ISE-review
Overall Satisfaction with Cisco Identity Services Engine (ISE)
I use Cisco Identity Services Engine (ISE) to streamline network access control and enhance security. The product addresses critical business problems such as unauthorized network access and compliance with security policies. The scope of our use case includes secure network access for employees, guests, and IoT devices, as well as implementing posture assessments for other clients to ensure devices meet security standards before accessing the network.
Pros
- can connect to different directories like AD, Azure AD
- very good on profiling endpoints
- implementing secure wired, wireless, and VPN connections
- running posture scan on endpoint to check company security posture policy
- Centralized policy management that ISE unifies the creation and enforcement of security policies
- ISE securely manages temporary guest network access
Cons
- recently direct DUO connection was added on 3.3 patch 2 and needs more patch for this version
- for posture check on applications, some of the Cisco rivals are missing like ZSCALER
- The UI could be more intuitive and user-friendly, making it easier for administrators to navigate and manage policies.
- Expanding integration options with more third-party security tools and platforms would enhance the versatility of ISE.
- The investment in Cisco ISE has significantly enhanced our ability to secure customer data and ensure compliance with security standards, resulting in a positive ROI.
- Cisco ISE provides comprehensive visibility into all endpoints connected to our networks, improving our ability to monitor and manage network security effectively.
- While Cisco ISE's posture assessment feature is beneficial, extending its availability to the Advantage license tier would further increase its value and accessibility.
Cisco Identity Services Engine (ISE) stands out due to its comprehensive network access control and security features. Unlike Cisco ASA 5500-X with FirePOWER Services, which focuses on firewall and intrusion prevention, ISE provides detailed endpoint profiling, posture assessment, and robust policy enforcement. Compared to Cisco Catalyst Center, which excels in centralized network management, ISE offers deeper security integrations and identity-based access controls. The Cisco Catalyst 9800 Series Wireless Controllers and Cisco Catalyst Switches are excellent for managing wireless and wired networks, respectively, but they lack the advanced security features and compliance capabilities of ISE. We selected ISE for its ability to unify security policies across diverse network environments, ensuring secure access for all users and devices.
Do you think Cisco Identity Services Engine (ISE) delivers good value for the price?
Yes
Are you happy with Cisco Identity Services Engine (ISE)'s feature set?
Yes
Did Cisco Identity Services Engine (ISE) live up to sales and marketing promises?
I wasn't involved with the selection/purchase process
Did implementation of Cisco Identity Services Engine (ISE) go as expected?
Yes
Would you buy Cisco Identity Services Engine (ISE) again?
Yes


Comments
Please log in to join the conversation