TrustRadius
Cisco's IronPort is a web security appliance.https://media.trustradius.com/product-logos/40/Lo/K98QU0JXBBB2.jpegSuccessful project with great ROI when switching to Web Security ApplianceWe used Cisco IronPort Web Security Appliance to provide filtered Internet access for the public and had several levels of filtering "strictness" available depending on the age of the patron involved. The choice of filter level was handled by the ILS and we did this by using different proxy server ports for different filtering levels. The primary purpose was to block offensive web sites from various age groups. We had to tweak the rules a little at the beginning, but we've found at this point that it is very rare to need to whitelist or blacklist sites. The web site categories worked very well for us and were accurate.,SMA gave us central control over multiple servers, simplifying management. Performance of the Appliance VM exceeded that of our old physical appliance-based solution. Convenient licensing for virtualized environments that allows easy scaling.,The configuration paradigm takes a bit of getting used to. Building out multiple similar VMs requires more manual configuration than I would have hoped. I wish you could easily have a template VM for your organization. I think the SSL interception configuration needs to be integrated with standard HTTP config. HTTPS is too prevalent to be a separate thing. We had to disable the reputation score based filter. Too many false positives. Tickets related to the system dropped to near zero after disabling it.,9,We negotiated a deal for a 5-year license that was far cheaper than just upgrading the hardware for our previous system. This was a huge cost savings. The system has been reliable and hasn't taken much operational management. This saves staff time. Very few complaints from our users. End user satisfaction makes us happy!,Symantec WebFilter (formerly Blue Coat),VMware vCenter Server, VMware ESXi, SlackCisco IronPort Web Security Appliances a mustCurrently we use Cisco IronPort Web Security to secure 60K users from web based malware threats and to filter suspicious and non business related categories. This deployment has decreased the attack surface from our users downloading malicious files and has an agency we have reduced the amount of business confidential information from being leaked by combining the IronPort proxies with data loss prevention software.,Malware Protection Reducing business confidential leaks Blocking non business related websites,From time to time there are a lot of bugs Using AD authentication can at time be a challenge especially with Mac OS X computers Better reporting functions would help, we currently have to offload to a SIEM to provide this function.,9,Business productivity increased after deployment Security Posture increased Malware infections decreased over 60% after the first 90 days.,Websense, Forcepoint and Blue Coat Advanced Threat Protection,F5 BIG-IP, FireEye, Ixia Bypass SwitchesCisco WSA is a solid productCisco IronPort Web Security Appliance is a solid device. Deploying it came with a significant amount of white water because we chose to block uncategorized sites. We had to manually set or request categories for local websites. Blocking uncategorized sites has saved us from countless threats including several close calls with ransomware.,Licensing is simple and requires minimal effort. Its the best of any Cisco product. After fully configuring, the appliance requires minimal administration. New features are often included in updates.,The categories provided are not as granular as some competitors, like Websense. Cisco does not have as many resources devoted to categorizing websites as some competitors, like Websense. New features require administrators to pay attention to updates. New features are disabled by default.,10,Cost savings over more expensive products that offer more granularity when not needed. Interacts with other Cisco security products.,WebsenseCisco IronPort - save my timeWe were using Cisco IronPort Web Security Appliance for years in our company. The product was used as a web filter across the whole organization (main and 4 branch offices). The Internet for all branches was routed to the main office over the MPLS tunnel. There was just one Cisco IronPort WSA covering all our web traffic.,Appliance working in a transparent mode without any additional software installed on the endpoints. High performance, easy integration with other network systems and servers. Customization of interaction with end users. Possibility to configure filter policies based on subnet information and easy sync with AD users groups, once configured and no need to add or modify any settings within Cisco appliance. Everything manageable with regular AD stuff. Timely updates, upgrades and high clarified support.,More flexible reporting. Cloud solution to protect corporate laptops used out of corporate network. More flexible DLP functionality.,8,Security! Security! Security! We are financial company that work with very sensitive information. A lot of unsafe traffic was blocked on the Cisco IronPort WSA over years of using it. We did not earn on it but absolutely sure that we did not lose 'gazillion' of dollars being infected or scammed. Easy to configure and use, no need to teach new personnel how work with this product (hopefully saving time = saving money). Unfortunately the price of license subscription made financial managers push IT dept. to look for something cheaper.,Sophos Web Content Filtering and McAfee Web Gateway,Sophos Secure Web Gateway, Sophos Endpoint Protection, Symantec Backup Exec, Lansweeper, WhatsUp Gold
Unspecified
Cisco IronPort Web Security Appliance
16 Ratings
Score 8.4 out of 101
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow'>trScore algorithm: Learn more.</a>TRScore

Cisco IronPort Web Security Appliance Reviews

Cisco IronPort Web Security Appliance
16 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow'>trScore algorithm: Learn more.</a>
Score 8.4 out of 101
Show Filters 
Hide Filters 
Filter 16 vetted Cisco IronPort Web Security Appliance reviews and ratings
Clear all filters
Overall Rating
Reviewer's Company Size
Last Updated
By Topic
Industry
Department
Experience
Job Type
Role

Reviews (1-4 of 4)

  Vendors can't alter or remove reviews. Here's why.
No photo available
April 29, 2019

Cisco IronPort Web Security Appliance Review: "Successful project with great ROI when switching to Web Security Appliance"

Score 9 out of 10
Vetted Review
Verified User
Review Source
We used Cisco IronPort Web Security Appliance to provide filtered Internet access for the public and had several levels of filtering "strictness" available depending on the age of the patron involved. The choice of filter level was handled by the ILS and we did this by using different proxy server ports for different filtering levels. The primary purpose was to block offensive web sites from various age groups. We had to tweak the rules a little at the beginning, but we've found at this point that it is very rare to need to whitelist or blacklist sites. The web site categories worked very well for us and were accurate.
  • SMA gave us central control over multiple servers, simplifying management.
  • Performance of the Appliance VM exceeded that of our old physical appliance-based solution.
  • Convenient licensing for virtualized environments that allows easy scaling.
  • The configuration paradigm takes a bit of getting used to.
  • Building out multiple similar VMs requires more manual configuration than I would have hoped. I wish you could easily have a template VM for your organization.
  • I think the SSL interception configuration needs to be integrated with standard HTTP config. HTTPS is too prevalent to be a separate thing.
  • We had to disable the reputation score based filter. Too many false positives. Tickets related to the system dropped to near zero after disabling it.
Based on the platforms I have evaluated, I think the WSA is a great fit for any organization that needs a proxy server that provides control over what web sites are accessed or when they can be accessed. I think it is probably overkill if you simply need a proxy server for bandwidth savings or because you need to proxy general Internet access without extensive filtering needs.
Read this authenticated review
Alan Matson, CCNA:S, MCP profile photo
February 17, 2018

Review: "Cisco IronPort Web Security Appliances a must"

Score 9 out of 10
Vetted Review
Verified User
Review Source
Currently we use Cisco IronPort Web Security to secure 60K users from web based malware threats and to filter suspicious and non business related categories. This deployment has decreased the attack surface from our users downloading malicious files and has an agency we have reduced the amount of business confidential information from being leaked by combining the IronPort proxies with data loss prevention software.
  • Malware Protection
  • Reducing business confidential leaks
  • Blocking non business related websites
  • From time to time there are a lot of bugs
  • Using AD authentication can at time be a challenge especially with Mac OS X computers
  • Better reporting functions would help, we currently have to offload to a SIEM to provide this function.
Cisco IronPort Web Security is well suited as an additional layer of security and to ensure business tasking and continuity. As with any organization a solid Web Security solution is needed and of the several solutions I have used the IronPort has the most flexibility for policies creation among the others.
Read Alan Matson, CCNA:S, MCP's full review
No photo available
March 21, 2018

Cisco IronPort Web Security Appliance Review: "Cisco WSA is a solid product"

Score 10 out of 10
Vetted Review
Verified User
Review Source
Cisco IronPort Web Security Appliance is a solid device. Deploying it came with a significant amount of white water because we chose to block uncategorized sites. We had to manually set or request categories for local websites. Blocking uncategorized sites has saved us from countless threats including several close calls with ransomware.
  • Licensing is simple and requires minimal effort. Its the best of any Cisco product.
  • After fully configuring, the appliance requires minimal administration.
  • New features are often included in updates.
  • The categories provided are not as granular as some competitors, like Websense.
  • Cisco does not have as many resources devoted to categorizing websites as some competitors, like Websense.
  • New features require administrators to pay attention to updates. New features are disabled by default.
For environments with minimal needs for filtering by category, this is a great product. If the need is for tight nuanced control of cloud based applications, this might not do the job. For environments with a heavy Cisco presence in the security stack, this product offers some synergy with features like AMP.
Read this authenticated review
Valery Mezentsau profile photo
August 11, 2017

Cisco IronPort Web Security Appliance Review: "Cisco IronPort - save my time"

Score 8 out of 10
Vetted Review
Verified User
Review Source
We were using Cisco IronPort Web Security Appliance for years in our company. The product was used as a web filter across the whole organization (main and 4 branch offices). The Internet for all branches was routed to the main office over the MPLS tunnel. There was just one Cisco IronPort WSA covering all our web traffic.
  • Appliance working in a transparent mode without any additional software installed on the endpoints. High performance, easy integration with other network systems and servers. Customization of interaction with end users.
  • Possibility to configure filter policies based on subnet information and easy sync with AD users groups, once configured and no need to add or modify any settings within Cisco appliance. Everything manageable with regular AD stuff.
  • Timely updates, upgrades and high clarified support.
  • More flexible reporting.
  • Cloud solution to protect corporate laptops used out of corporate network.
  • More flexible DLP functionality.
For big enterprise companies it could be too difficult to find a better solution then Cisco WSA because of high performance, possibility to increase number of appliances, load balancing and real enterprise support, but for small and mid size companies that are not (or could be not) requiring 100% of up-time and performance there could be more cheaper (but still good enough) solutions with enough functionality.
Read Valery Mezentsau's full review

Cisco IronPort Web Security Appliance Scorecard Summary

About Cisco IronPort Web Security Appliance

Cisco's IronPort is a web security appliance.
Categories:  Web Security Gateways

Cisco IronPort Web Security Appliance Technical Details

Operating Systems: Unspecified
Mobile Application:No