Download presentation
Presentation is loading. Please wait.
Published byGerard Lynch Modified over 9 years ago
1
Cisco Confidential 1 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco ISA500 Series Integrated Security Appliance Competitive Selling: Cyberoam Speaker Name and Title
2
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2 Vendor data used in this documentation is collected from public domains
3
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3 Cyberoam CR15wi-CR25ia (Small Business)
4
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 4 Better security—performance and quality (SIO) Easy of use with simplicity design, bundled licensing Cost saving with tested Cisco Solution Integration Solution portfolio offerings Rich routing and switching capabilities at its class Competitive performance pricing Better service support
5
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 5 Cisco ISA500 offers better UTM performance and all other security services Performance (Source: Datasheet) CiscoCyberoam ISA550ISA570CR-15iCR-25i Firewall Throughput200 Mbps500 Mbps90 Mbps225 Mbps VPN Throughput75 Mbps130 Mbps15 Mbps30 Mbps Anti-Virus Throughput50 Mbps80 Mbps20 Mbps65 Mbps IPS Throughput60 Mbps90 Mbps40 Mbps70 Mbps UTM Throughput45 Mbps75 Mbps15 Mbps50 Mbps
6
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 6 Security threats change dynamically; threat analysis needs to keep up Cisco SIO—an extensive security analysis system, provides unparalleled global threat intelligence for ISA500 to prevent threats and attacks in time 700k+ sensors all over the globe 5 billion web requests per day 35% of global email traffic examined Millions of live security data feeds collected 8 Millions of security updates 500+ security analysts (PhD’s, CCIEs) $100M+ R&D investment within SIO Cisco SIOCyberoam Research and Development Investment Is Only a Subset of Cisco SIO’s No global presence or ‘follow-the- sun’ support Total number of company employees is about 600, R&D a small subset of that number Source: Wikipedia
7
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7 Cisco ISA500 Built-in configuration wizards to simplify multiple security service deployments Many services can be configured and up and running within minutes Cyberoam User needs to navigate through multiple pages and options to configure security services Limited built-in configuration wizard PC Magazine Review: Setup is difficult Ports not labeled Configuration requires digging deep into the interface Weak printed documentation http://www.pcmag.com/article2/0,28 17,2281212,00.asp
8
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 8 Cisco ISA500 Easy to use navigation interface Structured organization Cyberoam Cumbersome to navigate Sporadic navigation experiences Total 10 Navigation Sections and All Are Observable in One Window Learnability Efficiency Memorability High learning curve Limited configuration wizards (network only) Common settings buried deep in many menu levels
9
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9 User can enable a security service with a simple mouse click No need to have extensive security background to deploy and secure business networks
10
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10 High-Speed Uplinks ISA500 has Gigabit uplinks on both ISA550 and ISA570 models (including on wireless variants) Cyberoam SB UTM products (in this comparison) have no Gigabit uplink options for high- speed WAN access, which may hamper connection speeds Full LAN Switching ISA500 has more switch ports with full 802.1Q support Cyberoam products may require additional switch—increases solution cost and potential for integration issues VPN ISA500 supports IPSec VPN clients on many more OS and mobility platforms Cyberoam VPN is Windows only Mounting ISA500 gives option for desktop, rack-mount (in box), and wall-mount Cyberoam lacks rack-mount options on its low-end products
11
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11 Network Services Cyberoam products lack QoS for differentiated service, which may impact application performance under heavy workloads ISA500 implements QoS more comprehensively (not just policy enforcement) ISA500 has support for differentiation of network services (improves user experience) ISA500 provides more comprehensive wired and wireless network access control with 8021x Resiliency Cyberoam SB products lack resiliency ISA500 has support for dynamic routing + VRRP for redundancy
12
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 12 Licensing Cisco ISA500 licensing is simple, affordable, and easier to install Included in base cost of system (turn on what’s needed—when you need it) One license to activate and manage Cyberoam licensing is more complicated License modules require to be purchased separately and need multiple steps to activate various services Extra subscriptions and costs for ‘optional’ security services
13
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 13 Management Cyberoam reporting and management tools rely on the purchase of additional central management appliances, which may increase total solution cost ISA500 management doesn’t require the purchase of additional systems or appliances
14
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 14 Cyberoam sells a security box that bolts onto network, not solutions—no tested interoperability with other infrastructure products Cisco offers a more comprehensive SMB portfolio, with components that are quality- and interoperability-tested (voice, video, security, switching, routing, and wireless) Customers can add technologies as needed and benefit from Cisco products designed to work together Choose ISA500 and avoid the complexity that comes from working with multiple vendors
15
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15 Optimized for solution deployment and lower operational cost ISA500 Example of Tested Devices: SPA500 Series IP Phones, Cisco ASA5505, Cisco ISR 800, Cisco ASR1004, Cisco UC500, UC320, Cisco RV Routers, SPA100, SPA200, Cisco 100/200/300 Switch, Catalyst 2960/3750, AP500, OnPlus, WAP121/WAP321
16
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 16 Cisco Eight product SKUs—easy to understand, manage, and start selling Consistent feature sets across models “Pay as you go” management solution to start managed service offerings As low as $250 to start manage a customer using Cisco OnPlus More affordable hosted managed services Cyberoam Many product SKUs variant—higher learning curve to learn, manage, and sell Inconsistent feature sets across models IPSec VPN—extra licensing modules High upfront cost to start managed service offerings Central console appliance needed for centralized security management Requires self-hosting and management
17
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 17 Warranty Cyberoam requires additional $ for 8x5 support ISA500 standard warranty includes 8x5 support for first year with Small Business Support contract options to extend support by three years Documentation Cyberoam configuration is complex with weak documentation ISA500 has extensive documentation with quick start guides, user and comprehensive administration guides Support Cyberoam services rely on working with multiple vendors Cisco offers a single contract point for all product and license purchasing, deployment, maintenance and upgrades ISA500 SB products are supported by global Service Center with CCNA certified technicians that troubleshoot whole network, not just a box Cisco has rich self-help capabilities through SMB Support Community
18
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 18 For Cisco partners, ISA500 offers an additional solution selling opportunity without complicating support models For new Cisco partners, the breadth of Cisco products provides growth opportunity for partners without extra efforts to develop new vendor relationship Only offers security products with very limited wireless and no switch product options Switches 100, 200, 300, 500 Stackable Series, Catalyst 2900, etc. Wireless 100, 300 Series AP500, AP1100/1200 Voice Gateway Router RV100, 200, ISR800, ISR1900, etc. BE3000, ISR CME SPA100/ATA, etc. IP Phone SPA300, SPA500, 7900, etc. Security SA500, ISA500, ASAS5505, etc. Network Management OnPlus, CCA, FindIT, Office Manager CiscoCyberoam
19
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 19 Cisco AdvantagesCisco ISA500Cyberoam CR15/25 Superior Security Product: Better Customer Satisfaction Superior security threat protection with SIO Higher UTM (security services) performance All Gigabit Ethernet interfaces on all models Security R&D investment is only a small subset of Cisco’s Lower UTM performance FE only on all its models Easy to Use and Solution Integration: Lower Operational Cost Lower learning curve with simplicity, SMB purposed-built design—feature, GUI, flow Fast to deploy with six built-in configuration wizards Integrates routing and switching capabilities on all models Interoperability tested with other Cisco products and solutions Complex licensing models not included in base system cost “Fit” to SMB (not designed for SMB) Limited built-in wizards; more steps required to setup security services Inconsistent features among models Limited network product portfolio and lack of support for differentiated services Simple to Start Selling: Higher Profitability Simplified packaging—Eight SKUs, one license only, consistent features Manageable by Cisco hosted cloud-based management services—OnPlus/Advanced Security Services Pay as you go pricing model with Cisco OnPlus Requires high upfront cost to start managed service offerings Requires resource to host and manage its management appliance Stable Brand Offering Revenue Growth Potential $40B+ revenue; 25+ years in industry Breadth of Cisco network solution portfolio for great cross-sell opportunity Channel alignment uncertainty Limited network portfolio
20
Cisco Confidential 20 © 2012 Cisco and/or its affiliates. All rights reserved.
21
Cisco Confidential 21 Security Unrivaled security threat protection with Cisco Security Intelligence Operations (SIO) Higher UTM performance 802.1x port access control, network reputation, cloud-based gateway AV, etc. Solution Integrated with rich routing and switching capabilities Advanced QoS with LLQ helps to optimize converged applications Rich LAN switching capabilities make LAN network integration easier Adaptability Purpose-built and simplified design—lowers learning curve, shortens deployments Simplified packaging—simplified buying, selling, and maintenance of solution Partner Profitable Manageable by Cisco cloud services, OnPlus and Advanced Security Services Competitive Performance Pricing More ports, higher performance, no extra cost for AV, Email Filtering and VPN services
22
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 22 Feature Comparison (Based on Datasheets) Cisco ISA500 Series (ISA550W, ISA570W) Cyberoam (CR15i, CR25i, CR35i) Primary Security Requirement: Access Control Firewall SPI Firewall (Standards-Based)SPI Firewall (Proprietary Identity-Based) Security Services Network Reputation Filtering YesNo Web-Threat Protection Yes—Cloud-Based (Cisco SIO)Yes—Device-Based Web URL Filtering Yes—Powered by Cisco SIOYes—Device-Based IPS Yes—IncludedYes—Additional $ (Subscription Required) Gateway Anti-Virus (AV) Yes—IncludedYes—Additional $ (Subscription Required; Kaspersky) SPAM Filter Yes—IncludedYes—Additional $ (Subscription Required; CommTouch) Application Control Yes—22+ CategoriesYes—11+ Categories Usability Configuration Wizards Yes—More Comprehensive Wizards and Better Usage ScenariosOnly Simple Wizards (Network Only) Multi-Service Network Support (Voice, Video, Data) Policy-Based Queuing YesNo WAN Queuing Strategies Advanced—Strict Priority, WRR, Low Latency QueuingBasic—Strict Priority WAN Traffic Classification, Marking Yes LAN QoS (802.1p CoS/DSCP) YesNo Number of LAN Queues 4No LAN Queuing Strategies Yes—Strict Priority, Weighted Round Robin, SP+WRRNo LAN Traffic Classification and Marking Yes—DSP and CoSNo Wireless QoS—802.1e (WMM) YesNo Wireless Traffic Classification and Marking Yes—DSP and CoSNo Number of Wireless Queues 4No WPS (Wi-Fi Protected Setup) YesNo Traffic Meter on WAN YesNo LAN Switching Support YesNo
23
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 23 With dual WAN on all models, Cisco ISA500 allows all its customers to have WAN redundancy and increases business availability as well as providing LAN switchports With DMZ support on all models, Cisco ISA500 enables its customers to set up public facing servers and/or services as needed AreaFeatures Cisco ISA550W Cisco ISA570W Cyberoam CR15wi Cyberoam CR25wi Cyberoam CR50ia Hardware WAN Interface 2 (GE) 3 (FE) Configurable 4 (FE) Configurable 6 (FE) Configurable LAN Interface Up to 6 (GE)Up to 9 (GE) DMZ Interface Up to 4 (GE) Yes 802.11 Wi-Fi (in Wireless Model Only) Yes
24
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 24 AreaFeatures Cisco ISA550W Cisco ISA570W Cyberoam CR15wi Cyberoam CR25wi Cyberoam CR50ia Security Services Web Threat Protection Yes—Powered by Cisco Security Intelligence Operation (SIO)* Dynamically from Cloud Yes—Depends on Device- Based Web Category Database (DB) Web URL Filtering Yes—Powered by Cisco SIO* Yes—Local DB IPSYes Yes—Extra Subscription Required ($) Network Reputation Filter Yes—Powered by Cisco SIO* No Gateway Anti-VirusYes Yes—Extra Subscription Required ($) (Kaspersky) Spam Filter Yes—Powered by Cisco SIO* (Bundled) Yes—Extra Subscription Required ($) (CommTouch) Application Control Yes (22 Top-Level Categories, Encompassing Comprehensive and Expanding Set of Network Applications) Yes (11 Categories)
25
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 25 AreaFeatures Cisco ISA550W Cisco ISA570W Cyberoam CR15wi Cyberoam CR25wi Cyberoam CR50ia Performance* Firewall Throughput 200 Mbps500 Mbps 90 Mbps (TCP), 150 Mbps (UDP) 225 Mbps (TCP), 450 Mbps (UDP) 750 Mbps (TCP), 1000 Mbps (UDP) VPN Throughput 80 Mbps130 Mbps15 Mbps (3DES)30 Mbps (3DES)60 Mbps (3DES) Anti-Virus Throughput 60 Mbps100 Mbps20 Mbps65 Mbps150 Mbps IPS Throughput75 Mbps130 Mbps40 Mbps70 Mbps200 Mbps UTM Throughput 45 Mbps80 Mbps15 Mbps50 Mbps130 Mbps Concurrent Sessions 15,00040,00030,000130,000220,000 VPN Site-to-Site VPN Tunnel 50100Not Documented IPSec VPN Client Support 50 (License Included) 100 (License Included) Not Documented SSL VPN Client Support/ Recomm. Ended 25 (License Included) 50 (License Included) Not Documented *Performance data are based on vendor’s datasheet. The actual performance number may vary based on testing environment.
26
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 26 AreaFeatures Cisco ISA550W Cisco ISA570W Cyberoam CR15wi Cyberoam CR25wi Cyberoam CR50ia Network Services WAN FailoverYes Dynamic Routing ProtocolRIPv1/v2 RIPv1&v2, OSPF, BGP Policy-Based RoutingYes No Advanced NATYes DHCP ServerYes IP to MAC BindingYes VLAN SupportYes LAN Switching Support Yes (Including SPT) No Rate-Limiting (WAN) Yes (App-Based Planned) Yes Traffic Prioritization— Queuing (WAN) SP, WRR, LLQ Yes Traffic Shaping (WAN)No LAN QoS (802.1p CoS/ DSCP Based) Queuing with SP, WRR, LLQ No Wireless QoS—802.1e (WMM)Yes No WPS (Wi-Fi Protected Setup)Yes No VRRPYes No Traffic Meter on WANYes No
27
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 27 Cisco ISA500 supported by Cisco-hosted cloud management services—OnPlus, enables partners to manage entire customer’s networks, not just security devices Cisco OnPlus with “pay as you go” pricing model makes partner to start managed service offerings easily—no upfront cost and hassle to maintain network management appliance at its premises AreaFeatures Cisco ISA550W Cisco ISA570W Cyberoam CR15wi Cyberoam CR25wi Cyberoam CR50ia Management Device GUIYes Configuration Wizards Yes Centralized Management Tool Cloud-Based Tool—OnPlus Hardware Appliance (for Security Only) Automatic New Firmware Detection and Alerting Yes No Mounting Options Rack MountYes No Yes SupportHours 8x5 + Web- Based Support Community 8x5—Extra Subscription Required ($)
28
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 28 Cisco is the market share leader in overall network appliance security market* Cisco is the top player in multiple Magic Quadrant, including web and email security, where we play in** Breadth of product portfolio in all network areas, not just security Dedicated support teams for SMB market simplifying solution supports Company (channel strategy) and financial stability—$45B+ revenue; 25+ years in industry Leadership, Growth, Stability Sources: *Infonetics **Gartner MQ Report 2011
29
Thank you.
30
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 30 Simplicity Design of Cisco ISA500 Reduces Time and Cost to Complete a Sale Cisco OnPlus Solution tested Built-in configuration wizards Easy to navigate Simplified flow Consistent features set SMB focused features One license to manage Simplified SKUs $ Time Spent Education Customer Deployment $ $ $ $ Understand Product Offering (Partner Self) Setup $ $ Maintenance Support Revenue from Sell Profitability Cost/Expense to Sell ~ ~ Tasks to Sell
31
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 31
32
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 32 VPN Throughput is quite poor compared to Cisco ISA500
33
© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 33 Licensing Cyberoam has extra costs for ‘optional’ security services, requiring subscriptions that license services from 3 rd parties Anti-virus/anti-malware (Kaspersky) Gateway anti-spam services (CommTouch) IPSec VPN—extra licensing modules ISA500 licensing is simple, affordable, and easier to install (included in base cost of system—no extras) Reporting Cyberoam reporting and management tools also require purchase of additional central management appliances and licensing ISA500 offers similar functionality through Cisco OnPlus with more cost effective and scalable remote management/reporting
Similar presentations
© 2025 SlidePlayer.com. Inc.
All rights reserved.