Cisco Identity Services Engine (ISE) Pros and Cons

All-in-One Solution

Central Control

Compatibility and scalability

Support (Either by Cisco TAC, Community, Wep,...) Review collected by and hosted on G2.com.

High Cost.

Complexity for beginners.

Changing the Schema especially for the Licensing. Review collected by and hosted on G2.com.

I like Cisco ISE for it's network access control capabilities, centralized policy management, and integration with multivendor support. It helps enhance network security .It can be worked as a Radius server. Review collected by and hosted on G2.com.

1st I would say it's a complex set up. It is very costly. And it is not user-friendly. A new user need to take time to understand the set-up.In some cases, Cisco ISE may require significant hardware resources to run efficiently, Review collected by and hosted on G2.com.

Cisco ISE is Orchestrator of our network, concentrate all users and mitigate attacks & have multiples features. Review collected by and hosted on G2.com.

Maybe many releases and change of license Review collected by and hosted on G2.com.

Cisco ISE is an excellent product in terms of security and service. It has a dot1x feature, which makes it zero trust at an extreme level. Cisco ISE is very useful for network administrators and security engineers to protect their environment. the part I like.

1. dot1x pre-authentication in both wire and wireless.

2. granular policies to control endpoint.

3. complete visibility of endpoint discovery. Review collected by and hosted on G2.com.

Cisco ISE is a good product, but their are some flaw which just need to address,

1. Licensing is very costly

2. you need to upgrade all of your infra.

3. Require dedicated resource for ISE

4. Automation and integration with some more product. Review collected by and hosted on G2.com.

Cisco ISE is very useful for our firm as it provides a very good and dynamic (automatic) segregation of endpoints connections to their right vlan connection and also the right access to be provided for an endpoint device. Review collected by and hosted on G2.com.

At the moment the process of IOS upgrade as it is not as straightforward as the other IOS devices that we are using in the firm such as Switches and Routers. If Cisco can improve this to be more simple then that will make our life easier. Review collected by and hosted on G2.com.

Cisco ISE enables authentication and authorization of users, devices, and applications across the network.

Real-time security: It provides real-time protection against network security threats and attacks.

And finally is ease to use: Cisco ISE offers an intuitive and easy-to-use user interface, allowing administrators to efficiently deploy and manage the solution. Review collected by and hosted on G2.com.

It depends on the type of organization that wants to implement it, but I consider the following points as disadvantages:

Cost: It can be expensive compared to other similar solutions.

Complexity: The solution can be complex to implement and configure, especially for companies with larger or more complex networks.

Hardware requirements: Cisco ISE requires specific hardware to operate and can be costly to purchase and maintain. Review collected by and hosted on G2.com.

Network visibility and control, profiling the devices whether it's done automatically or manually using granular policies, and the variations of the conditions to match and apply control policies are amazing Review collected by and hosted on G2.com.

The software upgrade is not an easy step and it's risky, sometimes it's canceled or stopped on any node in the setup due to some issues or bugs, also in the posture assessment part can be enhanced by adding real remediation actions like forcing the windows & AV update, having more conditions like checking the open ports, the configured default accounts can be added to the posture check as well Review collected by and hosted on G2.com.

The security provided by CISCO ISE in our network accessing applications. It is also very flexible in integrations in different securities. Review collected by and hosted on G2.com.

A bit complicated in terms of implementation, however, support is always active to help in any issue at any time. Review collected by and hosted on G2.com.

The best things about Cisco ISE are:

Centralized management of network access and security.

Wide range of authentication options (e.g. AD, RADIUS, LDAP).

Integration with Cisco devices and other network infrastructure.

Advanced threat defense capabilities through integration with other security solutions.

Scalability for enterprise-level deployment. Review collected by and hosted on G2.com.

Some limitations of Cisco ISE include :

Complex setup and configuration process.

Higher cost compared to some other NAC solutions.

Requires a dedicated appliance for deployment. Review collected by and hosted on G2.com.

Configuring the dot1x posturing and profiling is easily just match and set

Changing someone's Vlan via policy

And don't forget segmention

And it's seamless integration with current cisco products makes it a great option Review collected by and hosted on G2.com.

Alarm management , acknowledging a bunch of alarms

Live log is refreshed every x seconds to view data but it can be made live

PxGrid integrations sometimes needs to be approved or accepted again in DNA center Review collected by and hosted on G2.com.