Cisco Umbrella EOL: The Full Timeline

See how Cloudbrink makes remote access up to 30x faster
Book a short demo and see how our High-Performance ZTNA speeds up applications for remote and hybrid teams, instead of slowing them down like a traditional VPN.
Book a Demo

Cisco published its end-of-sale and end-of-life announcement for Cisco Umbrella SIG and DNS on September 1, 2026. Both are being folded into Cisco Secure Access, Cisco’s SSE platform. Here is what each milestone means.

Cisco Umbrella EOL milestones

MilestoneWhat it meansDate
End-of-saleLast date to order through CiscoJanuary 31, 2027
End of software maintenanceLast date Cisco may release product enhancementsJanuary 31, 2027
End of change or renewalLast date to renew or add to a subscriptionJanuary 31, 2028
Last date of supportFinal date for subscription entitlements, service and supportJanuary 31, 2029

What the EOL means in practice

From February 2027, you can no longer buy Umbrella SIG or DNS, and no further enhancements are planned. Cisco maps most Umbrella subscriptions to Secure Access equivalents, but some have no replacement. The Umbrella L7 Cloud Firewall (UMB-L7-CDFW), for example, is listed with no migration product available.

This is not the first Umbrella retirement. In June 2025, Cisco announced end-of-sale for several legacy Umbrella offers, with support for those ending on September 30, 2030.

Use the EOL window to rethink access

Rather than simply moving to the next Cisco product, many teams use an EOL to review performance and user experience. Cloudbrink Personal SASE is software-only and needs no VPN servers or appliances. Its High-Performance ZTNA rotates security certificates multiple times a day to reduce certificate-based exploits.

Compare your options in our Cisco Umbrella alternatives guide, or request a demo.