Cisco Identity Services Engine (ISE) vs WatchGuard Network Security

• Manage high-privilege access to communications equipment. It allows to be granular in the permissions, to have it integrated with the LDAP users and, most importantly, to audit what tasks each user performed.
• Profile users and devices and assign privileges and access levels based on that combination. It greatly improves the user experience, since it does not depend on the network it is in, but on the access levels it has depending on the device. It also allows self-managed guest access with approval flow, which is essential for our business.
• It has also allowed us to automate actions based on findings from StealWatch, Umbrella, AMP, etc.

Read full review

• Great combination of easy to configure but still maintaining a lot of in-depth features and control available if desired
• WatchGuard Cloud [is ]included on basic and total security packages to provide [a] valuable look into [an] activity that passes through the firewall. (A lot of other platforms such as Meraki you need to simply use Syslog and third-party tools to get insights and look for issues that need remediation)
• Cohesive integration with other products such as AuthPoint for MFA adds value you can't get from traditional RADIUS only integrations of other platforms.

Read full review

• ISE could really make improvements on software updates and patches. The updates and patches typically take a very long time to install.
• ISE could improve some of its technical documentation on how to implement certain features that ISE can offer.

Read full review

• It would be nice to have a fully functional web interface [for the] server manager. The server manager is often very slow over remote connections.
• Better support for OpenVPN server, or at least an easier way of creating tunnels using OpenVPN.
• user VPN user management is a little confusing until you understand that all users need to be created under SSL users, regardless of VPN type.
• Would be nice to have traffic statistics on traffic management objects.

Read full review

• ISE has allowed us to handle the sticky problem of giving IoT/gaming student devises network access. It allows hands-off management for roughly 2,000 users.
• Attempting to get posturing and profiling working consistently has been a bear. The workflow is so convoluted it took dozens of man-hours to get it working in a test environment.
• Centralized TACACS access to NADs has shaved 10-20% of our time spent configuring various boxes.

Read full review

• VPN has meant my users are secure even when they are not in the office, this has reduced risk when they are using public networks and home networks that IT cannot regulate.
• The increased security provided by the firewalls has enabled us to positively answer questions on customers' RFI assessments to their potential customers.
• Central Management in Dimension saves our engineers time by not having to jump onto every firewall one by one.

Read full review