Why Microsoft Defender Mentions Cisco Umbrella & How to Fix It
Question details
Users are seeking an explanation for Microsoft Defender alerts that mention Cisco Umbrella, typically accompanied by a warning that the account is not fully protected.

- Product
- Microsoft Defender / Cisco Umbrella
- Device & OS
- not provided
- Scenario
- Reviewing system security alerts or investigating partial account protection warnings in Windows Security.
- Observed behavior
- Microsoft Defender flags Cisco Umbrella in its alerts and displays a message stating that the user's account is not fully protected.
Before troubleshooting, verify whether your computer is a personal device or managed by a corporate IT department, as enterprise policies often dictate these security configurations.
Document the Security Alert and Contact Support
Since Microsoft and Cisco integrate for enterprise security, the safest approach is to document the exact warning and consult your administrator or support team.
Microsoft Defender and Cisco Umbrella frequently work together in business and enterprise environments to manage endpoint protection and DNS filtering.
When you see a warning that Defender is 'not fully protecting the account,' it usually indicates that a third-party security service like Cisco Umbrella has taken over certain web protection or firewall roles, turning off the native Microsoft Defender equivalents.
Take a clear screenshot of the Microsoft Defender alert mentioning Cisco Umbrella, including the specific message stating that the account is not fully protected.
Use an image editor to blur or crop out any personal information, such as your email address, username, or IP address, before sharing the image.
Open Windows Security, click the Settings gear icon in the bottom-left corner, and select 'Manage providers' to see if Cisco is officially listed as handling your Firewall or Web protection.
Send the sanitized screenshots to your organization's IT helpdesk or Microsoft Support. They will review your account status and confirm if the configuration is intentional or requires adjusting.

Enjoy a Secure and Lightweight Office Suite with WPS Office
While you work with your IT team to manage system security settings, ensure your daily productivity continues without a hitch. WPS Office is a highly compatible, free alternative to Microsoft Office that is lightweight and easy to use.

Frequently Asked Questions
Why does Windows Security say my account is not fully protected?
This message often appears when a third-party security solution, such as Cisco Umbrella, assumes control over specific protective functions (like DNS filtering or web threat defense). Microsoft Defender recognizes that it is no longer the primary provider for those features and warns you of incomplete native coverage.
Is Cisco Umbrella a virus or malware?
No. Cisco Umbrella is a legitimate, enterprise-grade cloud security service used by organizations to protect users from malicious websites and cyber threats by managing network DNS requests securely.
Can I simply uninstall Cisco Umbrella to fix the Defender alert?
If your computer is managed by an employer or school, uninstalling Cisco Umbrella could leave your device non-compliant with organizational security policies, which might block your internet access entirely. Always consult your IT administrator before removing security software.
How do I check which security providers are active on my Windows PC?
Open the Windows Security app, click on the 'Settings' gear icon at the bottom left, and then click on 'Manage providers' under the Security providers section. This screen will list your currently active Antivirus, Firewall, and Web protection applications.




