Cisco Small Business Pro SA 500 Series Security Appliances

All-in-One (UTM) Security for Small Business

Presentation_ID

2009 Cisco Systems, Inc. All rights reserved.

Cisco Confidential

Course Objectives
Purpose This course will introduce the student to features and functions of the Cisco SA500 Series Security Appliances. There will be a focus on customer benefits, and sales opportunities relevant to the small business. Objectives Upon completing this training, the student will be able to:
Understand why security is critical to the Small Business Be familiar with the features and functions of the SA 500 Series Security Appliances Identify customer benefits. Describe the Cisco SA500 Sales Opportunities Learn upsell opportunities with the Cisco SA500 Series Know where to get additional Resources.

Presentation_ID

2009 Cisco Systems, Inc. All rights reserved.

Security #1 Investment For SMBs

Q: What are the top five IT applications that your organization will invest in over the next 12 months? (N=307) Top SMB IT Applications
Security Office and personal productivity applications Industry-specific Applications Email Document Management Customer Relationship Management (CRM) Accounting and Budgeting Content Management Collaboration Software Business Intelligence (BI) or analytical applications Enterprise Resource Planning (ERP) HR and Workforce Planning Portals Supply Chain Management (SCM) Video Conference B2B/B2C Services Instant Messaging 0 20 40 60 80 100 120 140 160 180
Gartner Summit Events North America, 2008

Security is Top of Mind: Small businesses are planning to invest in security solutions. Partner Opportunity: Great way for Cisco Partners to acquire new customers and cross-sell additional services
Presentation_ID 2009 Cisco Systems, Inc. All rights reserved.

All-in-One (UTM) Security Gateways Displacing Routers

Firewall Alone Is Not Enough: The primary vector for threats to small businesses are Email and Web. All-in-one class devices are required to protect the small business. Unified Threat Management (UTM) is a fast growing market: opportunity for Partners to target customers that have SOHO class routers or similar security devices that only provide basic firewall functionality.
Presentation_ID 2009 Cisco Systems, Inc. All rights reserved.

Source: IDC Nov 2008

Why the interest in All-in-one Security?

Business without all-in-one security Employee PCs run slow or behave erratically due to worms, viruses and other malware Employees waste time surfing non-business related web sites and infect their PC when they hit a link for you have to see this video Important customer emails are buried in inboxes filled with spam emails up to 95 of global email is spam. Customers are not getting the attention they want, and take their business to a competitor The business struggles to grow, much less stay in business. Business with all-in-one security The network and PCs work as they should. Employees are productive. Customer inquiries and emails are addressed Customer loyalty is high Business grows and prospers

All-in-one security is critical to the success of small businesses.

Presentation_ID 2009 Cisco Systems, Inc. All rights reserved.

Cisco SA 500 Series Security Appliances

All-in-One (UTM) Security for Small Business

Business Grade Firewall, Intrusion Prevention System (IPS), Email Security, Web Threat Protection, URL Filtering, Site to Site VPN and Remote Access IPsec and SSL VPN, Secure 802.11n wireless

Full Strength Protection at Full Speed

Cloud based Email & Web security services enable full strength protection without impacting bandwidth, stops threats before they get to the business

Enhanced Partner Profitability

Subscription offering provides recurring revenue, Pre-Configured with Smart Defaults to simplify configuration, Cisco Configuration Assistant support, Small Business Pro Service 2009 Cisco Systems, Inc. All rights reserved.

Presentation_ID

Cisco SA 500 Series Security Appliances

An All-in-One Threat Mitigation (UTM) and VPN Solution

Features & Capabilities Business grade firewall ProtectLink Gateway VPN capabilities available Models & Support Services Partner Profitability Sales Opportunities Beating the competition Additional Resources

Presentation_ID

2009 Cisco Systems, Inc. All rights reserved.

Business-Grade Firewall & IPS

Cisco SA 500 Series

ISP 1
Internet

ISP 2

LAN

File or Web Server

DMZ

E-Mail Server

Firewall: Protects business from unwanted visitors, unwanted traffic, and malicious attacks. Dual WAN: Ensures the business is connected to the internet in event the connection to one ISP goes down. DMZ: Enables safe and secure hosting of internet accessible resources without exposing the LAN. Intrusion Prevention System (IPS): Protects against worms, trojans, and attacks on vulnerable operating systems and applications. Includes protocol inspection and ability to control Instant Messaging and Peer to Peer traffic.
Presentation_ID 2009 Cisco Systems, Inc. All rights reserved.

Licensed Feature 8

Trend Micro ProtectLink Gateway

Licensed Feature

Cisco SA 500 Series

Trend Micro ProtectLink Gateway Service

Internet

Trend Micro ProtectLink Gateway: Email Security, Web Threat Protection, and URL Filtering. Upsell post-sale: Can be easily enabled after the SA 500 Series has been deployed and installed for some time providing additional revenue opportunity. Annual Subscription Based Offering: Enables recurring revenue opportunity for partner as customer renews the offering annually.
Presentation_ID 2009 Cisco Systems, Inc. All rights reserved.

Email Protection via Trend Micro ProtectLink Gateway

Cisco SA 500 Series
Trend Micro ProtectLink Gateway Service

Licensed Feature

Internet

Email protection: Emails sent to your businesses are scanned for spam, viruses, malware, spyware, phishing attacks. Based on the award winning Trend Micro Interscan Hosted Messaging Security (IMHS) offering. Unique cloud based solution: Enables full strength protection over 3 million anti-virus patterns and over 400,000 anti-spyware patterns, 10 different techniques to ID spam including methods that look at both the IP address of the sender as well as the actual content of the email itself. No risk of the inspection engines being out of date to protect against the latest threats. Threats are stopped before they get to your business. Bandwidth is maintained even when security services are enabled.
Presentation_ID 2009 Cisco Systems, Inc. All rights reserved.

10

Web Protection via Trend Micro ProtectLink Gateway

Licensed Feature

Malicious Websites

http://dangerous-website.com

http://inappropriate-website.com

Cisco SA 500 Series

Internet

Trend Micro ProtectLink Gateway Service

Web Threat Protection: Reputation based URL blocking prevents users from accessing dangerous websites known to have malware, phishing exploits, etc. URL Filtering: Over 80 categories of websites control employee web browsing and help increase employee productivity, reduce legal liability

Presentation_ID

2009 Cisco Systems, Inc. All rights reserved.

11

VPN Services for all deployment types

Supply Partner
Requires access to ordering databases

Cisco SA 500 Series

Internet Remote Office

Requires Site-to-Site

Employee at Home
Requires consistent LAN-like access

Site-Site VPN: Secure connectivity between office locations. Remote Access VPN: Choice of IPsec or SSL VPN to enable safe connectivity for employees, contractors and partners.

Presentation_ID

2009 Cisco Systems, Inc. All rights reserved.

12

Licensed Feature

SSL VPN Preferred for Remote Access

IPSec Deployment Steps
1. Create user account 2. Send IPSec Client to Computer 3. Install IPSec Client 4. Configure IPSec Client 5. User connects with VPN client (Conflicts likely if other brand of IPSec client already installed)

SSL VPN Deployment Steps

1. Create user account 2. Send URL to user

3. User Connects to URL

Easy Deployment: SSL VPN faster and easier to deploy as VPN client is not required leverages security integrated into web browsers. Disaster Recovery: SSL VPN works well in situations where employees are forced into remote access role due to weather or other disaster related events. Two Factor Authentication: VeriSign VIP service provides hosted token based authentication for enhanced security with SSL VPN remote access. Licensed Feature: Requires license on the SA520 and SA520W.
Presentation_ID 2009 Cisco Systems, Inc. All rights reserved.

13

SA 500 Series Model Comparison

SA 520 Firewall Performance UTM Performance VPN Performance Connections Ports 200 Mbps 200 Mbps 65 Mbps 15,000 1 WAN, 1 Optional, 4 LAN 10/100/1000 Wireless (802.11b/g/n) IPsec Site-Site IPsec Remote Access SSL Remote Access No Yes 50 seats 2 seats included, License upgrade to 25 seats SA 520W 200 Mbps 200 Mbps 65 Mbps 15,000 1 WAN, 1 Optional, 4 LAN 10/100/1000 Yes Yes 50 seats 2 seats included, License upgrade to 25 seats SA 540 300 Mbps 300 Mbps 85 Mbps 40,000 1 WAN, 1 Optional, 8 LAN 10/100/1000 No Yes 100 seats 50 seats included

Complete specification available at http://www.cisco.com/go/sa500

14

Presentation_ID

2009 Cisco Systems, Inc. All rights reserved.

Small Business Pro Service 3 Years Peace of Mind

3 Years of Support for Small Business Pro Products Small Business Support Community Access Click to Chat 24x7* Call Support Local Business Hours Software Updates NBD parts replacement, where available, otherwise same day ship

* In implementation, not currently available.

Presentation_ID 2009 Cisco Systems, Inc. All rights reserved.

15

SA 500 Series SKUs

SA 500 Series Security Appliances SA520-K9 SA520W-K9 SA540-K9 SA 500 Series Upsells L-FL-SSL-520-K9= L-PLGW-5= L-PLGW-25= CON-SBS-SVC2
eDelivery SSL license for SA 520 and SA 520W eDelivery ProtectLink Gateway license 5 user 1-year subscription, incremental eDelivery ProtectLink Gateway license 25 user 1-year subscription, incremental 3 Year Small Business Pro Service

Description
SA 520 Security Appliance SA 520 Security Appliance with Wireless SA 540 Security Appliance

Notes: These products are only available via Distribution. VeriSign VIP service which provides two factor authentication for SSL VPN can be purchased directly from VeriSign please see www.cisco.com/go/viptoken for details.

Presentation_ID

2009 Cisco Systems, Inc. All rights reserved.

16

Designed to Enhance Partner Profitability

Enabling Partner Services Installation made easy with smart defaults pre-configured on device Cisco Configuration Assistant provides single application to manage the whole network System level testing and validation with other Small Business Pro products ensure interoperability Smart Design Guides enable staff with limited security training Upsells for the SA500 Series SSL VPN licenses for remote access
SA520 & SA520W come with 2 seats. License increases seat count to 25 users. SA540 comes with 50 seats... no license required.

Trend Micro ProtectLink Gateway

Web & Email security available in incremental 5 and 25 seat 1-year subscriptions.

Small Business Pro Service

Presentation_ID 2009 Cisco Systems, Inc. All rights reserved.

17

Cisco SA500 Series Sales Opportunities

Look for businesses. that are having problems with the volume of spam emails. looking to roll out new end-point Anti-Virus protection. Providing Email and Web protection prior to the end-point increases security and maintains bandwidth, as well as addresses services the end-point products cannot deliver, such as spam and url filtering. seeking to control employee browsing of web sites from the office. that need simple and easy remote access options to enable employees, partners, and contractors to easily connect to the business network. with more than one site and that require sitesite connectivity. with SOHO class routers with basic firewall capabilities that would benefit from moving up to a security appliance class product with all-in-one capabilities. that are seeking a partners help and advice on how best to secure their network.
2009 Cisco Systems, Inc. All rights reserved.

Presentation_ID

18

Winning Against Sonicwall & Watchguard

Feature SonicWALL TZ 180/190/210 with TotalSecure Bundle
Sonicwall does not offer a complete network solution

Watchguard Firebox Edge with subscription offerings

Watchguard does not offer a complete network solution

Cisco SA 500 Series with ProtectLink Gateway

Cisco provides a comprehensive network offering for small businesses. Single vendor for training, support, escalation. Cloud based inspection Virus pattern: 3M signatures Spyware pattern: 400K signatures Uses 10 different anti-spam technologies. Looks not just at the IP address, but the content of the email as well. Result is improved accuracy, and more spam prevention. ProtectLink Gateway provides ongoing URL categorization supporting over 80 categories. Included to best protect against dangerous websites.

Breadth of Portfolio

AntiVirus/AntiSpyware Anti-Spam

On device inspection with less than 25,000 signatures Uses a single anti-spam technology: Realtime Black List (RBL) which is only focused on the senders IP address. CFS Standard 12 categories CFS Premium* 56 categories (*additional upsell) Not Available

On device inspection with less than 25,000 signatures.

Primarily uses Recurrent Pattern Detection (RPD) to stop spam emails.

URL Content Filtering Web Threat Protection

54 categories

Included.

Presentation_ID

2009 Cisco Systems, Inc. All rights reserved.

19

Additional Resources
www.cisco.com/go/sa500 www.cisco.com/go/protectlink www.cisco.com/go/viptoken

Presentation_ID

2009 Cisco Systems, Inc. All rights reserved.

20

Summary
Cisco SA 500 Series Security Appliances Address the small business need for an all-inone security appliance solution Utilize unique cloud based approach to deliver email and web security which provides competitive advantage Enhance partner success and profitability

Presentation_ID

2009 Cisco Systems, Inc. All rights reserved.

21

Presentation_ID

2009 Cisco Systems, Inc. All rights reserved.

22