Connect. Secure. Manage.
Cisco Umbrella Migration Planning
Evaluate a move from Cisco Umbrella to Cisco Secure Access, mapping current policies, licences, integrations and features that need validation.
Devices supported
across the UK
Client locations
supported
Traffic handled
at peak time
Average
response time
Average response is not a resolution time or a contractual guarantee. Support scope and response commitments are agreed for each engagement.
Cisco Umbrella migration planning compares the service you use today with the one you need next. We review policy, traffic paths, identity and licences before a move to Cisco Secure Access or another agreed target. Features and settings may not transfer unchanged. The plan sets out gaps, support duties and the tests for each stage.
Defined trust
Make access boundaries explicit rather than relying on an assumed internal network.
Controlled access
Connect identity, policy and network enforcement to the services people actually use.
Evidence for change
Test the intended security outcome and retain useful operational records.
Inventory the services you actually consume
An Umbrella rollout may involve DNS-layer protection, web-security functions, roaming endpoints, network locations and integrations with other systems. We find the functions enabled in your tenant, how traffic reaches them and which teams rely on their logs or policies. Unused features in a subscription are distinguished from controls that protect production services every day.
The inventory includes registered networks, virtual appliances where present, endpoint software, policy objects, exceptions and administrator access. We also ask about contractual commitments and renewal dates. Those commercial details affect the practical migration sequence. But they are checked against your agreements rather than inferred from a product announcement or another customer's experience.
Standards & partnerships
Confidence in the team behind your network.
Cisco Partner
Cisco Meraki
Cyber Essentials
Cyber Essentials PlusMCI Network Services is operated by Proxar Ltd. Certifications apply to the certified legal entity and the scope of its certificates. View accreditation information
Compare requirements, not only feature names
A familiar label in two products does not prove equivalent behaviour. We map each important need to the proposed destination: how users are recognised, which traffic is inspected, how exceptions are applied and what evidence appears in reports. Differences are recorded as decisions or gaps rather than hidden in an optimistic migration checklist.
The comparison should also consider operational fit. A broader service may introduce capabilities your organisation wants. But it can require extra setup, endpoint changes and ownership. We distinguish a straightforward continuation of current protection from a project that also introduces private-application access, new inspection policies or different branch network access.
A useful starting point
Not sure where to start?
Bring the requirement. We will help you define the engineering work.
Review the supported migration route
Cisco documents migration workflows for supported Umbrella and Secure Access arrangements, including coordination through its management services. We check which workflow applies to your tenant and entitlements at the time of the project. A documented path does not mean every organisation can use it without preparation or that all settings are automatically carried across.
We identify prerequisites, dependencies, expected service impact and the points at which a change may be difficult to reverse. The migration plan records what is transferred, what must be rebuilt and what needs manual validation. We do not describe Umbrella as universally retired or instruct customers to abandon a supported rollout without a justified need.
Different environments. The same care.
Built around the work
your network supports.
Finance, banking and the wider private sector. We start with the systems and people that depend on your connections.
Finance & banking
Market-data paths, routing and provider coordination on clients’ behalf.
Financial-market services ↗Offices & multi-site teams
Reliable access between people, workplaces and business applications.
Office network design ↗Data centres & cloud
Network boundaries, workload connections and operational ownership.
Data centre networks ↗Reconcile policy and exception ownership
Existing exceptions often reflect years of troubleshooting. Some are essential; others may be obsolete or broader than the original request. We review the important exceptions with app owners and retain the business reason for each. Migrating an unnecessarily permissive rule unchanged would preserve a weakness rather than improve the service.
Policy order, identity groups and default handling are compared carefully. A user who appears to belong to the same group in the new platform may receive a different effective policy because of other matching conditions. We prepare representative test identities and destinations, including connections that should be refused. So the migration is checked against outcomes rather than object counts alone.
Plan endpoint and network changes together
Roaming users, office networks and remote sites may reach the service through different mechanisms. We find the required client modules, profiles, DNS settings, tunnels or other steering arrangements and assign an owner to each change. Old and new paths must not compete unpredictably during the transition.
A pilot should include users away from the office, restricted networks, devices with limited management access and the business apps most likely to expose compatibility problems. We establish how support staff recognise which service a device is using and how they collect evidence without asking users to disclose passwords or confidential app data.
Preserve useful records and recovery options
Reports, logs and setup exports may need retention before an old service is changed or decommissioned. We agree the required evidence, access controls and retention with the customer. Exporting every available record indefinitely is not an appropriate default, especially where logs identify employees or reveal sensitive browsing and app activity.
Recovery planning covers both technical rollback and operational continuity. We find the last safe reversal point, the setup needed to return to the previous path and any provider action required. Where a migration stage cannot simply be undone, that limitation is made clear before approval rather than discovered after a failed pilot.
Finish with an operating model
Completion means the intended users and sites have moved, critical policies have been tested and temporary transition settings have been removed. The final records identify remaining exceptions, administrator roles, renewal duties and how faults are escalated. A new dashboard is not a substitute for those operating decisions.
MCI can provide an assessment, a migration plan or the engineering work needed to implement an approved transition. Our Cisco Secure Access consultancy keeps the discussion tied to the apps and controls your organisation needs. Provide a sanitised description of the current Umbrella services, locations and renewal constraints, and we can establish a realistic scope before changing production protection.
Technical references
- Prepare Umbrella for migration to Secure Access — Cisco / Cisco Meraki
Talk to a specialist
What does your network need next?
Tell us what you are planning, changing or trying to improve. We will help define a practical next step and the engineering scope.
+44 203 196 6566Choose option 1
sales@proxar.co.ukUK-wide service.
Most of our engineers are based in Kent, with a focus on London, Sussex, Essex and Berkshire.
Existing customers should use their agreed support and escalation channels. This form is for service enquiries, not a monitored emergency ticket.
Tell us what you need.
A short outline is enough. Please do not include passwords or sensitive network details.
Thank you. Your enquiry has been submitted.
Please check your name, email and message, then try again.
Your form session expired. Please try again.
Please wait a minute before sending another enquiry.
We could not submit your enquiry. Please call or email us instead.