SolarWinds Access Rights Manager (ARM) vs. Cisco Identity Services Engine (ISE)

It [SolarWinds Access Rights Manager (ARM)] is well suited for small to medium sized companies who want to enhance and ease up their daily work. As well as it is suited for organized structures, it has its problems with very complex environments. For example, if you are working with direct and multiple permissions instead of having more granular group based permissions.

Incentivized

Overall, management is not terrible if you have a stable network that is not overly complex. If you don't, this product will take considerable time to plan for an effective solution. I will say support is not very helpful, so if you need assistance after the initial sales rep assisted setup, good luck and be prepared to spend hours on the phone.

Incentivized

• SolarWinds Access Rights Manager is easy to set up and configure. We had the first report generated in a few hours.
• The automated feature for the reports is great. We just set it and forget it and now the reports get emailed on schedule.

Incentivized

• Manage high-privilege access to communications equipment. It allows to be granular in the permissions, to have it integrated with the LDAP users and, most importantly, to audit what tasks each user performed.
• Profile users and devices and assign privileges and access levels based on that combination. It greatly improves the user experience, since it does not depend on the network it is in, but on the access levels it has depending on the device. It also allows self-managed guest access with approval flow, which is essential for our business.
• It has also allowed us to automate actions based on findings from StealWatch, Umbrella, AMP, etc.

Incentivized

• Licensing model when we changed over to SolarWinds was [I feel] a nightmare. It needs to be more streamlined and SolarWinds needs to understand what their customers require. When we changed over to SolarWinds we found it very hard to get answers to what modules we were still licensed for.
• Our current system is not functioning. We can't login to the application with the accounts we created that were working. The error that appears doesn't help to resolve it. So at present we just renewed licenses for this year and we can't use the system.

Incentivized

• I guess the user experience itself, it's sometimes a little bit slow, but this is also dependent on the platform and the scale of the deployment of course. But actually functionality-wise it's really, really good. But yeah, it could sometimes be a little quicker to react on the good front.

Incentivized

It is in place and working. No time or money to consider anything else.

Incentivized

We are so very reliant on Cisco Identity Services Engine at this point that finding another solution would be a big hassle for us.

Incentivized

End user experience is much better than administration

Incentivized

For us the solution is very easily useable on its own. Perhaps that has to do because we started using ISE in the 1.2 days and have seen it grow during the years. Policy creation, etc. is all very visible and thus easy to use. Deployment of multiple nodes is also incredibly easy and flexible. You can easily add or remove nodes as you wish.

Incentivized

On occasion the server will need to be restarted to get things running again

Incentivized

We do have to occasionally reboot the servers when they get low on memory, but we're also a few versions behind. Availability has generally been pretty good though with no major outages in the time that we've had it implemented.

Incentivized

Satisfactory performance

Incentivized

ISE performance has never been an issue for us. The system doesn't tend to slow down at all.

Incentivized

Very slow response times and sometimes I found the solution and ended up sharing it with support

Incentivized

Cisco support is second to none, both in terms of how you access support but also the knowledge of the individual support teams. If you focus on one technology and provide "manufacturer support" then you can rest assured that you are accessing Cisco's top individuals. I feel like this is a USP for Cisco support.

Incentivized

It was my first exposure to this type of product and I wasn’t given the time to figure out how best to implement it. I would say get a plan together of what you are tying to accomplish first

Incentivized

I did participate in the implementation of Cisco ISE and while there were times when it was confusing and we had a lot of trial and error, overall the experience was fine.

Incentivized

I found the installation and configuration to be much easier and more straightforward. What also assisted in the decision to go with Access Rights Manager, was the fact we already made use of Solarwinds products. Knowing from previous experiences with their support staff, meant we knew how great their after-hours support was whenever we had any technical issues with the platform. We felt it would be better to keep it all under one roof so to speak

Incentivized

So the security team selected Forescout because of its inventory functionality. We have had to utilize Cisco ISE though to actually push the SGT Policies as well as the SGACL mappings and the SXP Propagation across the switch infrastructure. There is a lot more configuration that has to happen in Forescout in order for it to manage the switches.

Incentivized

No experience with this

Incentivized

Yes, we have the ability to scale ISE to however many nodes and clusters we want, but of course this takes time and money for licenses.

Incentivized

• Team leads recieve automated reports of permissions within their team, and it allows them to proactively audit their team members
• Security specialists have really clear dashboards to audit individuals
• We can be sure we never leave a permission open after a person leaves

Incentivized

• Cisco ISE is fairly expensive, but I feel that the time it saves our team is well worth it.
• We have been able to roll this our to all of our teams, and they can each manage their own device and it is really convenient to have each team mange their own devices
• Once it is deployed and configured, it seems like there isn't much upkeep, so we don't have to hire someone to manage it we do it by committee.

Incentivized