AlgoSec vs. Cisco Identity Services Engine (ISE) vs. Symantec Advanced Threat Protection

It works okay for auditing existing network systems but seems to have trouble with cloud configurations.

Incentivized

Cisco ISE integrates will with a Cisco solution such as firewalls, network switches and routers. It does an incredible job of granting access based on the role that an individual or groups have, and the ability to remove access to that individual or group is also east. In our environment ISE is used to authenticate external users that have access by vpn, and also to manage access to the large network infrastructure

Incentivized

It is valuable software for when it comes to a large or medium organization, since it helps to protect the endpoints, but as the number of servers increases its value increases. However, it is important to keep in mind that when it comes to low end devices, its protection can affect their performance. This is because it is not a software with a very light agent.

Incentivized

• Firewall policy overview and optimisation by rule reordering and suggestions to delete unused rules
• Network map overview and implement topology changes based on source destination and port
• Pci audit results and recommendations for a better score
• Discover application based flows through auto-discovery and make changes to those flow.

Incentivized

• The most beneficial thing that I love about it, there are tons of things that I love about ISE and that it does well, but the most fascinating that I feel about is its integration with DNA center or Catalyst Center using PX Grid as the protocol wherein ISE acts as a policy server for the entire campus hand in hand with Catalyst Center to make sure that the policy policy follows the user and also in the background hand in hand with DNA Center or Catalyst Center makes sure microsegmentation is implemented so that east west traffic is blocked and takes care of the campus.

Incentivized

• The incident management piece is the heart and soul of the product. A single area where all data in relation to network and email protection is available.
• Works well in conjunction with the standard Symantec Endpoint product.
• URL Protection is advanced and very helpful
• Technical support is great and definitely the best I have ever seen for a "anti-virus" type product.

Incentivized

• AlgoSec need to work on their support in India.
• Insufficient documentation.
• It should support other platforms like GCP, Alibaba, etc.

Incentivized

• Trustsec needs more documentation and configuration best practice examples
• The licensing model can be difficult to explain and understand for customers
• Difficult to get an accurate benchmark to know exactly how many Cisco Identity Services Engine nodes and the size of the deployment should be

Incentivized

• I don't like that I have to maintain the client and keep it up to date. Updating the client is not a very easy process.
• Deploying the client could be easier. They have a deployment tool, but it doesn't really get to all PCs, which means I still have to manually deploy it.
• Because the product has so much customization, it can also be very difficult to set up and understand.

Incentivized

We are so very reliant on Cisco Identity Services Engine at this point that finding another solution would be a big hassle for us.

Incentivized

Symantec Advanced Threat Protection has done a sufficient job at identifying true positives. However, the UI could be improved and the amount of false positives is a little too frequent for my liking

Incentivized

It worked great for on-site systems but does not scale effectively.

Incentivized

For us the solution is very easily useable on its own. Perhaps that has to do because we started using ISE in the 1.2 days and have seen it grow during the years. Policy creation, etc. is all very visible and thus easy to use. Deployment of multiple nodes is also incredibly easy and flexible. You can easily add or remove nodes as you wish.

Incentivized

There is a small learning curve, but compared to other AV products it is fairly simple and easy to catch onto

Incentivized

We do have to occasionally reboot the servers when they get low on memory, but we're also a few versions behind. Availability has generally been pretty good though with no major outages in the time that we've had it implemented.

Incentivized

yes it does. depending on where you coming from. Logs are pretty busy same as report. it also depending on devices count and design.

Incentivized

Cisco support is second to none, both in terms of how you access support but also the knowledge of the individual support teams. If you focus on one technology and provide "manufacturer support" then you can rest assured that you are accessing Cisco's top individuals. I feel like this is a USP for Cisco support.

Incentivized

Support responds fast for higher priority issues, they have always been good at solving the problems we encounter.

Incentivized

Training can only cover certain areas, there are a lot of areas training just can't cover. You have to learn by doing it.

Incentivized

I think our system integrators lacks some competencies and this has led to an implementation that is still perfectible. (i.e. dedicating an interface for intra-cluster communication)

Incentivized

No, besides to review documentation prior to beginning. That is what helped lead to a smooth implementation

Incentivized

User friendliness of Algosec is great!

Incentivized

I think all give some visibility of device monitoring and management, but Cisco Identity Services Engine gives a good way to manage more details about the device in a centralized way that gives a wider range of monitoring and control than the other softwares individually. I don't think Cisco Identity Services Engine eliminates the need for these other software as of now, but there is potential for Cisco Identity Services Engine to be able to take over more of these roles.

Incentivized

Frankly, the other products were too expensive to make the change from Symantec so we continued with the tried and true protection. We don't have the funding to move to a more expensive product and the manpower that it would take to implement a new solution.

Incentivized

Cisco ISE was competitively priced and Cisco was able to leverage some of our existing contracts to help ease the purchase.

Incentivized

It's fully customised and comprehensive. only thing is you need to know what you want. Proper research and planning would save lots of time and effort .

Incentivized

• Algosec has helped customers across the globe optimize their firewall policies and bring the best performance off their devices
• AlgoSec supports a wide range of devices and is constantly working to include support for many others
• The support and professional services team at AlgoSec is very knowledgeable and supportive.

Incentivized

• I don't know about negatives because we haven't seen it right now, but positive impact is one is the roadmap we have. And now since we are going ahead with doing the deployment of Cisco ISE, we see that we are getting closure to, so at the end of the day, we have to make sure that operationally we stay excellent. So that's where operational excellence comes in. Cisco ISE is basically addressing that for us. Right now we are in a situation if there is a WIFI issue or if there is an authentication issue, it gets really difficult to isolate the problem. But with Cisco ISE , this functionality is going to come in. So we believe that it would be a good ROI.

Incentivized

• Some digital assets were lost due to failures to detect various threats.
• We had to use other products in combination in order to trust that all threats were actually detected, taking extra time. We couldn't use just SATP.
• Ability to quickly manage/deploy via AD made maintenance of the application itself quick and easy.

Incentivized