We performed a comparison between Cisco Umbrella and Zscaler CASB based on real PeerSpot user reviews in five categories. After reading all of the collected data, you can find our conclusion below.
Comparison Results: According to user feedback, Cisco Umbrella is the preferred choice when compared to Zscaler CASB. This is due to its comprehensive features, ease of use, strong integration with other products, and positive customer service. Cisco Umbrella offers granular customization options for DNS blocking, content filtering, and single-pane-of-glass management. While Zscaler CASB is appreciated for its zero trust feature and competitive pricing, it does not match the level of features and integration offered by Cisco Umbrella.
"The solution is stable."
"On the outside, the main differentiation is because Lookout ingest. They have ingested basically all of the apps for the last ten years and all the versions of all the apps, and we have that in a corporate database that allows us to do very large-scale machine learning and analysis on that data set. That's not something that any of the competitors really have the capability to do because they don't have access to the data set. A lot of the apps you can no longer get them because that version of the app is five or six years old, and it just doesn't exist anywhere anymore, except within our infrastructure. So, the ability to have that very rich dataset and learn from that dataset is a real differentiator."
"The protection offered by the product is the most valuable feature. It detects vulnerabilities or traps on our users' phones and then prompts them to clean up their devices. Tools we used previously would only discover, which required us to gather information on the backend, so Lookout is a welcome upgrade."
"The most valuable features are the antivirus as a whole, the anti-malware, and all of the protection features that scan our enterprise devices."
"When it comes to hybrid work it's pretty effective. We've got the agents. We can protect people inside our building and, when they're using their laptops out in the field, they're still protected. It's working well."
"The integration features within, for example, the Cisco VPN product and the Umbrella module are valuable."
"The most valuable thing is how easy it is to deploy. We did it with 9,000 users at my last job, and it took a week to get to all the endpoints. Doing that without having to physically touch all those endpoints was very simple."
"We've found it to be stable and good for our customers."
"I was able to implement it myself. It was really easy to install. You could install it on a server locally if you want to. If you have the biggest site, you would do that, but for my site, it was just directing all the traffic out through the Cisco Umbrella DNS. It was really handy. When the owners of the company went overseas, I knew that they would be secure because even if they were not on the company network, they would still go through the Cisco Umbrella servers. It was a complete solution for protecting the company with outgoing data."
"It will protect, give you more robustness, and faster responses, compared to any firewalls or any of the proxy web servers."
"The user interface is great. It's very easy to tailor to our client's environment and needs."
"It offers good visibility for the Administrator. The administrator has full visibility of what is blocked or has the knowledge of where users go when they are surfing the internet."
"It has been helpful in maintaining our infrastructure. The granular level control it offers allows us to set application policies per application for each user."
"The tool's scalability is good."
"Has a good zero trust feature."
"Overall, the solution does a pretty good job at web filtering."
"The most valuable features of Zscaler CASB are API integration and DLP."
"Zscaler CASB's latency and architecture are excellent."
"We just submitted an enhancement request reflecting the main area we want to see improvement in; the APIs. Currently, we're able to build dashboards, but it's somewhat backward because we use our MDM API to create them. Lookout should provide API to customers so we can query our data and use it in our cloud, and this is the only outstanding area for improvement with the product right now."
"From the analysis that we've done, they do seem to be maybe a step behind in trying to enter the market with a new solution. But when they do pick up, they do come out with some good products."
"Lookout was moving into the SSE space. And so their work on SecureWeb Gateway and SD-WAN is still sort of evolving."
"The stability depends on the service from where you access it. Because sometimes, the place you are in, you have Gateway. You don't have Gateway. The gateway is overutilized. At the end, you need to go through their gateways. And this is the key point here. You have a tracking point. If it's not well orchestrated, and it scales up as you add more to the existing team, you will suffer"
"I would like to see more integrability with other products."
"It should have a real-time malware classification engine. It should check the malware on the website. It would be good if it had a real-time malware check for the websites because currently, it just compares the DNS queries of the blacklist. It should also have malware control over file execution and the types of files that the users are allowed to download."
"There are a couple of interface issues. I know that they say that there are feature enhancements that are noted. For example, we've got the Cisco Meraki security appliances, and there, we geofence our company to where we're allowed to send and receive traffic. So, in our case, by default, we only allow traffic to six different countries, which allows us to effectively prevent traffic for the majority of bad players in the world, but they don't give you an easy way to do that in Cisco Umbrella. With Cisco Meraki, I can specify or pick the countries. I can say that I want to only allow traffic from these six countries, and I'm done. With Cisco Umbrella, I have to rely on the fact that they're going to prevent traffic to other countries. They're going to decide if it's good or bad."
"Cisco Umbrella hasn't integrated customized reporting yet. With Cisco Secure Endpoint Hub, I can see a report on user downloads and set it up to constantly get an email alert. Based on my understanding, Cisco Umbrella can't do that. You can set it up with third parties, but it would be better if that were built into the platform."
"It could be improved by having a local data center and caching, which can provide protection support. I would like to be able to channel my intel and my network traffic to their clouds, and this feature is not available. Advanced protection or any malware file support, which might be required, is not available."
"I think it's a very basic solution, and because of that, Cisco Umbrella would not be a suitable solution for large companies."
"The locks and management could be better. The product is fairly new, and it may take some time to get all the features up and running."
"The solution is very expensive in Brazil."
"Zscaler CASB breaks down at times."
"The pre-defined dictionaries could be improved."
"User management can be improved."
"Zscaler CASB should include integrations with other SaaS applications."
"It needs to offer SSO, single sign-on, and items of that nature."
"The solution's granularity should be improved because it has limited granular options to control, visible, allow, block, delay, and receive."
Cisco Umbrella is ranked 1st in Cloud Access Security Brokers (CASB) with 108 reviews while Zscaler CASB is ranked 9th in Cloud Access Security Brokers (CASB) with 6 reviews. Cisco Umbrella is rated 8.8, while Zscaler CASB is rated 7.6. The top reviewer of Cisco Umbrella writes "Protects endpoints wherever they are, always pushing people to the right locations to avoid malicious intent". On the other hand, the top reviewer of Zscaler CASB writes "A stable solution that provides API integration and DLP, but lacks integrations with other SaaS applications". Cisco Umbrella is most compared with Zscaler Internet Access, Microsoft Defender for Cloud Apps, Prisma Access by Palo Alto Networks, Palo Alto Networks DNS Security and Infoblox Advanced DNS Protection, whereas Zscaler CASB is most compared with Skyhigh Security, Microsoft Defender for Cloud Apps, Prisma Access by Palo Alto Networks, ThreatLocker Elevation Control and Obsidian CDR Platform. See our Cisco Umbrella vs. Zscaler CASB report.
See our list of best Cloud Access Security Brokers (CASB) vendors.
We monitor all Cloud Access Security Brokers (CASB) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.