We performed a comparison between Cisco ISE (Identity Services Engine), Forescout Platform, and Fortinet FortiNAC based on real PeerSpot user reviews.
Find out what your peers are saying about Cisco, HPE Aruba Networking, Fortinet and others in Network Access Control (NAC)."It integrates with the rest of our platform, like our firewall, and helps us a lot. It also does a good job establishing trust for every access request."
"It's easy to change and add policies."
"Our clients like Cisco ISE because they already use various Cisco solutions. It's easy for them to use this solution because they have an engineer with Cisco certifications."
"It is scalable because we use a network load balancer at the front of the PSN. It can be extended as we want to multiply. It's scalable to our environment. We have around 8,000 users and we are planning to expand it."
"The ability to allow or deny hosts onto the network is valuable. It provides great security to the network environment."
"One of the advantages is that you can easily find rogue endpoints. For example, if you don't want to allow any endpoints where you don't know the people plugging into what kind of devices, ISE can give you a big, clear picture, e.g., what kind of endpoints are getting connected to your network. That is one of the advantages."
"After the product was installed, no one could access the secure connection network. In order for any laptop or any endpoint device to attach to my network, it needs to be authorized or be certified to be connected."
"The biggest value of ISE is that it can get so granular with gaming systems, versus IoT and BYOD."
"The plugins are very robust -- the ability scanner, patch management system, and SQL integrator."
"The most valuable features of ForeScout is the fact that it can do network access control either with 802.1x or without 802.1x."
"Provides a good overview of all devices on a network."
"This is clearly the best product for the NAC use cases in this field for Forescout."
"Ease of deployment There's a great support team that becomes actively engaged whenever we encounter issues. Their technical support is amazing. Good documentation is available. The product is stable. The solution is highly scalable. I recommend using the solution because it gives verified control over the environment. It has a great visibility feature."
"The most valuable feature is the blocking of USB devices."
"Forescout Platform's best feature is plug-in integration."
"Forescout is easy to integrate with a lot of end systems."
"There are some features that are working well."
"All the features of Fortinet FortiNAC are valuable."
"The support responds to our queries within two to four hours."
"The most valuable features of Fortinet FortiNAC are access control, automation, artificial intelligence, analysis, and security, and it is a unified solution. You can combine a lot of features within the solution."
"It's easy to connect to a VPN without any hassles."
"It's a very good solution and one thing I have noted is its simplicity and the ease of the set-up process."
"The most valuable aspect of Fortinet FortiNAC is the control it offers."
"When it works, it's great. It keeps things off the network which are supposed to be off the network."
"I would like to see integration with other vendors, and the RADIUS integration needs to be improved a little bit."
"In an upcoming release, it would be nice to have NAC already standard in the solution."
"Migration could be better. Right now, we back up with the new version, and it requires a lot of licensing and other things. Whenever we choose a product, it's very difficult because we have to meet the requirements of each feature. There is no standard feature, so the best system that we bought may not fit the solution. We have to look at every feature that the customer uses. If you compare it with other products like Aruba, it's not the same. With Cisco, I have to read all about the features on this version and the licensing required for the product. In Aruba, that thing is covered when you get one license because it covers almost everything. It could also be more scalable."
"A lot of people tell you the hardware requirements for ISE are pretty substantial. If you're running a virtual environment, you're going to be dedicating quite a bit of resources to an ISE VM. That is something that could be worked on."
"There are issues with respect to the posture assessment function. It's been observed that customers are not receiving total access to the network because the assessment agent is glitchy and malfunctions from time-to-time. I would like to see refining of the compliance assessment and adding more detailed compliance of endpoints on the user end."
"If I was going to improve anything, it would be the ease of migration. It's really difficult at the moment if you're looking to upgrade ISE 2.1 and you want to go to ISE 3.1 or 3.2, that whole upgrade path and, particularly, the licensing is quite a minefield to sort out."
"The licensing documentation needs to be better."
"The templates could be better. When you have to do certs, especially with X.500 certs, it isn't very intuitive."
"Initially, the implementation of the Forescout Platform took some time to figure out. The reason is we are a manufacturing unit and we have certain silos that are insulated areas where certain systems will not connect to the internet or to the LAN. Since there are many parts of it, we have to have an inclusive view of all those systems. It took a while for us to initially implement, but after a few months, everything worked well."
"The reporting feature needs improvement."
"For the user, the policy that they have implemented sometimes needs adjustments. Sometimes the features that the customer asks for aren't involved in the main installation, and I need to bolt an add-on in. However, I never know if this policy is the right one when I do this."
"This solution is not that easy to scale but this depends on a company's needs."
"Multitenancy should be included in the next version so it could be used as a managed service provider."
"I believe that the overall user experience has not always been preferable."
"Although Forescout manages endpoints and network devices, there is no capability for user management."
"Custom integrations need to be better."
"The product must make its UI similar to other Fortinet products."
"The solution's licensing price should be improved."
"They need to change or upgrade the technology in the product."
"The platform must enable troubleshooting."
"Classifications and visibility need to be improved a lot. They have to start work on being agentless. Agentless means they need to have strong integration with Windows."
"FortiNAC could be more scalable."
"Technical support could improve their response times."
"Admin UI could be better matched and easier to use; it cannot work as a RADIUS server."
More Cisco ISE (Identity Services Engine) Pricing and Cost Advice →