Cisco Identity Services Engine (ISE) vs FortiGate

• Manage high-privilege access to communications equipment. It allows to be granular in the permissions, to have it integrated with the LDAP users and, most importantly, to audit what tasks each user performed.
• Profile users and devices and assign privileges and access levels based on that combination. It greatly improves the user experience, since it does not depend on the network it is in, but on the access levels it has depending on the device. It also allows self-managed guest access with approval flow, which is essential for our business.
• It has also allowed us to automate actions based on findings from StealWatch, Umbrella, AMP, etc.

Read full review

• It is the most reliable NGFW that we have ever been touch with it.
• You can easily upgrade the firewall cluster firmware without user attention!!!
• User IDentity based feature is fantastic and intrusion prevention just works with least false-positive possible.
• Very reachfull and intuitive GUI, just love it

Read full review

• ISE could really make improvements on software updates and patches. The updates and patches typically take a very long time to install.
• ISE could improve some of its technical documentation on how to implement certain features that ISE can offer.

Read full review

• When we switched to Fortinet Fortigate, it took some time getting used to and become familiar with the new interface. Being used to strictly command-line interfaces, a full GUI-based firewall was something brand new. Careful planning had to be done when creating rules to ensure we didn't miss anything. However, once we got used to the new GUI interface, going from one Fortinet product to another was simple, as Fortinet used the same interface for all of its devices.

Read full review

• ISE has allowed us to handle the sticky problem of giving IoT/gaming student devises network access. It allows hands-off management for roughly 2,000 users.
• Attempting to get posturing and profiling working consistently has been a bear. The workflow is so convoluted it took dozens of man-hours to get it working in a test environment.
• Centralized TACACS access to NADs has shaved 10-20% of our time spent configuring various boxes.

Read full review

• Fortigates have an interesting bundle model for support and subscription services that make it an attractive option to deploy Firewall, IDS, Ant-virus, anti-SPAM in a single device. The cost of the bundle is pretty much what you pay for the device, not requiring huge expenditures on it's time to renew the hardware.

Read full review