Compare Cisco ISE (Identity Services Engine) vs. CyberArk Endpoint Privilege Manager

Cancel
You must select at least 2 products to compare!
Most Helpful Review
Find out what your peers are saying about Cisco, ForeScout, Aruba Networks and others in Network Access Control. Updated: November 2020.
447,718 professionals have used our research since 2012.
Quotes From Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros
"For device administration, all devices have multifactor authentication in collaboration with IT, so it secures access to all of our devices. For guest and wireless access, it's a matter of a lowly manager who we give access to the portal and he can assign access to the guests, so it's a very simple process now. It keeps the IT focusing on their work, and gives the business people the right access.""We have multiple metal devices from different places that use management, so we need to know who would be accessing all those devices and what changes are being done to those metal devices. With Cisco ISE we have visibility of all the changes happening on those devices.""The initial setup was easy. It took around one month. We did the installation part within half an hour to two hours but we found a couple of issues so we raised a case and once everything was resolved it was a month in total.""It is scalable because we use a network load balancer at the front of the PSN. It can be extended as we want to multiply. It's scalable to our environment. We have around 8,000 users and we are planning to expand it.""After the product was installed, no one could access the secure connection network. In order for any laptop or any endpoint device to attach to my network, it needs to be authorized or be certified to be connected.""For guests we give them limited access to the internet when they come in so that access has been useful. Previously, we just used to give them the APN key which they would leave with. Now, we give them credentials to use that are for a limited period of time.""Visitors can be granted access to the wifi network using their cellphones, notebooks or tablets in a very easy way. The ease of accessibility that anyone can have to the network is very quick and is a big improvement in our network.""In terms of scalability, you need to factor in your licenses. With a virtual platform, the scalability is more than sufficient. We have over one thousand users."

More Cisco ISE (Identity Services Engine) Pros »

"This is the number one product for privilege account security.""Monitoring and recording are valuable features, particularly the recording.""It has drastically reduced the attack surface for local administrative rights and the chance of escalation of privilege. We've removed, at this point, close to 98 percent of the local administrative accounts on workstations. If there were an incident, it would stop at that point and we'd be able to know.""The most valuable feature is that it does lifecycle management and that it will change to whatever the end target is."

More CyberArk Endpoint Privilege Manager Pros »

Cons
"The compliance and posture don't always work. They should make it more stable. With each upgrade, we lose some functionality. We have to wait for another upgrade.""Support and integration for the active devices needs to be worked on. Their features mainly work well with Mac devices. If we use an HP the Mac functionalities may no longer be able to deliver.""Since we have started, we struggled a lot to implement this solution into our network, and we opened a case a couple of times. Up until this point, nothing else needs to be improved with this product.""They should improve the upgrades. It's not easy to upgrade the solution.""I would rate this solution a 7.5 out of ten. To make it a ten they should have more people on tech support. They need to invest more in the product. It's a good product. They should just work on tech support. More support for the customer. It's not that easy to get somebody to understand this product. I have had some issues with tech before for the solution. One of them brought the solution down due to some of his activity. They need to hugely invest in their tech support.""In order to make it a ten, it should be more user-friendly. You need somebody who is knowledgeable about it to use it. It's not easy to use. We have to rely heavily on technical support.""There should be an easier way to do the upgrades. There are a lot of steps to get to the next version from the previous version which ends up being a bit of the headache with the upgrade.""There can be a little bit more integration between the controller management and ISE. There are two dashboards, you have the controller dashboards, and you have the ISE dashboard it would is a way to maybe integrate that into one. That would be great. It's not that bad. It would be easier if it could be combined into one dashboard."

More Cisco ISE (Identity Services Engine) Cons »

"For an experienced system implementer it will take approximately one day. However, for somebody who is inexperienced it may take up to five days.""I'd like to see the product include out of the box connectors.""We have had some major issues with the tool, but we have worked with the R&D teams and we have worked with support. There is room for improvement, especially on response times. But they're working on it and they're doing the best they can.""It's an old product and has many areas that can be improved."

More CyberArk Endpoint Privilege Manager Cons »

Pricing and Cost Advice
"If you go directly with Cisco for the implementation it's very, very expensive.""The SMARTnet technical support is available at an additional cost.""For the Avast virus scan, we pay around USD $95 per machine for five years which includes all updates and technical support.""The price for Cisco ISE is high.""The price can be lower, especially for subscriptions. It should be a lot cheaper to have a wide range of customers. The price should be comparable to competitive products like Forescout or Fortinet FortiNAC. Forescout is cheaper for customers looking for a cloud solution."

More Cisco ISE (Identity Services Engine) Pricing and Cost Advice »

"licensing for this solution is based on the number of APV (privileged users), and the number of sessions that you want to record.""I think that it was in the range of $200,000 that had to get approved."

More CyberArk Endpoint Privilege Manager Pricing and Cost Advice »

report
Use our free recommendation engine to learn which Network Access Control solutions are best for your needs.
447,718 professionals have used our research since 2012.
Questions from the Community
Ask a question

Earn 20 points

Top Answer: It has drastically reduced the attack surface for local administrative rights and the chance of escalation of privilege. We've removed, at this point, close to 98 percent of the local administrative… more »
Top Answer: If we look at the Privilege Management Inbox, we get a lot of information on what's happening right then and now. But if we would able to filter it down based on a role group or an AD group to say… more »
Top Answer: If you're going to implement Endpoint Privilege Manager, don't just give everybody EPM and think you're done with it. Spend the time, engineer it, think about it from a project perspective, and deploy… more »
Ranking
1st
Views
30,501
Comparisons
20,423
Reviews
16
Average Words per Review
454
Avg. Rating
8.2
Views
3,047
Comparisons
1,870
Reviews
4
Average Words per Review
655
Avg. Rating
8.3
Popular Comparisons
Also Known As
Cisco ISEViewfinity
Learn
Cisco
CyberArk
Overview
Identity Services Engine is a security policy management platform that automates and enforces context-aware security access to network resources. It delivers superior user and device visibility to support enterprise mobility experiences and to control access. It shares data with integrated partner solutions to accelerate their capabilities to identify, mitigate, and remediate threats.

CyberArk Endpoint Privilege Manager enables organizations to enforce least privilege policies for business and administrative users, as well as control applications to reduce the attack surface without halting productivity. The solution helps organizations revoke everyday local administrator privileges from business users while seamlessly elevating privileges when required by trusted applications. CyberArk Endpoint Privilege Manager also enables security teams to enforce granular least privilege policies for IT administrators, helping organizations effectively segregate duties on Windows servers. Complementing these privilege controls, the solution also delivers application controls, which are designed to manage and control which applications are permitted to run on endpoints and servers and prevent malicious applications from penetrating the environment.

Offer
Learn more about Cisco ISE (Identity Services Engine)
Learn more about CyberArk Endpoint Privilege Manager
Sample Customers
Aegean Motorway, BC Hydro, Beachbody, Bucks County Intermediate Unit , Cisco IT, Derby City Council, Global Banking Customer, Gobierno de Castilla-La Mancha, Houston Methodist, Linz AG, London Hydro, Ministry of Foreign Affairs, Molina Healthcare, MST Systems, New South Wales Rural Fire Service, Reykjavik University, Wildau UniversityClearstream, McKesson, Boston Childrens Hospital
Top Industries
REVIEWERS
Comms Service Provider22%
Government13%
Financial Services Firm13%
Computer Software Company13%
VISITORS READING REVIEWS
Comms Service Provider33%
Computer Software Company22%
Government7%
Manufacturing Company4%
VISITORS READING REVIEWS
Computer Software Company35%
Comms Service Provider12%
Insurance Company10%
Media Company5%
Company Size
REVIEWERS
Small Business27%
Midsize Enterprise21%
Large Enterprise52%
VISITORS READING REVIEWS
Small Business2%
Midsize Enterprise21%
Large Enterprise77%
REVIEWERS
Small Business44%
Midsize Enterprise11%
Large Enterprise44%
Find out what your peers are saying about Cisco, ForeScout, Aruba Networks and others in Network Access Control. Updated: November 2020.
447,718 professionals have used our research since 2012.
Cisco ISE (Identity Services Engine) is ranked 1st in Network Access Control with 22 reviews while CyberArk Endpoint Privilege Manager is ranked 27th in Endpoint Protection (EPP) for Business with 4 reviews. Cisco ISE (Identity Services Engine) is rated 8.2, while CyberArk Endpoint Privilege Manager is rated 8.2. The top reviewer of Cisco ISE (Identity Services Engine) writes "We've experienced first-hand the reliable protection provided against malware and ransomware". On the other hand, the top reviewer of CyberArk Endpoint Privilege Manager writes "Enables us to see how users use their access and lock down things that aren't appropriate". Cisco ISE (Identity Services Engine) is most compared with Aruba ClearPass, Forescout Platform, Fortinet FortiNAC, CyberArk PAS and Fortinet FortiAuthenticator, whereas CyberArk Endpoint Privilege Manager is most compared with BeyondTrust Endpoint Privilege Management, Carbon Black CB Defense, CrowdStrike Falcon, BigFix and Symantec End-user Endpoint Security.

See our list of .

We monitor all Network Access Control reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.