In short: Cisco Umbrella is Cisco's cloud security service that blocks threats at the DNS layer, with SIG packages adding a secure web gateway and firewall. Umbrella DNS and SIG reach end of sale on 31 January 2027. Cisco Secure Access is the successor, and Secure Access DNS Defense replaces the Umbrella DNS packages.
What Cisco Umbrella is
Umbrella checks every DNS request against Cisco Talos intelligence and stops users reaching malicious or unwanted destinations, on or off the network. Its SIG packages add a secure web gateway, CASB and cloud-delivered firewall. For the full picture, see What is Cisco Umbrella? on our Umbrella site.
Umbrella end of sale and Secure Access
Cisco announced the end of sale for Umbrella DNS and SIG on 1 September 2026. The last day to order is 31 January 2027, which is also the end of new feature releases. Existing subscriptions can be renewed or added to until 31 January 2028 and are supported until 31 January 2029, so nothing switches off on the end-of-sale date. Cisco's successor is Cisco Secure Access, its security service edge platform, which adds zero trust access to private apps, VPN as a service and AI app controls. Our Cisco Umbrella end-of-life guide has the detail.
DNS Defense replaces the Umbrella DNS packages
Organisations that only need DNS-layer protection are not forced onto the full Secure Access platform. Secure Access DNS Defense, in Essentials and Advantage tiers, replaces the Umbrella DNS packages, and you can step up to the full Secure Internet Access package later. Cisco's end-of-sale notice maps each Umbrella package to a Secure Access one:
| Umbrella package | Secure Access replacement |
|---|---|
| Umbrella DNS Security Essentials | Secure Access DNS Essentials (DNS Defense) |
| Umbrella DNS Security Advantage | Secure Access DNS Advantage (DNS Defense) |
| Umbrella SIG Essentials | Secure Internet Access Essentials |
| Umbrella SIG Advantage | Secure Internet Access Advantage |
| Umbrella DLP and remote browser isolation add-ons | Secure Access DLP and remote browser isolation |
A few Umbrella add-ons, including the Layer 7 cloud firewall add-on and Reserved IP, have no direct migration product, so check those before you plan the move. See Secure Access licensing for how the packages compare.
Where to go next
Visit Cisco Umbrella UK for Umbrella packages, features and pricing guidance, or our end-of-life and migration guide for other Cisco security changes. To plan a move from Umbrella to Secure Access, contact us and ask us for a quote.
Want help choosing, licensing or migrating Cisco security products?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Is Cisco Umbrella being discontinued?
Umbrella DNS and SIG reach end of sale on 31 January 2027. Existing customers can renew until 31 January 2028 and are supported until 31 January 2029. Cisco Secure Access is the successor.
What replaces Cisco Umbrella DNS Security?
Cisco Secure Access DNS Defense, available in Essentials and Advantage tiers, replaces the Umbrella DNS Security packages.
What replaces Cisco Umbrella SIG?
Cisco Secure Internet Access Essentials and Advantage, part of Cisco Secure Access, replace Umbrella SIG Essentials and SIG Advantage. Secure Access also adds zero trust access to private apps if you need it.
Do I need to migrate from Umbrella straight away?
No. Your Umbrella service keeps working, but planning the move before your next renewal avoids a rushed migration. We can map your Umbrella policies to Secure Access for you.