Cisco ISE Review
June 15, 2023

Cisco ISE Review

Anonymous | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
Verified User

Overall Satisfaction with Cisco Identity Services Engine (ISE)

Today it is used for TACACS/Device Administration as well as SGT Mappings, SGACL distribution and SXP Propagation for Trustsec. It addresses our need for TACACS Authentication with DUO integration for 2 Factor.

At Previous employment, I used all arrays to include TACACS, profiling, posture enforcement, Wired and Wireless radius auth (EAP TLS) as well as guest portal and Web Auths. At this company it meet the universities need for Device management as well as NAC.
  • TACACS Device Authentication
  • Radius Authentication for clients
  • Device Profiling and having flexibility for customization
  • The ability to utilize airospace for a single VPN and utilize Groups instead of having to manage so many DAP policies
  • The user interface has improved but could still get better
  • The upgrade and deployment process can get time consuming
  • More integration without the need for pxgrid
  • License for users and features be more simplified
  • It has helped with device administration
  • Helped reduce the amount spent for illegal downloads mitigation
  • Helped with the new AnyConnect agent and single client management point
So the security team selected Forescout because of its inventory functionality. We have had to utilize Cisco ISE though to actually push the SGT Policies as well as the SGACL mappings and the SXP Propagation across the switch infrastructure. There is a lot more configuration that has to happen in Forescout in order for it to manage the switches.

Do you think Cisco Identity Services Engine (ISE) delivers good value for the price?

Yes

Are you happy with Cisco Identity Services Engine (ISE)'s feature set?

Yes

Did Cisco Identity Services Engine (ISE) live up to sales and marketing promises?

Yes

Did implementation of Cisco Identity Services Engine (ISE) go as expected?

Yes

Would you buy Cisco Identity Services Engine (ISE) again?

Yes

In most areas it has been able to meet the needs of the organization. The only area that was not was the posture enforcement on the campus environment where we had tons of IoT or BYOD devices and managing the levels for the OS Patching and Antivirus became a nightmare