Professional Documents
Culture Documents
November 2013
This ordering guide for select Cisco Email and Web Security offerings is for public use. Any questions or comments
should be sent to:
Americas—ironport-integration-channel-questions-americas@cisco.com
EMEAR—ironport-integration-channel-questions-emear@cisco.com
APJC—ironport-integration-channel-questions-apjc@cisco.com
<
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 55
Contents
Introduction .............................................................................................................................................................. 3
Audience ............................................................................................................................................................... 3
Scope .................................................................................................................................................................... 3
New Email and Web Security Product Names ....................................................................................................... 4
Understanding the Offerings .................................................................................................................................. 5
Physical Appliances .............................................................................................................................................. 6
Cisco SMARTNet Service ..................................................................................................................................... 7
Software Subscription Licenses ............................................................................................................................ 8
FIPS-Compliant Products.................................................................................................................................... 14
Software License Agreements and Accessories ................................................................................................. 14
Understanding the Ordering Process .................................................................................................................. 16
High-Level Summary of a Cisco Email and Web Security Price List Transaction ............................................... 18
Cisco Commerce Workspace (CCW) .................................................................................................................. 18
Cisco Service Contract Center (CSCC) .............................................................................................................. 20
Cisco Software Fulfillment and Infrastructure Technology (SWIFT) Tool ............................................................ 21
Placing an Order .................................................................................................................................................... 22
Quote-to-Deployment Process for Cisco Price List ............................................................................................. 22
Try and Buy (TAB) .............................................................................................................................................. 22
Post-Order Process ............................................................................................................................................ 23
End of Evaluation and Additional Resources ..................................................................................................... 24
Appendix A: All Part Numbers .............................................................................................................................. 25
Appendix B: Example Quotes ............................................................................................................................... 52
Email Security Order ........................................................................................................................................... 52
Web Security Order ............................................................................................................................................ 53
Appendix C: Additional Information..................................................................................................................... 54
Encryption Orders Placed in Russia ................................................................................................................... 54
Delivery Mode ..................................................................................................................................................... 54
China Hardware PIDs ......................................................................................................................................... 54
Fiber Hardware ................................................................................................................................................... 55
Cloud Email Ordering .......................................................................................................................................... 55
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 55
Introduction
The ordering guide is designed to help Cisco Field, partners, and distributors order Cisco Email and Web Security
solutions. This guide will help you:
● Understand Cisco Email and Web Security products and service offers
● Understand specific Cisco Email and Web Security Global Price List (GPL) offers and identify the right ones
for your customers
● Ensure the right quantities and types of SKUs are purchased to minimize the risk of order rejection
● Provide information on the end-to-end quote-to-fulfillment process in Cisco Commerce Workspace (CCW)
and Cisco Services Contract Center (CSCC) for these offers.
Audience
This ordering guide is intended for Cisco partners and distributors qualified to sell Cisco Email and Web Security
products and services on the Cisco Price List.
Scope
This ordering guide provides information about quoting, ordering, and pricing for Cisco Email and Web Security
products and services available on the Cisco Price List.
Note: Descriptions of Cisco Email and Web Security solutions are available at:
www.cisco.com/en/US/products/hw/vpndevc/products.html.
Note: Any order for the service will be subject to the detailed terms and conditions set out therein.
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 55
New Email and Web Security Product Names
As of September 12, 2012, Cisco renamed its email and web security products to remove the IronPort and
ScanSafe names in favor of more straightforward and descriptive names that reflect the deployment method (Table
1).
Email Security Cisco IronPort Email Security Appliance Cisco Email Security Appliance (ESA)
Cisco Email Security Virtual Appliance (ESAV)
Cisco IronPort Hybrid Cloud Email Security Cisco Hybrid Email Security
Security Management Cisco IronPort Security Management Appliance Cisco Content Security Management Appliance (SMA)
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 55
Understanding the Offerings
Cisco Email and Web Security solutions encompass three different platforms (web security, email security, and
security management). There are also three different offer categories across each of these platforms (physical
®
hardware appliances, software subscriptions including software support, and Cisco SMARTnet hardware support).
Figure 1 shows an overview of the offerings.
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 55
Table 2 lists Cisco Email and Web Security product lines that are available through Cisco Price Lists.
Cisco Web Security Cisco Web Security offerings keep malware off your network and more effectively control and secure
web usage.
Cisco Web Security Appliances include the following components:
● Web Security Appliance hardware, including Cisco Web Security Appliance S170, S370, S380, S670, and
S680 appliances
● Web Security software subscription bundles and a-la-carte offerings, including Cisco Software Support
● Cisco SMARTnet Services for Web Security Appliance
Cisco Email Security Cisco Email Security offerings provide protection against email threats, minimize downtime associated with
email-borne malware, simplify administration of corporate mail systems, and reduce the burden on technical
staff while offering insight into mail system operation.
Cisco Email Security Appliances include the following components:
● Email Security Appliance hardware, including Cisco Email Security Appliance C170, C370, C380, C670,
C680 and X1070 appliances
● Email Security software subscription bundles and a-la-carte offerings, including Cisco Software Support
● Cisco SMARTnet Services for Email Security Appliance
Cisco Content Security Cisco Content Security Management offerings provide a single management interface for Cisco Email and
Management Web Security Appliances. By providing a single location to centralize email reports and spam quarantines as
well as manage web security and Cisco data loss prevention (DLP) policies, the Cisco Content Security
Management Appliance provides valuable functions for email and web administrators.
Cisco Content Security Management Appliances include the following components:
● Security Management Appliance hardware, including Cisco Security Management Appliance M170, M380,
M670, M680, and M1070 appliances
● Security Management software subscription bundles and a-la-carte offerings, including Software Support
● Cisco SMARTnet Services for Security Management Appliance
Physical Appliances
Cisco offers the Email and Web Security hardware appliances listed.in Table 3.
Cisco Email Small Businesses and ESA-C170-K9 ESA C170 Email Security Appliance with Software
Security Branch Offices ESA-C370-K9 ESA C370 Email Security Appliance with Software
Midsize Offices ESA-C380-K9 ESA C380 Email Security Appliance with Software
ESA-C670-K9 ESA C670 Email Security Appliance with Software
Large Enterprises and ESA-C680-K9 ESA C680 Email Security Appliance with Software
Service Providers (SP) ESA-C680-LKFP-K9 ESA C680 Email Security Appliance with Locking Faceplate
ESA-X1070-K9 ESA X1070 Email Security Appliance with Software
Cisco Web Small Businesses and WSA-S170-K9 WSA S170 Web Security Appliance with Software
Security Branch Offices
Midsize Offices WSA-S370-K9 WSA S370 Web Security Appliance with Software
WSA-S380-K9 WSA S380 Web Security Appliance with Software
Large Enterprises and WSA-S670-K9 WSA S670 Web Security Appliance with Software
SPs WSA-S680-K9 WSA S680 Web Security Appliance with Software
WSA-S680-LKFP-K9 WSA S680 Web Security Appliance with Locking Faceplate
Cisco Security Small Businesses and SMA-M170-K9 SMA M170 Security Management Appliance with Software
Management Branch Offices
Midsize Offices SMA-M380-K9 SMA M380 Security Management Appliance with Software
SMA-M670-K9 SMA M670 Security Management Appliance with Software
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 55
Appliance Type Deployment* Appliance Name Description
Large Enterprises and SMA-M680-K9 SMA M680 Security Management Appliance with Software
SPs SMA-M680-LKFP-K9 SMA M680 Security Management Appliance with Locking Faceplate
SMA-M1070-K9 SMA M1070 Security Management Appliance with Software
*Sizing will vary based on a number of factors not limited to deployment configurations, software feature sets, and policies. Work
closely with your customers to understand the specific hardware and performance needs of their Cisco Email and Web Security
deployments.
The Cisco SMARTnet Service gives customers access to a wealth of Cisco support tools and expertise, providing
them with greater network availability and performance while reducing operating costs. The service provides:
● Fast support from experts: Connect directly to the Cisco Technical Assistance Center (TAC), staffed by
thousands of certified Cisco professionals who have experience diagnosing the toughest problems.
● Online self-help support: Access extensive 24-hour support resources through Cisco’s online knowledge
base, communities, resources, and tools.
● Smart, proactive diagnostics: Gain critical insight with the embedded Cisco Smart Call Home feature,
which offers detailed diagnostics and immediate alerts on enabled network devices.
● Ongoing operating system updates: Access new OS features, including both minor and major OS
releases, with the latest operating system software updates within your licensed feature set.
● Rapid hardware replacement: Get the coverage you need for each device with flexible hardware
replacement options, including next-business-day (NBD) advance replacement.
Please refer to Table 4 and the following link for more detailed information regarding Cisco SMARTnet Service:
http://www.cisco.com/en/US/products/svcs/ps3034/ps2827/ps2978/serv_group_home.html
Table 4. Cisco SMARTnet Service SKUs for Email and Web Security Appliances
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 55
Appliance Type Appliance SKU Cisco SMARTnet SKU
Purchase of a software feature license entitles a customer to activate and use those features on an associated
platform. For example, customers who buy a Cisco Email Security Inbound Bundle license are entitled to activate
all of the Inbound Bundle software features on any of the Cisco Email Security Appliances that they own. A later
section of this guide explains the process for ordering and activating these licenses. The process describing how to
associate licenses to a specific appliance(s) is also provided.
Note: Customers may purchase and activate software features for only an associated platform; for example,
they can run a Cisco Email Security software feature on an Email Security Appliance but not on a Cisco Web
Security or Management Security Appliance.
Additionally, all software subscription licenses include co-termed Cisco Software Application Support
contracts. Customers who purchase a subscription license are entitled to technical services for the term of
the software subscription.
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 55
solve issues quickly, maximize business continuity, improve their competitiveness, and make the most of limited
resources through increased productivity.
This support entitles customers to the services listed below for the full term of the purchased software
subscription, including:
● Software updates and major upgrades that keep applications performing optimally at the most current
feature set
● Access to Cisco TAC for fast, specialized support
● Online tools to build and expand in-house expertise and boost business agility
● Collaborative learning for additional knowledge and training opportunities
The software subscription SKU includes software subscription and support. No additional SKUs or extra fees are
required to receive these services.
100–199 Users S1
200–499 Users S2
500–999 Users S3
1,000–1,999 Users S4
2,000–2,999 Users S5
3,000–3,999 Users S6
4,000–4,999 Users S7
5,000–9,999 Users S8
10,000–19,999 Users S9
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 55
Quantity User Band / Set of SKUs to Use
Figure 2 presents an example of a software subscription license SKU and provides a description of the
standard nomenclature.
Tables 6, 7, and 8 list Cisco Email Security, Web Security, and Content Security Management software offerings,
respectively.
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 55
Table 6. Email Software Offerings
Cisco Email Security Inbound Protects an organization’s mailboxes against spam, viruses, and targeted attacks ESA-ESI-LIC=
(Anti-Spam + Anti-Virus + Outbreak Filters); includes license for Email Security Virtual
Appliance (ESAV)
Cisco Email Security Outbound Helps satisfy compliance requirements by providing easy-to-use encryption and DLP ESA-ESO-LIC=
solutions. (DLP + Encryption); includes license for Email Security Virtual Appliance
(ESAV)
Cisco Email Security Premium Combines Inbound and Outbound protection to provide a complete email security ESA-ESP-LIC=
solution (Inbound + Outbound); includes license for Email Security Virtual Appliance
(ESAV)
Bundle Features
Anti-Spam Uses conventional techniques and innovative context-sensitive detection technology ESA-AS-LIC= *
to eliminate a diverse range of known and emerging email threats
Outbreak Filters Offers the latest email security innovation for next-generation threat prevention for ESA-OF-LIC= *
threats that are hard to detect; the industry’s first custom-built engine dedicated to
blocking targeted attacks using three major elements: Targeted Attack Heuristics,
Dynamic Quarantine, and Cloud Web Redirect
Data Loss Prevention Delivers high-performance, comprehensive DLP—helping prevent leaks, enforce ESA-DLP-LIC= *
compliance, and protect brand and reputation
Encryption Meets compliance requirements for email encryption and delivers powerful new email ESA-ENC-LIC-K9-
control features in easy-to-use, broad-reaching form PID= *
A-la-Carte Offerings
Image Analyzer Detects illicit content in incoming and outgoing email, allowing customers to identify, ESA-IA-LIC=
monitor, and educate offending users
Note: The Email Centralized Management feature allows administrators to manage and configure multiple
appliances at the same time without purchasing additional hardware. This feature is included as part of the Email
Security Appliance software subscription bundles. For a la carte licenses, the Centralized Management feature is
not included and needs to be ordered separately. Do note that the a la carte Centralized Management license is
Free of Charge (FoC).
If the customer currently has a valid contract and valid term license that does not contain the CM feature they can
request the CM feature through cisco.com/go/licensing.com and they will receive a CM license co-termed with their
existing license.
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 11 of 55
Table 7. Web Software Offerings
Cisco Web Security Premium Combines URL filtering defense with deep content scanning (Web Usage Controls + WSA-WSP-LIC=
Web Reputation + Sophos Anti-Malware + Webroot Anti-Malware + Software
Subscription Support); includes license for Web Security Virtual Appliance
Cisco Web Security Anti- Combines Cisco Web Reputation with deep content scanning (Web Reputation + WSA-WSM-LIC=
Malware Sophos Anti-Malware + Webroot Anti-Malware + Software Subscription Support);
includes license for Web Security Virtual Appliance
Bundle Features
Web Usage Controls (WUC) Provides industry-leading visibility into and protection from web use violations through Bundle SKU only *
a combination of list-based URL filtering and real-time dynamic categorization
Web Reputation (WREP) Uses pattern-based assessment techniques and fine-grained per-object scanning Bundle SKU only *
capabilities to provide dynamic analysis and protection against sophisticated blended
threats
Sophos Anti-Malware Offers award-winning malware scanning protection against known and unknown Bundle SKU only *
threats using its Genotype and Behavioral Genotype Protection
Webroot Anti-Malware Performs request- and response-side scans and identifies existing and new threats by Bundle SKU only *
accessing databases that intelligently scan millions of sites daily
A-la-Carte Offerings
McAfee Anti-Malware Includes both virus and malware signature scanning and can perform both signature- WSA-AMM-LIC=
and heuristics-based scanning
Web Security Virtual Appliance A Cisco Web Security Virtual Appliance (WSAV) license that can be applied to any All bundles and a la
(WSAV) Web Security Virtual Appliance image in the Cisco Software Download Center; the carte offerings.
license can be applied to as many images as needed
Instructions for customers and partners to generate their virtual appliance license after
their order has been processed are here:
http://www.cisco.com/en/US/prod/collateral/vpndevc/ps10142/ps10164/data_sheet_C
78-727788.html
*Individual features that can be ordered only as part of one of the three available software bundles.
Cisco Email Security Management Provides centralized reporting, message tracking, and quarantines SMA-EMGT-LIC=
across multiple Email Security Appliances (Email Reporting + Tracking
+ Centralized Quarantines)
Cisco Web Security Management Provides centralized management and reporting across multiple SMA-WMGT-LIC=
Web Security Appliances (Web Reporting + Web Policy and
Configuration Management)
Bundle Features
Email Reporting Provides concise scenario-based reports to help administrators Bundle SKU only *
troubleshoot and keep tabs on their message flows
Email Message Tracking Helps administrators track the flow of individual email messages Bundle SKU only *
Email Centralized Quarantines Helps end users and administrators manage their quarantines Bundle SKU only *
Web Reporting Gives managers visibility and insight into current operational data to help Bundle SKU only *
them refine policies, plan infrastructure, and measure productivity
Web Policy and Configuration Management Provides the web administrator with a single location to define and Bundle SKU only *
publish policies to multiple Web Security Appliances
A-la-Carte Offerings
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 12 of 55
Bundles Description Top Level SKU
Advanced Web Security Reporting Provides advanced Splunk-based reporting capabilities across multiple SMA-WSPL-LIC=
Web Security Appliances for organizations with high traffic and storage
needs. Please note that this SKU does NOT include a Configuration &
Policy Management license for the SMA. It only includes a license for
Splunk-based Advanced Web Security Reporting, an off-box reporting
tool.
Please note that this license has a data limit of 2 MB per user per day.
For example, if a 2000 user license is ordered, then 4 GB of data can be
processed per day (4 GB = 2000 users * 2 MB/ user / day). If your
customer has higher traffic or larger data needs, please ensure they
order a larger license for the amount of data they need to process.
Table 9 lists email encryption renewals for Cisco Email Security software.
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 13 of 55
Table 9. Email Encryption Renewals
Email Encryption*
Email Encryption License for Provides envelope encryption capabilities on the encryption appliance CCS-CEE-LIC=
Encryption Appliances
Email Encryption and Public Provides envelope encryption and public key encryption capabilities on the encryption CCS-CEEPK-LIC=
Key Encryption License for appliance
Encryption Appliances
Large Attachment Handling Provides the ability to send email messages with large attachments CCS-LFILE-LIC=
License for Encryption
Appliances
Secure Mailbox License for Provides pull encryption capabilities to host encrypted messages for recipients CCS-SMAIL-LIC=
Encryption Appliances
Email Encryption License for Provides envelope encryption capabilities for large email volumes. Renewal Email
CCS-BE-S1-LIC=
System-Generated Bulk Email Encrypt Bulk Email 1YR License, 100K-250K Mgs
Email Encryption License for Provides envelope encryption capabilities for large email volumes. Renewal Email
CCS-BE-S2-LIC=
System-Generated Bulk Email Encrypt Bulk Email 1YR Lic Key, 250K-500K Mgs
Email Encryption License for Provides envelope encryption capabilities for large email volumes. Renewal Email
CCS-BE-S3-LIC=
System-Generated Bulk Email Encrypt Bulk Email 1YR License, 500K-1M Mgs
Email Encryption License for Provides envelope encryption capabilities for large email volumes. Renewal Email
CCS-BE-S4-LIC=
System-Generated Bulk Email Encrypt Bulk Email 1YR Lic Key, 1M-2.5M Mgs
Email Encryption License for Provides envelope encryption capabilities for large email volumes. Renewal Email
CCS-BE-S5-LIC=
System-Generated Bulk Email Encrypt Bulk Email 1YR License, 2.5M-10M Mgs
Email Encryption License for Provides envelope encryption capabilities for large email volumes. Renewal Email
CCS-BE-S6-LIC=
System-Generated Bulk Email Encrypt Bulk Email 1YR License, 10M-50M Mgs
Email Encryption License for Provides envelope encryption capabilities for large email volumes. Renewal Email
CCS-BE-S7-LIC=
System-Generated Bulk Email Encrypt Bulk Email 1YR Lic Key, 50M+ Mgs
FIPS-Compliant Products
All Cisco Email and Web Security appliance offerings provide Federal Information Processing Standards (FIPS)
Level I compliance through the software-based Cisco Common Crypto Module (C3M). A FIPS-compliant mode is
selectable within the GUI of the AsyncOS® operating system. Cisco no longer sells hardware-based FIPS
appliances. Cisco Email and Web Security customers requiring FIPS Level I compliance should select from the
standard appliance offerings listed in this guide (WSA-S670-K9, etc.).
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 14 of 55
Accessories
The Cisco Email and Web Security offerings include numerous accessories that are either required for basic
functions (for example, power cords) or optional based on specific needs of the customer (locking faceplate, for
example). Some accessories are offered as spares—products that can be ordered as standalone items. These
spares might be ordered for replacements, supplements to the current product, or backup spare parts.
Configurable accessories are ordered as part of a hardware appliance configuration in Cisco Commerce
Workspace. For example, an order can be placed for a Cisco Email Security Appliance C370, and a country-
specific power cord can be selected as part of the overall conifguration. After an order is complete, the appliance
and the configured cord will both be shipped.
Cisco Content Sec AC Power Supply 650W for x80 Appliance CCS-PWR-AC-650W=
Cisco Content Sec DC Power Supply 900W for x80 appliance CCS-PWR-DC-930W=
Content Security Platform Rails for x170, 4 Post Racks, Square Hole CCS-RAILS-170=
Content Security Platform Rails for 4 Post Racks, Square Holes CCS-RAILS-4SQ=
Content Security 250-GB HD for ESA C170, SMA M170, WSA S170 CCS-HD-250GB=
Content Security 300-GB HD for ESA Cx70, X1070, SMA M670 CCS-HD-300GB=
Cisco Content Security 600GB hard drive for x80 appliances CCS-HD-600GB=
Cisco Content Security 300GB hard drive for x80 appliances CCS-HDD-300GB=
Cisco Content Security Hard Drive Blank Slot Cover for x80 CCS-HD-BLANK=
Appliances
Replacement Key for ESA C680 locking faceplate appliance ESA-C680-KEY=
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 15 of 55
Cisco Email and Web Security Accessories
Content Security 250-GB HD for ESA C170, SMA M170, WSA S170 CCS-HD-250GB-
Content Security AC Power Supply for ESA, WSA, SMA x70 Models CCS-PWR-AC-870W-
Content Security 300-GB HD for ESA Cx70, X1070, SMA M670 CCS-HD-300GB-
Power Cord, 125VAC 13A NEMA 5-15 Plug, North America CAB-9K12A-NA
Cabinet Jumper Power Cord, 250 VAC 10A, C14-C13 Connectors CAB-C13-CBN
Cisco Content Sec AC Power Supply 650W for x80 Appliance CCS-PWR-AC-650W
Cisco Content Sec DC Power Supply 900W for x80 appliance CCS-PWR-DC-930W
Cisco Content Security 600GB hard drive for x80 appliances CCS-HD-600GB
Cisco Content Security 300GB hard drive for x80 appliances CCS-HDD-300GB
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 16 of 55
● Follow-up orders of software feature licenses to add additional features or user counts to an appliance or
deployment of appliances
The following sections provide general information about the Cisco ordering process and explain the step-by-step
processes for ordering under each of these four ordering scenarios.
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 17 of 55
High-Level Summary of a Cisco Email and Web Security Price List Transaction
Figure 4. Cisco Commerce Workspace (CCW) vs. Cisco Service Contract Center (CSCC)
● Deal registration
CCW CSCC
Initial purchase of Cisco Email and Web Security appliances, software, and technical services X
Renewal with additional licenses and purchase of additional appliances X (application) X (renewal
and licenses)
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 18 of 55
Figure 5. Initial Purchase of Appliances, Software, and Technical Services
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 19 of 55
Cisco Service Contract Center (CSCC)
The Cisco Service Contract Center (CSCC) is the primary tool used for ordering services, ordering follow-on
software subscription licenses, and processing renewals of Cisco Email and Web Security offerings available on
the Cisco Price List. Three main steps are involved in creating an order in CSCC—creating a quick quote,
validating the quote, and submitting an order. Partners will use the standard quoting process, while distributors
have the option of using the standard or quick quote functionality to create a quote in CSCC. Partners and
distributors will validate and save a quote once all software subscription licenses and services have been added
prior to ordering.
Ordering renewals is possible only in the Cisco Services Contract Center. The new Cisco Email and Web Security
offerings have undergone a change of pricing: Hardware is less expensive and software is more expensive than
the legacy IronPort hardware and software. The combined price for new orders is the same, but renewals will
require a non-standard discount to keep the former software price parity. To support the first renewal during
the integration, Cisco will provide a high-touch support model where Cisco will place the quote in CSCC and pass it
to the partner or distributor to place the order. The partner or distributor may also choose to process their own
quote after aOrder Service Agreement is created and the deal ID is approved and then raise a support case to
apply the discount before ordering.
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 20 of 55
Cisco Software Fulfillment and Infrastructure Technology (SWIFT) Tool
The Cisco Software Fulfillment and Infrastructure Technology (SWIFT) Tool is a framework used for entitlement
and fulfillment of Cisco software licenses. Customers and partners use the tool for customer data entry and
activation of software subscription licenses. Customers and partners who successfully place an order for a
software subscription will receive a Claim Certificate with a Product Activation Key (PAK), which is entered in
SWIFT to provision licenses and associate them to a customer’s deployed appliances.
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 21 of 55
Placing an Order
Quote-to-Deployment Process for Cisco Price List
Before submiting an order, partners and salespeople should understand the quote-to-deployment process for Cisco
Email and Web Security products purchased through the Cisco Price List. Understanding this flow can help ensure
the fastest possible processing of orders and deployment for the customer.
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 22 of 55
Figure 8 shows a sample order.
Figure 8. Try and Buy Offering for Cisco Email and Web Security
1. Standard hardware PID and power cable accessories: The Try and Buy hardware selected should be the
same model as the hardware that the customer expects to run in its production deployment.
2. One Try and Buy software subscription SKU. (The four SKU options are listed in Table 12.)
Note: The TAB software subscription and technical services SKUs can be ordered only as part of a bundle with
standard hardware.
Post-Order Process
If an evaluation license is ordered through a distributor, the distributor drop-ships the order. The order is shipped to
the customer and includes both the hardware and a physical license PAK.
Note: Under the full term or follow-up license ordering process, the customer receives the PAK by eDelivery.
This PAK is entered by the customer in the SWIFT Tool as part of the standard license activation process. At the
time of order, the invoice for the hardware and licenses is put on hold for 90 days. When activated, the license
remains activated for 90 days.
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 23 of 55
End of Evaluation
After this 90-day period, the customer must either keep the hardware unit and purchase a 1-, 3-, or 5-year license
using the standard ordering process or return the hardware using the standard Cisco return process. If the
hardware is not returned at the end of the evaluation period, the invoice is released to the customer for payment.
For more details regarding the Try and Buy process, including enrollment, ordering, and fulfillment, please visit:
http://wwwin.cisco.com/cisco/ops/gtmss/cvs/dlp/tab/-tab=0.
For support with Try and Buy, contact dlp-support@cisco.com or the respective account manager or PSS.
Additional Resources
Additional resources and documentation regarding the new ordering processes and product and service offerings
can be found here at http://www.cisco.com/web/about/ac49/ac0/ac1/ac259/web_security.html.
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 24 of 55
Appendix A: All Part Numbers
Tables 1 through 15 list part numbers for different Cisco Email and Web Security offerings.
Email Security Inbound Bundle ESA-ESI-1Y-S1 Email Security Inbound, 1 YR, 100–199 Users
1 Year SKUs
ESA-ESI-1Y-S2 Email Security Inbound, 1 YR, 200–499 Users
ESA-ESI-1Y-S3 Email Security Inbound, 1 YR, 500–999 Users
Email Security Inbound Bundle ESA-ESI-3Y-S1 Email Security Inbound, 3 YR, 100–199 Users
3 Year SKUs
ESA-ESI-3Y-S2 Email Security Inbound, 3 YR, 200–499 Users
Email Security Inbound Bundle ESA-ESI-5Y-S1 Email Security Inbound, 5 YR, 100–199 Users
5 Year SKUs
ESA-ESI-5Y-S2 Email Security Inbound, 5 YR, 200–499 Users
ESA-ESI-5Y-S3 Email Security Inbound, 5 YR, 500–999 Users
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 25 of 55
Table 2. Email Security Outbound Software Subscription SKUs
Email Security Outbound Bundle ESA-ESO-3Y-S1 Email Security Outbound, 3 YR, 100–199 Users
3 Year SKUs
ESA-ESO-3Y-S2 Email Security Outbound, 3 YR, 200–499 Users
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 26 of 55
Table 3. Email Security Premium Bundle Software Subscription SKUs
Email Security Premium Bundle ESA-ESP-3Y-S1 Email Security Premium, 3 YR, 100–199 Users
3 Year SKUs
ESA-ESP-3Y-S2 Email Security Premium, 3 YR, 200–499 Users
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 27 of 55
Table 4. Web Security Essentials Bundle Software Subscription SKUs
Web Security Essentials Bundle WSA-WSE-3Y-S1 Web Security Essentials, 3 YR, 100–199 Users
3 Year SKUs
WSA-WSE-3Y-S2 Web Security Essentials, 3 YR, 200–499 Users
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 28 of 55
Product Subscription SKU Description
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 29 of 55
Table 5. Web Security Premium Bundle Software Subscription SKU
Web Security Premium Bundle WSA-WSP-3Y-S1 Web Security Premium, 3 YR, 100–199 Users
3 Year SKUs
WSA-WSP-3Y-S2 Web Security Premium, 3 YR, 200–499 Users
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 30 of 55
Product Subscription SKU Description
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 31 of 55
Table 6. Web Security Anti-Malware Bundle Software Subscription SKUs
Web Security Anti-Malware Bundle WSA-WSM-3Y-S1 Web Security Anti-Malware, 3 YR, 100–199 Users
3 Year SKUs
WSA-WSM-3Y-S2 Web Security Anti-Malware, 3 YR, 200–499 Users
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 32 of 55
Product Subscription SKU Description
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 33 of 55
Table 7. Email Security Management Bundle Software Subscription SKUs
Email Security Management SMA-EMGT-3Y-S1 Email Security Management, 3 YR, 100–199 Users
3 Year SKUs
SMA-EMGT-3Y-S2 Email Security Management, 3 YR, 200–499 Users
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 34 of 55
Table 8. Web Security Management Bundle Software Subscription SKUs
Web Security Management SMA-WMGT-3Y-S1 Web Security Management, 3 YR, 100–199 Users
3 Year SKUs
SMA-WMGT-3Y-S2 Web Security Management, 3 YR, 200–499 Users
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 35 of 55
Table 9. Web Security Anti-Malware (A-La-Carte) Software Subscription SKUs
McAfee Anti-Malware (a la carte) WSA-AMM-3Y-S1 McAfee Anti-Malware (a la carte), 3 YR, 100–199 Users
3 Year SKUs
WSA-AMM-3Y-S2 McAfee Anti-Malware (a la carte), 3 YR, 200–499 Users
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 36 of 55
Table 10. Data Loss Prevention (A-La-Carte) Software Subscription SKUs
Data Loss Prevention (a la carte) ESA-DLP-3Y-S1 Data Loss Prevention (a la carte), 3 YR, 100–199 Users
3 Year SKUs
ESA-DLP-3Y-S2 Data Loss Prevention (a la carte), 3 YR, 200–499 Users
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 37 of 55
Product Subscription SKU Description
Data Loss Prevention (a la carte) ESA-DLP-5Y-S1 Data Loss Prevention (a la carte), 5 YR, 100–199 Users
5 Year SKUs
ESA-DLP-5Y-S2 Data Loss Prevention (a la carte), 5 YR, 200–499 Users
Email Encryption (a la carte) ESA-ENC-1Y-S1-K9 Email Encryption (a la carte), 1 YR, 100–199 Users
1 Year SKUs
ESA-ENC-1Y-S2-K9 Email Encryption (a la carte), 1 YR, 200–499 Users
ESA-ENC-1Y-S3-K9 Email Encryption (a la carte), 1 YR, 500–999 Users
Email Encryption (a la carte) ESA-ENC-3Y-S1-K9 Email Encryption (a la carte), 3 YR, 100–199 Users
3 Year SKUs
ESA-ENC-3Y-S2-K9 Email Encryption (a la carte), 3 YR, 200–499 Users
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 38 of 55
Product Subscription SKU Description
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 39 of 55
Product Subscription SKU Description
Email Encryption (a la carte) ESA-ENC-5Y-S1-K9 Email Encryption (a la carte), 5 YR, 100–199 Users
5 Year SKUs
Cloudmark Anti-Spam (a la carte) ESA-CLM-3Y-S1 Cloudmark Anti-Spam (a la carte), 3 YR, 100–199 Users
3 Year SKUs
ESA-CLM-3Y-S2 Cloudmark Anti-Spam (a la carte), 3 YR, 200–499 Users
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 40 of 55
Product Subscription SKU Description
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 41 of 55
Table 13. Image Analyzer (A-La-Carte) Software Subscription SKUs
Image Analyzer (a la carte) ESA-IA-3Y-S1 Image Analyzer (a la carte), 3 YR, 100–199 Users
3 Year SKUs
ESA-IA-3Y-S2 Image Analyzer (a la carte), 3 YR, 200–499 Users
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 42 of 55
Product Subscription SKU Description
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 43 of 55
Table 14. McAfee Anti-Virus (A-La-Carte) Software Subscription SKUs
McAfee Anti-Virus (a la carte) ESA-MFE-3Y-S1 McAfee Anti-Virus (a la carte), 3 YR, 100–199 Users
3 Year SKUs
ESA-MFE-3Y-S2 McAfee Anti-Virus (a la carte), 3 YR, 200–499 Users
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 44 of 55
Product Subscription SKU Description
Cisco Anti-Spam (a la carte) ESA-AS-1Y-S1 Cisco Anti-Spam (a la carte), 1 YR, 100–199 Users
1 Year SKUs
ESA-AS-1Y-S2 Cisco Anti-Spam (a la carte), 1 YR, 200–499 Users
Cisco Anti-Spam (a la carte) ESA-AS-3Y-S1 Cisco Anti-Spam (a la carte), 3 YR, 100–199 Users
3 Year SKUs
ESA-AS-3Y-S2 Cisco Anti-Spam (a la carte), 3 YR, 200–499 Users
ESA-AS-3Y-S3 Cisco Anti-Spam (a la carte), 3 YR, 500–999 Users
Cisco Anti-Spam (a la carte) ESA-AS-5Y-S1 Cisco Anti-Spam (a la carte), 5 YR, 100–199 Users
5 Year SKUs
ESA-AS-5Y-S2 Cisco Anti-Spam (a la carte), 5 YR, 200–499 Users
ESA-AS-5Y-S3 Cisco Anti-Spam (a la carte), 5 YR, 500–999 Users
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 45 of 55
Product Subscription SKU Description
Sophos Anti-Virus (a la carte) ESA-SO-1Y-S1 Sophos Anti-Virus (a la carte), 1 YR, 100–199 Users
1 Year SKUs
ESA-SO-1Y-S2 Sophos Anti-Virus (a la carte), 1 YR, 200–499 Users
Sophos Anti-Virus (a la carte) ESA-SO-3Y-S1 Sophos Anti-Virus (a la carte), 3 YR, 100–199 Users
3 Year SKUs
ESA-SO-3Y-S2 Sophos Anti-Virus (a la carte), 3 YR, 200–499 Users
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 46 of 55
Product Subscription SKU Description
Sophos Anti-Virus (a la carte) ESA-SO-5Y-S1 Sophos Anti-Virus (a la carte), 5 YR, 100–199 Users
5 Year SKUs
ESA-SO-5Y-S2 Sophos Anti-Virus (a la carte), 5 YR, 200–499 Users
Outbreak Filters (a la carte) ESA-OF-1Y-S1 Outbreak Filters (a la carte), 1 YR, 100–199 Users
1 Year SKUs
ESA-OF-1Y-S2 Outbreak Filters (a la carte), 1 YR, 200–499 Users
Outbreak Filters (a la carte) ESA-OF-3Y-S1 Outbreak Filters (a la carte), 3 YR, 100–199 Users
3 Year SKUs
ESA-OF-3Y-S2 Outbreak Filters (a la carte), 3 YR, 200–499 Users
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 47 of 55
Product Subscription SKU Description
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 48 of 55
Table 18. Intelligent Multi-Scan (A-La-Carte) Software Subscription SKUs
Intelligent Multi-Scan (a la carte) ESA-IMS-3Y-S1 Intelligent Multi-Scan (a la carte), 3 YR, 100–199 Users
3 Year SKUs
ESA-IMS-3Y-S2 Intelligent Multi-Scan (a la carte), 3 YR, 200–499 Users
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 49 of 55
Table 19. Advanced Web Security Reporting (A-La-Carte) Software Subscription SKUs
Advanced Web Security Reporting (a la carte) SMA-WSPL-3Y-S1 Advanced Web Reporting, 3 YR, 100–199 Users
3 Year SKUs
SMA-WSPL-3Y-S2 Advanced Web Reporting, 3 YR, 200–499 Users
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 50 of 55
Table 20. Existing Cisco Email Security Appliance x60 Series Cisco SMARTnet Renewal SKUs
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 51 of 55
Appendix B: Example Quotes
Tables B1 and B2 are example order configurations of Cisco Email and Web Security offerings and the
corresponding IronPort configurations that are no longer sold. The purpose of these examples is to illustrate what a
basic order may look like and how it compares to an order that would have been ordered under the no-longer-
active IronPort process. A mapping tool has been created to provide guidance with translating past IronPort
offerings to the new Cisco offerings. You can access the mapping tool and instructions at: Legacy IronPort to Cisco
Part Number Mapping Tool.
Customer Profile
Mailboxes 7,500
Term 3Y
Quantity SKU
New GLPSKU
Customer Profile
Mailboxes 7,500
Term 3Y
Hardware 3 x C370s
Software Anti-Spam + Anti-Virus + Outbreak Filters
Quantity SKU
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 52 of 55
Web Security Order
Table 2. Web Security Order
Customer Profile
Users 1,500
Term 3Y
Quantity SKU
1 Web Bundle, Dual Appliances, 3 Years Web Usage 1,500 WBUN-2A-EN-DBE-3Y
Controls, 3 Years Web Reputation, 3 Years Dual Anti-
Malware Filtering, On-Box Reporting and 3 Years Platinum
Support
Customer Profile
Users 7,499
Term 3Y
Hardware 2 x S170s
Software Web Reputation + Anti-Malware (Webroot and Sophos) + Web Usage Controls
Quantity SKU
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 53 of 55
Appendix C: Additional Information
Email Encryption
Cisco has announced end-of-sale and end-of-life schedules for the IronPort Encryption Appliance and associated
features. Cisco will not be selling this product and its associated features to new customers or existing customers
who do not already have the product. However, current customers who have the IronPort Encryption Appliance
product may renew the product licenses for one year prior to the end-of-life date. The orderable renewal SKUs are
listed in Table 9 in an earlier section of this guide.
Delivery Mode
On the legacy IronPort price list, the Delivery Mode solution was offered as part of a separate C370D-BUN-R-
hardware appliance. Purchase of this part number entitled the customer to both the hardware appliance and the
associate Delivery Mode software license. The Delivery Mode functionality will now be offered as a separate
software license that can be applied to a standard ESA-C370-K9 hardware unit. This license (ESA-DMODE-LIC=)
is a fixed-price, perpetual license and will be associated to the standard email appliance via the same process as
all other Email Security software licenses. As with the legacy offering, no other Email Security software licenses
(e.g., ESA-ESP-LIC=) may be activated on an appliance that has an activated DMODE license.
Cisco Web Security WSA-S370-NT-K9 Enterprises and service providers with up to 4990 users
WSA-S670-NT-K9 High-performance enterprises with up to 10,000 users
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 54 of 55
Fiber Hardware
For customers deploying Cisco Email and Web Security Appliances with their fiber networks, five fiber-enabled
options are available. Table C2 lists these options.
*Accessory required. See Table 11 above for 1G and 10G fiber option accessories.
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 55 of 55