The user interface that I usually provide for the web app includes malware protection, URL filtering, data loss prevention (DLP), and advanced threat analytics. This is how I typically implement user cases for my client with the codec.
Cisco Secure Web Appliance S100v - BYOL
Cisco Systems, Inc.Reviews from AWS customer
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Advanced protection features offer robust security while integration process presents challenges
What is our primary use case?
What is most valuable?
The features I like most are the DLP functionality for web security and malware protection. The malware protection is especially impressive when it is integrated with other Cisco products like Cisco I and the firewall FTP. When I integrate these three products, it efficiently prevents malware, showing which endpoint is affected and providing a comprehensive view of the endpoint connections.
What needs improvement?
With the WebAssign integration, it is not easy when I am integrating policies within the company, especially with NAND and wireless policies. The challenge arises when traffic is blocked from either wireless or wired connections. Although implementing it as a standalone is quicker, integrating BYOD with Cisco I and FTB can be tiring. Once it is done correctly, the functionality and reports become valuable, although the implementation part can still be challenging.
For how long have I used the solution?
I have used the solution for about ten years now.
What do I think about the stability of the solution?
It is very stable, a product that I put on the network, and it will run for a very long time. I would rate it nine out of ten.
What do I think about the scalability of the solution?
It is very stable. I would rate it nine out of ten.
How are customer service and support?
I think I will give them a seven out of ten for WSA. The support is good but slow. Generally, the response time for resolving issues is getting slower. This applies to all products, including firewalls and next solutions. It is not what it used to be.
How would you rate customer service and support?
Neutral
How was the initial setup?
The setup is simple and quick. The web is already an appliance on standby. The only challenge is when I bring policies to the appliance and integrate it with my next solution and FTD. It can be tricky initially, but as I become more familiar, it becomes easier. However, it depends on the environment. Simpler environments make the setup very straightforward.
What's my experience with pricing, setup cost, and licensing?
Comparing with other products, Cisco has more functionality, but pricing is a challenge. Cisco is not a product for small companies due to its pricing. Cisco has been in business for a long time, requiring a significant investment.
Which other solutions did I evaluate?
I can provide it with BlueCards. BlueCards is where ReliVista plays a role. In terms of functionality, BlueCards is slightly off, however, I've heard good things about WSA. While comparing it with FTP and the firewall, it is improving and becoming more competitive in the market.
What other advice do I have?
I will give it a seven out of ten as the overall product rating. It is a good product, and as a Cisco partner, we sell many Cisco products.
Subscription-based with enhanced content control and filtering
What is our primary use case?
Cisco Web Security Appliance is used to secure users from malicious threats across the internet and applications they access on different cloud platforms. It is a dedicated solution for protecting users from various internet threats and provides a centralized dashboard for visibility and control over accessed apps.
What is most valuable?
The solution offers content filtering and micro-content controls, such as regulating the types of images and their resolution. It provides granular controls over media being accessed on social platforms, ensuring that content not in the company's interest is restricted.
What needs improvement?
The product is great, however, incorporating features offered by competitors would be beneficial. Competitors sometimes highlight features that Cisco products lack. Additional features like improved whitelisting and blacklisting of malicious websites could enhance the product.
For how long have I used the solution?
I have been using Cisco Web Security Appliance for several years, more than seven or eight, approximately eight or nine years.
What do I think about the scalability of the solution?
The solution is subscription-based, making scaling possible.
How are customer service and support?
Cisco offers intense and comprehensive technical support services, making it a strong selling point.
How would you rate customer service and support?
Positive
How was the initial setup?
The installation requires a skilled resource who understands the product technology and its features. Deployment is not straightforward due to the complexity of the functions and considerations involved.
What about the implementation team?
Cisco provides Mentored Installation Services through specialized service delivery partners to ensure proper deployment.
What's my experience with pricing, setup cost, and licensing?
Pricing is competitive and varies across sectors. Public sector clients receive good pricing, whereas enterprise or commercial clients might not find the pricing as favorable.
What other advice do I have?
I'd rate the solution eight out of ten.
Ensures security for remote workers
What is our primary use case?
We use the solution for web security. We have Netskope for DLP. We opted for the Cisco solution for its cost-effectiveness. We use all its features effectively to prevent unnecessary expenses.
We implemented Cisco Web Security Appliance to address the challenge of ensuring security for remote workers. Employees working from home operate outside the company's network, potentially exposing the organization to various risks as they access the internet directly. Without enforcing company policies, there's a heightened vulnerability to data breaches. We can extend protection to remote users by deploying Cisco Web Security Appliance, even when not connected to the company's network. This ensures that corporate data remains secure regardless of the user's location.
How has it helped my organization?
Cisco Web Security Appliance restricts access to illegitimate websites, including those containing pornography and categories like social media platforms like Facebook. Policies must be installed on endpoints to enforce these restrictions and assist users in accessing appropriate content.
What is most valuable?
The solution offers a range of security features, including Cloud-based policies and Key Security Bundles. It includes DNS certificate functionality. These features streamline security processes and provide comprehensive solutions within a single platform.
The DNS security feature is the most effective when users transition to remote work, as we are currently in a hybrid mode due to the COVID-19 pandemic. This hybrid mode involves working from home and occasionally reporting to the office.
What needs improvement?
The solution could provide seamless integration with other technologies. Cisco's strength lies in its reliable managed services, which address any issues promptly. It is not able to integrate with existing technologies.
The ISB component of KSB is weak, but its firewall capabilities and DNS are strong.
For how long have I used the solution?
I have been using Cisco Web Security Appliance for one year.
What do I think about the stability of the solution?
It is scalable and is a very effective solution in that regard. You can size it differently according to your needs, as there are various models available. When it comes to scalability, we address five key factors.
What do I think about the scalability of the solution?
The Cisco Web Security Appliance is indeed stable. While there have been occasional instances of instability, particularly during the August period, overall, its stability is commendable. The solution itself is robust and reliable.
How are customer service and support?
Customer support is very effective. They follow up to resolve any issues. They continuously inquire if there are any outstanding concerns. Their comprehensive approach, covering many solutions, including a 360-degree block-wise strategy, is excellent.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We tried using Cisco but faced issues, especially with DDoS attacks. There were delays, and our website started to crash because of the overload on their servers.
How was the initial setup?
Cisco manages the solution's setup. We purchased their managed services, so they continue to handle its management.
The complexity arises when deploying various web security solutions, such as Kaspersky, with Cisco Web Security Appliance. Sometimes, transitioning from one solution to another, like Kaspersky to Cisco, can bring certificate installation complexities.
If we opt for the Cloud version, implementation takes two months. On the other hand, deploying the on-premises solution usually takes three to four months.
What was our ROI?
The general investment in Cisco Web Security Appliance is relatively minimal. When considering its utility, the primary purpose is to enhance the layers of protection. If our endpoints are already secured, the justification for investment may seem less apparent. However, the significance of Web Security Appliance becomes evident in scenarios where breaches occur or security threats escalate. In such instances, the importance of investing in additional security measures becomes clear.
What's my experience with pricing, setup cost, and licensing?
What other advice do I have?
The Cisco Web Security Appliance provides DLP to organizations. It helps prevent the unauthorized transmission of sensitive information by blocking such attempts. Additionally, it safeguards against malware attacks, particularly on websites not authorized by our company. Its role in protecting us from malware is pivotal.
The organization itself handles the configuration and management of Cisco Web Security Appliance. Cisco assists in deploying and configuring the appliance and managing all associated services.
Integrating the Cisco Web Security Appliance with other solutions is quite challenging. For instance, when we tried to integrate Netscape KSP, we encountered difficulties retrieving logs. Additionally, our solution failed to interact with the Web Security Appliance. Overall, the integration process remains problematic, hindering the effectiveness of our security infrastructure.
We have both the cloud version and the on-premises version. For clients who require data sovereignty, we offer the on-premises version, which includes a data sovereignty tool. This allows them to enforce policies that prevent the transfer of logs to third-party data centres, ensuring compliance with their country's regulations.
Overall, I rate the solution a nine out of ten.
Though the product ensures a high ROI, the management capabilities require improvement
What is our primary use case?
I use Cisco Web Security Appliance in my company for proxy-related purposes.
What is most valuable?
The most valuable features of the solution are the functions of proxy for the users who use the internet and the security it offers against the not-so-secure web pages.
What needs improvement?
There are certain shortcomings related to the product's management capabilities, where improvements are required. The solution needs to provide better management of the category of web pages.
For how long have I used the solution?
I have three years of experience with Cisco Web Security Appliance. My company is a customer of the solution. I use the solution's previous or the previous to previous version.
What do I think about the stability of the solution?
Stability-wise, I rate the solution an eight out of ten.
What do I think about the scalability of the solution?
Scalability-wise, I rate the solution a seven out of ten.
Around 300 people in my company use the solution.
I use the solution every day in my company.
How are customer service and support?
At times, the product's technical support takes a long time to provide solutions.
I rate the technical support a six out of ten.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
I have experience with GFI KerioControl. I also have experience with other devices from Cisco. I have done some integration of the Cisco Web Security Appliance with other systems.
How was the initial setup?
I rate the product's initial setup phase a seven on a scale of one to ten, where one is a difficult setup phase, and ten is an easy setup phase.
The solution is deployed on an on-premises model.
It took quite a long time to implement the solution, maybe seven to eight months. The deployment phase took a few weeks.
Two or three specialists who are network administrators in my company were involved in the deployment and maintenance phases of the product.
What about the implementation team?
The product's reseller helped my company with the product's implementation phase.
What was our ROI?
From an ROI perspective, I rate the product a nine out of ten.
What's my experience with pricing, setup cost, and licensing?
I rate the product price a ten on a scale of one to ten, where one is low price and ten is high price.
Which other solutions did I evaluate?
During the evaluation phase, my company considered GFI KerioControl and Fortinet FortiProxy against Cisco Web Security Appliance.
What other advice do I have?
I rate the overall product a seven out of ten.
An user-friendly solution that offers environment protection
What is most valuable?
Cisco Web Security Appliance is user-friendly and easy to manage. It protects your environment while accessing the internet.
What needs improvement?
The tool needs to improve cloud-based decryption.
What do I think about the stability of the solution?
Cisco Web Security Appliance's stability is good.
What do I think about the scalability of the solution?
The product is scalable. We have 1500 to 2000 users.
How was the initial setup?
The tool's deployment is very straightforward. The only process that can take time is aligning the policies as per your use case.
What about the implementation team?
Getting a partner from Cisco to help with the deployment is good.
What was our ROI?
You can get a good ROI in the long run.
What's my experience with pricing, setup cost, and licensing?
The tool's licensing is yearly.
What other advice do I have?
I rate the product a ten out of ten.
The solution is easy to integrate and has excellent customer support, but it lacks a GUI-based troubleshooting feature
What is our primary use case?
We use Cisco Web Security Appliance as a forward proxy, and all the web requests to the web servers are filtered through it.
What is most valuable?
Cisco Web Security Appliance has very good security benefits for any company and is easy to integrate. The primary use of having a proxy is to hide the actual user from the open internet. We opted for Cisco Web Security Appliance because Cisco's TAC support is outstanding. It's good to have products from Cisco. All the network equipment, like the routers and firewalls, are usually from Cisco.
What needs improvement?
Cisco lacks a GUI-based troubleshooting feature compared to products by other vendors. There might be some instances where the proxy is blocking some genuine traffic. It could take a lot of troubleshooting with Cisco Web Security Appliance proxy, which could otherwise be easily identified by a GUI-based troubleshooting tool.
For how long have I used the solution?
I have been using Cisco Web Security Appliance for the last three years.
What do I think about the scalability of the solution?
Around 60 to 70 users are using Cisco Web Security Appliance in our organization.
How was the initial setup?
I haven't set it up, but I believe Cisco Web Security Appliance's initial setup is easy.
What other advice do I have?
I wouldn't recommend the solution to other users because Cisco has already announced the end of the light for the Cisco Web Security Appliance proxy. Cisco is no longer going to support it.
Overall, I rate Cisco Web Security Appliance a six out of ten.
It is an easy-to-scale solution with several valuable features
What is our primary use case?
We are using Cisco WSA as a proxy solution. We control Internet browsing so colleagues will access websites securely.
What is most valuable?
Cisco regularly upgrades features for the customer's security requirements. They've added new features to the product and upgraded the OS version so that users will get the latest security features. Cisco WSA's malware protection, AMP, and DNS security are valuable.
What needs improvement?
We are planning to migrate the solution from in-house to the cloud. We would like to see a security service head, where we can combine all the security into one solution.
For how long have I used the solution?
I have worked with the solution for approximately 14 years.
What do I think about the stability of the solution?
I rate the solution's stability an eight out of ten because it's used 24/7 in my organization.
What do I think about the scalability of the solution?
With the in-house solution, scalability depends on the fixed hardware you purchase. You would have to choose a particular-sized hardware based on the department. You must choose the right hardware box whether you want 2,000, 5,000, or 10,000 users. If you use the solution in a virtual environment, you can scale up by increasing the virtual box size. There is no limitation on the product's scalability.
I rate the in-house version a seven out of ten. When you move the same solution to a cloud, it scales properly because it's based on Umbrella. I rate the cloud solution's scalability a nine out of ten.
Thousands of users use the solution in my organization.
Which solution did I use previously and why did I switch?
We used Trend Micro before Cisco WSA. We switched to Cisco based on our security requirements and Cisco's features.
How was the initial setup?
I rate the initial setup an eight out of ten because it is straightforward.
When deploying the product, first of all, you need to understand the requirement for the security concerns before deploying it in an organization, which will take some time. After that, you install the software and create the policies to ensure your client is using a secure channel to access the Internet. You will need to refine policies based on the client's requirements. The process will take time to stabilize things for a new deployment. If the policies match the organization's, deploying the solution will take a couple of hours, not much more. We needed just one person for deployment and one person for maintenance and management.
What about the implementation team?
We deployed the product in-house on our server.
What's my experience with pricing, setup cost, and licensing?
I rate Cisco WSA a seven out of ten since it is costly. The price might be a problem for smaller businesses. There are no additional costs.
Which other solutions did I evaluate?
We evaluated Barracuda and other solutions.
What other advice do I have?
Cisco is already launching a new product with the latest features. We will migrate to that solution once they upgrade it. We plan to migrate to a SaaS solution because everything is on the cloud.
Price is a concern because everyone wants to make money for services and might change the licensing model.
Cisco WSA is an ancient solution. Cisco is upgrading the solution on a cloud that will have old and new technology features. Cisco WSA's new name is Cisco Umbrella.
I rate the product an eight out of ten.
Works as a filter and proxy preventing threats in the organization
What is our primary use case?
We use the tool as a filter and proxy.
What is most valuable?
Since working with the tool, we have not found any threats in our organization.
What needs improvement?
The solution is priced high.
For how long have I used the solution?
I have been working with the product for three years.
What do I think about the stability of the solution?
We have not faced any issues with stability.
What do I think about the scalability of the solution?
The solution is scalable and we have around 1200 users for the product.
Which solution did I use previously and why did I switch?
I have used Fortinet FortiGate before. We switched to Cisco because its sandbox is more effective and the solution is more scalable. However, FortiGate has a simple user interface.
How was the initial setup?
The solution's deployment phase lasted around three months.
What about the implementation team?
We did the product's deployment in-house.
What's my experience with pricing, setup cost, and licensing?
The solution has a standard license.
What other advice do I have?
I would rate the product an eight out of ten.
Flexible, robust, easy to install, and the technical support is helpful
What is our primary use case?
Cisco Web Security Appliance is used for security, proxying, and obviously proxy caching to save circuit bandwidth, but it is also used for security features because it is integrated into our ecosystem.
How has it helped my organization?
Use of the uncategorized feature of Cisco Web Security Appliance by placing into an immediate blocking stance has saved the organization from Zero day attacks. Bear in mind the potential for false positives is real in the beginning, however a structured process to submit sites to Cisco for categorization does eventually aid in the maturity.
What is most valuable?
SSL decryption was one of the features we wanted to experiment with but did not get around to because of time constraints.
What we liked best about it was the ability to apply policy to either a user ID or an IP-based network. Your customers are either people or machines. We chose not to create a service account for the server/machine, we had to have an IP address, based on a subnet and then applied policy to that.
What needs improvement?
The reporting needs improvement. We were using a stripped-down version of Splunk at the time, and as far as I recall, there was no easy way for us to send those logs to our enterprise Splunk. It kept pushing us to use the smaller version. That was probably just a sales team thing, but other than that, the product was great, but the reporting was definitely an issue.
I would like to see Risk API included, as well as the ability to automate adding things to the blacklist and whitelist without having to do it manually and having it report into the Cisco WSA cloud via risk API.
For how long have I used the solution?
We started Cisco Web Security Appliance in 2013, we were Websense and we carried it until 2020. I had been working with it for seven years. To be clear, we decided to abandon Cisco WSA in favor of Zscaler.
We used their appliances on-premises.
We last used it approximately 18 months ago.
What do I think about the stability of the solution?
It was very stable. We enjoyed working with it. What we liked best about the WSA was the ability to block uncategorized traffic.
Uncategorized is usually where you'll find your zero-day issues. A brand new website from a bad actor or bad country is unlikely to be categorized in the Cisco URL database, so we chose to block it.
There are advantages and disadvantages to blocking that. If you block that, you are blocking a lot of things, and it becomes more of an administrative headache.
As long as you start using this Cisco WAS, URL reporting system, then there is a way around that. Because you could submit this URL we believe is business and whatever, or marketing.
Outside of that, you had to create a white list, which we were able to do due to our flexibility. If something was quick, this is an emergency, this is a valid site, it's not malware, it's not bad, you can add it to that list in your text file.
What do I think about the scalability of the solution?
We had 50,000 people using this solution in our organization.
Cisco Web Security Appliance is a scalable solution.
How are customer service and support?
Technical support was very good.
I would rate them a five out of five.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We used to use Websense, but it was more political. The support model for Websense revolved primarily around two individuals. That person, or two people, did not want to share the responsibilities for whatever reason, so that's part of it.
When WSA was rolled out, it was given to a support team of about 20 people; the way we implemented it went beyond that. It also provided, the flexibility to apply those various policies, which was definitely beneficial.
It made use of the Cisco ecosystem. We were a large Cisco shop, like most companies, with our routers, like firewalls, not today, because we are moving, but it was good back then.
How was the initial setup?
The initial setup is dependent on your knowledge of how to deploy proxy. Back when I was an engineer, I was the one who actually deployed it. I'm now a director, so my role is different, but I carried over my knowledge from my previous engagement. For me, it was easy based on what I knew.
What was our ROI?
If it wasn't parked in the ELA, which obviously has other things baked into it, such as support, NOS engineers, TAC, ECS, high-touch for example. Our ELA cost was in the multi-millions, so if it was separate, I could break down the costs, and based on that, I believe the return on investment would have been easier.
It's well worth the money.
Based on my experience with Cisco WSA, I believe it was well worth the investment. The problem is that I don't know how much it cost.
I'm sure there was a breakdown somewhere, but we only saw one ELA cost.
What's my experience with pricing, setup cost, and licensing?
At the time, licensing fees were paid on an annual basis.
I don't recall the cost; it was included in our ELA.
What other advice do I have?
To be honest, nobody should consider on-premises anymore. It's a different world. There is now a cloud presence, and if Cisco WSA cloud presence matches what I know of Zscaler, you can basically go anywhere in the world and your laptop is forced to use it. Then you have coverage and monitoring.
If it meets your requirements, the person who is interested should use it. If it does not meet your personal criteria, they should look for a different solution; today is a different world, and I believe everyone works from home.
We are no longer working on-premises. If you work from home, you have two options: force people to connect to the network via VPN.
If you force people to use the VPN, you can force them to use a WSA in Cisco on-premises. I'm not familiar with the WSA cloud, but if you could force them to go directly to the cloud from your home, it's well worth considering. That's fantastic, in my opinion. Cloud definitely alters the dynamic here. It's borderless nowadays, with thoughts on everyone flowing through the inside. They need to be more open about borderless, and it appears that they are.
I would rate Cisco Web Security Appliance an eight out of ten, because, for one thing, we had issues with the reporting and didn't like the stripped-down version of the reporter. The other is that they were not in the cloud at the time, but I believe they are now.