Cisco Secure Web Appliance (formerly Cisco Web Security Appliance [WSA]), powered by Cisco Talos, protects by automatically blocking risky sites and testing unknown sites before allowing users to link to them, helping with compliance. It is available models S690, S390, and S190.
N/A
Symantec Edge Secure Gateway
Score 4.0 out of 10
N/A
Symantec Secure Web Gateway (SWG) protects organizations across the web, social media, applications, and mobile networks. SWG acts as a proxy between users and the internet to identify malicious websites and payloads and to control access to sensitive content. SWG solutions consolidate a broad feature-set to authenticate users, filter web traffic, identify cloud application usage, provide data loss prevention, deliver threat prevention, and ensure visibility into encrypted traffic.
Based on the platforms I have evaluated, I think the WSA is a great fit for any organization that needs a proxy server that provides control over what web sites are accessed or when they can be accessed. I think it is probably overkill if you simply need a proxy server for bandwidth savings or because you need to proxy general Internet access without extensive filtering needs.
It does a great job of filtering emails based on IP reputation. This feature works particularly very well. Cisco has a vast database of IP reputation scores and therefore offers very few false positives and negatives.
It checks each email thoroughly without any compromise of privacy. Any malicious link present in the body of the email makes its way to the quarantine. The IP reputation scores also help in this case.
In conjunction with Active Directory, we can allow or deny access to the internet very quickly. We can also determine the level of access to the internet.
To satisfy our executive requirements, we can provide regular reports on internet usage.
On occasion, content analysis needs some tweaking. Specifically, when huge files our downloaded.
For our organization using cloud-based applications and services is very discouraged.
However, the universe seems to be trending towards cloud-based offerings.
It may be reassuring if Symantec ProxySG and Advanced Secure Gateway (ASG) could enhance protection in dealing with cloud services, particularly in protecting data.
Because it's one of those products you almost don't realize it exists from the end user. From the administrator perspective, you can do everything on its web interface and it's very intuitive to manage, once you know the concepts behind identities, acls, etc. Also, once you build the control structure, I mean, you link 'local' groups with your own Active Directory groups, as we did here, you don't need to be managing those things on the appliance itself.
Our experience with Cisco's support was terrible. Other than the fact that they don't respond to service-related emails with urgency, they also keep on changing the policies that affected us. Recently, they came up with a new look for the same software, which was insanely slow. Renewal of keys for the old interface took months. Overall, the support was not very friendly from the users' point of view.
We have submitted support request to Symantec ProxySG and Advanced Secure Gateway (ASG). In all cases, responses have been timely, and very comprehensive.
The support staff is very knowledgeable and does not hesitate to involve expert resources as required.
We have never had an unsolved case with Symantec ProxySG and Advanced Secure Gateway (ASG).
Considering we're with Cisco IronPort Web Security Appliances for the last 9 years, as I stated, we don't have too much experience with other producs. What I can say is that in the past, we evaluated Websense before it became Forcepoint and we also used MS ISA Server for webfilter. As you may imagine, IronPort is a very very superior product.
Having a much safer work system has given us the guarantee and security of always staying out of danger.
The prevention system is important for us and always keeping our devices, web and emails free of any malicious agent has allowed us an excellent workflow, without distractions or inconvenience in the development of projects.
Thanks to the fact that we have kept our work system safe, we have saved ourselves a lot of inconvenience, time spent, avoiding equipment damage, payments to solve problems, among many other problems that thanks to Cisco Secure Web Appliance we have been able to solve.
With the advent of the Symantec ProxySG and Advanced Secure Gateway (ASG), we have reduced by 95% the number of internal security incidents and events.
As a result, we have reduced the effort and cost of investigating security incidents.
Knock on wood, as a result, and we have never had any data or security breaches.
