ISE-review
Updated July 15, 2024

ISE-review

Ali Mehraban | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User

Overall Satisfaction with Cisco Identity Services Engine (ISE)

I use Cisco Identity Services Engine (ISE) to streamline network access control and enhance security. The product addresses critical business problems such as unauthorized network access and compliance with security policies. The scope of our use case includes secure network access for employees, guests, and IoT devices, as well as implementing posture assessments for other clients to ensure devices meet security standards before accessing the network.

Pros

  • can connect to different directories like AD, Azure AD
  • very good on profiling endpoints
  • implementing secure wired, wireless, and VPN connections
  • running posture scan on endpoint to check company security posture policy
  • Centralized policy management that ISE unifies the creation and enforcement of security policies
  • ISE securely manages temporary guest network access

Cons

  • recently direct DUO connection was added on 3.3 patch 2 and needs more patch for this version
  • for posture check on applications, some of the Cisco rivals are missing like ZSCALER
  • The UI could be more intuitive and user-friendly, making it easier for administrators to navigate and manage policies.
  • Expanding integration options with more third-party security tools and platforms would enhance the versatility of ISE.
  • The investment in Cisco ISE has significantly enhanced our ability to secure customer data and ensure compliance with security standards, resulting in a positive ROI.
  • Cisco ISE provides comprehensive visibility into all endpoints connected to our networks, improving our ability to monitor and manage network security effectively.
  • While Cisco ISE's posture assessment feature is beneficial, extending its availability to the Advantage license tier would further increase its value and accessibility.
Cisco Identity Services Engine (ISE) stands out due to its comprehensive network access control and security features. Unlike Cisco ASA 5500-X with FirePOWER Services, which focuses on firewall and intrusion prevention, ISE provides detailed endpoint profiling, posture assessment, and robust policy enforcement. Compared to Cisco Catalyst Center, which excels in centralized network management, ISE offers deeper security integrations and identity-based access controls. The Cisco Catalyst 9800 Series Wireless Controllers and Cisco Catalyst Switches are excellent for managing wireless and wired networks, respectively, but they lack the advanced security features and compliance capabilities of ISE. We selected ISE for its ability to unify security policies across diverse network environments, ensuring secure access for all users and devices.

Do you think Cisco Identity Services Engine (ISE) delivers good value for the price?

Yes

Are you happy with Cisco Identity Services Engine (ISE)'s feature set?

Yes

Did Cisco Identity Services Engine (ISE) live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of Cisco Identity Services Engine (ISE) go as expected?

Yes

Would you buy Cisco Identity Services Engine (ISE) again?

Yes

Cisco Identity Services Engine (ISE) is particularly well-suited for organizations that need robust network access control and security. It serves as a very effective RADIUS server, providing centralized authentication, authorization, and accounting. ISE excels in environments with diverse devices and user groups, ensuring secure access for employees, guests, and IoT devices. It is also highly effective in profiling endpoints and running posture assessments to maintain compliance with security policies. However, for small organizations with limited IT resources, the complexity of ISE might be overwhelming, and they might benefit from a simpler solution.

Comments

More Reviews of Cisco Identity Services Engine (ISE)