Cisco ASA 5500 Series 5505 Base/ Security Plus, Features Comparison 5510 Base/ Security Plus, 5520, 5540, 5550, 5580-20, (Based on Datasheets) 5580-40, 5585-X with SSP-10, 20,40 ,60 Security - Firewall, Intrusion Prevention System, Application Filtering Cyberoam CR 15i, 15wi, 25i, 25wi 25ia, 35ia, 35wi, 50ia, 100ia, 200i, 300i, 500ia, 750ia, 1000ia, 1500ia, 2500ia Cyberoam shield
Firewall Decision Parameters - Identity, Group, MAC and IP Address, Services based Number of IPS signatures 3000+ Application Categories - 11+ e.g. Gaming, IM, P2P, Proxy Access to vital resources based on users identity Protection against internal and external intrusion attempts Protection against Denial of Service attacks Provide business friendly environment to critical applications
Benefits
Stateful Inspection Firewall Appliance Deployment Modes: Gateway (Route), Transparent (Bridge) Application Visibility and Control Intrusion Prevention System (Checkmark Certified) Identity-Based Intrusion Prevention System DoS and DDoS Prevention
Yes
Yes
Yes
Yes Not Certified, needs AIP SSC and AIP SSM (Advanced Inspection and Prevention Security Services Module and Card) Yes Yes
Yes, with Multiple IPS Policy Support Yes IP Address and User based individual and Group control over Webcam, File Transfer, Voice and Text Chat Communication
Yes
Benefits
URL, keyword, File type block Blocks Malware, Phishing, Pharming URLs, Java Applets, Cookies and Active X Data leakage control via HTTP, HTTPS upload Provides Schedule-based access control Custom block messages per category Not Certified. Need to purchase Plus License of CSC-SSM (Content Security and Control). CSC SSM offers URL filtering through Trend Micro CSC-SSM hardware supports ASA 5510, 5520 and 5540 only
Features Comparison
(Based on Datasheets)
Web and Content Filtering Database Strength Domain Name based HTTPS Filtering Phishing Protection Pharming Protection Spyware Sites Protection Anonymous Proxy Protection Data Leakage Prevention Embedded URL Filtering Search Engine Safe Search Enforcement
Cyberoam CR 15i, 15wi, 25i, 25wi 25ia, 35ia, 35wi, 50ia, 100ia, 200i, 300i, 500ia, 750ia, 1000ia, 1500ia, 2500ia
Excellent (82+ Categories) Yes Yes (Blocks emails and Web traffic) Yes Yes Yes Yes Yes Yes
Cisco ASA 5500 Series 5505 Base/ Security Plus, 5510 Base/ Security Plus, 5520, 5540, 5550, 5580-20, 5580-40, 5585-X with SSP-10, 20,40 ,60
80+ categories, Need to purchase Plus License of CSC-SSM. No Need to purchase Plus License of CSC-SSM Yes Need to purchase Plus License of CSC-SSM No No No No
Benefits
Protection against SQL Injections, Cross-site Scripting (XSS), Session Hijacking, URL Tampering, Cookie Poisoning
On-Appliance Web Application Firewall WAF Management Positive Protection Model without Signatures Intuitive Website Flow Detector
Yes WAF can be configured and managed from UTM interface Yes Yes
Does not have WAF Does not have WAF Does not have WAF Does not have WAF
Benefits
Blocks 80% spam before downloading to the mail server Zero hour response to email threats
Yes
Features Comparison
(Based on Datasheets)
IP Reputation Filters Domain White-listing Identity-Based Anti Spam Language and Content Independent Anti Spam Engine Mail Virus Outbreak Detection Gateway Anti Spam Protocols Protected HTTPS Traffic Scanned for malware Self Service User Based Quarantine for Spam Mails
Cyberoam CR 15i, 15wi, 25i, 25wi 25ia, 35ia, 35wi, 50ia, 100ia, 200i, 300i, 500ia, 750ia, 1000ia, 1500ia, 2500ia
Yes Yes, to customize Cyberoam email security shield as and when required Yes
Cisco ASA 5500 Series 5505 Base/ Security Plus, 5510 Base/ Security Plus, 5520, 5540, 5550, 5580-20, 5580-40, 5585-X with SSP-10, 20,40 ,60
Yes No Yes
Yes
No
Yes
No
Yes
No
Yes
No
Benefits
Yes Yes
Self Service User Based Quarantine for Virus Mails Gateway Anti Spyware (Checkmark Certified) Gateway Anti Virus Protocols Protected
Yes
Yes
Features Comparison
(Based on Datasheets)
Appliance Management Cyberoam Shield :
Cyberoam CR 15i, 15wi, 25i, 25wi 25ia, 35ia, 35wi, 50ia, 100ia, 200i, 300i, 500ia, 750ia, 1000ia, 1500ia, 2500ia
Cisco ASA 5500 Series 5505 Base/ Security Plus, 5510 Base/ Security Plus, 5520, 5540, 5550, 5580-20, 5580-40, 5585-X with SSP-10, 20,40 ,60
Plug n play UTM Interactive customizable GUI Multi-lingual GUI Role based access control Centralized management and upgrade support
Benefits:
Reduced Opex and Capex Ease of use
Available Formats Ease of Use Web 2.0 GUI Management Interface Automated Windows Single Sign On Authentication, Authorization, Accounting Central Management and Upgrade Support
Appliance Click here for demo Click here for demo Web and CLI (TELNET, SSH) Yes Local, Windows PDC, AD, LDAP, RSA SecurID and Radius Cyberoam Central Console
Appliance Online Demo not available Online Demo not available Web and CLI Yes Local, Windows PDC, AD, LDAP, RSA SecurID and Radius Yes
Benefits:
Secure and clean VPN Connectivity any time, anywhere
Identity Based VPN Checkmark Certified VPN XAUTH Support For VPN VPNC Basic and AES Certified VPN Gateway VPN Connection Fail-Over
Yes Yes Local, Windows PDC, AD, LDAP, RSA SecurID and Radius Yes Yes
Cisco ASA 5500 Series 5505 Base/ Security Plus, Features Comparison 5510 Base/ Security Plus, 5520, 5540, 5550, 5580-20, (Based on Datasheets) 5580-40, 5585-X with SSP-10, 20,40 ,60 Resource Monitoring and Management Bandwidth Management Cyberoam Shield: Cyberoam CR 15i, 15wi, 25i, 25wi 25ia, 35ia, 35wi, 50ia, 100ia, 200i, 300i, 500ia, 750ia, 1000ia, 1500ia, 2500ia
Application, Web Category and User Identity based Bandwidth Management Guaranteed & Burst-able bandwidth policy Application & User Identity based Traffic Discovery Increased productivity Monitoring and controlling of bandwidth usage IP Address, User, Web Category, Application, Application Category based Yes
Benefits:
Supports QoS No
Benefits:
Server Load Balancing Multiple ISP Load Balancing Rule based ISP Gateway Fail-Over High Availability Dynamic Routing 802.1q VLAN Tagging VLAN over WAN 3G and Wimax (WWAN) Support Security over WiFi (WLAN)
Benefits
1000+ Reports, 45+ Compliance Reports Multiple format support Graphical and Tabular Exportable Formats - PDF and MS Excel Multiple Dashboards Report Scheduling Complete visibility of network, resources and users Yes, Web Based Report Engine, No extra cost
On-Appliance Reporting**
No
Features Comparison
(Based on Datasheets)
Compliance Reports Syslog Support
Cyberoam CR 15i, 15wi, 25i, 25wi 25ia, 35ia, 35wi, 50ia, 100ia, 200i, 300i, 500ia, 750ia, 1000ia, 1500ia, 2500ia
HIPAA, GLBA, SOX, PCI, FISMA Yes up to 5 syslogs Indigenously Designed Logging and Reporting Solution - Cyberoam iView which provides In-depth logging and reporting for multiple devices apart from Cyberoam Open Source Cyberoam iView Cyberoam iView Appliance Yes IP Address and User based individual and Group Logging and Reporting of Webcam usage, File Transfer, Voice usage and Text Chat Communication Yes Yes Yes Yes IP Address and User based Sends one copy of the email on a preconfigured email address for archiving and forensic analysis purpose
Cisco ASA 5500 Series 5505 Base/ Security Plus, 5510 Base/ Security Plus, 5520, 5540, 5550, 5580-20, 5580-40, 5585-X with SSP-10, 20,40 ,60
No Yes
External Reporting
Comprehensive user wise blended reporting Instant Messenger Logging and Reporting Multi WAN bandwidth reporting HTTP Upload Report Extensive Logging and Log Viewer Data transfer reporting Application Traffic Discovery Transparent Mail activity reporting
Not Comprehensive
No No No No No No No
Version 1.2-10.01.2158-4/04/2012
Disclaimer