ISE, a very good tool, but it takes time to take the best of it.
February 11, 2023
ISE, a very good tool, but it takes time to take the best of it.
Score 8 out of 10
Vetted Review
Verified User
Overall Satisfaction with Cisco Identity Services Engine (ISE)
On the management side we use it as our TACACS server to access our network and security devices.
On the campus, ISE is used to handle all AAA Radius requests, dot1x/MAB for corporate endpoints, medical solutions and IoT. It also serves as a guest portal for guests in the hospital.
On the campus, ISE is used to handle all AAA Radius requests, dot1x/MAB for corporate endpoints, medical solutions and IoT. It also serves as a guest portal for guests in the hospital.
- Manage policies in a multi-tenant fashion
- Provides very verbose Radius logs
- Endpoint Visibility is neat, clean and very usefull
- in first place, and by far, licensing is a pain, unclear (even within cisco, see TAC cases we raised)
- Endpoint Group management could be improved, we can't modify/alter the hierarchical structure on the fly
- On ISE2.7 API is weak... hopefully 3.x is adressing that issue.
- Upgrade process is painfull and long (rebuild, test, load backup, switchover)
- Learning curve is long. It takes time to manage it and to become at ease with this tool. But once you have it, it-'s clear and obvious.
- Licence management cost time
- investigate AAA issues requires a lot of experience.
ISE is more efficient and solid than Fortinet product
Do you think Cisco Identity Services Engine (ISE) delivers good value for the price?
Yes
Are you happy with Cisco Identity Services Engine (ISE)'s feature set?
No
Did Cisco Identity Services Engine (ISE) live up to sales and marketing promises?
I wasn't involved with the selection/purchase process
Did implementation of Cisco Identity Services Engine (ISE) go as expected?
No
Would you buy Cisco Identity Services Engine (ISE) again?
Yes