We just raised a $30M Series A: Read our story

Compare Cisco ISE (Identity Services Engine) vs. Forescout Platform

Cancel
You must select at least 2 products to compare!
Featured Review
Find out what your peers are saying about Cisco ISE (Identity Services Engine) vs. Forescout Platform and other solutions. Updated: November 2021.
552,695 professionals have used our research since 2012.
Quotes From Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros
"The feature that I most like is that it can notify me whenever someone plugs in their device, which is not allowed. I get notifications for new laptop devices. I think the user interface looks good compared to previous versions.""The way we can trust this solution is the most valuable. We have no issue with this product. It is a competitive product. You need to have a very good and deep knowledge of the product to take the full benefits of all the features, but it is a good product.""At the moment, ISE seems to integrate very well with a number of other technologies.""It's flexible and stable. It's been good as a standard environment to run.""We were originally a Cisco shop and Cisco ISE integrated well with our other Cisco switches and networks.""The ability to integrate our Cisco AnyConnect connections to the active directory has been great.""It is stable and easy to use.""In terms of features, I think they've done a lot of improvement on the graphical user interface — it looks really good right now."

More Cisco ISE (Identity Services Engine) Pros »

"I have noticed that in the last year the license model has changed from licensing the whole appliance to licensing the number of devices. It's more simple for a large installation, or a user to have CounterACT as their peripheral site in the company. It's a good choice to have changed the license policy.""It allows for good detection of all the vendor products we have on-site.""Its feature that I have found most valuable is that it is very granular. You can configure granular controls just as you want those policies to be implemented. It gives you that flexibility to go granular in how you want your controls to be implemented. That's something I like about it.""Being able to sort on device types or devices with open ports is helpful when narrowing down assets of possible misconfigured devices that may be vulnerable on the network. We can take action on those devices based off of corporate policy.""The most valuable feature is the blocking of USB devices.""The actions that the agentless visibility, allow us to perform on the endpoint, are really amazing, especially in the way that it is done.""We really like that we get full visibility of devices in the local network.""We think it's simple. We think it's very useful and we really like reports and everything."

More Forescout Platform Pros »

Cons
"Segmentation can be improved.""The interface is not very user-friendly and it is not simple to use.""The customer server was great but it would have been better for me if they had support in other languages such as Spanish.""It is a good product, but in order to use all of the functions of the product, you must have a good understanding of the product. You must know how to use and manage it. It is a little bit complicated to configure and manage. It must be simplified to make it easy to manage for end users. In the initial stage, we found ISE complicated for end users. It was not easy to manage it or to write authentication and authorization protocol. They must improve its management and make it easy for end users. The monitoring and reporting capabilities can be improved because end users want to quickly see what is happening in their network. There were some restrictions in working with other vendors. It should also have a better and easy integration with other vendors.""The web interface needs improvement. The new web interface that they have is not as easy to manage and we find it to be very slow.""The installation is not straightforward, it took us approximately one month.""The solution is not so user-friendly.""The support could be faster and the pricing could be reduced."

More Cisco ISE (Identity Services Engine) Cons »

"Although Forescout manages endpoints and network devices, there is no capability for user management.""As a user, if I am using a laptop that is Wi-Fi connected, Forescout identifies my port connectivity as one user license, and if I take that same laptop with the same username to a wired network, which is also the same network that is used for the Wi-Fi connection, Forescout detects it as a separate license.""The licensing costs are quite high. With the amount of hardware we have, we need too many licenses to make the product effective and it's ultimately just too costly.""They need to handle their Tier 1 cases differently. The biggest negative regarding Forescout is their support. Not having the ability to get instantly transferred to a support engineer for Tier 1 cases is pretty ridiculous.""The solution needs more definitive pricing. The costs are hard to nail down.""The ability to block external devices in Mac is lacking and needs to be added.""For the user, the policy that they have implemented sometimes needs adjustments. Sometimes the features that the customer asks for aren't involved in the main installation, and I need to bolt an add-on in. However, I never know if this policy is the right one when I do this.""When adding what is in scope to a policy, it would be nice if you could select multiple policies instead of one policy at a time to add what is in the scope for network segmentation. I have found that during the install and configuration of the policies that if you want to modify multiple policies or enable multiple policies that you need to define what is in the scope (IP range or segments) one rule at a time. This caused some slow downs when implementing policies."

More Forescout Platform Cons »

Pricing and Cost Advice
"The technology is good, but to use some of the other features, and capabilities, they request that we purchase the Cisco DNA Center. As a result, the bundled price is a little high.""We are running Version 2.9 because Version 2.9 of the ISE has a persistent license — it's a one-time payment. The latest version (3.1) is only available if you do a yearly subscription.""This solution requires an annual license and it is a bit expensive than competitors.""I think the price is okay.""The price is okay.""There are other cheaper options available.""Its price is probably good if you use all of its features and functionalities to protect your environment. If you use only a part of the functionality, its price is too high. It is just a question of value and the functionality you use.""It would be beneficial to have a single license that included all of the features."

More Cisco ISE (Identity Services Engine) Pricing and Cost Advice »

"Licenses are perpetual but can come with renewable support.""The ROI is priceless.""Time savings in finding rogue devices as well as identifying potentially unwanted devices on the network has saved the organization time and money.""They base the license on the number of devices, which is quite misleading.""Forescout Platform is too expensive, so the price should be reduced.""The setup cost, pricing, and licensing are on the high side.""It might not be the cheapest solution, but you get what you pay for.""We might have paid in the ballpark of $20,000 yearly for our licenses. I do not recall there being other fees over and above the standard licensing fee."

More Forescout Platform Pricing and Cost Advice »

report
Use our free recommendation engine to learn which Network Access Control (NAC) solutions are best for your needs.
552,695 professionals have used our research since 2012.
Questions from the Community
Top Answer:  Aruba ClearPass is a Network Access Control tool that gives secure network access to multiple device types. You can adapt the policies to VPN access, wired, or wireless access. You can… more »
Top Answer: OK, so Cisco ISE uses 802.1X to secure switchports against unauthorized access. The drawback of this is that ISE cannot secure the port if a device does not support 802.1x. Cameras, badge readers… more »
Top Answer: Cisco ISE uses AI endpoint analytics to identify new devices based on their behavior. It will also notify you if someone plugs in with a device that is not allowed and will block it. The user… more »
Top Answer: Forescout is a very powerful NAC product that does not rely on port level configuration. It can detect and block unauthorized devices very quickly. But it has a lot of capabilities and really would… more »
Top Answer: I would rate the Forescout Device and Visibility Control Platform at a six out of ten.
Top Answer: I recommend doing a compression demo. If people use it, they will buy it. So they have to see the product in place. That's the main recommendation is to do a proof of concept. If they do, they will… more »
Ranking
Views
30,648
Comparisons
22,248
Reviews
21
Average Words per Review
569
Rating
7.6
Views
14,116
Comparisons
9,648
Reviews
15
Average Words per Review
536
Rating
8.8
Comparisons
Also Known As
Cisco ISE
Forescout Platform, CounterACT for Endpoint Compliance, ForeScout CounterACT
Learn More
Overview
Identity Services Engine is a security policy management platform that automates and enforces context-aware security access to network resources. It delivers superior user and device visibility to support enterprise mobility experiences and to control access. It shares data with integrated partner solutions to accelerate their capabilities to identify, mitigate, and remediate threats.

ForeScout offers Global 2000 enterprises and government organizations the unique ability to see devices, including non-traditional devices, the instant they connect to the network. Equally important, ForeScout lets you control these devices and orchestrate information sharing and operation among disparate security tools to accelerate incident response. Unlike traditional security alternatives, ForeScout achieves this without requiring software agents or previous device knowledge. The company’s solutions integrate with leading network, security, mobility and IT management products to overcome security silos, automate workflows and enable significant cost savings.

Offer
Learn more about Cisco ISE (Identity Services Engine)
Learn more about Forescout Platform
Sample Customers
Aegean Motorway, BC Hydro, Beachbody, Bucks County Intermediate Unit , Cisco IT, Derby City Council, Global Banking Customer, Gobierno de Castilla-La Mancha, Houston Methodist, Linz AG, London Hydro, Ministry of Foreign Affairs, Molina Healthcare, MST Systems, New South Wales Rural Fire Service, Reykjavik University, Wildau University
NHS Sussex, SAP, SEGA, Vistaprint, Miami Children's Hospital, Pioneer Investments, New York Law School, OmnicomGroup, Meritrust
Top Industries
REVIEWERS
Comms Service Provider16%
Computer Software Company16%
Government11%
Financial Services Firm8%
VISITORS READING REVIEWS
Comms Service Provider32%
Computer Software Company20%
Government8%
Financial Services Firm5%
REVIEWERS
Financial Services Firm20%
Government16%
Energy/Utilities Company8%
Manufacturing Company8%
VISITORS READING REVIEWS
Comms Service Provider23%
Computer Software Company22%
Government10%
Financial Services Firm5%
Company Size
REVIEWERS
Small Business31%
Midsize Enterprise26%
Large Enterprise43%
VISITORS READING REVIEWS
Small Business16%
Midsize Enterprise20%
Large Enterprise64%
REVIEWERS
Small Business29%
Midsize Enterprise20%
Large Enterprise51%
VISITORS READING REVIEWS
Small Business20%
Midsize Enterprise12%
Large Enterprise67%
Find out what your peers are saying about Cisco ISE (Identity Services Engine) vs. Forescout Platform and other solutions. Updated: November 2021.
552,695 professionals have used our research since 2012.

Cisco ISE (Identity Services Engine) is ranked 1st in Network Access Control (NAC) with 28 reviews while Forescout Platform is ranked 2nd in Network Access Control (NAC) with 17 reviews. Cisco ISE (Identity Services Engine) is rated 7.6, while Forescout Platform is rated 8.8. The top reviewer of Cisco ISE (Identity Services Engine) writes "Streamlines security policy management and reduces operating costs". On the other hand, the top reviewer of Forescout Platform writes "Identifying potentially unwanted devices on the network has saved the organization time and money". Cisco ISE (Identity Services Engine) is most compared with Aruba ClearPass, Fortinet FortiNAC, Fortinet FortiAuthenticator, CyberArk Privileged Access Manager and Portnox CORE, whereas Forescout Platform is most compared with Aruba ClearPass, Fortinet FortiNAC, Armis, Portnox CORE and CyberX. See our Cisco ISE (Identity Services Engine) vs. Forescout Platform report.

See our list of best Network Access Control (NAC) vendors.

We monitor all Network Access Control (NAC) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.