Cisco ISA500 Series
Competitive Selling
Against SonicWALL
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
1
• Vendor data used in this documentation are collected from
public domains
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
2
SuperMassive
E-Class NSA Series
NSA Series
TZ Series
TZ105, TZ205, TZ215 (New Model—Launched CY12)
TZ100, TZ200, TZ210 (Old Model—Launched ~CY09)
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
3
• Better security—performance and quality
• Easy of use with simplicity design
• Cost saving with tested Cisco Solution Integration
• Solution portfolio offerings
• Rich routing and switching capabilities at its class
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
4
• Security threats change dynamically
• Threat analysis needs to keep up with the change in time
• Cisco SIO—an extensive security analysis system, provides unparalleled global threat
intelligence for ISA500 to prevent threats and attacks in time
Cisco SIO
• 700k+ sensors all over the globe
• 5 billion web requests per day
• 35% of global email traffic examined
SonicWALL R&D Investment
• 295 employees in R&D for the
entire company
• Total company R&D investment is
$38M in CY09
• Millions of live security data
feeds collected
• 8 Millions of security updates
• 500+ security analysts (PhD’s, CCIEs)
• $100M+ R&D investment within SIO
Source: Company 10-K Report 2009
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
5
• Security services not just firewall are expected to be enabled on a UTM device to protect
businesses from multi-threats
• True performance that businesses will experience is when security services are enabled
Cisco
Performance
(Source: Datasheet)
SonicWALL
ISA550
ISA570
TZ105
TZ205
TZ215
Firewall Throughput
200 Mbps
500 Mbps
200 Mbps
500 Mbps
500 Mbps
VPN Throughput
75 Mbps
130 Mbps
75 Mbps
100 Mbps
130 Mbps
Anti-Virus Throughput
50 Mbps
80 Mbps
40 Mbps
60 Mbps
70 Mbps
IPS Throughput
60 Mbps
90 Mbps
60 Mbps
80 Mbps
110 Mbps
UTM Throughput
45 Mbps
75 Mbps
25 Mbps
40 Mbps
60 Mbps
• Despite recent introduction of its new TZ models, SonicWALL security service
performances are lower than Cisco ISA500’s
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
6
Cisco ISA500
SonicWALL
• Easy to use navigation interface
• Cumbersome to navigate
• Structured organization
• Sporadic navigation experiences
Total 10 Navigation
Sections and All
Are Observable in
One Window
 Learnability
 Efficiency
 Memorability
• High learning
curve
?
• Inefficient
• Error prone
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
7
Cisco ISA500
SonicWALL
• One single place to enable multiple
• User needs to navigate through
security services
• One mouse click to enable a
multiple pages and options to enable
security services
threat protection
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
8
• Optimized for solution deployment and lower operational cost
Example of Tested Devices:
SPA525G, SPA525G2, Cisco
ASA5505, Cisco ISR 800,
Cisco ASR1004, Cisco UC500,
UC320, Cisco SA500, Cisco
RV 42, Cisco RV82, SPA100,
SPA100, Cisco 100/200/300
Switch, ESW, Catalyst
2960/3750, AP500, OnPlus
© 2012 Cisco and/or its affiliates. All rights reserved.
ISA500
Cisco Confidential
9
Cisco
SonicWALL
• Eight product SKUs to understand,
• 50+ product SKUs to understand,
manage, and start selling
• Consistent feature sets
across models
• “Pay as you go” management
solution to start managed
service offerings
As low as $250 to start manage
a customer using Cisco OnPlus
manage, and start selling
• Inconsistent feature sets
across models
• Multiple licenses to manage
• Need upfront cost to start managed
service offerings
Device management appliance starts
at ~$2000
Requires self hosting and management
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
10
$
Simplicity Design of Cisco
ISA500 Reduces Time and
Cost to Complete a Sale
Revenue from Sell
• Cisco OnPlus
~
Profitability
• Built-in configuration wizards
Cost/Expense to Sell
$
$
Tasks to Sell
$
$
$
$
• Solution tested
Support
Maintenance
Deployment
Setup
• Easy to navigate
• Simplified flow
• Consistent features set
• SMB focused features
Education Customer
• One license to manage
Understand Product Offering (Partner Self)
• Simplified SKUs
Time Spent
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
11
Cisco
SonicWALL
Switches
Wireless
Voice Gateway
100,200,300, 500
Stackable Series,
Catalyst 2900, etc.
100, 300 Series
AP500,
AP1100/1200
BE3000, ISR CME
SPA100/ATA, etc.
Router
IP Phone
RV100, 200, ISR800,
ISR1900, etc.
SPA300, SPA500,
7900, etc.
Primarily offers
security products
with very limited
wireless and switch
product options
Security
SA500, ISA500,
ASAS5505, etc.
Network Management
OnPlus, CCA, FindIT, Office Manager
• For Cisco partners, ISA500 offers an additional solution selling opportunity
without complicating support models
• For new Cisco partners, the breadth of Cisco products provides growth
opportunity for partners without extra efforts to develop new vendor relationship
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
12
Cisco
Advantages
Superior
Internet
Security
Solution
Easy to Use
and Fast
to Deploy
(Lower OpEx)
Cisco ISA500
• Superior security threat protections by
unrivaled global security threat
intelligences from Cisco SIO
• Security R&D investment is only a
small subset of Cisco’s
• Lower UTM performance
• Higher security service (UTM)
performance
• Easy to navigate, simplified setup flow
• Cumbersome navigation
• Interoperability tested with other
• More steps required to setup services
Cisco products
• Simplified packaging—Eight SKUs,
one license only, consistent features
Low Cost to
Adopt and Start
SonicWALL TZ Series
• Manageable by Cisco hosted cloud-
based services—OnPlus/Advanced
Security Services
• Pay as you go pricing model with
• Complicated packaging
• Requires upfront cost ($7000+ for
GSM security appliance) and can only
manage security solution
• Requires resource to host and manage
its management appliance
Cisco OnPlus
More Growth
Opportunities
• Breadth of Cisco network solution
© 2012 Cisco and/or its affiliates. All rights reserved.
portfolio for great cross-sell opportunity
• Offers primary security only with few
options for AP products
Cisco Confidential
13
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
14
Area
Interfaces
Cisco
ISA550
Cisco
ISA570
SonicWALL
TZ105
SonicWALL
TZ205
SonicWALL
TZ215
WAN
Interface
2 (GE)
2 (GE)
2 (FE)
2 (GE)
2 (GE)
LAN
Interface
Up to 6 (GE)
Up to 9 (GE)
Up to 4 (FE)
Up to 4 (GE)
Up to 6 (GE)
DMZ
Interface
Yes
Yes
Yes
Yes
Yes
802.11 Wi-Fi
(in Wireless
Model Only)
Yes
Yes
Yes
Yes
Yes
Features
• Cisco ISA500 offers more high-speed connectivity than SonicWALL TZ Series
Faster application performance
Better investment protections
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
15
Features
Cisco
ISA550
Cisco
ISA570
SonicWALL
TZ105
SonicWALL
TZ205
SonicWALL
TZ215
Web Threat Protection
Yes (Powered by Cisco
Security Intelligence
Operation (SIO))
Yes (Powered by Cisco
Security Intelligence
Operation (SIO))
Yes
Yes
Yes
Yes (Powered by
Cisco SIO)
Yes (Powered by
Cisco SIO)
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes (Powered by
Cisco SIO)
Yes (Powered by
Cisco SIO)
No
No
No
Yes
Yes
Yes
Yes
Yes
Yes (Powered by
Cisco SIO)
Yes (Powered by
Cisco SIO)
Yes
Yes
Yes
Application Control
Yes
Yes
No
No
Yes
Port-Based Access
Control (802.1x)
Yes
Yes
No
No
No
Area
Web URL Filtering
IPS
Security
Services
Network
Reputation Filter
Gateway Anti-Virus
Spam Filter
• Cisco reputation-based network filter allows business to drop malicious traffic early to save
device resource and improve security
• Be aware! Application control is not possible for all SonicWALL TZ customers
• Preventing authorized network access with Cisco port-based access control—great to
tighten business security in Teleworker deployment scenarios
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
16
Area
Performance*
VPN
Cisco
ISA550
Cisco
ISA570
SonicWALL
TZ105
SonicWALL
TZ205
SonicWALL
TZ215
Firewall
Throughput
200 Mbps
500 Mbps
200 Mbps
500 Mbps
500 Mbps
VPN Throughput
75 Mbps
130 Mbps
75 Mbps
100 Mbps
130 Mbps
Anti-Virus
Throughput
50 Mbps
80 Mbps
40 Mbps
60 Mbps
70 Mbps
IPS Throughput
60 Mbps
90 Mbps
60 Mbps
80 Mbps
110 Mbps
UTM Throughput
45 Mbps
75 Mbps
25 Mbps
40 Mbps
60 Mbps
Site-to-Site
VPN Tunnel
25
100
5
10
20
IPSec VPN
Client Support
10
75
5
10
25
SSL VPN
Client Support
10
50
5
10
10
Features
• Cisco ISA500 provides superior security performance and VPN scalability than SonicWALL
TZ series
• Cisco ISA500—great for businesses looking for speed or growth
*Performance data are based on vendor’s datasheet. The actual performance number may vary based on testing environment.
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
17
Cisco
ISA550
Cisco
ISA570
SonicWALL
TZ105
SonicWALL
TZ205
SonicWALL
TZ215
Yes
Yes
Yes
Yes
Yes
RIPv1/v2
RIPv1/v2
RIP/OSPF
RIP/OSPF
RIP/OSPF
Advanced NAT
Yes
Yes
Yes
Yes
Yes
DHCP Server
Yes
Yes
Yes
Yes
Yes
LAN—Trunking
Yes
Yes
VLAN Tagging
Only
VLAN Tagging
Only
VLAN Tagging
Only
LAN—SPT
Yes
Yes
No
No
No
LAN—QoS (802.1p CoS/
DSCP Based)
Queuing with SP,
WRR, LLQ
Queuing with SP,
WRR, LLQ
No
No
No
Rate Limiting (WAN)
Yes (App-Based
Planned)
Yes (App-Based
Planned)
Yes (Support
App-Based)
Yes (Support
App-Based)
Yes (Support
App-Based)
WAN—Traffic Prioritization
SP, WRR, LLQ
SP, WRR, LLQ
Not Clear
Not Clear
SP, SRR—No LLQ
Traffic Meter on WAN
Yes
Yes
No
No
No
Traffic Shaping (WAN)
No
No
Not Clear
Not Clear
Yes
Wireless QoS—802.1e (WMM)
Yes
Yes
No
No
No
WPS (Wi-Fi Protected Setup)
Yes
Yes
No
No
No
VRRP
Yes
Yes
No
Proprietary
Approach
Proprietary
Approach
Area
Features
WAN Redundancy
Dynamic Routing Protocol
Network
Services
•
Cisco ISA500 with rich LAN switching capabilities makes LAN networks integration easier
•
Cisco ISA500 with rich QoS capabilities helps to optimize voice application experiences
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
18
Area
Management
Cisco
ISA550
Cisco
ISA570
SonicWALL
TZ105
SonicWALL
TZ205
SonicWALL
TZ215
Device GUI
Yes
Yes
Yes
Yes
Yes
Configuration
Wizards
Yes
Yes
Yes
Yes
Yes
Centralized
Management
Tool
Cloud-Based
Tool—OnPlus
Cloud-Based
Tool—OnPlus
Hardware
Appliance (for
Security Only)
Hardware
Appliance (for
Security Only)
Hardware
Appliance (for
Security Only)
Yes
Yes
No
No
No
Features
Automatic New
Firmware
Detection
and Alerting
• Cisco ISA500 supported by Cisco-hosted cloud management services—OnPlus, enables
partners to manage entire customer’s networks, not just security devices
• Cisco OnPlus with “pay as you go” pricing model makes partner to start managed service
offerings easily—no upfront cost and hassle to maintain network management appliance at
its premises
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
19
• Cisco is the market share leader in overall network appliance
security market*
• Cisco is the top player in multiple Magic Quadrant, including web
and email security, where we play in**
• Breadth of product portfolio in all network areas, not just security
• Dedicated support teams for SMB market simplifying solution supports
• Company (channel strategy) and financial stability—$45B+ revenue;
25+ years in industry
Leadership, Growth, Stability
Sources:
*Infonetics
**Gartner MQ Report 2011
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
20
Thank you.
OnPlus Adv. Security Services
Partner Value, Partner Margins
Security Reports
Network Usage
Reports
• Provisioning and
configuration
• VPN Wizard
• Alerting
Planning
• Etc.
OnPlus Baseline
• Dashboard View
• Device Discovery and
Topology, etc.
• Support contract status
Customer A
Site 1
•
•
•
•
Cfg Back-up and Restore
Firmware Upgrade
Event Monitoring
Etc.
OnPlus
Enable Partners to
Generate Security
Activity Reports and
Usage Reports
Capable of
Managing Multiple
Customers, Multiple
Sites, Discovering
3rd Party Devices
Customer B
ISA500
• Easy to start—Cisco hosted
• Easy to manage—single
interface for all technologies
Site 2
Connected Devices: Switch, Router, Security Appliance, NAS, Printer, iPad,
iPhone, etc.
© 2012 Cisco and/or its affiliates. All rights reserved.
• Profitability—enable managed
security service
Cisco Confidential
22
• Powered by Cisco enterprise grade security solutions: Cisco Security
Intelligence Operations (SIO), delivering unrivaled Web and email
security protections
• Purposed built and simplified design: Lowering learning curve, shortening
deployment time, reducing operational cost, and driving up profitability
• Integrated with rich routing and switching capabilities and tested with Cisco’s
other SMB product families: Optimized for solution deployment and lower
operational cost
• Simplified packaging: Simplifies buying, selling, and maintenance of the solution
• Manageable by Cisco hosted cloud management services, OnPlus and
Advanced Security Services: Enables partners to manage not just security
services but also the entire customer networks via one single interface
• “Pay as you go” pricing model for Cisco OnPlus and “free” for Advanced
Security Services: Enables partner to start managed service practice without
upfront investment
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
23