Cisco Secure Web Appliance (formerly Cisco Web Security Appliance [WSA]), powered by Cisco Talos, protects by automatically blocking risky sites and testing unknown sites before allowing users to link to them, helping with compliance. It is available models S690, S390, and S190.
N/A
Skyhigh Secure Web Gateway
Score 8.0 out of 10
N/A
Skyhigh Secure Web Gateway (replacing the former McAfee Web Gateway) is presented by the vendor as high-performance on-premises web security, that can be deployed as dedicated hardware or a virtual machine. With it, users can enforce internet-use policies, analyze the nature and intent of content and active code entering the network, and use DLP technology to scan outbound traffic.
McAfee Web Gateway can be much more expensive, we tested it and it really is excellent in the usefulness it offers; however, the team did not adapt very well to how expensive the tool can be. On the other hand, Cisco Secure Web Appliance offers much more comfortable payment …
We used several other products (evaluation and production) in the past and are testing some of them now. According to my experience I can say that Cisco IronPort Web Security Appliance has a lot of positive moments. It doesn't mean that other products worse or do not have such …
The configuration of the Cisco Secure Web Appliance of even worse than the one of Skyhigh's Secure Web Gateway. The detecction rate was slightly higher but the visibility worse.
We have both scenarios where we can describe that. For example, in the HQ, where we have about 3,000 users, Cisco IronPort Web Security Appliance is the ideal solution, because we can consolidate all the Internet access, policies, rules, etc. in the same box. However, if you have small offices with a few users, it's hard to justify one big and expensive box that could cost more than the whole office infrastructure.
McAfee Web Gateway is best suited for all types of organizations if they wan to achieve the security for their users as it has the large intel database as well. The best part is its flexible hybrid deployment methods- it can be deployed on premises (hardware and virtual), in the cloud, or both for the high availability.
I think that the interface could need updates to adapt it to a much more current system, achieve quick access to necessary tools and adapt the platform to a much more customizable and comfortable system to work with.
It is undoubtedly a platform that is worth having, however, the license costs could be better adjusted to small businesses so that it can be accessed more easily.
It could be a bit complex to use, the use of codes is quite extensive, it could be adjusted to something much more practical but just as efficient.
Because it's one of those products you almost don't realize it exists from the end user. From the administrator perspective, you can do everything on its web interface and it's very intuitive to manage, once you know the concepts behind identities, acls, etc. Also, once you build the control structure, I mean, you link 'local' groups with your own Active Directory groups, as we did here, you don't need to be managing those things on the appliance itself.
Excellent products based on all the needs we had. Most of our use cases has been able to implement. DLP is kind of difficult to implement but possible. However you needs a big team to handle the tools as it's capabilities and management is complex. Nevertheles you can find a way to leverage all the funcionality when needed.
Our experience with Cisco's support was terrible. Other than the fact that they don't respond to service-related emails with urgency, they also keep on changing the policies that affected us. Recently, they came up with a new look for the same software, which was insanely slow. Renewal of keys for the old interface took months. Overall, the support was not very friendly from the users' point of view.
At home I have a McAfee service that does similar tasks and helps manage the users of my internet. McAfee seems more user friendly and easier to set exceptions.
The configuration of the Cisco Secure Web Appliance of even worse than the one of Skyhigh's Secure Web Gateway. The detecction rate was slightly higher but the visibility worse.
Security! Security! Security! We are financial company that work with very sensitive information. A lot of unsafe traffic was blocked on the Cisco IronPort WSA over years of using it. We did not earn on it but absolutely sure that we did not lose 'gazillion' of dollars being infected or scammed.
Easy to configure and use, no need to teach new personnel how work with this product (hopefully saving time = saving money).
Unfortunately the price of license subscription made financial managers push IT dept. to look for something cheaper.