Cisco Secure Web Appliance (formerly Cisco Web Security Appliance [WSA]), powered by Cisco Talos, protects by automatically blocking risky sites and testing unknown sites before allowing users to link to them, helping with compliance. It is available models S690, S390, and S190.
N/A
Mimecast Advanced Email Security
Score 8.8 out of 10
N/A
The Mimecast Secure Email Gateway is a messaging security option with anti-spam / anti-malware, data loss prevention, large file send, and other features, from UK company Mimecast.
Cisco Web Security Appliance (WSA) is a potent tool. When it comes to handling emails and links from blacklisted IP, Cisco Web Security Appliance (WSA) does a better job. However, considering the price to performance ratio, Mimecast is way ahead of Cisco Web Security Appliance …
We have both scenarios where we can describe that. For example, in the HQ, where we have about 3,000 users, Cisco IronPort Web Security Appliance is the ideal solution, because we can consolidate all the Internet access, policies, rules, etc. in the same box. However, if you have small offices with a few users, it's hard to justify one big and expensive box that could cost more than the whole office infrastructure.
Mimecast is good when you are needing a basic email security platform. It does some basic things really well, but when you start hitting some advanced needs, it lacks. Mimecast does not do a good job with BEC detection. Mimecast does spam filtering alright, but it could be much better. It really doesn't care about gmail or other external addresses. It doesn't check for age of accounts, etc.
I think that the interface could need updates to adapt it to a much more current system, achieve quick access to necessary tools and adapt the platform to a much more customizable and comfortable system to work with.
It is undoubtedly a platform that is worth having, however, the license costs could be better adjusted to small businesses so that it can be accessed more easily.
It could be a bit complex to use, the use of codes is quite extensive, it could be adjusted to something much more practical but just as efficient.
The Admin Management console is absurdly complicated. For every first time we wanted to setup we've had to call their support for assistance. Support is quick and fantastic but it's so difficult to do anything yourself. They seem to have gone out of their way to call features unique things instead of using standard language from other providers so you as an IT professional know what you're looking for to setup.
They have lots of KB articles, which their support will point you to. They are written on the most basic level and don't actually provide the help you need. For example, the KB page will tell you the list of options on the page... but not actually tell you what you do, why you might use them, or define their terminology.
Their email threat management system has several nice features. One of the features available is that it will rewrite links in emails so that users click the link and it sandboxes the link, testing it on their server space and the user sees it there. This means the actual link in the email gets changed to the address of one of their servers. As a law firm, the EXACT LINKS are important to maintain in our communications and editing actual data from our clients to point to a Mimecast server is an unacceptable practice. I wish they had an alternative that did not edit the link itself on the page.
Because it's one of those products you almost don't realize it exists from the end user. From the administrator perspective, you can do everything on its web interface and it's very intuitive to manage, once you know the concepts behind identities, acls, etc. Also, once you build the control structure, I mean, you link 'local' groups with your own Active Directory groups, as we did here, you don't need to be managing those things on the appliance itself.
Yes using the same administration console is good, as user that you have assigned limited functionality to the console, they are already familiar with it when you increase their functionality. The new portal does take a bit of getting used to, but i can see that it is an improvement on the old version.
Our experience with Cisco's support was terrible. Other than the fact that they don't respond to service-related emails with urgency, they also keep on changing the policies that affected us. Recently, they came up with a new look for the same software, which was insanely slow. Renewal of keys for the old interface took months. Overall, the support was not very friendly from the users' point of view.
When calling them you get best in the world customer services but as previously mentioned their online community and capabilities are a bit lacking. They want you to log into their portal to see updates on issues (vs. using a public facing service) and I rarely find the answers to my issues in electronic format. Their online presence is only helpful with the simplest of issues.
At home I have a McAfee service that does similar tasks and helps manage the users of my internet. McAfee seems more user friendly and easier to set exceptions.
Previously we have only used the default on-premise exchange that comes with SBS. This was very simple and only provided basic filtering of spam and junk mail. We weren't able to filter impersonation mail or emails with malicious code
Security! Security! Security! We are financial company that work with very sensitive information. A lot of unsafe traffic was blocked on the Cisco IronPort WSA over years of using it. We did not earn on it but absolutely sure that we did not lose 'gazillion' of dollars being infected or scammed.
Easy to configure and use, no need to teach new personnel how work with this product (hopefully saving time = saving money).
Unfortunately the price of license subscription made financial managers push IT dept. to look for something cheaper.
Reasonably priced solution, even for a small business like ours.
It's hard to put a figure on our ROI - I would just say we feel like we've gotten our money's worth with the advanced email protection we receive. We have definitely avoided many potentially dangerous emails since we've implemented this solution.
