Cisco ISA500 Series Competitive Selling Against SonicWALL © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 1 • Vendor data used in this documentation are collected from public domains © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2 SuperMassive E-Class NSA Series NSA Series TZ Series TZ105, TZ205, TZ215 (New Model—Launched CY12) TZ100, TZ200, TZ210 (Old Model—Launched ~CY09) © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3 • Better security—performance and quality • Easy of use with simplicity design • Cost saving with tested Cisco Solution Integration • Solution portfolio offerings • Rich routing and switching capabilities at its class © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 4 • Security threats change dynamically • Threat analysis needs to keep up with the change in time • Cisco SIO—an extensive security analysis system, provides unparalleled global threat intelligence for ISA500 to prevent threats and attacks in time Cisco SIO • 700k+ sensors all over the globe • 5 billion web requests per day • 35% of global email traffic examined SonicWALL R&D Investment • 295 employees in R&D for the entire company • Total company R&D investment is $38M in CY09 • Millions of live security data feeds collected • 8 Millions of security updates • 500+ security analysts (PhD’s, CCIEs) • $100M+ R&D investment within SIO Source: Company 10-K Report 2009 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 5 • Security services not just firewall are expected to be enabled on a UTM device to protect businesses from multi-threats • True performance that businesses will experience is when security services are enabled Cisco Performance (Source: Datasheet) SonicWALL ISA550 ISA570 TZ105 TZ205 TZ215 Firewall Throughput 200 Mbps 500 Mbps 200 Mbps 500 Mbps 500 Mbps VPN Throughput 75 Mbps 130 Mbps 75 Mbps 100 Mbps 130 Mbps Anti-Virus Throughput 50 Mbps 80 Mbps 40 Mbps 60 Mbps 70 Mbps IPS Throughput 60 Mbps 90 Mbps 60 Mbps 80 Mbps 110 Mbps UTM Throughput 45 Mbps 75 Mbps 25 Mbps 40 Mbps 60 Mbps • Despite recent introduction of its new TZ models, SonicWALL security service performances are lower than Cisco ISA500’s © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 6 Cisco ISA500 SonicWALL • Easy to use navigation interface • Cumbersome to navigate • Structured organization • Sporadic navigation experiences Total 10 Navigation Sections and All Are Observable in One Window Learnability Efficiency Memorability • High learning curve ? • Inefficient • Error prone © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7 Cisco ISA500 SonicWALL • One single place to enable multiple • User needs to navigate through security services • One mouse click to enable a multiple pages and options to enable security services threat protection © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 8 • Optimized for solution deployment and lower operational cost Example of Tested Devices: SPA525G, SPA525G2, Cisco ASA5505, Cisco ISR 800, Cisco ASR1004, Cisco UC500, UC320, Cisco SA500, Cisco RV 42, Cisco RV82, SPA100, SPA100, Cisco 100/200/300 Switch, ESW, Catalyst 2960/3750, AP500, OnPlus © 2012 Cisco and/or its affiliates. All rights reserved. ISA500 Cisco Confidential 9 Cisco SonicWALL • Eight product SKUs to understand, • 50+ product SKUs to understand, manage, and start selling • Consistent feature sets across models • “Pay as you go” management solution to start managed service offerings As low as $250 to start manage a customer using Cisco OnPlus manage, and start selling • Inconsistent feature sets across models • Multiple licenses to manage • Need upfront cost to start managed service offerings Device management appliance starts at ~$2000 Requires self hosting and management © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10 $ Simplicity Design of Cisco ISA500 Reduces Time and Cost to Complete a Sale Revenue from Sell • Cisco OnPlus ~ Profitability • Built-in configuration wizards Cost/Expense to Sell $ $ Tasks to Sell $ $ $ $ • Solution tested Support Maintenance Deployment Setup • Easy to navigate • Simplified flow • Consistent features set • SMB focused features Education Customer • One license to manage Understand Product Offering (Partner Self) • Simplified SKUs Time Spent © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11 Cisco SonicWALL Switches Wireless Voice Gateway 100,200,300, 500 Stackable Series, Catalyst 2900, etc. 100, 300 Series AP500, AP1100/1200 BE3000, ISR CME SPA100/ATA, etc. Router IP Phone RV100, 200, ISR800, ISR1900, etc. SPA300, SPA500, 7900, etc. Primarily offers security products with very limited wireless and switch product options Security SA500, ISA500, ASAS5505, etc. Network Management OnPlus, CCA, FindIT, Office Manager • For Cisco partners, ISA500 offers an additional solution selling opportunity without complicating support models • For new Cisco partners, the breadth of Cisco products provides growth opportunity for partners without extra efforts to develop new vendor relationship © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 12 Cisco Advantages Superior Internet Security Solution Easy to Use and Fast to Deploy (Lower OpEx) Cisco ISA500 • Superior security threat protections by unrivaled global security threat intelligences from Cisco SIO • Security R&D investment is only a small subset of Cisco’s • Lower UTM performance • Higher security service (UTM) performance • Easy to navigate, simplified setup flow • Cumbersome navigation • Interoperability tested with other • More steps required to setup services Cisco products • Simplified packaging—Eight SKUs, one license only, consistent features Low Cost to Adopt and Start SonicWALL TZ Series • Manageable by Cisco hosted cloud- based services—OnPlus/Advanced Security Services • Pay as you go pricing model with • Complicated packaging • Requires upfront cost ($7000+ for GSM security appliance) and can only manage security solution • Requires resource to host and manage its management appliance Cisco OnPlus More Growth Opportunities • Breadth of Cisco network solution © 2012 Cisco and/or its affiliates. All rights reserved. portfolio for great cross-sell opportunity • Offers primary security only with few options for AP products Cisco Confidential 13 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 14 Area Interfaces Cisco ISA550 Cisco ISA570 SonicWALL TZ105 SonicWALL TZ205 SonicWALL TZ215 WAN Interface 2 (GE) 2 (GE) 2 (FE) 2 (GE) 2 (GE) LAN Interface Up to 6 (GE) Up to 9 (GE) Up to 4 (FE) Up to 4 (GE) Up to 6 (GE) DMZ Interface Yes Yes Yes Yes Yes 802.11 Wi-Fi (in Wireless Model Only) Yes Yes Yes Yes Yes Features • Cisco ISA500 offers more high-speed connectivity than SonicWALL TZ Series Faster application performance Better investment protections © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15 Features Cisco ISA550 Cisco ISA570 SonicWALL TZ105 SonicWALL TZ205 SonicWALL TZ215 Web Threat Protection Yes (Powered by Cisco Security Intelligence Operation (SIO)) Yes (Powered by Cisco Security Intelligence Operation (SIO)) Yes Yes Yes Yes (Powered by Cisco SIO) Yes (Powered by Cisco SIO) Yes Yes Yes Yes Yes Yes Yes Yes Yes (Powered by Cisco SIO) Yes (Powered by Cisco SIO) No No No Yes Yes Yes Yes Yes Yes (Powered by Cisco SIO) Yes (Powered by Cisco SIO) Yes Yes Yes Application Control Yes Yes No No Yes Port-Based Access Control (802.1x) Yes Yes No No No Area Web URL Filtering IPS Security Services Network Reputation Filter Gateway Anti-Virus Spam Filter • Cisco reputation-based network filter allows business to drop malicious traffic early to save device resource and improve security • Be aware! Application control is not possible for all SonicWALL TZ customers • Preventing authorized network access with Cisco port-based access control—great to tighten business security in Teleworker deployment scenarios © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 16 Area Performance* VPN Cisco ISA550 Cisco ISA570 SonicWALL TZ105 SonicWALL TZ205 SonicWALL TZ215 Firewall Throughput 200 Mbps 500 Mbps 200 Mbps 500 Mbps 500 Mbps VPN Throughput 75 Mbps 130 Mbps 75 Mbps 100 Mbps 130 Mbps Anti-Virus Throughput 50 Mbps 80 Mbps 40 Mbps 60 Mbps 70 Mbps IPS Throughput 60 Mbps 90 Mbps 60 Mbps 80 Mbps 110 Mbps UTM Throughput 45 Mbps 75 Mbps 25 Mbps 40 Mbps 60 Mbps Site-to-Site VPN Tunnel 25 100 5 10 20 IPSec VPN Client Support 10 75 5 10 25 SSL VPN Client Support 10 50 5 10 10 Features • Cisco ISA500 provides superior security performance and VPN scalability than SonicWALL TZ series • Cisco ISA500—great for businesses looking for speed or growth *Performance data are based on vendor’s datasheet. The actual performance number may vary based on testing environment. © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 17 Cisco ISA550 Cisco ISA570 SonicWALL TZ105 SonicWALL TZ205 SonicWALL TZ215 Yes Yes Yes Yes Yes RIPv1/v2 RIPv1/v2 RIP/OSPF RIP/OSPF RIP/OSPF Advanced NAT Yes Yes Yes Yes Yes DHCP Server Yes Yes Yes Yes Yes LAN—Trunking Yes Yes VLAN Tagging Only VLAN Tagging Only VLAN Tagging Only LAN—SPT Yes Yes No No No LAN—QoS (802.1p CoS/ DSCP Based) Queuing with SP, WRR, LLQ Queuing with SP, WRR, LLQ No No No Rate Limiting (WAN) Yes (App-Based Planned) Yes (App-Based Planned) Yes (Support App-Based) Yes (Support App-Based) Yes (Support App-Based) WAN—Traffic Prioritization SP, WRR, LLQ SP, WRR, LLQ Not Clear Not Clear SP, SRR—No LLQ Traffic Meter on WAN Yes Yes No No No Traffic Shaping (WAN) No No Not Clear Not Clear Yes Wireless QoS—802.1e (WMM) Yes Yes No No No WPS (Wi-Fi Protected Setup) Yes Yes No No No VRRP Yes Yes No Proprietary Approach Proprietary Approach Area Features WAN Redundancy Dynamic Routing Protocol Network Services • Cisco ISA500 with rich LAN switching capabilities makes LAN networks integration easier • Cisco ISA500 with rich QoS capabilities helps to optimize voice application experiences © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 18 Area Management Cisco ISA550 Cisco ISA570 SonicWALL TZ105 SonicWALL TZ205 SonicWALL TZ215 Device GUI Yes Yes Yes Yes Yes Configuration Wizards Yes Yes Yes Yes Yes Centralized Management Tool Cloud-Based Tool—OnPlus Cloud-Based Tool—OnPlus Hardware Appliance (for Security Only) Hardware Appliance (for Security Only) Hardware Appliance (for Security Only) Yes Yes No No No Features Automatic New Firmware Detection and Alerting • Cisco ISA500 supported by Cisco-hosted cloud management services—OnPlus, enables partners to manage entire customer’s networks, not just security devices • Cisco OnPlus with “pay as you go” pricing model makes partner to start managed service offerings easily—no upfront cost and hassle to maintain network management appliance at its premises © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 19 • Cisco is the market share leader in overall network appliance security market* • Cisco is the top player in multiple Magic Quadrant, including web and email security, where we play in** • Breadth of product portfolio in all network areas, not just security • Dedicated support teams for SMB market simplifying solution supports • Company (channel strategy) and financial stability—$45B+ revenue; 25+ years in industry Leadership, Growth, Stability Sources: *Infonetics **Gartner MQ Report 2011 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 20 Thank you. OnPlus Adv. Security Services Partner Value, Partner Margins Security Reports Network Usage Reports • Provisioning and configuration • VPN Wizard • Alerting Planning • Etc. OnPlus Baseline • Dashboard View • Device Discovery and Topology, etc. • Support contract status Customer A Site 1 • • • • Cfg Back-up and Restore Firmware Upgrade Event Monitoring Etc. OnPlus Enable Partners to Generate Security Activity Reports and Usage Reports Capable of Managing Multiple Customers, Multiple Sites, Discovering 3rd Party Devices Customer B ISA500 • Easy to start—Cisco hosted • Easy to manage—single interface for all technologies Site 2 Connected Devices: Switch, Router, Security Appliance, NAS, Printer, iPad, iPhone, etc. © 2012 Cisco and/or its affiliates. All rights reserved. • Profitability—enable managed security service Cisco Confidential 22 • Powered by Cisco enterprise grade security solutions: Cisco Security Intelligence Operations (SIO), delivering unrivaled Web and email security protections • Purposed built and simplified design: Lowering learning curve, shortening deployment time, reducing operational cost, and driving up profitability • Integrated with rich routing and switching capabilities and tested with Cisco’s other SMB product families: Optimized for solution deployment and lower operational cost • Simplified packaging: Simplifies buying, selling, and maintenance of the solution • Manageable by Cisco hosted cloud management services, OnPlus and Advanced Security Services: Enables partners to manage not just security services but also the entire customer networks via one single interface • “Pay as you go” pricing model for Cisco OnPlus and “free” for Advanced Security Services: Enables partner to start managed service practice without upfront investment © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 23