Cyberoam vs.

Cisco ASA 5500 Series

Cisco ASA 5500 Series 5505 Base/ Security Plus, Features Comparison 5510 Base/ Security Plus, 5520, 5540, 5550, 5580-20, (Based on Datasheets) 5580-40, 5585-X with SSP-10, 20,40 ,60 Security - Firewall, Intrusion Prevention System, Application Filtering Cyberoam CR 15i, 15wi, 25i, 25wi 25ia, 35ia, 35wi, 50ia, 100ia, 200i, 300i, 500ia, 750ia, 1000ia, 1500ia, 2500ia Cyberoam shield
Firewall Decision Parameters - Identity, Group, MAC and IP Address, Services based Number of IPS signatures 3000+ Application Categories - 11+ e.g. Gaming, IM, P2P, Proxy Access to vital resources based on users identity Protection against internal and external intrusion attempts Protection against Denial of Service attacks Provide business friendly environment to critical applications

Benefits

Stateful Inspection Firewall Appliance Deployment Modes: Gateway (Route), Transparent (Bridge) Application Visibility and Control Intrusion Prevention System (Checkmark Certified) Identity-Based Intrusion Prevention System DoS and DDoS Prevention

Yes

Yes

Yes Yes, IP Address and User based control Yes

Yes

Yes Not Certified, needs AIP SSC and AIP SSM (Advanced Inspection and Prevention Security Services Module and Card) Yes Yes

Yes, with Multiple IPS Policy Support Yes IP Address and User based individual and Group control over Webcam, File Transfer, Voice and Text Chat Communication

Instant Messaging Control

Yes

Security - Web Content Filtering Cyberoam Shield:

82+ URL categories covering millions of websites

Benefits
URL, keyword, File type block Blocks Malware, Phishing, Pharming URLs, Java Applets, Cookies and Active X Data leakage control via HTTP, HTTPS upload Provides Schedule-based access control Custom block messages per category Not Certified. Need to purchase Plus License of CSC-SSM (Content Security and Control). CSC SSM offers URL filtering through Trend Micro CSC-SSM hardware supports ASA 5510, 5520 and 5540 only

Identity- Based Web Content Filtering ( Checkmark Certified)

Individual user and Group based

Features Comparison

(Based on Datasheets)
Web and Content Filtering Database Strength Domain Name based HTTPS Filtering Phishing Protection Pharming Protection Spyware Sites Protection Anonymous Proxy Protection Data Leakage Prevention Embedded URL Filtering Search Engine Safe Search Enforcement

Cyberoam CR 15i, 15wi, 25i, 25wi 25ia, 35ia, 35wi, 50ia, 100ia, 200i, 300i, 500ia, 750ia, 1000ia, 1500ia, 2500ia
Excellent (82+ Categories) Yes Yes (Blocks emails and Web traffic) Yes Yes Yes Yes Yes Yes

Cisco ASA 5500 Series 5505 Base/ Security Plus, 5510 Base/ Security Plus, 5520, 5540, 5550, 5580-20, 5580-40, 5585-X with SSP-10, 20,40 ,60
80+ categories, Need to purchase Plus License of CSC-SSM. No Need to purchase Plus License of CSC-SSM Yes Need to purchase Plus License of CSC-SSM No No No No

Security - Web Application Firewall Cyberoam Shield:

Positive Protection model Unique "Intuitive Website Flow Detector" technology

Benefits
Protection against SQL Injections, Cross-site Scripting (XSS), Session Hijacking, URL Tampering, Cookie Poisoning

On-Appliance Web Application Firewall WAF Management Positive Protection Model without Signatures Intuitive Website Flow Detector

Yes WAF can be configured and managed from UTM interface Yes Yes

Does not have WAF Does not have WAF Does not have WAF Does not have WAF

Security - Anti Spam Cyberoam Shield:

IP Reputation Filters RPD (Recurrent Pattern Detection) Technology Spam Detection Rate 98% False Positive Rate 1 in 1 million

Benefits
Blocks 80% spam before downloading to the mail server Zero hour response to email threats

Gateway Anti Spam (Checkmark Premium Level Certified)

Yes

Not certified. Need to purchase Plus License of CSC-SSM

Features Comparison

(Based on Datasheets)
IP Reputation Filters Domain White-listing Identity-Based Anti Spam Language and Content Independent Anti Spam Engine Mail Virus Outbreak Detection Gateway Anti Spam Protocols Protected HTTPS Traffic Scanned for malware Self Service User Based Quarantine for Spam Mails

Cyberoam CR 15i, 15wi, 25i, 25wi 25ia, 35ia, 35wi, 50ia, 100ia, 200i, 300i, 500ia, 750ia, 1000ia, 1500ia, 2500ia
Yes Yes, to customize Cyberoam email security shield as and when required Yes

Cisco ASA 5500 Series 5505 Base/ Security Plus, 5510 Base/ Security Plus, 5520, 5540, 5550, 5580-20, 5580-40, 5585-X with SSP-10, 20,40 ,60
Yes No Yes

Yes

No

Yes

No

SMTP, POP3, IMAP

Does not support IMAP

Yes

No

Yes

No

Security - Anti Virus Cyberoam Shield :

Number of Anti Virus Signatures 4 Millions Virus Catch Rate 99.5% Signature Update frequency 30 minutes Malware scanning upto 7 compression levels Scans more than 40 types of compressed files Scanning of Web, Email, VPN and IM traffic Protection against Virus, Worm and Trojan Protection against Spyware, Malware and Phishing Customizable individual user scanning Scan and deliver by file size Block content by file types

Benefits

Gateway Anti Virus (Checkmark Certified) Identity Based Anti Virus

Yes Yes

Not certified, uses TrendMicro InterScan Yes

Self Service User Based Quarantine for Virus Mails Gateway Anti Spyware (Checkmark Certified) Gateway Anti Virus Protocols Protected

Yes

No Not certified, uses TrendMicro InterScan Does not support IMAP

Yes

HTTP, HTTPS, SMTP, POP3, IMAP, FTP

Features Comparison

(Based on Datasheets)
Appliance Management Cyberoam Shield :

Cyberoam CR 15i, 15wi, 25i, 25wi 25ia, 35ia, 35wi, 50ia, 100ia, 200i, 300i, 500ia, 750ia, 1000ia, 1500ia, 2500ia

Cisco ASA 5500 Series 5505 Base/ Security Plus, 5510 Base/ Security Plus, 5520, 5540, 5550, 5580-20, 5580-40, 5585-X with SSP-10, 20,40 ,60

Plug n play UTM Interactive customizable GUI Multi-lingual GUI Role based access control Centralized management and upgrade support

Benefits:
Reduced Opex and Capex Ease of use

Available Formats Ease of Use Web 2.0 GUI Management Interface Automated Windows Single Sign On Authentication, Authorization, Accounting Central Management and Upgrade Support

Appliance Click here for demo Click here for demo Web and CLI (TELNET, SSH) Yes Local, Windows PDC, AD, LDAP, RSA SecurID and Radius Cyberoam Central Console

Appliance Online Demo not available Online Demo not available Web and CLI Yes Local, Windows PDC, AD, LDAP, RSA SecurID and Radius Yes

Secure Remote Access- Virtual Private Network Cyberoam Shield:

VPN IPSec, L2TP, PPTP and SSL* VPN Connection Redundancy

Benefits:
Secure and clean VPN Connectivity any time, anywhere

Identity Based VPN Checkmark Certified VPN XAUTH Support For VPN VPNC Basic and AES Certified VPN Gateway VPN Connection Fail-Over

Yes Yes Local, Windows PDC, AD, LDAP, RSA SecurID and Radius Yes Yes

Yes No Yes Information not published Yes

Cisco ASA 5500 Series 5505 Base/ Security Plus, Features Comparison 5510 Base/ Security Plus, 5520, 5540, 5550, 5580-20, (Based on Datasheets) 5580-40, 5585-X with SSP-10, 20,40 ,60 Resource Monitoring and Management Bandwidth Management Cyberoam Shield: Cyberoam CR 15i, 15wi, 25i, 25wi 25ia, 35ia, 35wi, 50ia, 100ia, 200i, 300i, 500ia, 750ia, 1000ia, 1500ia, 2500ia
Application, Web Category and User Identity based Bandwidth Management Guaranteed & Burst-able bandwidth policy Application & User Identity based Traffic Discovery Increased productivity Monitoring and controlling of bandwidth usage IP Address, User, Web Category, Application, Application Category based Yes

Benefits:

Granular Bandwidth Management Bandwidth (Data Transfer) Quota

Supports QoS No

Connectivity Load Balancing, High Availability and Networking Cyberoam Shield:

Failover - Automated Failover/Failback, Multi-WAN failover 3GModem failover WRR based Load balancing IPv6 Ready Gold Logo Uninterrupted business connectivity Load balancing for n number of links, based on ports availability Ready to handle next generation network traffic Yes Yes, number of links depends on number of ports available on appliance Multiple rules and protocol supported Active-Passive / Active-Active with stateful failover support RIPv1, RIPv2, OSPF, BGP Yes Yes Yes Yes No Supports Network Load balancing Yes Not supported in 5505 Active-Standby / Active-Active Does not support stateful failover Yes Yes No No No

Benefits:

Server Load Balancing Multiple ISP Load Balancing Rule based ISP Gateway Fail-Over High Availability Dynamic Routing 802.1q VLAN Tagging VLAN over WAN 3G and Wimax (WWAN) Support Security over WiFi (WLAN)

Visibility Logging and Reporting Cyberoam Shield:

Benefits

1000+ Reports, 45+ Compliance Reports Multiple format support Graphical and Tabular Exportable Formats - PDF and MS Excel Multiple Dashboards Report Scheduling Complete visibility of network, resources and users Yes, Web Based Report Engine, No extra cost

On-Appliance Reporting**

No

Features Comparison

(Based on Datasheets)
Compliance Reports Syslog Support

Cyberoam CR 15i, 15wi, 25i, 25wi 25ia, 35ia, 35wi, 50ia, 100ia, 200i, 300i, 500ia, 750ia, 1000ia, 1500ia, 2500ia
HIPAA, GLBA, SOX, PCI, FISMA Yes up to 5 syslogs Indigenously Designed Logging and Reporting Solution - Cyberoam iView which provides In-depth logging and reporting for multiple devices apart from Cyberoam Open Source Cyberoam iView Cyberoam iView Appliance Yes IP Address and User based individual and Group Logging and Reporting of Webcam usage, File Transfer, Voice usage and Text Chat Communication Yes Yes Yes Yes IP Address and User based Sends one copy of the email on a preconfigured email address for archiving and forensic analysis purpose

Cisco ASA 5500 Series 5505 Base/ Security Plus, 5510 Base/ Security Plus, 5520, 5540, 5550, 5580-20, 5580-40, 5585-X with SSP-10, 20,40 ,60
No Yes

External Reporting

Cyberoam-iView provides reports for Cisco ASA

Comprehensive user wise blended reporting Instant Messenger Logging and Reporting Multi WAN bandwidth reporting HTTP Upload Report Extensive Logging and Log Viewer Data transfer reporting Application Traffic Discovery Transparent Mail activity reporting

Not Comprehensive

No No No No No No No

Version 1.2-10.01.2158-4/04/2012

Cyberoam Certifications and Awards

Source of information http://www.cyberoam.com http://www.cisco.com/en/US/products/ps6120/index.html

1. 2. 3. * Available only in CR 25ia, CR50ia, CR100ia, CR200i, CR300i, CR 500ia, CR 750ia, CR1000ia, CR1500ia and 2500ia Appliances ** Only for the previous day for CR15i Appliances This comparison is based on our interpretation of the publicly available information as on date of preparing this comparison. The features / characteristics of the subject product under comparison, which may have direct impact on the accuracy and / or validity of this comparison, are likely to change without prior notice. The information contained in this comparison is and intended to provide broad consumer understanding and knowledge of factual information of various products. This comparison is merely our opinion / interpretation, which may be subject to further modification / rectification in future in case of receipt of any fact / information regarding the subject products under comparison. People using information should also research original sources of information and should not rely only upon this comparison while selecting any product. This comparison is not exhaustive and may not be accurate. Elitecore makes no warranty as to the reliability, accuracy, usefulness, or completeness of the comparison. The materials / information in this comparison are provided "as is" and without warranties of any kind either expressed or implied. To the fullest extent permissible pursuant to applicable law, Elitecore disclaims all warranties of accuracy or otherwise in respect of the comparison. Elitecore does not warrant or make no representations regarding the use of or the result of the use of the comparison in terms of their correctness, accuracy, reliability, or otherwise. Elitecore retains the right to revise these rules / conditions at any time. This document is confidential and intended for private circulation only.

Disclaimer