Cisco ISE (Identity Services Engine) Review

Delivers great Posture Assessment Policy Management and VLAN Assignment

What is our primary use case?

Our company doesn't use Cisco ISE internally. We act as the solution reseller. Our business model is set up to provide a network-based approach for adaptable, trusted access to our clients. We provide our clients with intelligent, integrated protection through intent-based policy and compliance solutions.

What is most valuable?

We found that the most valuable features associated with this tool are posture assessment, policy management, VLAN assignments, guest assignment, and BYOD services. In addition to these services, the Cisco IOS software switch configuration feature is another very valuable aspect of the policy and compliance solution.

What needs improvement?

There are issues with respect to the posture assessment function. It's been observed that customers are not receiving total access to the network because the assessment agent is glitchy and malfunctions from time-to-time. I would like to see refining of the compliance assessment and adding more detailed compliance of endpoints on the user end.

We have also had to deal with some cache update issues in conjunction with Cisco's tech support team. Unfortunately, they had trouble providing suitable solutions within specific and desirable time frames.

The next release should offer more inter-operability, increased cross-integration functionality. 

What do I think about the stability of the solution?

We are currently experiencing stability issues with this solution.

How are customer service and technical support?

Technical support needs improvement. There were times when my engineers had to talk to a number of different Cisco tech engineers explaining things over and over again. If their tech support has to escalate an issue our support staff is required to mediate which of course disturbs workflows.

How was the initial setup?

The setup requires proper planning. We approach every customer interaction strategically taking into account the complete project scope. It's our job to understand the customer's expectations and requirements for deployment.

Initially, the setup is a bit tough with respect to the graphic user interface (GUI) tool. Cisco ISE has proven to be a bit complex as well.

What other advice do I have?

The solution is sufficient and seems to require little to no maintenance from the client side. Maintenance is always in proportion to the client's needs and product deployment. For instance when we are managing two Cisco ISE boxes with two onsite engineers. As capacity grows obviously we need more engineers; it's not a 1-to-1 relationship but we always take a minimum of two certified engineers qualified to manage Cisco ISE.

I would give this solution a rating of 7 out of 10.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
Add a Comment
Sign Up with Email