We changed our name from IT Central Station: Here's why

Cisco ISE (Identity Services Engine) vs Forescout Platform comparison

Cancel
You must select at least 2 products to compare!
Featured Review
Find out what your peers are saying about Cisco ISE (Identity Services Engine) vs. Forescout Platform and other solutions. Updated: January 2022.
564,322 professionals have used our research since 2012.
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The profiling model included is the most valuable feature.""It is stable and easy to use.""I have found that all of the features are valuable. It is very easy to deploy because we are able to port users directly from Active Directory (AD) and LDAP.""The feature that I most like is that it can notify me whenever someone plugs in their device, which is not allowed. I get notifications for new laptop devices. I think the user interface looks good compared to previous versions.""It's flexible and stable. It's been good as a standard environment to run.""There is good integration with third-party systems like antivirus patch management, MDM.""The way we can trust this solution is the most valuable. We have no issue with this product. It is a competitive product. You need to have a very good and deep knowledge of the product to take the full benefits of all the features, but it is a good product.""The most valuable features are the ability to retrieve information about Active Directory user names, viewing the log files to see which MAC address tried to connect with the created SSIDs, portal designing for your company, hotspot tools, and creating network rules for WiFi access."

More Cisco ISE (Identity Services Engine) Pros →

"We really like that we get full visibility of devices in the local network.""The initial setup is quite simple. It's not too complex or difficult to set up.""Within three or four days, we have complete visibility of your infrastructure on the network. Compared to other solutions, the deployment of the solution is easier and we can close the project quickly.""I have noticed that in the last year the license model has changed from licensing the whole appliance to licensing the number of devices. It's more simple for a large installation, or a user to have CounterACT as their peripheral site in the company. It's a good choice to have changed the license policy.""The user management has been very easy for the most part.""Being able to sort on device types or devices with open ports is helpful when narrowing down assets of possible misconfigured devices that may be vulnerable on the network. We can take action on those devices based off of corporate policy.""The actions that the agentless visibility, allow us to perform on the endpoint, are really amazing, especially in the way that it is done.""You can quickly filter your view of devices and zero in on the ones you want using a variety of tools, such as what subnet it is on or what it has been classified as."

More Forescout Platform Pros →

Cons
"It would be nice if it could be configured easily by default.""Migration could be better. Right now, we back up with the new version, and it requires a lot of licensing and other things. Whenever we choose a product, it's very difficult because we have to meet the requirements of each feature. There is no standard feature, so the best system that we bought may not fit the solution. We have to look at every feature that the customer uses. If you compare it with other products like Aruba, it's not the same. With Cisco, I have to read all about the features on this version and the licensing required for the product. In Aruba, that thing is covered when you get one license because it covers almost everything. It could also be more scalable.""I would like to see the product simplified more, especially with the configuration.""Segmentation can be improved.""The web interface needs improvement. The new web interface that they have is not as easy to manage and we find it to be very slow.""The solution is not so user-friendly.""The solution configuration is complicated for setting the infrastructure. They have improved over the years but there is still a lot of room to improve. When comparing the simplicity to other vendors, such as Fortinet and Aruba they are behind.""In an upcoming release, it would be nice to have NAC already standard in the solution."

More Cisco ISE (Identity Services Engine) Cons →

"The solution needs more definitive pricing. The costs are hard to nail down.""In the next release of the solution, it could benefit from being more flexible to allow for more freedom.""It's scalable, but not without a big investment. It doesn't do so well at the branch. At the home office, it does okay and not so well at the branch.""The reporting feature needs improvement.""More detailed analysis during the authentication process, especially for troubleshooting access issues. We have found that troubleshooting RADIUS controls is quite arduous, as it is today. A trace function could easily resolve this by providing a means by which access issues from a certificate to passwords or accounts could easily be identified and remediated.""When we automate an email to send to a user, sometimes it gets blocked, but that has nothing to do with Forescout. It depends on the mail gateway that we use or integrate with.""Better integration with third-party vendors is needed because as it is now, the list of third-party solutions that we can integrate and automate is quite limited.""The initial setup is a bit complex."

More Forescout Platform Cons →

Pricing and Cost Advice
  • "The SMARTnet technical support is available at an additional cost."
  • "For the Avast virus scan, we pay around USD $95 per machine for five years which includes all updates and technical support."
  • "The price for Cisco ISE is high."
  • "The price can be lower, especially for subscriptions. It should be a lot cheaper to have a wide range of customers. The price should be comparable to competitive products like Forescout or Fortinet FortiNAC. Forescout is cheaper for customers looking for a cloud solution."
  • "There are other cheaper options available."
  • "The price is okay."
  • "I think licensing costs roughly $2,000 a year. ISE is more expensive than Network Access Control."
  • "I think the price is okay."
  • More Cisco ISE (Identity Services Engine) Pricing and Cost Advice →

  • "The fact that we were allowed to spin up as many servers as we had need of to support our geographic requirements while paying for licensing as an enterprise truly set Forescout apart from the crowd and improved the way we could design our access."
  • "We went with the virtual appliance option. The biggest cost to running these types of appliances would be to either have multiple virtual appliances at every data center or running Remote SPAN hardware to provide you the real-time network visibility."
  • "The ROI is priceless."
  • "It might not be the cheapest solution, but you get what you pay for."
  • "Time savings in finding rogue devices as well as identifying potentially unwanted devices on the network has saved the organization time and money."
  • "The setup cost, pricing, and licensing are on the high side."
  • "Forescout Platform is too expensive, so the price should be reduced."
  • "Licenses are perpetual but can come with renewable support."
  • More Forescout Platform Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Network Access Control (NAC) solutions are best for your needs.
    564,322 professionals have used our research since 2012.
    Questions from the Community
    Top Answer: 
    Aruba ClearPass is a Network Access Control tool that gives secure network access to multiple device types. You can adapt the policies to VPN access, wired, or wireless access. You can… more »
    Top Answer: 
    OK, so Cisco ISE uses 802.1X to secure switchports against unauthorized access. The drawback of this is that ISE cannot secure the port if a device does not support 802.1x. Cameras, badge readers… more »
    Top Answer: 
    Cisco ISE uses AI endpoint analytics to identify new devices based on their behavior. It will also notify you if someone plugs in with a device that is not allowed and will block it. The user… more »
    Top Answer: 
    Forescout is a very powerful NAC product that does not rely on port level configuration. It can detect and block unauthorized devices very quickly. But it has a lot of capabilities and really would… more »
    Top Answer: 
    I would rate the Forescout Device and Visibility Control Platform at a six out of ten.
    Top Answer: 
    I recommend doing a compression demo. If people use it, they will buy it. So they have to see the product in place. That's the main recommendation is to do a proof of concept. If they do, they will… more »
    Ranking
    Views
    30,910
    Comparisons
    22,567
    Reviews
    25
    Average Words per Review
    548
    Rating
    7.6
    Views
    13,903
    Comparisons
    9,558
    Reviews
    16
    Average Words per Review
    534
    Rating
    8.8
    Comparisons
    Also Known As
    Cisco ISE
    Forescout Platform, CounterACT for Endpoint Compliance, ForeScout CounterACT
    Learn More
    Overview
    Identity Services Engine is a security policy management platform that automates and enforces context-aware security access to network resources. It delivers superior user and device visibility to support enterprise mobility experiences and to control access. It shares data with integrated partner solutions to accelerate their capabilities to identify, mitigate, and remediate threats.

    ForeScout offers Global 2000 enterprises and government organizations the unique ability to see devices, including non-traditional devices, the instant they connect to the network. Equally important, ForeScout lets you control these devices and orchestrate information sharing and operation among disparate security tools to accelerate incident response. Unlike traditional security alternatives, ForeScout achieves this without requiring software agents or previous device knowledge. The company’s solutions integrate with leading network, security, mobility and IT management products to overcome security silos, automate workflows and enable significant cost savings.

    Offer
    Learn more about Cisco ISE (Identity Services Engine)
    Learn more about Forescout Platform
    Sample Customers
    Aegean Motorway, BC Hydro, Beachbody, Bucks County Intermediate Unit , Cisco IT, Derby City Council, Global Banking Customer, Gobierno de Castilla-La Mancha, Houston Methodist, Linz AG, London Hydro, Ministry of Foreign Affairs, Molina Healthcare, MST Systems, New South Wales Rural Fire Service, Reykjavik University, Wildau University
    NHS Sussex, SAP, SEGA, Vistaprint, Miami Children's Hospital, Pioneer Investments, New York Law School, OmnicomGroup, Meritrust
    Top Industries
    REVIEWERS
    Computer Software Company15%
    Comms Service Provider15%
    Financial Services Firm10%
    Government10%
    VISITORS READING REVIEWS
    Comms Service Provider32%
    Computer Software Company19%
    Government8%
    Financial Services Firm5%
    REVIEWERS
    Financial Services Firm20%
    Government16%
    Energy/Utilities Company8%
    Manufacturing Company8%
    VISITORS READING REVIEWS
    Comms Service Provider24%
    Computer Software Company21%
    Government10%
    Financial Services Firm5%
    Company Size
    REVIEWERS
    Small Business33%
    Midsize Enterprise24%
    Large Enterprise43%
    VISITORS READING REVIEWS
    Small Business15%
    Midsize Enterprise20%
    Large Enterprise65%
    REVIEWERS
    Small Business31%
    Midsize Enterprise19%
    Large Enterprise50%
    VISITORS READING REVIEWS
    Small Business20%
    Midsize Enterprise13%
    Large Enterprise67%
    Find out what your peers are saying about Cisco ISE (Identity Services Engine) vs. Forescout Platform and other solutions. Updated: January 2022.
    564,322 professionals have used our research since 2012.

    Cisco ISE (Identity Services Engine) is ranked 1st in Network Access Control (NAC) with 36 reviews while Forescout Platform is ranked 2nd in Network Access Control (NAC) with 19 reviews. Cisco ISE (Identity Services Engine) is rated 7.6, while Forescout Platform is rated 8.6. The top reviewer of Cisco ISE (Identity Services Engine) writes "Streamlines security policy management and reduces operating costs". On the other hand, the top reviewer of Forescout Platform writes "Identifying potentially unwanted devices on the network has saved the organization time and money". Cisco ISE (Identity Services Engine) is most compared with Aruba ClearPass, Fortinet FortiNAC, CyberArk Privileged Access Manager, Fortinet FortiAuthenticator and Portnox CORE, whereas Forescout Platform is most compared with Aruba ClearPass, Fortinet FortiNAC, Armis, Portnox CORE and Tenable SC. See our Cisco ISE (Identity Services Engine) vs. Forescout Platform report.

    See our list of best Network Access Control (NAC) vendors.

    We monitor all Network Access Control (NAC) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.