Cisco Content Security Management Appliance Data Sheet

Data Sheet

Available Languages

Download Options

  • PDF
    (485.3 KB)
    View with Adobe Reader on a variety of devices
Updated:October 3, 2019

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Available Languages

Download Options

  • PDF
    (485.3 KB)
    View with Adobe Reader on a variety of devices
Updated:October 3, 2019
 

 

Centralize management and reporting functions across multiple Cisco® Email Security Appliances (ESAs) and Cisco Web Security Appliances (WSAs) with the Cisco Content Security Management Appliance (SMA). The integration of Cisco SMA with Cisco ESAs and WSAs simplifies the planning and administration of email and web security, improves compliance monitoring, makes possible a consistent enforcement of acceptable-use policies, and enhances threat protection.

Organizations must often coordinate the management and administration of multiple appliances across geographically dispersed teams with a limited staff and budget. Built on a robust platform optimized for reporting and tracking, the Cisco SMA delivers high performance and scalability plus industry-leading protection and control for long-term investment value.

Features and benefits

Features and benefits of the Cisco SMA are discussed in the following sections and described in more detail in Table 1.

Simplified administration and planning

Using the Cisco SMA’s easy-to-use intuitive interface, network managers can publish policy settings and configuration changes from a single console to multiple Cisco ESAs and WSAs. Alternatively, organizations can dedicate specific appliances to individual applications for high-volume deployments.

In addition, network managers can be notified when security appliances exceed their recommended capacity. The Cisco SMA reports the number of transactions per second and the system’s latency, response time, and proxy buffer memory. This information enables network managers to determine when they need to reconfigure the system or install additional appliances.

Improved compliance monitoring and enforcement

Centralized reporting and tracking help determine which users are in violation of acceptable use policies, identify policy infractions across any department or site, and monitor the use of Web 2.0 applications such as Facebook and YouTube as well as visits to URLs in specific categories such as “gambling” or “sports.”

By centralizing the management of multiple appliances, administrators can enforce consistent acceptable use policies across the organization.

Enhanced threat protection

The Cisco SMA delivers a comprehensive view of an organization’s security operations, providing better threat intelligence, defense, and remediation. Important features include the centralized management of email spam quarantine, comprehensive threat monitoring across multiple web security gateways, web reputation scoring, and botnet detection. The Cisco SMA’s reporting capabilities can also be used to help administrators identify and address activities involving Data Loss Prevention (DLP).

High performance and scalability

The Cisco SMA has two proprietary databases optimized for reporting and tracking, rather than a single generic database. Appropriate computations are applied to each query for the rapid generation of real-time reports.

Built on the high-performance Cisco AsyncOS® operating system, the Cisco SMA provides industry-leading scalability to meet the demands of small, medium-sized, and large enterprises as well as service providers.

Flexible deployment with the cisco content security management virtual appliance

The Cisco Content Security Management Virtual Appliance (SMAV) significantly lowers the cost of managing email and web security, especially in highly distributed networks. Your network manager can create instances where and when they are needed, using your existing network infrastructure. The Cisco SMAV is a software version of the Cisco SMA and runs on top of a VMware ESXi hypervisor and Cisco Unified Computing System (Cisco UCS®) servers. You will receive an unlimited number of Cisco SMAV instances with the purchase of a SMA software license for any of the Cisco Email or Web Security software bundles.

With the Cisco SMAV, you can respond instantly to increasing traffic growth with simplified capacity planning. You don’t need to buy and ship appliances, so you can support new business opportunities without adding complexity to a data center or having to hire additional staff.

Table 1.             Features and benefits of the Cisco SMA and SMAV

Feature

Benefits

Centralized management and reporting

The Cisco SMA simplifies administration by publishing configurations from a single management console to multiple Cisco WSAs. Updates and settings are managed centrally on that console rather than on the individual appliances. Organizations can dedicate specific appliances to individual applications for high-volume deployments.

Fully integrated reporting allows traffic data from multiple Cisco ESAs and WSAs to be consolidated.

Message tracking

Data is aggregated from multiple Cisco ESAs, including data categorized by sender, recipient, message subject, and other parameters. Scanning results, such as spam and virus verdicts, are also displayed, as are policy violations.


Web tracking

A record of individual web transactions is maintained, with information such as IP address, username, domain name, time accessed, and other details. Visibility is provided into employee use of Web 2.0 applications such as Facebook, YouTube, and instant messaging.

Web reporting

Web tracking information is aggregated in real time and displayed in a high-level, easy-to-use graphical format. Reporting features help administrators determine the websites, URL categories, and applications that employees can access on company devices.

Spam quarantining

Spam and marketing messages are stored centrally with the easy-to-use self-service Cisco Spam Quarantine solution. Large enterprises with multiple Cisco ESAs can offload their spam traffic to one location for easier tracking and provide a single point for employee access.

Threat monitoring

Data about web-based threats is provided in real time, including, for example, which users are encountering the most blocks or warnings, and which websites and URL categories pose the biggest risks. Malware and other threats that Cisco WSAs have detected and blocked are also reported.

Reputation scoring

This feature provides detailed information about the reputation scores of the websites that users access. These scores are based on data provided by Cisco WSAs, which analyze web server behavior and assign a score to each URL that reflects the likelihood that it contains malware.

Botnet detection

Ports and systems with potential malware connections are displayed. Data from the Layer 4 traffic monitoring feature on Cisco WSAs can help organizations detect and remediate botnet-infected hosts.

Product specifications

Cisco SMAs are built to meet the requirements of organizations of different sizes and to complement all Cisco ESAs and Cisco WSAs. Table 2 presents the performance specifications, Table 3 presents the hardware specifications, and Table 4 presents the ordering information for the Cisco SMA.

Table 2.         Cisco SMA performance specifications

 

Number of Users*

Model

Disk Space

RAID Mirroring

Memory

CPUs

Large enterprise

10,000 or more

Cisco SMA M695

9.6 TB

(16 x 600-GB SAS)

Yes (RAID 10)

32 GB DDR4

2 x 2.1GHz, 8C

Large enterprise

10,000 or more

Cisco SMA M690

6.0 TB

(10 x 600-GB SAS)

Yes (RAID 10)

32 GB DDR4

2 x 2.4GHz, 6C

Midsize office

2000 to 10,000

Cisco SMA M395

4.8 TB

(8 x 600-GB SAS)

Yes (RAID 10)

16 GB DDR4

1 x 2.1GHz, 12C

Midsize office

2000 to 10,000

Cisco SMA M390

3.6 TB

(6 x 600-GB SAS)

Yes (RAID 10)

16 GB DDR4

2 x 2.4GHz, 6C

Small business or branch office

Up to 2000

Cisco SMA M195

1.2 TB

(2 x 600-GB SAS)

Yes (RAID 1)

16 GB, DDR4

1 x 2.1GHz, 8C

Small business or branch office

Up to 2000

Cisco SMA M190

1.2 TB

(2 x 600-GB SAS)

Yes (RAID 1)

8 GB, DDR4

1 x 1.9GHz, 6C

*Please confirm sizing guidance with a Cisco content security specialist to help ensure that your solution will meet your current and projected needs.

Table 3.         Cisco SMA hardware specifications

 

Cisco SMA M695

Cisco SMA M690

Hardware platform

datasheet_C78-721194_0.jpg

datasheet_C78-721194_1.jpg

Form factor

2 Rack Units (2RU)

2 Rack Units (2RU)

Dimensions
(H x W x D)

3.4 x 16.9 x 29.5 in.

(8.64 x 42.92 x 74.93 cm)

3.4 in. x 19 in. x 29 in.

(8.6 cm. x 48.3 cm. x 73.7 cm.)

Redundant power supply

Yes

Yes

Remote power cycle

Yes

Yes

DC power option

No

Yes (930W)

Hot-swappable hard drive

Yes

Yes

Power Consumption

3582 BTU/hr

2216.5 BTU/hr

Power Supply

1050W

650W

Ethernet interfaces

6 port 1G Base-T copper network interface (NICs), RJ - 45

6 port 1G Base-T copper network interface (NICs), RJ - 45

Speed (Mbps)

10/100/1000, autonegotiate

10/100/1000, autonegotiate

Fiber option

Yes, separate SKU

2-port 1GBASE-SX Fiber or 10GBASE-SR Fiber selectable upon ordering (modules included): SMA-C695F

Yes, separate SKUs

2 port 1G Base-SX Fiber:

SMA-M690-1G

2 port 10G Base-SR Fiber:

SMA-M690-10G

HD Size

Sixteen 600 GB hard disk drives (2.5” 12G SAS 10K RPM) are installed into front-panel drive bays that provide hot-swappable access for SAS drives

Ten 600 GB hard disk drives (2.5” 10K SAS 4Kn) are installed into front-panel drive bays that provide hot-swappable access for SAS drives

CPU

Two 2.1GHz 8c 2400MHz processor

Two E5–2620 v3 processors

RAM

Two 16GB DDR4-2666 DIMM1

Four 8GB DDR4-2133 DIMM1

 

 

Cisco SMA M395

Cisco SMA M390

Hardware platform

datasheet_C78-721194_2.jpg

datasheet_C78-721194_3.jpg

Form factor

1 Rack Unit (1RU)

1 Rack Unit (1RU)

Dimensions
(H x W x D)

1.7 x 16.89 x 29.8 in.

(4.32 x 43.0 x 75.6 cm)

1.7 in. x 19 in. x 31 in.

(4.3 cm. x 48.3 cm. x 78.7 cm.)

Redundant power supply

Yes

Yes

Remote power cycle

Yes

Yes

DC power option

No

No

Hot-swappable hard drive

Yes

Yes

Power Consumption

2626 BTU/hr

2626 BTU/hr

Power Supply

770W

770W

Ethernet interfaces

6 port 1G Base-T copper network interface (NICs), RJ - 45

6 port 1G Base-T copper network interface (NICs), RJ - 45

Speed (Mbps)

10/100/1000, autonegotiate

10/100/1000, autonegotiate

Fiber option

No

No

HD Size

Has eight 600 GB Hard Disk drives

Has six 600 GB Hard Disk drives

CPU

One 2.1GHz 12c 2400MHz processor

Two E5–2620 v3 processor

RAM

One 16GB DDR4-2666 DIMM1

Two 8GB DDR4-2133 DIMM1

 

 

Cisco SMA M195

Cisco SMA M190

Hardware platform

datasheet_C78-721194_4.jpg

datasheet_C78-721194_5.jpg

Form factor

1 Rack Unit (1RU)

1 Rack Unit (1RU)

Dimensions
(H x W x D)

1.7 x 16.89 x 29.8 in.

(4.32 x 43.0 x 75.6 cm)

1.7 in. x 19 in. x 31 in.

(4.3 cm. x 48.3 cm. x 78.7 cm.)

Redundant power supply

Yes, Accessory option

Yes, Accessory option

Remote power cycle

Yes

Yes

DC power option

No

No

Hot-swappable hard drive

Yes

Yes

Power Consumption

2626 BTU/hr

2626 BTU/hr

Power Supply

770W

770W

Fiber option

No

No

Ethernet interfaces

2 port 1G Base-T copper network interface (NICs), RJ - 45

2 port 1G Base-T copper network interface (NICs), RJ - 45

HD Size

1.2 TB (2 x 600 12G SAS 10K RPM SFF HDD)

1.2 TB (2 x 600-GB SAS)

CPU

1 x 2.1GHz, 8C

1 x 1.9GHz, 6C

RAM

16 GB, DDR4

8 GB, DDR4

Speed (Mbps)

10/100/1000, autonegotiate

10/100/1000, autonegotiate

Table 4.         Cisco SMAV

SMA Users

SMA Users

Model

Disk

Memory

Cores

Evaluations only

Cisco SMAV M000v

250 GB (10K RPM SAS)

4 GB

1 (2.7 GHz)

Small Enterprise (up to 1K)

Cisco SMAV M100v

250 GB (10K RPM SAS)

6 GB

2 (2.7 GHz)

Medium Enterprise (up to 5K)

Cisco SMAV M300v

1024 GB (10K RPM SAS)

8 GB

4 (2.7 GHz)

Large enterprise or service provider

Cisco SMAV M600v

2032 GB (10K RPM SAS)

8 GB

8 (2.7 GHz)

Servers

Cisco UCS

datasheet_C78-721194_6.jpg

VMware ESXi 6.0 and 6.5 Hypervisor

datasheet_C78-721194_7.jpg

Table 5.             Ordering information for the Cisco SMA

Part Number

Description

SMA-M695/690-K9

Cisco M695/690 (for organizations of more than 10,000 users)

SMA-M395/390-K9

Cisco M395/390 (for organizations of up to 10,000 users)

SMA-M195/190-K9

Cisco M195/190 (for organizations of up to 1000 users)

Why Cisco?

Security is more critical to your network than ever before. As threats and risks persist, along with concerns about confidentiality and control, security is necessary for providing business continuity, protecting valuable information, and maintaining brand reputation. Cisco security solutions embedded into the fabric of your network enable you to connect to the right information with a high degree of security without disrupting your business. No organization understands network security like Cisco. Our market leadership, industry-leading threat protection and prevention, innovative products, and longevity make us the right vendor to serve your security needs.

Cisco environmental sustainability

Information about Cisco’s environmental sustainability policies and initiatives for our products, solutions, operations, and extended operations or supply chain is provided in the “Environment Sustainability” section of Cisco’s Corporate Social Responsibility (CSR) Report.

Reference links to information about key environmental sustainability topics (mentioned in the “Environment Sustainability” section of the CSR Report) are provided in the following table:

Sustainability topic

Reference

Information on product material content laws and regulations

Materials

Information on electronic waste laws and regulations, including products, batteries, and packaging

WEEE compliance

Cisco makes the packaging data available for informational purposes only. It may not reflect the most current legal developments, and Cisco does not represent, warrant, or guarantee that it is complete, accurate, or up to date. This information is subject to change without notice.

Cisco Capital

Flexible payment solutions to help you achieve your objectives

Cisco Capital makes it easier to get the right technology to achieve your objectives, enable business transformation and help you stay competitive. We can help you reduce the total cost of ownership, conserve capital, and accelerate growth. In more than 100 countries, our flexible payment solutions can help you acquire hardware, software, services and complementary third-party equipment in easy, predictable payments. Learn more.

For more information

For more information about the Cisco Content Security Management Appliances, visit https://www.cisco.com/go/sma or contact your local account representative.

The best way to understand the benefits of the Cisco Content Security Management Appliances is to participate in the Try before You Buy program. To receive a fully functional evaluation appliance to test in your network, free for 45 days, visit https://www.cisco.com/go/sma.

Learn more