Cisco Secure Email part numbers: Gateway bundles and Email Threat Defense

Gateway bundles or Email Threat Defense: what you order

Cisco Secure Email is bought in one of two ways, and many organisations buy both.

• Secure Email Gateway bundles, ordered under CSEMAIL-SEC-SUB. The gateway filters mail before it reaches your mailboxes, and it can run in Cisco's cloud (Cloud Gateway), on your own servers or as a hybrid. Cisco sells it as two bundles, Essentials and Advantage.
• Secure Email Threat Defense, ordered under ETD-SEC-SUB. Cisco describes it as addressing security gaps in Microsoft 365, with detection, investigation and protection against advanced threats and visibility of inbound, outbound and internal messages. It was called Cloud Mailbox Defense until Cisco renamed it.

Cisco lists Email Threat Defense as an add-on to both gateway bundles, so a common pattern is a gateway bundle for mail flow plus ETD-SEC-SUB for Microsoft 365 mailboxes. An organisation on Microsoft 365 that only wants protection inside the mailbox can order Email Threat Defense on its own.

For how each product works, see Cisco Secure Email Gateway (opens in a new tab) and Cisco Email Threat Defense (opens in a new tab) on our Cisco security site. This page covers the part numbers and how to buy them.

How Cisco Secure Email licensing works

Cisco's Secure Email licensing page (opens in a new tab) states that licences are per user, and Email Threat Defense is also counted per user. Count the people whose mail is protected, not the number of domains or servers.

CSEMAIL-SEC-SUB is the offer Cisco names for ordering the Essentials and Advantage bundles. The bundle licence codes under it differ for cloud, on-premises and hybrid deployments, so we confirm them in your quote along with the term. Both bundles include Cisco's malware defense and analytics; the main differences are:

Cisco also offers domain protection (DMARC) and an image analyser as add-ons to either bundle, and central management for on-premises and hybrid gateways (it is included in cloud licences). The Encryption Service is included in Advantage, and its add-on code for Essentials is confirmed at quote. For the full comparison see Cisco Secure Email (opens in a new tab).

Cisco Secure Email part numbers

Current Secure Email codes from Cisco's own notices. Order one CSEMAIL-SEC-SUB for an Essentials or Advantage gateway bundle and one ETD-SEC-SUB for Email Threat Defense. Users are counted on the bundle licence under each, and those licence codes (cloud, on-premises or hybrid) and the Encryption Service add-on are confirmed at quote.

Part numbers from Cisco EOL14510, email bundles moved to CSEMAIL-SEC-SUB (updated 3 March 2022) (opens in a new tab); Cisco EOL15301, Cloud Mailbox Defense moved to ETD-SEC-SUB (updated 4 April 2024) (opens in a new tab), checked 2026-11-08. Add the licences you need to your basket and request a quote: we confirm the right part numbers, quantities and terms when we quote.

Choosing between the bundles and Email Threat Defense

A few questions settle most Cisco Secure Email orders:

• Does your mail need to pass through a gateway? If you want filtering before delivery, outbound policy, data loss prevention or encryption on sent mail, start with a gateway bundle. Advantage includes data loss prevention and encryption, which makes it the simpler choice when either is a requirement.
• Are your mailboxes in Microsoft 365? Email Threat Defense works with Microsoft 365 and gives visibility of internal mail as well as inbound and outbound messages. Add it to a bundle, or order it alone.
• Are you renewing Premier or Cloud Mailbox Defense? Both have been withdrawn; the table below shows the codes Cisco moves them to.
• Do you want several Cisco products together? Email Threat Defense is also part of Cisco's security suites, covered below.

The price-list codes on this page are bought on an annual subscription, billed annually or prepaid over the term, with the term agreed when we quote. Users added during the term join the same subscription and renew on the same date.

Replaced Secure Email part numbers

If an old quote or renewal notice shows one of these codes, this is what replaces it:

Cisco's migration path for Premier is the Advantage bundle with Email Threat Defense added separately, and existing Premier subscriptions are supported until 30 November 2030. Cisco says Cloud Mailbox Defense customers who renew on ETD-SEC-SUB keep the same feature coverage. Bundles ordered under Cisco's earlier email subscriptions moved to CSEMAIL-SEC-SUB in March 2022 (EOL14510 (opens in a new tab)). These old codes cannot be ordered, so they have no basket buttons.

Secure Email in Cisco's security suites

Email Threat Defense is also included in Cisco's security suites, licensed per covered user:

• User Protection Suite: both tiers include Email Threat Defense, with Secure Access and Duo
• Breach Protection Suite: every tier includes Email Threat Defense Essentials, with Cisco Secure Endpoint and Cisco XDR

Cisco also offers the suites through its Provider Pricing programme for managed service providers. See Cisco security suites part numbers for the suite codes, or compare other email security products we supply.

How we help

Tell us how many people need protecting, whether your mail runs through Microsoft 365 or another platform, whether you need data loss prevention or encryption on outbound mail, and when any existing Premier or Cloud Mailbox Defense subscription ends. We match the bundle to what you need, map old codes to their replacements, and handle the order, renewals and added users on one account.

Add the codes you need to your basket and send them with your enquiry, or simply Contact us and we will build the quote with you.