Cisco Small Business Pro SA 520 review
A very good range of security features including hosted anti-spam services but the SA 520 is tricky to manage and comparatively expensive.
Review Date: 5 Jul 2010
Reviewed By: Dave Mitchell
Price when reviewed: £242 (£284 inc VAT)
Features & Design
Value for Money
Cisco’s latest Small Business Pro appliances aim to deliver a complete gateway security solution but with a twist. These appliances provide a complete range of security measures but Cisco has teamed up with Trend Micro to offer its optional ProtectLink endpoint protection, web filtering and anti-spam services.
The anti-spam component is unusual as this is a hosted service. The majority of solutions at this price point, such as the A-Listed Netgear ProSecure UTM5, function as transparent gateways and are much easier to deploy.
With the SA 520 you need to fiddle around with your MX record so all your email is rerouted to Trend’s InterScan hosting servers first where it’s filtered, cleaned up and then passed on to your internal mail server.
Basic features of the SA 520 include a standard SPI firewall and support for IPsec and SSL VPNs. IPS includes IM and P2P app controls but this is another optional extra which requires a separate license.
URL filtering and anti-spam come under the ProtectLink Gateway component and for the former you have a total of 83 categories. You can pick and choose which ones you want to block and use time periods to specify business and leisure hours.
Filtering performance wasn’t perfect as with the games and gambling categories blocked we got through to ten of the fifty online bingo sites visited. Social networkers will have a tougher time as with this category selected we were unable to get at nuisance sites such as Facebook and Twitter.
For IPS you have eleven policies for detecting and blocking commons attacks. IM and P2P app controls are basic as you have only four protocols for each type and can block or just log their usage.
The web page for anti-spam redirects you to the InterScan site where you log in to access the main portal. For each mail domain you can have one policy which contains multiple rules for managing spam, phishing and infected emails.
The portal provides some classy reporting tools plus mail traffic analysis and one feature you get that transparent gateways can’t offer is message quarantining. The InterScan servers handle this function and can send an email digest to users that have quarantined mail. You can also allow them to log in, view their own spam and delete or release selected messages.
Trend’s Worry-Free Business Security Hosted service handles desktop endpoint protection. Installation is swift as you email each user with a web link which downloads and installs an agent to their system. This provides local virus protection and you can use the portal to check on systems and run manual and scheduled scans.
Ticking a check box at the appliance applies a single policy which will block web access to any desktop without the agent. Endpoint protection adds an extra layer of security but this component does have a lot of unnecessary features as you also get a local firewall with IDS, web reputation filtering and options to scan inbound mail.
The SA 520 is a powerful security solution but it’s not so easy to deploy and configure. Furthermore, there are a lot of optional features and once you’ve added the cost of licensing them all it starts getting pricey making Netgear’s ProSecure UTM appliances less expensive and more easily managed alternatives.
Author: Dave Mitchell
- Microsoft patches TIFF flaw in next Patch Tuesday
- Microsoft expands encryption over NSA spying "threat"
- UK Cloud Awards 2014: nominations now open
- BlackBerry says "we're still alive" as sales hit new low
- Has HP turned a corner?
- Adobe admits it's struggling to notify hack victims
- Microsoft rolls out Office 365 admin app for mobile
- Office 2013 Service Pack 1 to arrive early next year
- Backup the best defence against CryptoLocker
- UK SMBs can now buy ads on Twitter
- Play it again: Berlin's Computer Game Museum
- Switching from iPhone to Android: what I miss, what I don't
- Tech City: Easy to score when you move the goalposts
- How to remove SkyDrive from the Windows 8.1 Explorer
- Switching from iPhone to Android? Switch off iMessage
- Why is Google pumping more money into Firefox?
- Sky Broadband Shield review
- Samsung Galaxy S4: how to double your battery life
- Motorola Moto G review: first look
- IBM Watson meets Willy Wonka
- gTLDs: what your business should know about new domain names
- Can Microsoft survive? A look at servers and tools
- Can Microsoft survive? The future of Office
- A real-world guide to business VoIP
- Sack your PA: how to stay on top of your work life
- Power lies with the internet giants, not the governments
- Software subscriptions return us to a life of servitude
- How to get a job in cloud computing
- Are today's tech start-ups simply get-rich-quick schemes?
- Choosing the right tablet for business
- The importance of load balancing
- Windows Phone App Studio: an easy way to create your first Windows Phone 8 app
- The end of Windows XP support: what it really means for businesses
- Don't rely on Chrome's password vault
- Using Buffer to manage your social media
- Microsoft needs its own Steve Jobs
- Forget credit cards: hackers want your Facebook account
- Can't get fast enough broadband? Here's what to do
- Leap Motion and the battle against UI stagnation
- How to build a really bad network
There are dozens of exciting prizes up for grabs on PC Pro Competitions. All our competitions are free to enter. Try your luck.ENTER NOW