Likelihood to Recommend
Overall, management is not terrible if you have a stable network that is not overly complex. If you don't, this product will take considerable time to plan for an effective solution. I will say support is not very helpful, so if you need assistance after the initial sales rep assisted setup, good luck and be prepared to spend hours on the phone.
Read full review
With proper design, VMware NSX can and should be deployed to virtually any VMware virtualization environment, but the deployment should be tailored to the needs of that environment. There isn't really a one size fits all deployment design for all environments. That versatility is what provides its greatest strength to a business.
Read full review Pros Manage high-privilege access to communications equipment. It allows to be granular in the permissions, to have it integrated with the LDAP users and, most importantly, to audit what tasks each user performed. Profile users and devices and assign privileges and access levels based on that combination. It greatly improves the user experience, since it does not depend on the network it is in, but on the access levels it has depending on the device. It also allows self-managed guest access with approval flow, which is essential for our business. It has also allowed us to automate actions based on findings from StealWatch, Umbrella, AMP, etc. Read full review End to end encryption on the wire. Micro-segmentation. Integrates well with existing VMWare environment. Integrates well with our existing network. Read full review Cons in first place, and by far, licensing is a pain, unclear (even within cisco, see TAC cases we raised) Endpoint Group management could be improved, we can't modify/alter the hierarchical structure on the fly On ISE2.7 API is weak... hopefully 3.x is adressing that issue. Upgrade process is painfull and long (rebuild, test, load backup, switchover) Read full review Interoperability in multi-vendor environments Advanced networking and packet acceleration options can be improved Read full review Usability
For us the solution is very easily useable on its own. Perhaps that has to do because we started using ISE in the 1.2 days and have seen it grow during the years. Policy creation, etc. is all very visible and thus easy to use. Deployment of multiple nodes is also incredibly easy and flexible. You can easily add or remove nodes as you wish.
Read full review Support Rating
Cisco support is second to none, both in terms of how you access support but also the knowledge of the individual support teams. If you focus on one technology and provide "manufacturer support" then you can rest assured that you are accessing Cisco's top individuals. I feel like this is a USP for Cisco support.
Read full review Alternatives Considered
So the security team selected Forescout because of its inventory functionality. We have had to utilize Cisco ISE though to actually push the SGT Policies as well as the SGACL mappings and the SXP Propagation across the switch infrastructure. There is a lot more configuration that has to happen in Forescout in order for it to manage the switches.
Read full review
We use both
and VMware NSX, and while they have different strengths and capabilities, I would recommend VMware NSX, as it can be used in all VMware environments, without costly physical infrastructure changes.
provides some of the same capabilities, but not all. It's focus relies on physical networking changes.
Read full review Return on Investment Cisco ISE is fairly expensive, but I feel that the time it saves our team is well worth it. We have been able to roll this our to all of our teams, and they can each manage their own device and it is really convenient to have each team mange their own devices Once it is deployed and configured, it seems like there isn't much upkeep, so we don't have to hire someone to manage it we do it by committee. Read full review Ability to move workloads more easily with the ability to stretch/move networks across multiple physical locations. The added flexibility allows you to expedite tech refreshes since you're no longer constrained by the hardware. Read full review ScreenShots