Cisco SA 500 Series Security Appliances

Cisco SA 500 Series Security Appliances

All-in-One Network Security for Small Business

A Simple Solution Built for You

Price and Buy

Cisco SA 500 Series Security Appliances

Cisco SA 500 Series Security Appliances

See the new Small Business Pro all-in-one security appliances, the Cisco SA 500 Series. (2:42 min)

Add Comment - View Comments

Cisco SA 500 Series Security Appliances: Overview

These all-in-one security solutions are designed for businesses with fewer than 100 employees. They combine firewall, VPN, and optional intrusion prevention system (IPS), email, and web security capabilities. Whether in the office or working remotely, your employees can securely access the resources they need, while your business is protected from unauthorized access and Internet threats.

All-in-one device: Combines firewall, IPS, email and web security, and secure access in one box

Secure wireless and remote access: Easily allow mobile workers and branch offices remote, secure access with flexible and easy to use built-in VPNs

Low overhead: Reduce costs associated with deployment and ongoing management and monitoring of the security solution

Affordable service coverage: Deliver service value and peace of mind at a price you can afford

Optional email and web security capabilities:

Cisco ProtectLink Gateway: Cloud-based service that provides strong, automatically updated email and web security

VeriSign Identity Protection (VIP): An easy and effective second level of authentication

Intrusion prevention system (IPS): Identify and take action to stop possible intrusions into the business network

Peer-to-peer, IM traffic blocking and protocol inspection to help increase network security, employee productivity, and network availability for business traffic

Price and Buy

You Might Be Interested In

Cisco AP 541N Wirless Access Points

Cisco SA 500 Series Security Appliances: Features

Cisco SA 500 Series Security Appliances feature all-in-one security, including:

  • Secure remote access to business information with a built-in stateful packet inspection (SPI) firewall and VPN capabilities.
  • Increased security of remote access: With support for optional VeriSign Identity Protection (VIP), the Cisco SA 500 Series provides two-factor authentication and one-time-use password access control.
  • Lower costs associated with deployment and management based on a single, easy-to-install, easy-to-use solution.
  • Prevent security breaches from email threats or malicious websites that could lead to disruption of business-critical applications and services.
  • Increased employee productivity by helping prevent spam, spyware, and inappropriate web browsing with the optional Trend Micro ProtectLink Gateway.
  • Easy deployment and management: The embedded Security Appliance Configuration Utility offers comprehensive configuration and monitoring of all the services in a single application.
  • Affordable service coverage: The highest level of performance and reliability to keep your business running smoothly. Check out Small Business Pro Service.

Cisco 891 and 892 models add:

  • High performance for secure broadband and Metro Ethernet access
  • Dual WAN connections
  • Optional high-speed 802.11n wireless access point with dual radios
  • 8-port 10/100 Mbps managed switch
  • Optional support for 4 Power over Ethernet (PoE) switch ports

Cisco SA 500 Series Security Appliances: Models

Common Features

  • Combined firewall, VPN, and optional email and web security capabilities
  • Easy management and configuration with the Security Appliance Configuration Utility
  • Support for optional intrusion prevention system (IPS) for Cisco SA 500 Series for intrusion prevention, protocol inspection, and peer-to-peer and IM traffic blocking
  • Support for the optional Cisco ProtectLink Gateway for email and web security
  • Support for the optional VeriSign Identity Protection (VIP) for two-factor authentication

Compare Models

Models and Maximum Performance*


SA 520

  • Firewall: 200 Mbps
  • IPsec VPN: 65 Mbps

  • 4 LAN ports
  • 2 SSL VPN seats upgradable to 25 seats max with license
  • 50 IPsec VPN tunnels

SA 520W

  • Firewall: 200 Mbps
  • IPsec VPN: 65 Mbps

  • 4 LAN ports
  • 2 SSL VPN seats upgradable to 25 seats max with license
  • 50 IPsec VPN tunnels
  • Wireless 802.11 b/g/n

SA 540

  • Firewall: 300 Mbps
  • IPsec VPN: 85 Mbps

  • 8 LAN ports
  • 50 SSL VPN seats (included)
  • 100 IPsec VPN tunnels

* Performance test methodology: Maximum performance based on RFC 2544. All results are aggregate bidirectional. Actual performance may vary based on network environment and configuration.



SSL for SA 520 and 520W

  • For use with built-in SSL VPN capability
  • Increases seats from 2 to 25 max
  • Gives remote users easy and highly secure network access with minimal administration
  • SSL VPN uses built-in web browser security capabilities so VPN client is not required

IPS for SA 500 Series

  • Automatically identifies intrusions and takes defensive actions
  • Blocks peer-to-peer and instant messaging traffic
  • Protocol inspection monitors and blocks undesired traffic
  • Helps increase network security, enhance employee productivity, and ensure network availability

VeriSign Identity Protection (VIP) Service

  • Provides advanced two-factor authentication capability that's easy to use and manage
  • Remote users log in with username, password, and unique one-time six-digit security code
  • Unique codes can be generated with mobile phone
  • VeriSign cloud-based solution requires no expensive hardware installation

ProtectLink Gateway

  • Protection from email spam, viruses, phishing, and malware
  • Blocks access to known malicious websites
  • Enforces company Internet use policy and blocks unproductive or inappropriate websites
  • Continuously and automatically updated at Trend Micro cloud-based servers

ProtectLink Endpoint

  • Protect Windows-based systems located inside or out of the office from viruses, spyware, and web threats
  • Enforces company antivirus policy and blocks Internet access for unsecured systems
  • Updates are continuously and automatically pushed to clients

Product Bundles


SA540 Web Bundle

Cisco SA540 Security Appliance with 3- year licenses for IPS for SA520 and Cisco ProtectLink Web

SA540 Gateway 25 Bundle

Cisco SA540 Security Appliance with 3- year licenses for IPS for SA520 and Cisco ProtectLink Gateway for 25 Users

Cisco SA 500 Series Security Appliances: Get Started

Interested? If you're ready to learn more, here's how to get started.


Find a Partner

You can purchase Cisco products and services that are just right for you through a Cisco Certified Channel Partner. All our partners have validated credentials and will work with you to find the best products and solutions for your biggest business challenges.


Services & Support

Maximize reliability, minimize disruptions, and access assistance 24/7 with a small business service option.


Take advantage of flexible financing options, leasing, and special programs and promotions from Cisco Capital.

Managed Services

Have a service provider host and manage a solution for you and review available implementation options.

Let Us Help