Cisco SA500

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 1

Cisco Small Business ProSA 500 Series Security Appliances

All-in-One (UTM) Security for Small Business

© 2009 Cisco Systems, Inc. All rights reserved.Presentation_ID 2

Course Objectives

Purpose This course will introduce the student to features and functions of

the Cisco SA500 Series Security Appliances. There will be a focus on customer benefits, and sales opportunities relevant to the small business.

Objectives Upon completing this training, the student will be able to:

– Understand why security is critical to the Small Business– Be familiar with the features and functions of the SA 500 Series

Security Appliances– Identify customer benefits.– Describe the Cisco SA500 Sales Opportunities– Learn upsell opportunities with the Cisco SA500 Series– Know where to get additional Resources.


Security #1 Investment For SMBs

Top SMB IT Applications

Q: What are the top five IT applications that your organization will invest in over the next 12 months? (N=307)

0 20 40 60 80 100 120 140 160 180

SecurityOffice and personal productivity applications

Industry-specific ApplicationsEmail

Document ManagementCustomer Relationship Management (CRM)

Accounting and BudgetingContent Management

Collaboration SoftwareBusiness Intelligence (BI) or analytical applications

Enterprise Resource Planning (ERP)HR and Workforce Planning

PortalsSupply Chain Management (SCM)

Video ConferenceB2B/B2C ServicesInstant Messaging

Gartner Summit Events North America, 2008

Security is Top of Mind: Small businesses are planning to invest in security solutions. Partner Opportunity: Great way for Cisco Partners to acquire new customers

and cross-sell additional services


All-in-One (UTM) Security Gateways Displacing Routers

Source: IDC Nov 2008

Firewall Alone Is Not Enough: The primary vector for threats to small businesses are Email and Web. All-in-one class devices are required to protect the small business. Unified Threat Management (UTM) is a fast growing market: opportunity for

Partners to target customers that have SOHO class routers or similar security devices that only provide basic firewall functionality.


Why the interest in All-in-one Security?

Business without all-in-one security Employee PCs run slow or behave

erratically due to worms, viruses and other malware

Employees waste time surfing non-business related web sites and infect their PC when they hit a link for ‘you have to see this video’

Important customer emails are buried in in-boxes filled with spam emails… up to 95 of global email is spam.

Customers are not getting the attention they want, and take their business to a competitor

The business struggles to grow, much less stay in business.

Business with all-in-one security The network and PCs work as they should. Employees are productive. Customer inquiries and emails are

addressed Customer loyalty is high Business grows and prospers

All-in-one security is critical to the success of small businesses.


All-in-One (UTM) Security for Small BusinessBusiness Grade Firewall, Intrusion Prevention System (IPS), Email Security, Web Threat Protection, URL Filtering, Site to Site VPN and

Remote Access IPsec and SSL VPN, Secure 802.11n wireless

Cisco SA 500 Series Security Appliances

Enhanced Partner ProfitabilitySubscription offering provides recurring revenue, Pre-Configured with Smart Defaults to simplify configuration, Cisco Configuration Assistant

support, Small Business Pro Service

Full Strength Protection at Full SpeedCloud based Email & Web security services enable full strength

protection without impacting bandwidth, stops threats before they get to the business


Cisco SA 500 Series Security Appliances An All-in-One Threat Mitigation (UTM) and VPN Solution

Features & Capabilities Business grade firewall ProtectLink Gateway VPN capabilities available Models & Support ServicesPartner ProfitabilitySales OpportunitiesBeating the competitionAdditional Resources


Business-Grade Firewall & IPS

Internet

Cisco SA 500 Series

ISP 1ISP 2

DMZ

E-MailServer

File or WebServer

LAN

Firewall: Protects business from unwanted visitors, unwanted traffic, and malicious attacks. Dual WAN: Ensures the business is connected to the internet in event the

connection to one ISP goes down. DMZ: Enables safe and secure hosting of internet accessible resources

without exposing the LAN. Intrusion Prevention System (IPS): Protects against worms, trojans, and

attacks on vulnerable operating systems and applications. Includes protocol inspection and ability to control Instant Messaging and Peer to Peer traffic.

Licensed Feature


Trend Micro ProtectLink Gateway

Internet Trend Micro ProtectLink

Gateway Service

Trend Micro ProtectLink Gateway: Email Security, Web Threat Protection, and URL Filtering. Upsell post-sale: Can be easily enabled after the SA 500 Series has been

deployed and installed for some time… providing additional revenue opportunity. Annual Subscription Based Offering: Enables recurring revenue opportunity for

partner as customer renews the offering annually.

Cisco SA 500 Series

Licensed Feature


Email Protectionvia Trend Micro ProtectLink Gateway

Internet Trend Micro ProtectLink

Gateway Service

Email protection: Emails sent to your businesses are scanned for spam, viruses, malware, spyware, phishing attacks. Based on the award winning Trend Micro Interscan Hosted Messaging Security (IMHS) offering. Unique cloud based solution:

Enables full strength protection – over 3 million anti-virus patterns and over 400,000 anti-spyware patterns, 10 different techniques to ID spam including methods that look at both the IP address of the sender as well as the actual content of the email itself.

No risk of the inspection engines being out of date to protect against the latest threats.

Threats are stopped before they get to your business. Bandwidth is maintained even when security services are enabled.

Cisco SA 500 Series

Licensed Feature


Web Protectionvia Trend Micro ProtectLink Gateway

InternetTrend Micro ProtectLink

Gateway Service

Web Threat Protection: Reputation based URL blocking prevents users from accessing dangerous websites known to have malware, phishing exploits, etc. URL Filtering: Over 80 categories of websites control employee web browsing

and help increase employee productivity, reduce legal liability

Cisco SA 500 Series

Malicious Websites

Licensed Feature

http://dangerous-website.com

http://inappropriate-website.com


VPN Services for all deployment types

Internet

Cisco SA 500 Series

Site-Site VPN: Secure connectivity between office locations. Remote Access VPN: Choice of IPsec or SSL VPN to enable safe connectivity

for employees, contractors and partners.

Supply PartnerRequires access to ordering databases

Remote OfficeRequires Site-to-Site

Employee at HomeRequires consistent LAN-like access


SSL VPN Preferred for Remote AccessIPSec Deployment Steps

1. Create user account

2. Send IPSec Client to Computer

3. Install IPSec Client

4. Configure IPSec Client

5. User connects with VPN client

(Conflicts likely if other brand of IPSec client already installed)

SSL VPN Deployment Steps1. Create user account

2. Send URL to user

3. User Connects to URL

Easy Deployment: SSL VPN faster and easier to deploy as VPN client is not required… leverages security integrated into web browsers. Disaster Recovery: SSL VPN works well in situations where employees are

forced into remote access role due to weather or other disaster related events. Two Factor Authentication: VeriSign VIP service provides hosted token based

authentication for enhanced security with SSL VPN remote access. Licensed Feature: Requires license on the SA520 and SA520W.

Licensed Feature


SA 500 Series Model ComparisonSA 520 SA 520W SA 540

Firewall Performance 200 Mbps 200 Mbps 300 Mbps

UTM Performance 200 Mbps 200 Mbps 300 Mbps

VPN Performance 65 Mbps 65 Mbps 85 Mbps

Connections 15,000 15,000 40,000

Ports 1 WAN, 1 Optional,

4 LAN

10/100/1000

1 WAN, 1 Optional,

4 LAN

10/100/1000

1 WAN, 1 Optional,

8 LAN

10/100/1000

Wireless (802.11b/g/n) No Yes No

IPsec Site-Site Yes Yes Yes

IPsec Remote Access 50 seats 50 seats 100 seats

SSL Remote Access 2 seats included, License upgrade to 25 seats

2 seats included, License upgrade to 25 seats

50 seats included

Complete specification available at http://www.cisco.com/go/sa500

http://www.cisco.com/go/sa500�


Small Business Pro Service“3 Years Peace of Mind”

3 Years of Support for Small Business Pro ProductsSmall Business Support Community AccessClick to Chat 24x7*Call Support Local Business HoursSoftware Updates NBD parts replacement, where available, otherwise

same day ship

* In implementation, not currently available.


SA 500 Series SKUsSA 500 Series Security Appliances

Description

SA520-K9 SA 520 Security Appliance

SA520W-K9 SA 520 Security Appliance with Wireless

SA540-K9 SA 540 Security Appliance

SA 500 Series Upsells

L-FL-SSL-520-K9= eDelivery SSL license for SA 520 and SA 520W

L-PLGW-5= eDelivery ProtectLink Gateway license 5 user 1-year subscription, incremental

L-PLGW-25= eDelivery ProtectLink Gateway license 25 user 1-year subscription, incremental

CON-SBS-SVC2 3 Year Small Business Pro Service

Notes: These products are only available via Distribution. VeriSign VIP service which provides two factor authentication for SSL

VPN can be purchased directly from VeriSign… please see www.cisco.com/go/viptoken for details.

http://www.cisco.com/go/viptoken�


Designed to Enhance Partner Profitability

Enabling Partner Services Installation made easy with smart defaults pre-configured

on device Cisco Configuration Assistant provides single application

to manage the whole network System level testing and validation with other Small

Business Pro products ensure interoperability Smart Design Guides enable staff with limited security

training

Upsells for the SA500 Series SSL VPN licenses for remote access

– SA520 & SA520W come with 2 seats. License increases seat count to 25 users.

– SA540 comes with 50 seats... no license required.

Trend Micro ProtectLink Gateway– Web & Email security available in incremental 5 and 25 seat

1-year subscriptions.

Small Business Pro Service


Look for businesses…. … that are having problems with the volume of

spam emails. … looking to roll out new end-point Anti-Virus

protection. Providing Email and Web protection prior to the end-point increases security and maintains bandwidth, as well as addresses services the end-point products cannot deliver, such as spam and url filtering.

… seeking to control employee browsing of web sites from the office.

… that need simple and easy remote access options to enable employees, partners, and contractors to easily connect to the business network.

… with more than one site and that require site-site connectivity.

… with SOHO class routers with basic firewall capabilities that would benefit from moving up to a security appliance class product with all-in-one capabilities.

… that are seeking a partner’s help and advice on how best to secure their network.

Cisco SA500 Series Sales Opportunities


Winning Against Sonicwall & WatchguardFeature SonicWALL TZ

180/190/210 with TotalSecure Bundle

Watchguard Firebox Edge with subscription offerings

Cisco SA 500 Series with ProtectLink Gateway

Breadth of Portfolio

Sonicwall does not offer a complete network solution

Watchguard does not offer a complete network solution

Cisco provides a comprehensive network offering for small businesses. Single vendor for training, support, escalation.

Anti-Virus/Anti-Spyware

On device inspectionwith less than 25,000 signatures

On device inspection with less than 25,000 signatures.

Cloud based inspectionVirus pattern: 3M signaturesSpyware pattern: 400K signatures

Anti-Spam Uses a single anti-spam technology: Realtime Black List (RBL) which is only focused on the senders IP address.

Primarily uses Recurrent Pattern Detection (RPD) to stop spam emails.

Uses 10 different anti-spam technologies. Looks not just at the IP address, but the content of the email as well. Result is improved accuracy, and more spam prevention.

URL Content Filtering

CFS Standard – 12 categoriesCFS Premium* – 56 categories (*additional upsell)

54 categories ProtectLink Gateway provides ongoing URL categorization supporting over 80 categories.

Web Threat Protection

Not Available Included. Included… to best protect against dangerous websites.


Additional Resources

www.cisco.com/go/sa500

www.cisco.com/go/protectlink

www.cisco.com/go/viptoken

http://www.cisco.com/go/sa500�

http://www.cisco.com/go/protectlink�

http://www.cisco.com/go/viptoken�


Summary

Cisco SA 500 Series Security Appliances Address the small business need for an all-in-

one security appliance solutionUtilize unique cloud based approach to deliver

email and web security which provides competitive advantage Enhance partner success and profitability


Documents

Cisco SA500