Try our new research platform with insights from 80,000+ expert users

Aruba ClearPass vs Cisco Identity Services Engine (ISE) vs Varonis Platform comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

Network Access Control (NAC)
Network Access Control (NAC)
Data Loss Prevention (DLP)
 

Featured Reviews

Abdelhamid Saber - PeerSpot reviewer
Secures the network with flexible controls and excellent support
We use Aruba ClearPass as a network access control solution. It prevents unauthorized access and allows access for users in the internal environment, performing checks and onboarding We use ClearPass to secure our environment. Before ClearPass, our environment wasn't as secure. The most…
SunilkumarNaganuri - PeerSpot reviewer
Enhanced device administration hindered by complex deployment and security limitations
Cisco Identity Services Engine (ISE) needs to improve the profiling preauthentication. They are very poor in asset classification and should focus on improving the preauthentication profiling, especially for NAC use cases. This will give them a roadmap for software-defined access (SDA) use cases and network segmentation. Threat detection capabilities are very weak. Additionally, the product is vulnerable and has many bugs.
Frederic  Delos - PeerSpot reviewer
Offers the ability to identify sensitive areas, allowing you to drill down into the sensitive data
The most effective feature for me is its ability to identify sensitive areas, allowing you to drill down into the sensitive data, provided you have access, to determine whether it's a false positive or a true positive. That's the best thing for me, out of all of it. It's got everything, like other ones, but I like to be able to look at something if I'm doing forensics on the alert and say, "Okay, do I really need to do something with this?" For example, we don't want sensitive data in our OneDrive. So it identifies the sensitive data that's possibly in the OneDrive. And what I can do is look at it and identify whether it's actually sensitive data in Datalert or whether it looks like sensitive data, but I know it's a false positive. If it is a false positive, I can basically say ignore this pattern based on X, Y, and Z, you know, whether it's Redjax or keyword proximity. So I like that. With other tools, I gotta go through a whole process because it's a little bit more complex. Here, I can tag it and bag it in one shot. And the next good time I scan, it slips over it. So it helps in that.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The setup is simple."
"Aruba has improved my organization because it supported me on my level of access."
"It is a robust product."
"It's very easy to access support and the documentation is self-explanatory."
"Aruba ClearPass allows for guest access, BYOD control, IoT device control, access control, device visibility, policy management, interoperability with third-party solutions, self-service, and device profiling."
"The most valuable feature, I would say, is the cost-effectiveness of the solution when compared to others."
"I like the stability and the GUI, which is always improving."
"It has an easy to learn web GUI and ​command lines.​"
"Among the most valuable features is TACACS."
"The best features are the scalability and the license structure."
"A lot of customers use a third party to manage their guest Wi-Fi. Cisco ISE presents the ability to bring that in-house so that customers can have full control over it, change the branding, and get extra telemetry from it and the user data. It works really well for our customers."
"Assisting a larger number of users in gaining access and guiding them through the process of getting on Cisco ISE has been seamless."
"The interface is pretty easy to use."
"The implementation is very simple."
"Improves switch account management."
"We were originally a Cisco shop and Cisco ISE integrated well with our other Cisco switches and networks."
"The 24/7 support is the most valuable feature. They have been able to answer support questions pretty quickly."
"Varonis Platform is transparent and captures everything in the environment without impacting the performance. The tool helps us unify data feeds into a single reporting system."
"There's also a 90-day policy where if a user is not using the warehouse, it will automatically delete that username."
"It can easily identify unusual behavior or access patterns that may pose a potential threat, while operating as a unified reporting system."
"The solution's classification engine is highly configurable and efficient."
"The telemetry to capture everything and the reports are very easy to configure without having a developer degree."
"The most important feature is remediation. In remediation support, there is no group permission. We'll go ahead and remediate the access from the Dell folder to the parent folder."
"The analytics would have to be our most valuable feature."
 

Cons

"The scalability could improve."
"Aruba ClearPass could improve the complexity of the initial usage. It takes some time to be good at it. It's not simple to build and connect the rules to the network you want to deploy them on."
"We cannot onboard IoT devices such as printers, cameras, and some smaller devices."
"The user interface could be more polished and modern. It would be useful to have more options for automation."
"Aruba ClearPass has a complex pricing scheme, so that's an area for improvement. The process for setting up Aruba ClearPass also needs improvement. It could be easier."
"I would describe the initial setup as moderately difficult."
"​​The AirWave Dashboard heat maps could be better designed."
"Some functions could be improved."
"Cisco ISE has numerous features that are impractical, and I won't utilize them since they require payment."
"Some of ISE's features need to be more agile. For example, we couldn't integrate our data because Cisco needs your data to be in its own format."
"They could incorporate some AI features."
"ISE is a little clunky. The front-end feels like it is from the 1980s."
"Cisco Identity Services Engine (ISE) needs to improve the profiling preauthentication."
"In an upcoming release, the solution needs to be more agentless and more independent. Additionally, there could be improved integration with other next-generation solutions, such as Palo Alto, Fortinet, or Check Point."
"There are always some things that I would request."
"The price could be better. I would like to see more integration with third-party solutions in the next release. This is because many of my clients don't have Cisco."
"The solution's areas of improvement are the interface and the dependency on on-premises deployment for some components."
"For unstructured data monitoring, it's one of the top ones, if not the top one, due to its usability."
"The GUI should be more functional. There should be a process for connecting through Chrome, Internet Explorer, etc."
"Varonis requires more access permissions for its core functions compared to competitors, which can be a concern for companies about data safety."
"It is significantly complex."
"I would like it to have cloud integration."
"Varonis requires more access permissions for its core functions compared to competitors, which can be a concern for companies about data safety."
"I'd like to see automatic updates for this solution. Currently, it's a manual process to update all the keywords"
 

Pricing and Cost Advice

"In terms of your fixed cost, it is much less than a lot of other solutions in the market. The initial cost is very high."
"I can say that the package or licensing model offered for the solution is a permanent one."
"The pricing is not bad and everything is included."
"On a scale of one to ten, where one is cheap, and ten is too expensive, I rate the solution's pricing a six out of ten."
"The price of Aruba ClearPass is expensive. When you want to build redundant systems it can be seen as necessary, so the enterprise will manage all of those costs."
"​Cost is important. I switched because Aruba's costs were well below Cisco's."
"The price of Aruba ClearPass is expensive. However, Cisco ISE was as expensive when we were comparing."
"Run a 90 day free Proof of Concept (POC) for each product by implementing and using it fully in your environment. This way you will be educated on its features, functionality, and manageability.​"
"Pricing and licensing are not my expertise. As far as budgeting is concerned, we run an ELA with Cisco. It's a part of our ELA."
"It is fair."
"The solution’s pricing is reasonable."
"Previously, Cisco ISE had a perpetual licensing model, but now they have shifted to a subscription-based licensing system."
"The licensing can be confusing, but it is still pretty good."
"If you go directly with Cisco for the implementation it's very, very expensive."
"In terms of the licensing and the pricing structure of the Cisco Identity Services Engine, there's been a huge advantage to our clients recently with the advent of the enterprise agreement."
"That's where things got a bit more complicated. Previously, it was a one-time purchase and we just had to renew support. These days, there's a subscription model, which is supposed to be easier and cheaper as well, but it's more pricey"
"The pricing is good. It neither expensive nor cheap. It is average."
"I would rate the pricing an eight out of ten, with ten being the most expensive."
"It's expensive, kind of, really expensive."
"Licensing is on an annual basis. Maintenance and renewal fees are separate. Varonis Datalert is quite expensive."
"Varonis Platform wasn't certainly the cheapest solution."
"You could do a subscription, where you pay yearly, or you could purchase it outright. The licensing cost is based on the number of users on the system that you are monitoring."
"The platform is expensive. I rate the pricing a nine out of ten."
report
Use our free recommendation engine to learn which Network Access Control (NAC) solutions are best for your needs.
850,671 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Government
9%
Manufacturing Company
8%
Educational Organization
6%
Educational Organization
24%
Computer Software Company
14%
Financial Services Firm
8%
Government
7%
Financial Services Firm
16%
Computer Software Company
10%
Manufacturing Company
9%
Healthcare Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is better - Aruba Clearpass or Cisco ISE?
Aruba ClearPass is a Network Access Control tool that gives secure network access to multiple device types. You can...
What is the biggest difference between Aruba ClearPass and FortiNAC?
I've done quite a lot of work with ClearPass, and not a lot with FortiNAC/Bradford. ClearPass incorporates a number ...
What do you like most about Aruba ClearPass?
If you are looking at the base installation, then it was a very straightforward process, which I would rate an eight ...
What are the main differences between Cisco ISE and Forescout Platform?
OK, so Cisco ISE uses 802.1X to secure switchports against unauthorized access. The drawback of this is that ISE cann...
How does Cisco ISE compare with Fortinet FortiNAC?
Cisco ISE uses AI endpoint analytics to identify new devices based on their behavior. It will also notify you if some...
What do you like most about Cisco ISE (Identity Services Engine)?
Cisco ISE is a comprehensive solution that allows you to control access to network resources granularly based on poli...
What do you like most about Varonis Platform?
The solution has significantly improved data security and compliance posture by allowing us to track and monitor acti...
What needs improvement with Varonis Platform?
Varonis started as an on-premises solution and is transitioning to cloud. It hasn't fully moved yet, which is an area...
What is your primary use case for Varonis Platform?
The primary use case for Varonis Platform is data discovery, specifically for discovering sensitive data in our organ...
 

Also Known As

Avenda eTIPS
Cisco ISE
No data available
 

Overview

 

Sample Customers

Consulate Health Care, Los Angeles Unified School District, Science Applications International Corp (SAIC), San Diego State University, KFC, ACTS Retirement-Life Communities
Aegean Motorway, BC Hydro, Beachbody, Bucks County Intermediate Unit , Cisco IT, Derby City Council, Global Banking Customer, Gobierno de Castilla-La Mancha, Houston Methodist, Linz AG, London Hydro, Ministry of Foreign Affairs, Molina Healthcare, MST Systems, New South Wales Rural Fire Service, Reykjavik University, Wildau University
Nottingham Building Society
Find out what your peers are saying about Cisco, Hewlett Packard Enterprise, Fortinet and others in Network Access Control (NAC). Updated: April 2025.
850,671 professionals have used our research since 2012.