cisco sa500
TRANSCRIPT
© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 1
Cisco Small Business ProSA 500 Series Security Appliances
All-in-One (UTM) Security for Small Business
© 2009 Cisco Systems, Inc. All rights reserved.Presentation_ID 2
Course Objectives
Purpose This course will introduce the student to features and functions of
the Cisco SA500 Series Security Appliances. There will be a focus on customer benefits, and sales opportunities relevant to the small business.
Objectives Upon completing this training, the student will be able to:
– Understand why security is critical to the Small Business– Be familiar with the features and functions of the SA 500 Series
Security Appliances– Identify customer benefits.– Describe the Cisco SA500 Sales Opportunities– Learn upsell opportunities with the Cisco SA500 Series– Know where to get additional Resources.
© 2009 Cisco Systems, Inc. All rights reserved.Presentation_ID 3
Security #1 Investment For SMBs
Top SMB IT Applications
Q: What are the top five IT applications that your organization will invest in over the next 12 months? (N=307)
0 20 40 60 80 100 120 140 160 180
SecurityOffice and personal productivity applications
Industry-specific ApplicationsEmail
Document ManagementCustomer Relationship Management (CRM)
Accounting and BudgetingContent Management
Collaboration SoftwareBusiness Intelligence (BI) or analytical applications
Enterprise Resource Planning (ERP)HR and Workforce Planning
PortalsSupply Chain Management (SCM)
Video ConferenceB2B/B2C ServicesInstant Messaging
Gartner Summit Events North America, 2008
Security is Top of Mind: Small businesses are planning to invest in security solutions. Partner Opportunity: Great way for Cisco Partners to acquire new customers
and cross-sell additional services
© 2009 Cisco Systems, Inc. All rights reserved.Presentation_ID 4
All-in-One (UTM) Security Gateways Displacing Routers
Source: IDC Nov 2008
Firewall Alone Is Not Enough: The primary vector for threats to small businesses are Email and Web. All-in-one class devices are required to protect the small business. Unified Threat Management (UTM) is a fast growing market: opportunity for
Partners to target customers that have SOHO class routers or similar security devices that only provide basic firewall functionality.
© 2009 Cisco Systems, Inc. All rights reserved.Presentation_ID 5
Why the interest in All-in-one Security?
Business without all-in-one security Employee PCs run slow or behave
erratically due to worms, viruses and other malware
Employees waste time surfing non-business related web sites and infect their PC when they hit a link for ‘you have to see this video’
Important customer emails are buried in in-boxes filled with spam emails… up to 95 of global email is spam.
Customers are not getting the attention they want, and take their business to a competitor
The business struggles to grow, much less stay in business.
Business with all-in-one security The network and PCs work as they should. Employees are productive. Customer inquiries and emails are
addressed Customer loyalty is high Business grows and prospers
All-in-one security is critical to the success of small businesses.
© 2009 Cisco Systems, Inc. All rights reserved.Presentation_ID 6
All-in-One (UTM) Security for Small BusinessBusiness Grade Firewall, Intrusion Prevention System (IPS), Email Security, Web Threat Protection, URL Filtering, Site to Site VPN and
Remote Access IPsec and SSL VPN, Secure 802.11n wireless
Cisco SA 500 Series Security Appliances
Enhanced Partner ProfitabilitySubscription offering provides recurring revenue, Pre-Configured with Smart Defaults to simplify configuration, Cisco Configuration Assistant
support, Small Business Pro Service
Full Strength Protection at Full SpeedCloud based Email & Web security services enable full strength
protection without impacting bandwidth, stops threats before they get to the business
© 2009 Cisco Systems, Inc. All rights reserved.Presentation_ID 7
Cisco SA 500 Series Security Appliances An All-in-One Threat Mitigation (UTM) and VPN Solution
Features & Capabilities Business grade firewall ProtectLink Gateway VPN capabilities available Models & Support ServicesPartner ProfitabilitySales OpportunitiesBeating the competitionAdditional Resources
© 2009 Cisco Systems, Inc. All rights reserved.Presentation_ID 8
Business-Grade Firewall & IPS
Internet
Cisco SA 500 Series
ISP 1ISP 2
DMZ
E-MailServer
File or WebServer
LAN
Firewall: Protects business from unwanted visitors, unwanted traffic, and malicious attacks. Dual WAN: Ensures the business is connected to the internet in event the
connection to one ISP goes down. DMZ: Enables safe and secure hosting of internet accessible resources
without exposing the LAN. Intrusion Prevention System (IPS): Protects against worms, trojans, and
attacks on vulnerable operating systems and applications. Includes protocol inspection and ability to control Instant Messaging and Peer to Peer traffic.
Licensed Feature
© 2009 Cisco Systems, Inc. All rights reserved.Presentation_ID 9
Trend Micro ProtectLink Gateway
Internet Trend Micro ProtectLink
Gateway Service
Trend Micro ProtectLink Gateway: Email Security, Web Threat Protection, and URL Filtering. Upsell post-sale: Can be easily enabled after the SA 500 Series has been
deployed and installed for some time… providing additional revenue opportunity. Annual Subscription Based Offering: Enables recurring revenue opportunity for
partner as customer renews the offering annually.
Cisco SA 500 Series
Licensed Feature
© 2009 Cisco Systems, Inc. All rights reserved.Presentation_ID 10
Email Protectionvia Trend Micro ProtectLink Gateway
Internet Trend Micro ProtectLink
Gateway Service
Email protection: Emails sent to your businesses are scanned for spam, viruses, malware, spyware, phishing attacks. Based on the award winning Trend Micro Interscan Hosted Messaging Security (IMHS) offering. Unique cloud based solution:
Enables full strength protection – over 3 million anti-virus patterns and over 400,000 anti-spyware patterns, 10 different techniques to ID spam including methods that look at both the IP address of the sender as well as the actual content of the email itself.
No risk of the inspection engines being out of date to protect against the latest threats.
Threats are stopped before they get to your business. Bandwidth is maintained even when security services are enabled.
Cisco SA 500 Series
Licensed Feature
© 2009 Cisco Systems, Inc. All rights reserved.Presentation_ID 11
Web Protectionvia Trend Micro ProtectLink Gateway
InternetTrend Micro ProtectLink
Gateway Service
Web Threat Protection: Reputation based URL blocking prevents users from accessing dangerous websites known to have malware, phishing exploits, etc. URL Filtering: Over 80 categories of websites control employee web browsing
and help increase employee productivity, reduce legal liability
Cisco SA 500 Series
Malicious Websites
Licensed Feature
http://dangerous-website.com
http://inappropriate-website.com
© 2009 Cisco Systems, Inc. All rights reserved.Presentation_ID 12
VPN Services for all deployment types
Internet
Cisco SA 500 Series
Site-Site VPN: Secure connectivity between office locations. Remote Access VPN: Choice of IPsec or SSL VPN to enable safe connectivity
for employees, contractors and partners.
Supply PartnerRequires access to ordering databases
Remote OfficeRequires Site-to-Site
Employee at HomeRequires consistent LAN-like access
© 2009 Cisco Systems, Inc. All rights reserved.Presentation_ID 13
SSL VPN Preferred for Remote AccessIPSec Deployment Steps
1. Create user account
2. Send IPSec Client to Computer
3. Install IPSec Client
4. Configure IPSec Client
5. User connects with VPN client
(Conflicts likely if other brand of IPSec client already installed)
SSL VPN Deployment Steps1. Create user account
2. Send URL to user
3. User Connects to URL
Easy Deployment: SSL VPN faster and easier to deploy as VPN client is not required… leverages security integrated into web browsers. Disaster Recovery: SSL VPN works well in situations where employees are
forced into remote access role due to weather or other disaster related events. Two Factor Authentication: VeriSign VIP service provides hosted token based
authentication for enhanced security with SSL VPN remote access. Licensed Feature: Requires license on the SA520 and SA520W.
Licensed Feature
© 2009 Cisco Systems, Inc. All rights reserved.Presentation_ID 14
SA 500 Series Model ComparisonSA 520 SA 520W SA 540
Firewall Performance 200 Mbps 200 Mbps 300 Mbps
UTM Performance 200 Mbps 200 Mbps 300 Mbps
VPN Performance 65 Mbps 65 Mbps 85 Mbps
Connections 15,000 15,000 40,000
Ports 1 WAN, 1 Optional,
4 LAN
10/100/1000
1 WAN, 1 Optional,
4 LAN
10/100/1000
1 WAN, 1 Optional,
8 LAN
10/100/1000
Wireless (802.11b/g/n) No Yes No
IPsec Site-Site Yes Yes Yes
IPsec Remote Access 50 seats 50 seats 100 seats
SSL Remote Access 2 seats included, License upgrade to 25 seats
2 seats included, License upgrade to 25 seats
50 seats included
Complete specification available at http://www.cisco.com/go/sa500
© 2009 Cisco Systems, Inc. All rights reserved.Presentation_ID 15
Small Business Pro Service“3 Years Peace of Mind”
3 Years of Support for Small Business Pro ProductsSmall Business Support Community AccessClick to Chat 24x7*Call Support Local Business HoursSoftware Updates NBD parts replacement, where available, otherwise
same day ship
* In implementation, not currently available.
© 2009 Cisco Systems, Inc. All rights reserved.Presentation_ID 16
SA 500 Series SKUsSA 500 Series Security Appliances
Description
SA520-K9 SA 520 Security Appliance
SA520W-K9 SA 520 Security Appliance with Wireless
SA540-K9 SA 540 Security Appliance
SA 500 Series Upsells
L-FL-SSL-520-K9= eDelivery SSL license for SA 520 and SA 520W
L-PLGW-5= eDelivery ProtectLink Gateway license 5 user 1-year subscription, incremental
L-PLGW-25= eDelivery ProtectLink Gateway license 25 user 1-year subscription, incremental
CON-SBS-SVC2 3 Year Small Business Pro Service
Notes: These products are only available via Distribution. VeriSign VIP service which provides two factor authentication for SSL
VPN can be purchased directly from VeriSign… please see www.cisco.com/go/viptoken for details.
© 2009 Cisco Systems, Inc. All rights reserved.Presentation_ID 17
Designed to Enhance Partner Profitability
Enabling Partner Services Installation made easy with smart defaults pre-configured
on device Cisco Configuration Assistant provides single application
to manage the whole network System level testing and validation with other Small
Business Pro products ensure interoperability Smart Design Guides enable staff with limited security
training
Upsells for the SA500 Series SSL VPN licenses for remote access
– SA520 & SA520W come with 2 seats. License increases seat count to 25 users.
– SA540 comes with 50 seats... no license required.
Trend Micro ProtectLink Gateway– Web & Email security available in incremental 5 and 25 seat
1-year subscriptions.
Small Business Pro Service
© 2009 Cisco Systems, Inc. All rights reserved.Presentation_ID 18
Look for businesses…. … that are having problems with the volume of
spam emails. … looking to roll out new end-point Anti-Virus
protection. Providing Email and Web protection prior to the end-point increases security and maintains bandwidth, as well as addresses services the end-point products cannot deliver, such as spam and url filtering.
… seeking to control employee browsing of web sites from the office.
… that need simple and easy remote access options to enable employees, partners, and contractors to easily connect to the business network.
… with more than one site and that require site-site connectivity.
… with SOHO class routers with basic firewall capabilities that would benefit from moving up to a security appliance class product with all-in-one capabilities.
… that are seeking a partner’s help and advice on how best to secure their network.
Cisco SA500 Series Sales Opportunities
© 2009 Cisco Systems, Inc. All rights reserved.Presentation_ID 19
Winning Against Sonicwall & WatchguardFeature SonicWALL TZ
180/190/210 with TotalSecure Bundle
Watchguard Firebox Edge with subscription offerings
Cisco SA 500 Series with ProtectLink Gateway
Breadth of Portfolio
Sonicwall does not offer a complete network solution
Watchguard does not offer a complete network solution
Cisco provides a comprehensive network offering for small businesses. Single vendor for training, support, escalation.
Anti-Virus/Anti-Spyware
On device inspectionwith less than 25,000 signatures
On device inspection with less than 25,000 signatures.
Cloud based inspectionVirus pattern: 3M signaturesSpyware pattern: 400K signatures
Anti-Spam Uses a single anti-spam technology: Realtime Black List (RBL) which is only focused on the senders IP address.
Primarily uses Recurrent Pattern Detection (RPD) to stop spam emails.
Uses 10 different anti-spam technologies. Looks not just at the IP address, but the content of the email as well. Result is improved accuracy, and more spam prevention.
URL Content Filtering
CFS Standard – 12 categoriesCFS Premium* – 56 categories (*additional upsell)
54 categories ProtectLink Gateway provides ongoing URL categorization supporting over 80 categories.
Web Threat Protection
Not Available Included. Included… to best protect against dangerous websites.
© 2009 Cisco Systems, Inc. All rights reserved.Presentation_ID 20
Additional Resources
www.cisco.com/go/sa500
www.cisco.com/go/protectlink
www.cisco.com/go/viptoken
© 2009 Cisco Systems, Inc. All rights reserved.Presentation_ID 21
Summary
Cisco SA 500 Series Security Appliances Address the small business need for an all-in-
one security appliance solutionUtilize unique cloud based approach to deliver
email and web security which provides competitive advantage Enhance partner success and profitability
© 2009 Cisco Systems, Inc. All rights reserved.Presentation_ID 22