Cisco Umbrella Pricing in 2026: Quote Secure Access, Plan the Transition
Cisco's Umbrella DNS and SIG products are entering end-of-sale. This guide helps a new buyer request the right Secure Access quote and helps an existing customer check renewal and migration costs.
Pricing answer
- Public USD list price: Not available for a comparable new Cisco Secure Access DNS Defense or Secure Internet Access configuration in the official sources checked.
- Buying path: Request a quote with the exact package, SKU, covered-user count, support and renewal terms.
- Transition: Cisco announced end-of-sale dates for affected Umbrella DNS and SIG part numbers. Check your part numbers before purchasing or renewing.
- Alternative benchmark: Cloudflare publishes a Free Zero Trust plan for up to 50 users and a $7/user/month Pay-as-you-go plan; compare feature and support limits, not price alone.
Last updated: September 24, 2026
Do not use old Umbrella price ranges as a 2026 quote
Cisco's end-of-sale notice, announced September 1, 2026, gives January 31, 2027 as the last day to order affected Umbrella DNS/SIG products, January 31, 2028 as the last day to renew or add to affected subscriptions, and January 31, 2029 as the last support date. Earlier reseller estimates in this guide did not establish current Secure Access pricing and have been removed. Active customers should verify their exact SKU and contract rather than assuming every Umbrella service has the same deadline.
What should a new buyer ask Cisco to price?
Start with the requirement, not an old Umbrella tier. For DNS-centric filtering, ask for Cisco Secure Access – DNS Defense Essentials or Advantage. If you need broader secure web access, ask for Secure Access – Secure Internet Access Essentials or Advantage. Cisco's Secure Access ordering guide describes the current packages. Its DNS product page explains the migration from Umbrella DNS to DNS Defense. Do not assume a DNS Defense quote includes every web-gateway, private-app access or DLP feature; ask for the exact entitlement.
For an existing Umbrella deployment, bring the renewal notice, contract and affected part numbers to the conversation. Ask Cisco or the authorized partner to map each to a Secure Access package and identify which policies, agents, logs and integrations must change. Cisco publishes an Umbrella-to-DNS-Defense upgrade guide. Read it with your administrator before scheduling a migration.
Quote worksheet for a 10-, 25- or 50-person business
A staff count is a starting estimate, not a Cisco bill. The Cisco Umbrella offer description says user-based packages require a license for each covered user unless a product data sheet says otherwise. Ask the vendor which people, devices and service accounts count under the new package, and whether any seat minimum or partner-managed service applies.
| Item to request | Why it matters |
|---|---|
| Product name, package and SKU | Separates retiring Umbrella part numbers from Secure Access replacements |
| 10-, 25- and 50-user quotes | Reveals minimums and real volume effects without fabricated estimates |
| Term, billing schedule and renewal price | A promotional first year can obscure ongoing spend |
| Included DNS, web, application and data controls | Prevents budgeting an entitlement the quoted package lacks |
| Support route and response commitment | Direct Cisco and MSP-supported offers can differ |
| Log retention and export | Determines whether investigation and audit needs can be met |
| Cisco Secure Client, network and identity prerequisites | Affects rollout labor and off-network coverage |
| Migration services, policy conversion and rollback | Especially important for existing Umbrella customers |
| Taxes, overages, add-ons and cancellation | Needed for a checkable first-year and renewal total |
Enter only documented amounts in the security budget worksheet. Leave a Cisco quote blank until received rather than recording a guessed $0 or a third-party rate.
Compare a published Cloudflare price carefully
Cloudflare's Zero Trust pricing page currently lists Free for up to 50 users and Pay-as-you-go at $7 per user per month. At that list price, 10, 25 and 50 billable users would be $70, $175 and $350 monthly on Pay-as-you-go, respectively, before taxes and add-ons. The Free plan can be $0 in software subscription fees for those team sizes if it meets the requirement.
Price does not establish equivalence. Cloudflare lists community support and up to 24 hours of standard log retention on Free; Pay-as-you-go lists chat/ticket support and up to 30 days. Log durations differ by service, and browser isolation is an add-on for eligible paid plans. A network DNS change alone gives DNS policies; additional HTTP and network policies require a suitable connection method. The Cisco versus Cloudflare comparison provides a pilot checklist.
Decision rule
Request Cisco's current Secure Access quote if you already operate Cisco/Meraki infrastructure, need a supported migration, or want a partner to own the policy. Pilot Cloudflare when a published entry price and self-managed DNS filtering are useful. Keep your existing control if a test shows it already covers the devices and threats in scope. In all cases, test office and roaming endpoints, log visibility, a block and an exception before signing.
This is documentation-based research, not a quoted offer or hands-on deployment report. Sources were checked September 24, 2026. The vendor links here are official destinations; no Cisco or Cloudflare affiliate commission is assumed. See the research methodology and affiliate disclosure.