Call a Specialist Today! 800-886-5369


Cisco Umbrella Packages

Choose the Right Umbrella Package for Your Security Needs

From foundational DNS protection to full Secure Internet Gateway capabilities, Cisco Umbrella offers a tiered set of cloud-delivered security packages to match your organization’s risk tolerance and budget.

Get a Quote Talk to a Specialist

Cloud Security That Scales With Your Organization

Cisco Umbrella delivers DNS-layer security, secure web gateway, CASB, cloud-delivered firewall, and data loss prevention — all from a single cloud-native platform. Choose the package that fits your team today, and upgrade as your needs grow.

Talk to a Specialist Contact Sales

Four Packages, One Unified Platform

Each Umbrella package builds on the last — giving you more capability, more visibility, and more control as you move up the tiers. All packages are cloud-delivered, require no hardware, and deploy in minutes.

DNS Security Essentials

The entry-level package for organizations that need fast, reliable DNS-layer threat blocking. Deploy in minutes without hardware or software, and protect every device on and off your network.

  • Block malware, phishing, and botnet domains at DNS
  • Content filtering by domain and category
  • Custom allow/block domain lists
  • Real-time activity reporting and API access
  • Cisco Meraki and AnyConnect integration
Get a Quote

DNS Security Advantage

Adds interactive threat intelligence, expanded web filtering, and deeper inspection to the DNS Essentials foundation. Ideal for organizations that need faster investigation and broader coverage.

  • All DNS Essentials features
  • Umbrella Investigate threat intelligence console
  • Selective proxy and SSL decryption for risky domains
  • 85+ domain content categories for web filtering
  • Shadow IT discovery via App Discovery report
Get a Quote

SIG Essentials

A full Secure Internet Gateway combining DNS security, secure web gateway, CASB, cloud-delivered firewall, DEM, and DLP into one cloud-native service — consolidating what would otherwise require multiple point products.

  • Full SWG with SSL inspection and file scanning
  • Layer 3/4 cloud-delivered firewall
  • CASB for cloud app discovery and control
  • Inline DLP as an add-on
  • SD-WAN and SASE-ready architecture
Get a Quote

SIG Advantage

The highest tier of Cisco Umbrella protection. SIG Advantage includes all SIG Essentials capabilities plus Layer 7 firewall with IPS, unlimited malware sandbox analysis, advanced DLP, and full CASB with out-of-band scanning.

  • All SIG Essentials features
  • Layer 7 firewall with IPS (SNORT 3 signatures)
  • Unlimited malware sandbox (Secure Malware Analytics)
  • Full DLP included (not add-on)
  • Advanced CASB with unlimited cloud app malware scanning
Get a Quote
GigaOm Radar Leader Badge for DNS Security

Industry Recognition

Cisco Named a Leader in GigaOm Radar for DNS Security

GigaOm recognized Cisco Umbrella as a Leader in its DNS Security Radar report — distinguishing Umbrella for its threat intelligence depth, ease of deployment, and breadth of security capabilities across the DNS layer and beyond.

Talk to a Specialist

Specialized Packages for Education and Government

Cisco Umbrella offers dedicated licensing and pricing for K–12 schools, universities, and government agencies — including FedRAMP authorized deployments for federal and state organizations.

Cisco Umbrella for K-12 and Higher Education

Umbrella for Education

Protect students, faculty, and staff with DNS-layer security purpose-built for academic networks. The education package is licensed per faculty and staff — student protection is included at no additional charge. Enforce acceptable use policies and comply with CIPA requirements effortlessly.

Talk to a Specialist
Cisco Umbrella for Federal and State Government

Umbrella for Government

FedRAMP authorized SSE and DNS security for federal agencies, state, and local government organizations. Meet compliance requirements including DISA STIGs while protecting users across all network environments and devices.

Talk to a Specialist

What Each Package Includes

All Cisco Umbrella packages share a common management dashboard, API access, and multi-organization console — and every package adds layers of protection that build on the tier below it.

DNS-Layer Security

Block malicious domains before a connection is established. Included in all packages — protecting on-network and roaming users at the earliest possible interception point.

Secure Web Gateway

Full proxy with SSL decryption, URL filtering, and file scanning. Included in SIG Essentials and SIG Advantage. Partial proxy available in DNS Advantage for risky domains.

CASB & Shadow IT

Discover, assess, and control cloud app usage across your organization. Full CASB capabilities are included in SIG packages; DNS packages offer app discovery reporting.

Data Loss Prevention

Inspect and block sensitive data leaving your organization via web or cloud apps. Available as an add-on in SIG Essentials and included in SIG Advantage.

The Next Evolution

Cisco Umbrella Is Evolving to Cisco Secure Access

Building on Cisco Umbrella’s proven security with more than 30,000 customers globally, Cisco Secure Access delivers an intuitive user experience, simplified IT management, and powerful new capabilities — for the same price.

Explore Cisco Secure Access

Related Solutions

Cisco Secure Access

Cloud-delivered SSE platform with ZTNA, SWG, CASB, and DLP for securing hybrid workforces from a single console.

Learn more

Cisco Duo

Multi-factor authentication and device trust that verifies user identity before granting access to applications and data.

Learn more

Cisco Secure Endpoint

Advanced endpoint protection that detects, prevents, and responds to threats across laptops, desktops, and mobile devices.

Learn more

Find the Right Umbrella Package for Your Team

Our Cisco-certified team can help you compare packages, size licensing, and plan your deployment. Whether you need basic DNS security or a full SIG, we’ll match you to the right tier.

  • Package comparison and right-sizing guidance
  • Deployment planning and integration support
  • Education and government pricing available
  • Response from a certified Cisco specialist within one business day