in the background, which is a really nice aspect when it comes to security. Often, when you deploy a security tool, it takes up CPU performance. Everything slows to a grind. But Umbrella is so simple and easy and it doesn't affect the end-user experience. It's the best of all worlds. It's nice when people realize that they're being protected when they go to the wrong site. I think people are happy that they're protected, but it's nice that they rarely notice it. It's generally easy to maintain network connectivity, but with Umbrella, the nice part is that whichever connectivity you're on, you're always secure. With Umbrella, as long as you're online, you're going to be protected.
Partha Dash - PeerSpot reviewer
Protects against threats by quickly identifying insider risks and compromised devices
Palo Alto should explore agentless approaches to integrate DNS Security more easily and efficiently. The existing system sometimes presents challenges with backbone routing, impacting productivity. An agentless approach could be more lightweight and user-friendly. Additionally, there is a need for improvement in the pricing model for support and license renewals.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"​They have a wealth of articles in their knowledge base. This has given me the freedom to troubleshoot on my own time. ​​"
"The reports and notifications are the most useful part of the platform. As soon as you deploy the security layers, the reporting is very comprehensive. It helps you to have, at a glance, a clear view of what's going on."
"The solution is very easy to manage. We found the initial setup, for example, to be quite simple."
"It has certainly saved us time. If we go and look at what's rejected on the requests from the hospital itself, it has saved about 5% or 6% time."
"The interface is well organized, so you can easily find everything. Even if you don't have much experience with Cisco, you can easily navigate the solution and find your way around. Everything has been done well, from the deployment to monitoring."
"Cisco's technical support is pretty good. When a solution is available, they will find it. On a scale from one to ten with ten being the best, I'd rate Cisco's technical support at nine."
"Umbrella, being one pane for managing, being all-encompassing, allows us to quickly go in, make a change, and it applies to either every location, if we want it to, or we can have policies in place that only apply to certain users or certain computers."
"It has excellent resilience in cybersecurity. Cybersecurity for my organization is very important because we are a banking organization. We need this security to protect the personal information of our clients. This is very important for our security."
"When comparing other cloud-based DNS security solutions to this one I have found the main beneficial feature in this solution to be we do not need to change our architecture."
"The most valuable features of DNS Security include its ability to protect against command and control traffic, anonymizers, newly registered domains, and DNS tunneling."
"Palo Alto Networks DNS Security is a stable solution."
"We now have insight into our DNS requests and we can actively see how many thousands of malicious requests have gotten knocked down in the last day or week that we didn't have before. There's more insight for both security and more insight."
"I would rate the scalability a nine out of ten."
"The most valuable features of DNS Security include its ability to protect against command and control traffic, anonymizers, newly registered domains, and DNS tunneling."
"The support team has good knowledge about the solution."
"The solution's most valuable features are data exfiltration and DNS tunneling."
 

Cons

"It could be more secure. It would be better if they provided a transferring proxy as an add-on and more integration."
"User interface could be a little smoother and more intuitive."
"The integration with Cisco could be better."
"I would like to see more integrability with other products."
"It would be good if the more complex versions of Umbrella are simplified so that we can offer them in a more standardized way. We, as a telco, do not operate the same as a traditional integration partner would, who can sell all its services. We try to have a standardized approach as much as we can so that we can sell the solution with as many services added to it as possible. If you look at the structure of businesses in Switzerland, 95% of them have 10 persons or less, and they do not have a security specialist. Therefore, the higher the automated and standardized features, the better it is for them."
"It would be useful if they had a malware protection engine running inside their own VM."
"The firewall capabilities could be better. Cisco is starting to introduce some layer 7 capabilities now, but there's still some room to grow. They should continue with the development of Umbrella so that it is a full-blown cloud-managed firewall solution."
"Cisco Umbrella can be improved in terms of limited coverage and wind vulnerability. The product can only shield a small area, making it less effective for larger spaces or multiple users."
"There should be an on-premise version of this solution."
"Pricing is one of the areas of concern in Palo Alto Networks DNS Security since it is an expensive product. I feel that the product's pricing is an area that could be improved."
"We would like to have cloud-based management."
"If the tool offers improved data security, I think it would be good."
"Palo Alto should explore agentless approaches to integrate DNS Security more easily and efficiently."
"With Palo Alto Networks DNS Security, sometimes the DNS clients don't work well, and they get disconnected, making it an area where improvements are required."
"Every vendor that sells DNS or firewalls needs to be able to protect against DNS look-up attacks and DNS naming hacks. This is true of Palo Alto as well as others."
"Sometimes, it blocks legitimate traffic for custom applications, requiring manual intervention."
 

Pricing and Cost Advice

"Pricing depends on the automation requirements of the organization."
"Cisco solutions are generally perceived to be rather expensive. We have constant internal discussions as to whether we should offer lower-priced security solutions from some of the competitors."
"You get what you pay for if you break the solution up into tiers."
"The price is quite good."
"The licensing fee is paid on a yearly basis."
"Licensing with Cisco can be a little complex, but I think it's comparable with that of other similar products. It's always hard to put a price on security, but the price is fair for the value it provides."
"As an educational partner, we get better licensing structures. We are very happy with that. It has been very nice that Cisco has partnered with the educational sector to bring that."
"Its price for us is quite expensive because it's a subscription, and we just use it for the DNS log. So, for us, it's quite expensive."
"There aren't many vendors offering DNS security solutions, but generally, Palo Alto subscriptions tend to be more expensive than other security vendors."
"There is an annual license for the solution and I am satisfied with the pricing."
"It is not an expensive solution."
"If one is very cheap and ten is very expensive, I rate the tool's price as two."
"Palo Alto Networks DNS Security is an expensive product. I rate the product's pricing an eight on a scale of one to ten, where one is cheap, and ten points are expensive."
"The product is expensive compared to Fortinet."
"The solution's pricing is equal to Cisco AMP or Cisco Umbrella."
"The product is expensive. My company makes payments on a quarterly basis towards the solution's costs."
report
Use our free recommendation engine to learn which Domain Name System (DNS) Security solutions are best for your needs.
851,604 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
23%
Computer Software Company
18%
Financial Services Firm
7%
Manufacturing Company
7%
Computer Software Company
13%
Financial Services Firm
11%
Manufacturing Company
10%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better security solution - Cisco Umbrella or Zscaler?
Cisco Umbrella and Zscaler Internet Access are two broad-spectrum Internet security solutions that I have tried. Zscaler Internet Access is a good option for carrying out multiple security functi...
Which is the better security solution - Cisco Umbrella or Microsoft Cloud App Security?
Cisco Umbrella is an integral component of the Cisco SASE architecture. It integrates security in a single, cloud-native solution, unifying multiple features like DNS-layer security, threat intelli...
What do you like most about Cisco Umbrella?
Cisco Umbrella is easy to monitor, manage, and deploy.
What needs improvement with Palo Alto Networks DNS Security?
Palo Alto should explore agentless approaches to integrate DNS Security more easily and efficiently. The existing system sometimes presents challenges with backbone routing, impacting productivity....
What is your primary use case for Palo Alto Networks DNS Security?
I primarily use DNS Security for protecting against command and control traffic, newly registered domains, and dynamic DNS. It provides added protection for users, allowing me to quickly identify a...
 

Also Known As

OpenDNS
No data available
 

Overview

 

Sample Customers

Chart Industries, City of Aspen, Eastern Mountain Sports, FLEXcon, George Washington University, Jackson Municipal Airport Authority, Ohio Public Library Information Network, PTC, Richland Community College, Smart Motors, Tulane University, VeriClaim
Information Not Available
Find out what your peers are saying about Cisco Umbrella vs. Palo Alto Networks DNS Security and other solutions. Updated: April 2025.
851,604 professionals have used our research since 2012.