The key dates
Cisco's end-of-life announcement for Umbrella SIG and DNS, published on 1 September 2026, sets these milestones:
- 31 January 2027: end of sale, the last day to order
- 31 January 2028: last day to renew or add to an existing subscription
- 31 January 2029: last date of support
Your service does not stop immediately; existing subscriptions continue under their terms.
What replaces Umbrella
Cisco Secure Access is Cisco's security service edge (SSE) platform. It builds on Umbrella and adds zero trust access to private apps, VPN-as-a-service, digital experience monitoring and AI app controls. Cisco maps Umbrella DNS packages to DNS Defense packages and SIG to Secure Internet Access.
How to plan your migration
- Audit current policies, identities, tunnels and roaming deployments
- Choose the right Secure Access package
- Use Cisco's migration tooling and Security Cloud Control
- Pilot with a group of users, then move sites and roaming devices
- Time it with your renewal to make the most of any migration incentives
How Forever Systems supplies and supports Cisco Umbrella
We supply and support Cisco Umbrella and its successor, Cisco Secure Access, for UK organisations.
- Package selection: DNS Security or SIG, Essentials or Advantage
- Deployment: network DNS forwarding, roaming module roll-out, Active Directory or Entra ID integration, and tunnels from Cisco Meraki or other firewalls
- Policy design: security categories, content filtering, allow and block lists
- Migration planning from Umbrella to Cisco Secure Access ahead of Cisco's end-of-sale dates
- Ongoing support: reporting, tuning, renewals
Forever Systems Ltd is an independent IT and cyber security provider and also supplies the wider Cisco Secure portfolio.
Want a Cisco Umbrella quote or migration plan?
Talk to Forever Systems on 0333 358 3808 or send us an enquiry and we will come back to you with options, not a hard sell.
Call 0333 358 3808Send an enquiryFrequently asked questions
Will my Umbrella stop working on 31 January 2027?
No. That is the last day to order. Existing subscriptions continue and can be renewed until 31 January 2028, with support until 31 January 2029.
Do I have to move to Cisco Secure Access?
Before support ends you will need a replacement. Secure Access is Cisco's path; we can also compare alternatives such as Check Point Harmony SASE.
Can you migrate us?
Yes. We plan and carry out Umbrella to Secure Access migrations.