Cisco IronPort Cloud Email Security

[Marcus Shoiti Ueda]

hi, anyone know what is different in cisco ESA X cisco IronPort Cloud Email Security licencing scheme... and how it work?

have a table with comparision?

thank you.

[j.veltjen]

Hi Marcus,

With the ESA on premise you buy an appliance or HW and then the licensing.

Minimum order quantity is 100 for the ESA.

For Cloud Email the minimum order quantity is 500, Cisco will build a redundant ESA Appliance in their datacenter for every customer.

As far as I know the feature set is the same as the on premise ESA because the software is the same.

For pricing you can find the ESA on prem in the Cisco GPL or CCW, the Cloud Email will need to be provided by your Cisco team or your distributor.

Best Regards,
Jerco

[Nilo Noguera]

Cisco Cloud Web Security (formerly known as ScanSafe) services keep malware off your corporate network and more effectively control and secure web usage. Each subscription of Cisco Cloud Web Security purchased through Cisco Global Price List consists of following services:

* Web Security providing anti-malware protection and web content analysis

* Web Filtering providing application visibility and Web Usage Controls

* Secure Mobility providing seamless integration with Cisco AnyConnect client

You can order this using the part number top level part number CWS-LIC= (Cisco Cloud Web Security) and then indicate the number of users and you may choose from three options for the duration of the service: 1 year, 3 years and 5 years subscriptions. Please note that the minimum number of users that you can order is 25.

CWS-1Y-S1 (Cisco Cloud Web Security, 1YR, 25-199 Users)

Duration: 12 Month(s) for USD 69.00/user

CWS-3Y-S1 (Cisco Cloud Web Security, 3YR, 25-199 Users)

Duration: 36 Month(s) for USD 156.00/user

Please note that Sizing for Cloud Web Security (CWS) is based on named users. This isn't concurrent users but total number of users who may browse the internet.

Cisco Cloud Web Security can be evaluated for 30 days with up to 25 users. To request this, PO for zero should be submitted together with Customer Technical Contact Information Collection Web Form. The filled form should be sent to CWS Sales Admin via the ipss-salesoperations alias (ipss-salesoperations@cisco.com) and they will then provision the account within a few days and send all the relevant details to the customer. A Technical Account Manager (TAM) will usually also be assigned to assist the customer with the deployment and get them up and running.

NOTE: A security PSS/CSE will need to be contacted for the PO.

Please check the links below for your reference(s):

Cisco Cloud Web Security

http://www.cisco.com/en/US/products/ps11720/

Cisco Cloud Web Security Data Sheet

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps10142/ps11720/data_sheet_c78-729637.html

Cisco ASA and Cloud Web Security

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5708/ps5709/ps12726/whitepaper_C11-715169_ns1194_Networking_Solutions_White_Paper.html

For Cisco Email Security, you can just use and order the part number licenses ESA-ESI-LIC=, ESA-ESO-LIC= or ESA-ESP-LIC= for the users and the Cisco Email Security Virtual Appliance (ESAV) license is included on any of the following bundles:

ESA-ESI-LIC= Protects an organization’s mailboxes against spam, viruses, and targeted attacks (Anti-Spam + Anti-Virus + Outbreak Filters);includes license for Email Security Virtual Appliance (ESAV) - USD 40.02/user

ESA-ESO-LIC= Helps satisfy compliance requirements by providing easy-to-use encryption and DLPsolutions.(DLP+ Encryption);includes license for Email Security Virtual Appliance (ESAV) - USD 40.87/user

ESA-ESP-LIC= Combines Inbound and Outbound protection to provide a complete email security solution (Inbound + Outbound);includes license for Email Security Virtual Appliance(ESAV) - USD 66.84/user

Please note that the minimun number of users that you can order is 100.

Aditionally, on the Cisco Email Security Appliances Data Sheet states the following:

"A Cisco ESAV license is included for all Cisco Email Security software bundles: Cisco Email Security Inbound, Cisco Email Security Outbound, or Cisco Email Security Premium bundle. This license has the same term as the other software services in the bundle and can be used for as many virtual instances as needed, as long as you stick to the purchased user count. The Cisco ESA licenses are included in all Cisco Email Security software bundles. Just purchase the appropriate licenses for the number of mailboxes you need to support, then buy the appropriate on-premises appliances. For virtual appliances, simply order the software licenses to get entitlement."

Cisco Email Security Appliances Data Sheet - Table 4. Cisco ESAV Specifications

http://www.cisco.com/en/US/partner/prod/collateral/vpndevc/ps10128/ps10154/data-sheet-c78-729751.html

Thank you for the opportunity to assist you.

Best regards,

"Nilz"

Nilo Noguera

.:|:.:|:. Specialist, Cisco Global Virtual Engineering - Cisco Partner Help

http://www.cisco.com/web/partners/tools/ph.html

[Andrew Richardson]

Nilz,

In regards to the licensing and the quote from above 'Please note that Sizing for Cloud Web Security (CWS) is based on named users. This isn't concurrent users but total number of users who may browse the internet.' Is this implemented via IP address of device on LAN?

Thanks.

Andrew

[smailmilak]

Hello,

I need some help from you. Ironport licencing is really hard even I have the ordering guide.

Customer has 3xC670 and 1xM170.

They need inbound licence for AV, AS and OF for 30,000 users. This is ESA-ESI-LIC.

What about M170? Is SMA-EMGT-LIC for 30,000 enough?

Second question is about max. users on M170. It's 1000 and customer is asking for 30,000.

I think that we need a bigger M appliance for that purpose.

In summary:

3xC670 and 1xM170 and requirement is to have a license for 30K of users.

If we have 3xC670, do we need 3x licence for 30K users? They are managed on one M170 appliance.

Can M170 do the job?

[Pavel Rodionov]

Hi Smail,

You need just one license for 30K users, all appliances will use this licenses then. And M170 is definitely not enough to process reporting information and provide quarantines for mail flow from 30K users. I'd suggest M680 for this task with appropriate reporting licenses.

[Marcus Shoiti Ueda]

hi, andrew,

i not sure about that,

but i guess this licensing on CWS is about current user using the CSW structure...

[Nilo Noguera]

The Cisco Web Security portfolio uses tiered pricing based on the number of users, not devices. Those users who are authenticated by the CWS.

I appreciate this opportunity to assist you.

Best regards,

"Nilz"

Nilo Noguera

.:|:.:|:. Security Specialist, Cisco Global Virtual Engineering - Cisco Partner Plus

http://www.cisco.com/web/partners/tools/ph.html

[Mohammad-]

Hi Nilo, 

Do we require Single License for both Primary and Secondry Appliance ? or seprate license or 2 license  for Primary and Secndry ?

[Ken Stieers]

If its hardware, each box gets its own set of feature keys.

For vms you use the same license file on each vm

[Mohammad-]

@Ken Stieers  Thanks for your prompt response, 

Could you please elaborate more , like what i understand if there is cluster of ESA then there would be single License ? is it correct ?

and if there is primary n secondary then how much number of license require ?

[Ken Stieers]

ESA is licensed by user count.
If you're using VMs, you get a single license file with all of the features applied. That file can be applied to as many VMs of whatever size you need to handle your load.
If you're using hardware, you'll get feature keys for each box, but it should be handled more or less the same way (minus the fact that you have to actually buy multiple boxes...)

[Mohammad-]

Hi Mates, 

Do we require Single License for both Primary and Secondry Appliance ? or seprate license or 2 license  for Primary and Secndry ?

[smailmilak]

Hi,

you need two because the license is tied to the SN of the appliance. See here for more information

https://community.cisco.com/t5/email-security/cisco-ironport-esa-high-availability/td-p/2920336