TrustRadius: an HG Insights company

Cisco Identity Services Engine (ISE) vs. Zscaler Internet Access

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Cisco Identity Services Engine (ISE)

    Score9 out of 10
    N/AThe Cisco Identity Services Engine (ISE) offers a network-based approach for adaptable, trusted access everywhere, based on context. It gives the user intelligent, integrated protection through intent-based policy and compliance solutions.N/A

    Zscaler Internet Access

    Score8.9 out of 10
    N/AZscaler Internet Access™ (ZIA) is a secure web gateway (SWG), delivering cloud native cyberthreat protection and zero trust access to the internet and SaaS apps.N/A
    Pricing
    Cisco Identity Services Engine (ISE)Zscaler Internet Access
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    Cisco Identity Services Engine (ISE)Zscaler Internet Access
    Free Trial
    NoNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoYes
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    Cisco Identity Services Engine (ISE)Zscaler Internet Access
    Considered Both Products
    Cisco
    No answer on this topic
    Zscaler
    Chose Zscaler Internet Access
    Better end user experience, simplicity, and innovation.
    Incentivized
    Key User Insights
    Would buy again
    97%
    Would buy again
    144 Answers
    99%
    Would buy again
    284 Answers
    Delivers good value for the price
    97%
    Delivers good value for the price
    128 Answers
    98%
    Delivers good value for the price
    245 Answers
    Happy with the feature set
    96%
    Happy with the feature set
    142 Answers
    99%
    Happy with the feature set
    284 Answers
    Lived up to sales and marketing promises
    93%
    Lived up to sales and marketing promises
    99 Answers
    97%
    Lived up to sales and marketing promises
    207 Answers
    Implementation went as expected
    84%
    Implementation went as expected
    115 Answers
    93%
    Implementation went as expected
    227 Answers
    Features
    Cisco Identity Services Engine (ISE)Zscaler Internet Access
    Identity Management
    Comparison of Identity Management features of Cisco Identity Services Engine (ISE) and Zscaler Internet Access
    Feature
    Cisco Identity Services Engine (ISE)
    -
    Ratings
    Zscaler Internet Access
    5.0
    2 Ratings
    55% below category average
    Multi-Factor Authentication00 Ratings5.02 Ratings
    Endpoint Security
    Comparison of Endpoint Security features of Cisco Identity Services Engine (ISE) and Zscaler Internet Access
    Feature
    Cisco Identity Services Engine (ISE)
    -
    Ratings
    Zscaler Internet Access
    10.0
    2 Ratings
    11% above category average
    Endpoint Detection and Response (EDR)00 Ratings10.02 Ratings
    Threat Intelligence
    Comparison of Threat Intelligence features of Cisco Identity Services Engine (ISE) and Zscaler Internet Access
    Feature
    Cisco Identity Services Engine (ISE)
    -
    Ratings
    Zscaler Internet Access
    8.5
    216 Ratings
    7% above category average
    Network Analytics00 Ratings8.7217 Ratings
    Threat Recognition00 Ratings8.3214 Ratings
    Vulnerability Classification00 Ratings8.5191 Ratings
    Automated Alerts and Reporting00 Ratings8.2205 Ratings
    Threat Analysis00 Ratings8.8203 Ratings
    Threat Intelligence Reporting00 Ratings8.5199 Ratings
    Automated Threat Identification00 Ratings8.5192 Ratings
    Zero Trust Security
    Comparison of Zero Trust Security features of Cisco Identity Services Engine (ISE) and Zscaler Internet Access
    Feature
    Cisco Identity Services Engine (ISE)
    -
    Ratings
    Zscaler Internet Access
    8.9
    262 Ratings
    4% above category average
    Continuous Verification00 Ratings8.7245 Ratings
    Secure Web Gateways00 Ratings9.0236 Ratings
    Network Flow Control00 Ratings8.1217 Ratings
    Network Traffic Analysis00 Ratings8.8219 Ratings
    Segmentation Leveraging00 Ratings8.6194 Ratings
    Admin Access Control00 Ratings9.1230 Ratings
    Network Data Encryption00 Ratings8.8207 Ratings
    Network Topology Mapping00 Ratings10.02 Ratings
    Best Alternatives
    Cisco Identity Services Engine (ISE)Zscaler Internet Access
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    FireMon
    Score7.9 out of 10
    No answers on this topic
    Enterprises
    Cisco IOS Security
    Score9.6 out of 10
    Forescout Vistaro Platform
    Score6.6 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Cisco Identity Services Engine (ISE)Zscaler Internet Access
    Likelihood to Recommend
    9.0
    (146 ratings)
    9.0
    (295 ratings)
    Likelihood to Renew
    9.4
    (4 ratings)
    8.4
    (6 ratings)
    Usability
    7.9
    (6 ratings)
    8.8
    (279 ratings)
    Availability
    9.4
    (4 ratings)
    7.3
    (1 ratings)
    Performance
    9.0
    (1 ratings)
    5.5
    (1 ratings)
    Support Rating
    7.3
    (7 ratings)
    7.1
    (10 ratings)
    Online Training
    -
    (0 ratings)
    7.3
    (1 ratings)
    Implementation Rating
    8.4
    (4 ratings)
    8.4
    (2 ratings)
    Configurability
    8.0
    (1 ratings)
    8.4
    (2 ratings)
    Contract Terms and Pricing Model
    8.4
    (2 ratings)
    -
    (0 ratings)
    Ease of integration
    7.2
    (4 ratings)
    -
    (0 ratings)
    Product Scalability
    8.0
    (1 ratings)
    7.3
    (1 ratings)
    Vendor post-sale
    10.0
    (1 ratings)
    8.4
    (3 ratings)
    Vendor pre-sale
    9.0
    (1 ratings)
    7.3
    (2 ratings)
    User Testimonials
    Cisco Identity Services Engine (ISE)Zscaler Internet Access
    Likelihood to Recommend
    Cisco
    Well suited... I've used it for both wired and wireless access, and it's perfect for that. In addition to enforcing security on the port, you can also lock down east-west traffic. When you get to the point where you're configuring secure group tags and things like that, you can keep people from getting to places they shouldn't. Basically, you could turn your entire network into a firewall if you wanted to. You can secure access based on the identity of any given user through role-based authentication. For example, if you have salespeople and you don't want them accessing your financial or PCI environment, they authenticate as a salesperson and you can completely stop them from getting to any of that. That's really important, especially for us. Our payment card infrastructure servers are heavily locked down. Granted, in our situation, we firewall all that off anyway, but you still don't want some random individual to be able to even attempt that sort of thing. That's what it's really good for. I'm trying to think of a weakness. I don't know. We don't really struggle with it. There's nothing that I use it for where I wish it were better, at least not that I can think of offhand. I'm sure there are things, I just can't think of anything off the top of my head.
    Incentivized
    Read full review
    Zscaler
    I feel the product is very good to set up basic standards and go beyond that in many aspects. However, due to being sometimes too simple, it limits the ability to do some other complex changes. Having the ability to do both would be ideal for some, if not all, of the products within Zscaler Internet Access. A simple setup to have it stand-up, and more advanced settings for those more experienced.
    Incentivized
    Read full review
    Pros
    Cisco
    • manageable scaled administrative access to network devices as needed
    • Great use as a radius server which allows proper authentication and authorization into the network
    • Multiple conditions that can be utilized to grant users access based on their role in the organization
    Incentivized
    Read full review
    Zscaler
    • Provides a secure VPN connection point for endpoint connectivity.
    • Provides the VPN connectivity in a fast and reliable connection state.
    • Very dependable, once connected the connection stays up and there's no fuss.
    • Very good at letting you know when you are not authenticated.
    • Very easy to authenticate and regain access when your session times out.
    Incentivized
    Read full review
    Cons
    Cisco
    • Trustsec needs more documentation and configuration best practice examples
    • The licensing model can be difficult to explain and understand for customers
    • Difficult to get an accurate benchmark to know exactly how many Cisco Identity Services Engine nodes and the size of the deployment should be
    Incentivized
    Read full review
    Zscaler
    • ZS CLI support to turn off ZIA and ZDX service specifically on mac.
    • Better visibility into failed posture devices, including a timeline and the reason the posture failed (This is about the Zscaler mobile portal: Enrolled devices --> Failed posture devices).
    Incentivized
    Read full review
    Likelihood to Renew
    Cisco
    We are so very reliant on Cisco Identity Services Engine at this point that finding another solution would be a big hassle for us.
    Incentivized
    Read full review
    Zscaler
    While Zscaler Internet Access (ZIA) delivers critical value in cloud security and RBI compliance, I rate renewal likelihood 7/10 due to evolving needs versus platform limitations. Below is my rationale:
    Key Gaps:
    1. Advanced Threat Costs:
    ZIA’s add-ons (e.g., Advanced DLP, Sandboxing) incur 35%+ cost premiums – straining budgets as transaction volumes (UPI/iMobile) grow 50% YoY.
    2. API Banking Scalability:
    ZIA’s API rate limits throttle real-time policy sync during UPI peaks (10K+ TPS), forcing workarounds for finacle integrations.
    3. RBI Future-Proofing:
    Limited native support for upcoming digital rupee (CBDC) security rules requires custom development, increasing compliance overhead.
    Incentivized
    Read full review
    Usability
    Cisco
    For us the solution is very easily useable on its own. Perhaps that has to do because we started using ISE in the 1.2 days and have seen it grow during the years. Policy creation, etc. is all very visible and thus easy to use. Deployment of multiple nodes is also incredibly easy and flexible. You can easily add or remove nodes as you wish.
    Incentivized
    Read full review
    Zscaler
    Getting started was pretty straightforward. We can tell the product is way more robust than we are using it. It started as a replacement for previous DNS-blocking content filtering, but we're exploring how this will add value with an upcoming DLP redesign and with traffic optimization at some of our remote sites with severe bandwidth limits.
    Incentivized
    Read full review
    Reliability and Availability
    Cisco
    We do have to occasionally reboot the servers when they get low on memory, but we're also a few versions behind. Availability has generally been pretty good though with no major outages in the time that we've had it implemented.
    Incentivized
    Read full review
    Zscaler
    No answers on this topic
    Performance
    Cisco
    yes it does. depending on where you coming from. Logs are pretty busy same as report. it also depending on devices count and design.
    Incentivized
    Read full review
    Zscaler
    There are often performance issues reported
    Incentivized
    Read full review
    Support Rating
    Cisco
    Cisco support is second to none, both in terms of how you access support but also the knowledge of the individual support teams. If you focus on one technology and provide "manufacturer support" then you can rest assured that you are accessing Cisco's top individuals. I feel like this is a USP for Cisco support.
    Incentivized
    Read full review
    Zscaler
    Zscaler's ZIA support is quick and knowledgable. They respond within 1-2 hours of you submitting your ticket. They are very thorough and are typically ready to jump on a live troubleshooting session. Our ZIA platform and how we use is it unique so at times tickets can be open for weeks but we alway get quality support compared to other unrelated product support in our enterprise
    Incentivized
    Read full review
    Online Training
    Cisco
    Training can only cover certain areas, there are a lot of areas training just can't cover. You have to learn by doing it.
    Incentivized
    Read full review
    Zscaler
    No answers on this topic
    Implementation Rating
    Cisco
    I think our system integrators lacks some competencies and this has led to an implementation that is still perfectible. (i.e. dedicating an interface for intra-cluster communication)
    Incentivized
    Read full review
    Zscaler
    good the engineer give excellent support and eplanation
    Incentivized
    Read full review
    Alternatives Considered
    Cisco
    I think all give some visibility of device monitoring and management, but Cisco Identity Services Engine gives a good way to manage more details about the device in a centralized way that gives a wider range of monitoring and control than the other softwares individually. I don't think Cisco Identity Services Engine eliminates the need for these other software as of now, but there is potential for Cisco Identity Services Engine to be able to take over more of these roles.
    Incentivized
    Read full review
    Zscaler
    The overall user community and scope of supportability outweighed the others on our short list. Netskope was a close second, but the risk, though small, was greater than that of bringing Zscaler aboard. We were looking for a mature, well-supported, highly functional, and fine-grained solution that met all our user and information security requirements.
    Incentivized
    Read full review
    Contract Terms and Pricing Model
    Cisco
    Cisco ISE was competitively priced and Cisco was able to leverage some of our existing contracts to help ease the purchase.
    Incentivized
    Read full review
    Zscaler
    No answers on this topic
    Scalability
    Cisco
    It's fully customised and comprehensive. only thing is you need to know what you want. Proper research and planning would save lots of time and effort .
    Incentivized
    Read full review
    Zscaler
    No answers on this topic
    Return on Investment
    Cisco
    • I don't know about negatives because we haven't seen it right now, but positive impact is one is the roadmap we have. And now since we are going ahead with doing the deployment of Cisco ISE, we see that we are getting closure to, so at the end of the day, we have to make sure that operationally we stay excellent. So that's where operational excellence comes in. Cisco ISE is basically addressing that for us. Right now we are in a situation if there is a WIFI issue or if there is an authentication issue, it gets really difficult to isolate the problem. But with Cisco ISE , this functionality is going to come in. So we believe that it would be a good ROI.
    Incentivized
    Read full review
    Zscaler
    • I would say it has a very good ROI, as whenever someone can't access something, they submit a ticket to our network engineer, and within minutes, the site is safely added to ZIA with best-practice configurations. After seeing a little of the UI from the Zenith event, it seems very user-friendly to control these policies.
    Incentivized
    Read full review
    ScreenShots

    Cisco Identity Services Engine (ISE) Screenshots

    Screenshot of Cisco Identity Services Engine (ISE)

    Zscaler Internet Access Screenshots

    Screenshot of an overview of Zscaler Internet Access (ZIA), a cloud native security service edge (SSE) solution that builds on a decade of secure web gateway leadership. Offered as a scalable SaaS platform through Zscaler's security cloud, it replaces legacy network security solutions, preventing advanced attacks and data loss with a comprehensive zero trust approach. ZIA is integrated into the Zscaler Zero Trust Exchange™ to provide superior defense-in-depth, secure connectivity, end user experience, and administrative visibility and control.