Global IT service Desk Analyst at Menzies Aviation
Real User
Top 20
Jul 8, 2026
My main use case for Umbrella is for VPN purposes, and we are also using Cisco Meraki for our network. One specific example of how I use Umbrella for VPN purposes in my daily work is that we have restricted some applications to our employees, so once they want to access our Menzies applications, they have to connect Umbrella VPN to their computer, and after that, they can access everything. Uploading VPN profiles in Umbrella has greatly helped my team; for example, it is very easy to upload Umbrella VPN profile, as we just upload the XML file in Umbrella, and it automatically fetches the details and connects to our VPN server without any issue.
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
Real User
Top 5
Jul 8, 2026
My main use case for Umbrella is to safeguard all our servers, IPs, and devices from going into malicious IPs or domains that could manipulate our system. The main purpose is protection, but one of the uses I have observed is that some internal users have been going through a particular IP, which I bring down more. It was a particular domain from MS Rubber that is quite malicious. When I searched the root cause from this app, I found that it is making a frozen domain and creating EC2 communication to our internal server, which is quite risky to our environment. When I searched the domain in Virus Total, one of the malware antivirus checking sites, I did not find anything, but from this tool, I can see how the forensics from this application show that the IP is inserted into our internal system. Therefore, it is a very good tool to use. There are almost one thousand servers, so we cannot manually monitor all of them.
Umbrella serves as a cloud-delivered DNS encryption platform for protecting the DNS layer security both off-network and on-network, which allows complete management of DNS, enabling policy management, troubleshooting, and monitoring for endpoint security operations. Umbrella protects the DNS layers at the gateway and firewall level, and this is managed completely in the SASE platform, which provides a central dashboard for visibility and reporting on all information. The main components include DNS resolvers, intelligent proxies, identity integrations, and roaming clients, with a central policy engine managed through the platform.
Data Security Consultant at a tech vendor with 10,001+ employees
Real User
Top 10
May 30, 2026
My main use case for Umbrella involves whitelisting and blacklisting of URLs. I want to provide feedback on Umbrella as it functions. Umbrella provides strong DNS layer security and blocks malicious domains before connections are established. We would like to whitelist or blacklist the URLs that we want to utilize on our client side. The dashboard is relatively easy to use and provides good visibility into DNS requests and security events. Integration with other Cisco security products is beneficial, and reporting and analytics could be more customizable. Policy management can become complex in larger environments with multiple user groups. Troubleshooting blocked domains sometimes requires a very deep investigation. More granular reporting and easier policy inheritance would improve administration. Roaming client protection is valuable for remote customers, and threat intelligence backed by Cisco Talos is a strong advantage. I can provide a quick specific example of how I have used Umbrella for whitelisting or blacklisting URLs by checking in VirusTotal as well as a few of the McAfee sites, and based on that, we will blacklist or whitelist the URLs.
Senior Network Security Engineer at Beta Information Technology
Real User
Top 20
May 28, 2026
My main use case for Umbrella is DNS security, by securing end users to utilize a security DNS. I have deployed Umbrella in proxy mode, and we have two appliances in our environment. Our Active Directory gets all the DNS queries from the Umbrella appliances, and the Umbrella appliances reach DNS and Cisco Security Cloud. Our end users utilize it from the Active Directory.
Field on-site engineer at a manufacturing company with 10,001+ employees
Real User
Top 10
May 7, 2026
Umbrella was used on the security side to ensure that we had a secure connection for people and end users authorized to access the company infrastructure. I used Umbrella for users in the company to help them make a connection through the VPN. The main purpose was to provide the VPN with security to end users. The job was done properly without getting into specific or complex situations, and it replied to our expectations.
We have been using Umbrella for two years now. We are using Umbrella for providing DNS threat protection to our on-premises clients as well as our roaming clients. We have the same use case as we have DNS security firewall policies which have a number of feeds built into those policies that evaluate any public DNS queries initiated by an end client to determine if the query is legitimate or not. If there is a threat to that query, it will instantly block that query and safeguard the user from even reaching that website. We are using Umbrella to protect our on-premises as well as our roaming clients, as it has agent-based monitoring which can be installed on roaming clients that are not sitting in the office and can provide DNS security to users who are part of the company assets but are not in the office.
Umbrella is mainly used for DNS security, and since we are in a hybrid model, we use Umbrella to protect remote users from malicious websites and for web traffic control. Generally, Umbrella helps us protect those remote users by working on an agent-based system, and we install it on end-user computers. Once we install the agent, all the traffic from the computer routes through DNS Umbrella. Therefore, everyone is protected, whether in the office or at home. We create specific rules for what traffic to allow and what to block. Generally, we allow only productivity and legitimate traffic and block all malicious content and unwanted traffic. Also, for particular features that are hosted locally, we can add those as our internal domains to resolve them quickly and have no issues in the future.
My main use case for Umbrella is DNS filtering, traffic filtering, and security for our users. I use Umbrella mainly for all our users to make sure that any kind of traffic that's malicious is blocked and that we can maintain confidential information without risk of hacking.
The main use case for using Umbrella in our organization is to gain a good setup and obtain visibility over the cloud in financial management. It helps us in a transparent manner where we can see intuitive dashboards and self-service reporting that connects us in minutes and delivers unified cost data within 24 hours, making it very accessible for our FinOps and engineering teams. We are using it for AI insights where AI-driven anomaly detection and customizable alerts reduce manual analysis and effort. Some technical users in our organization use it for navigation purposes. We use Umbrella for FinOps and cost allocation in the organization, which helps us track spend by business unit, customer, feature, or Kubernetes namespace. This helps us reduce costs and achieve maximum benefit. It also helps us with forecasting and budgeting of the projects we work on. It generates good demand forecasts from the CUR data set, sets budgets, and exports dashboards for executive reviews.
Umbrella offers a comprehensive suite designed to enhance security management across digital landscapes with precision. By effectively mitigating risks, it provides robust protection tailored to meet specific requirements.Umbrella stands out with its potent ability to streamline risk management through advanced threat intelligence and adaptive security measures. It incorporates state-of-the-art technology that identifies and neutralizes threats before they impact critical infrastructures. Its...
My main use case for Umbrella is for VPN purposes, and we are also using Cisco Meraki for our network. One specific example of how I use Umbrella for VPN purposes in my daily work is that we have restricted some applications to our employees, so once they want to access our Menzies applications, they have to connect Umbrella VPN to their computer, and after that, they can access everything. Uploading VPN profiles in Umbrella has greatly helped my team; for example, it is very easy to upload Umbrella VPN profile, as we just upload the XML file in Umbrella, and it automatically fetches the details and connects to our VPN server without any issue.
My main use case for Umbrella is to safeguard all our servers, IPs, and devices from going into malicious IPs or domains that could manipulate our system. The main purpose is protection, but one of the uses I have observed is that some internal users have been going through a particular IP, which I bring down more. It was a particular domain from MS Rubber that is quite malicious. When I searched the root cause from this app, I found that it is making a frozen domain and creating EC2 communication to our internal server, which is quite risky to our environment. When I searched the domain in Virus Total, one of the malware antivirus checking sites, I did not find anything, but from this tool, I can see how the forensics from this application show that the IP is inserted into our internal system. Therefore, it is a very good tool to use. There are almost one thousand servers, so we cannot manually monitor all of them.
Umbrella serves as a cloud-delivered DNS encryption platform for protecting the DNS layer security both off-network and on-network, which allows complete management of DNS, enabling policy management, troubleshooting, and monitoring for endpoint security operations. Umbrella protects the DNS layers at the gateway and firewall level, and this is managed completely in the SASE platform, which provides a central dashboard for visibility and reporting on all information. The main components include DNS resolvers, intelligent proxies, identity integrations, and roaming clients, with a central policy engine managed through the platform.
My main use case for Umbrella involves whitelisting and blacklisting of URLs. I want to provide feedback on Umbrella as it functions. Umbrella provides strong DNS layer security and blocks malicious domains before connections are established. We would like to whitelist or blacklist the URLs that we want to utilize on our client side. The dashboard is relatively easy to use and provides good visibility into DNS requests and security events. Integration with other Cisco security products is beneficial, and reporting and analytics could be more customizable. Policy management can become complex in larger environments with multiple user groups. Troubleshooting blocked domains sometimes requires a very deep investigation. More granular reporting and easier policy inheritance would improve administration. Roaming client protection is valuable for remote customers, and threat intelligence backed by Cisco Talos is a strong advantage. I can provide a quick specific example of how I have used Umbrella for whitelisting or blacklisting URLs by checking in VirusTotal as well as a few of the McAfee sites, and based on that, we will blacklist or whitelist the URLs.
My main use case for Umbrella is DNS security, by securing end users to utilize a security DNS. I have deployed Umbrella in proxy mode, and we have two appliances in our environment. Our Active Directory gets all the DNS queries from the Umbrella appliances, and the Umbrella appliances reach DNS and Cisco Security Cloud. Our end users utilize it from the Active Directory.
Umbrella was used on the security side to ensure that we had a secure connection for people and end users authorized to access the company infrastructure. I used Umbrella for users in the company to help them make a connection through the VPN. The main purpose was to provide the VPN with security to end users. The job was done properly without getting into specific or complex situations, and it replied to our expectations.
We have been using Umbrella for two years now. We are using Umbrella for providing DNS threat protection to our on-premises clients as well as our roaming clients. We have the same use case as we have DNS security firewall policies which have a number of feeds built into those policies that evaluate any public DNS queries initiated by an end client to determine if the query is legitimate or not. If there is a threat to that query, it will instantly block that query and safeguard the user from even reaching that website. We are using Umbrella to protect our on-premises as well as our roaming clients, as it has agent-based monitoring which can be installed on roaming clients that are not sitting in the office and can provide DNS security to users who are part of the company assets but are not in the office.
Umbrella is mainly used for DNS security, and since we are in a hybrid model, we use Umbrella to protect remote users from malicious websites and for web traffic control. Generally, Umbrella helps us protect those remote users by working on an agent-based system, and we install it on end-user computers. Once we install the agent, all the traffic from the computer routes through DNS Umbrella. Therefore, everyone is protected, whether in the office or at home. We create specific rules for what traffic to allow and what to block. Generally, we allow only productivity and legitimate traffic and block all malicious content and unwanted traffic. Also, for particular features that are hosted locally, we can add those as our internal domains to resolve them quickly and have no issues in the future.
My main use case for Umbrella is DNS filtering, traffic filtering, and security for our users. I use Umbrella mainly for all our users to make sure that any kind of traffic that's malicious is blocked and that we can maintain confidential information without risk of hacking.
The main use case for using Umbrella in our organization is to gain a good setup and obtain visibility over the cloud in financial management. It helps us in a transparent manner where we can see intuitive dashboards and self-service reporting that connects us in minutes and delivers unified cost data within 24 hours, making it very accessible for our FinOps and engineering teams. We are using it for AI insights where AI-driven anomaly detection and customizable alerts reduce manual analysis and effort. Some technical users in our organization use it for navigation purposes. We use Umbrella for FinOps and cost allocation in the organization, which helps us track spend by business unit, customer, feature, or Kubernetes namespace. This helps us reduce costs and achieve maximum benefit. It also helps us with forecasting and budgeting of the projects we work on. It generates good demand forecasts from the CUR data set, sets budgets, and exports dashboards for executive reviews.