Yes. On 1 September 2026 Cisco published an end-of-sale and end-of-life announcement covering the main Cisco Umbrella DNS and SIG packages. Umbrella is not being switched off overnight, but it is going away, and Cisco is steering customers to its successor, Cisco Secure Access.
Key end-of-life dates
| Milestone | Date | What it means |
|---|---|---|
| Announcement | 1 September 2026 | Cisco confirmed the retirement plan. |
| End of sale | 31 January 2027 | No new Umbrella DNS or SIG subscriptions can be bought. |
| End of renewals | 31 January 2028 | Last date to renew or add to existing subscriptions. |
| Last date of support | 31 January 2029 | Service and support end. Umbrella is effectively end of life. |
What is covered
The announcement includes DNS Security Essentials, DNS Security Advantage, SIG Essentials and SIG Advantage, along with add-ons such as the Investigate console, Data Loss Prevention and Remote Browser Isolation. This follows earlier retirements:
- Legacy Umbrella offers such as Umbrella Insights, Platform, Roaming, Branch and Professional reached end of sale on 30 September 2025, with support until 30 September 2030.
- The standalone Umbrella Roaming Client reached end of software maintenance on 2 April 2025. Its replacement is the Umbrella Roaming Security module in Cisco Secure Client, free for licensed customers.
What is not affected
The free consumer services, OpenDNS Home and OpenDNS FamilyShield, are separate from the business packages and are not part of this announcement.
What existing customers should do now
- Inventory your deployment. List every network identity, virtual appliance, Secure Client install, IPsec tunnel, policy and API integration.
- Check feature parity. Confirm that anything you rely on, such as the selective proxy, specific integrations or reporting, exists in the product you move to.
- Decide on a destination. Cisco Secure Access is the direct path and comes with an automated migration tool. Other SSE and DNS security vendors are also worth comparing.
- Time your move around renewals. Migrating at a natural renewal point avoids paying for two services.
- Test before cutover. Run a pilot group on the new platform before moving all users.
With support ending in January 2029, most organisations have time for an orderly migration, but leaving it until the final renewal window adds unnecessary risk.