CISCO UMBRelLA
Alternative
Make the switch from Cisco Umbrella to dope.swg.
|||||||||||||||||||||||||||||||||
Limitations of Cisco Umbrella
DNS-layer security
Cisco Umbrella blocks at the DNS level. This means no custom policies, no SSL inspection, no DNS over HTTPS. It leaves a gaping hole for threats. Want those capabilities? Pay more and upgrade to Cisco Umbrella SIG.
dope.swg’s URL categorization works out of the box. Not to mention the base policy starts blocking the moment you’re onboarded. No paid upgrades required.
Not remote friendly
Cisco Umbrella says they “protect any device, anywhere” but you have to first buy the DNS Security package and then pay for roaming client seats — which just adds more complexity and costs. It’s not efficient.
dope.swg requires no stopovers or roaming clients. Whether you’re on-prem, remote, or traveling you are protected by dope.swg’s patented fly-direct architecture. No stopover data centers, all policy enforcements happens on your device.
Packaging Nightmare
Cisco Umbrella inundates you with jumbo add-ons and mega packages, it really complicates the buying experience. DNS Security packages are so limited in their capabilities you have no choice but to pay more for an upgrade.
dope.swg is simple. Everything for web content filtering is included: SSL Inspection, URL Categorization, Cloud App Control, Anti-Malware — no add-ons needed.
||||||||||||||||||||||||||||||||| STOPOVER DATA CENTER ALERT
HOW Cisco Umbrella WORKS
Cisco Umbrella Architecture
Cisco Umbrella sits between the user and the internet destination and intercepts requests at the DNS level where it analyzes and applies policy. In order to support SSL inspection an additional stopover is required and the user needs to deploy the roaming client. What could be a direct connect has been turned into a multi-stop event and the set up is incredibly manual. Install umbrella, explicitly point your DNS to Umbrella install roaming client, upgrade Cisco AnyConnect... the steps go on and on.
Cisco Umbrella Capabilities
Umbrella DNS gives you super basic web filtering by domain and categories — with no SSL decryption, only partial Cloud App discovery — and you can block domains with malware. The next upgrade gets you partial SSL decryption. You don’t get true security from Cisco Umbrella until you upgrade to the SIG package, and even then you are limited to 2 cloud storage apps to scan and remove malware. It really is an à la carte puzzle.
Cisco Umbrella UX
Features within Cisco Umbrella that should be automated are not. There are no preset content filtering or malware policies. If you pay to upgrade to the SIG package, user based policy configurations are hidden in the mega menu, and custom Allow, Block, and Bypass Lists are cumbersome to configure. The dashboard lacks detail or the ability to customize, making it a difficult admin experience.
![When there is a Cisco Umbrella outage, the [Zscaler] SWG will re-route data through a stopover for SSL inspection. You need a Cisco Umbrella alternative.](https://cdn.prod.website-files.com/623381c2c01066b228a1670b/6435c82bbab92bce6bf98b3a_lines.svg)
||||||||||||||||||||||||||||||||| DATA CENTER DOWNSIDES
are stopover data centers really that bad?
Data centers come at a high cost. If there are any outages or degradations around the world, it can have an impact on you. And if your closest data center goes down, your data could be rerouted to a completely different country — slowing you down in the process.
||||||||||||||||||||||||||||||||| DOPE.SECURITY VS CISCO UMBRELLA
DS COMPARED TO CISCO UMBRELLA
SSO Enabled Instant Trial
Mac native
Single Console
Auto-update
URL Filtering
anti-Malware
Cloud app controls
No datacenter reliance
HTTP2
Local SSL Inspection & Policy Enforcement
Soaring Reviews
dope.security cares deeply about design and user experience in a way that is unique to the security industry. Its first goal when creating a product is simplicity — the simplicity of architecture, purchasing, deployment and management.”
dope.security completely changed the game for us. Using dope.swg to upgrade endpoint security is remarkably easy, and moving from initial trial to full deployment was quick and self-service. Now, the Internet runs as designed and our team can spend time innovating, rather than trying to make a legacy SWG work.”
dope.security’s fly-direct approach is exactly what the SWG market needs. Legacy solutions are too complex and slow down every company that uses the Internet. By eliminating the stopover with a product-led growth (PLG) motion, dope.security is a true game changer.”
at boldstart ventures
