Try our new research platform with insights from 80,000+ expert users

Aruba ClearPass vs Cisco Identity Services Engine (ISE) vs Portnox comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.4
Aruba ClearPass offers ROI through data security and management ease, but licensing and price concerns may cause confusion.
Sentiment score
8.4
Cisco Identity Services Engine enhances security, reduces breaches, ensures compliance, simplifies management, and consolidates systems for cost savings and efficiency.
Sentiment score
7.3
Portnox CORE improved network visibility, security, and efficiency, reducing costs and enhancing decision-making through detailed analytics and automated features.
Using Aruba ClearPass has resulted in less engineering time compared to other products we've used.
The investment is huge for enterprise clients, but Aruba ClearPass makes processes easier.
Direct comparisons with Forescout reveal up to 30% to 40% difference in cost savings.
If you were moving from a traditional on-premise NAC that was 100% managed by the IT department, there would be great savings in going to a cloud-based NAC with Portnox.
 

Customer Service

Sentiment score
6.7
Aruba ClearPass customer support is praised for expertise and efficiency, despite occasional slow responses and communication issues.
Sentiment score
5.9
Cisco ISE support is praised for knowledge and responsiveness, yet occasionally inconsistent with integration and follow-up challenges.
Sentiment score
7.3
Portnox customer service is highly rated for responsiveness and efficiency, with room for improvement in local services and communication.
Portnox is one level up, as their customer support is outstanding.
We have faced delays in the resolution of production issues after raising tickets, which impacts productivity.
We have escalated questions to tech support, and I would rate the technical support an eight out of ten.
I rate the technical support as one out of ten.
Sometimes it's challenging to identify which support team is responsible for certain issues, which is a significant concern.
They respond very immediately and provide detailed, amazing support.
I was seeing weird things, and they were able to explain things to me and help me quickly find a resolution.
They resolved issues quickly and provided clear explanations.
 

Scalability Issues

Sentiment score
8.2
Aruba ClearPass is praised for scalability and integration, though some find its initial setup complex despite flexible licensing.
Sentiment score
7.3
Cisco Identity Services Engine (ISE) offers high scalability, supporting large deployments and enterprise expansions despite hardware and setup challenges.
Sentiment score
7.5
Portnox is scalable and flexible, supporting growth efficiently, though larger setups may require more resources, rated seven to ten.
I believe the scalability of ClearPass is rated as ten out of ten.
In our environment, ClearPass handles up to 100,000 users, which is better than some other NAC solutions like Fortinox that scale up to 25,000.
Aruba ClearPass is very scalable.
Factors like architecture, business nature, and legal limitations such as GDPR affect it.
 

Stability Issues

Sentiment score
8.2
Aruba ClearPass is stable and reliable, effectively handling high loads with high user ratings despite minor integration issues.
Sentiment score
7.7
Cisco ISE is highly reliable and stable, though larger deployments may experience occasional performance and configuration challenges.
Sentiment score
7.6
Portnox offers reliable uptime, though CORE users report issues with vendor support and configuration, while Clear performs smoothly.
There are issues with some versions, especially in integrating with AD and SSL configurations over port sixty-three.
There aren't many stability issues, but sometimes the guest management function occasionally throws errors.
Cisco Identity Services Engine (ISE) is considered very reliable and stable.
The stability of Cisco Identity Services Engine (ISE) is poor for certain use cases, like authentication.
The product itself is available and its uptime is 100%.
In the four years that I used Portnox, if it crashed or the server crashed, that would not have been more than once.
 

Room For Improvement

Aruba ClearPass needs better UI, APIs, documentation, third-party compatibility, independent integration, cost effectiveness, and intuitive setup.
Cisco Identity Services Engine requires improved integration, user interface, documentation, compatibility, and management efficiency to enhance user experience.
Portnox can improve with better GUI, integration, scalability, support, licensing, false positives, documentation, and Wi-Fi and AI analytics.
The language and policy enforcement mechanisms are not clear, making it difficult to use the product effectively.
It is also better to improve threat intelligence for built-in threat detection and prevention.
A more streamlined menu of licensing options would be helpful.
The whole setup works well with Cisco access points and Cisco switches, but when you have multiple vendors in the environment, such as HP switches or access points like Aruba, you'll find they will not work well with Cisco Identity Services Engine (ISE).
Pricing can be more expensive compared to other vendors, and there is a significant price gap observed, which doesn't seem justified by some specific features.
They are very poor in asset classification and should focus on improving the preauthentication profiling, especially for NAC use cases.
Ideally, we should be able to search for any MAC address in the database, regardless of its authentication status, to see all its associated groups and potential conflicts.
When I'm doing filtering at times, it doesn't filter the items properly.
They don't have much support during Asia Pacific hours.
 

Setup Cost

Aruba ClearPass is seen as costly but competitive, with complex licensing and valuable long-term affordability for larger enterprises.
Cisco ISE offers three pricing tiers, with high costs and complex licensing, but provides extensive features and potential discounts.
Portnox offers scalable, competitive pricing based on ports, with annual fees, appreciated value, but no perpetual license option.
Achieving the best price requires careful selection from a menu of licensing options.
We cannot mix in prices, and of course, prices are going higher.
Aruba ClearPass is a premium product with higher pricing, which seems unnecessary given its complexity.
Compared to other solutions like HPE ClearPass, Cisco is more costly, and the conversation suggests a possible forty percent price gap compared to competitors.
The license costs can range between $50,000 to $100,000 per year for enterprises.
Cloud solutions are expensive, while on-prem setups with shared environments are cheaper but not effective.
If you compare Portnox with all other well-known standard products, it is the cheapest.
The pricing is a bit high, possibly due to the cloud features and running instances across regions like the US, Asia, and Europe.
It is a bit on the high side, but considering the cloud features and how much it costs to run the instance in the cloud, it is not unreasonable.
 

Valuable Features

Aruba ClearPass provides comprehensive network security through advanced policy management, seamless integration, robust authentication, and user-friendly centralized management.
Cisco ISE enhances network security with integration, 802.1X authentication, policy management, ease of use, and strong access control.
Portnox provides scalable, agentless network visibility with intuitive dashboards and automated security integration, enhancing efficiency and endpoint compliance.
The ClearPass solution has reduced the amount of engineering time compared to previous solutions, making it more efficient for our purposes.
The most effective feature for us is the OnGuard feature.
Aruba ClearPass is a very user-friendly solution compared to Cisco ISE.
Cisco Identity Services Engine (ISE) offers authentication using RADIUS, enhancing network security by separating and segregating networks.
The solution is integrated with other Cisco devices and can offer automation for an organization, making deployments more dynamic and providing real-time visibility.
Cisco Identity Services Engine (ISE) is very good at device administration.
It's notable how Portnox has improved operational efficiency.
It is very easy to implement on our current network hardware.
We use Meraki for our switching, making it simple to point all our networks and offices to Portnox.
 

Mindshare comparison

As of May 2025, in the Network Access Control (NAC) category, the mindshare of Aruba ClearPass is 24.5%, down from 25.5% compared to the previous year. The mindshare of Cisco Identity Services Engine (ISE) is 25.8%, down from 31.3% compared to the previous year. The mindshare of Portnox is 3.6%, up from 2.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Access Control (NAC)
 

Featured Reviews

Abdelhamid Saber - PeerSpot reviewer
Secures the network with flexible controls and excellent support
We use Aruba ClearPass as a network access control solution. It prevents unauthorized access and allows access for users in the internal environment, performing checks and onboarding We use ClearPass to secure our environment. Before ClearPass, our environment wasn't as secure. The most…
SunilkumarNaganuri - PeerSpot reviewer
Enhanced device administration hindered by complex deployment and security limitations
Cisco Identity Services Engine (ISE) needs to improve the profiling preauthentication. They are very poor in asset classification and should focus on improving the preauthentication profiling, especially for NAC use cases. This will give them a roadmap for software-defined access (SDA) use cases and network segmentation. Threat detection capabilities are very weak. Additionally, the product is vulnerable and has many bugs.
Scott Kerr - PeerSpot reviewer
It is seamless and integrates well with our Azure setup
We use devices like PLCs and controllers, and when we receive a request to allow one on the network, we bypass typical authentication, associate it with a group account, and push it to a firewalled VLAN. However, problems arise when the same MAC address is requested for a different project. Our current system only finds authenticated MAC addresses, making it difficult to troubleshoot when the same device is used for multiple purposes. Ideally, we should be able to search for any MAC address in the database, regardless of its authentication status, to see all its associated groups and potential conflicts.
report
Use our free recommendation engine to learn which Network Access Control (NAC) solutions are best for your needs.
852,764 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Government
9%
Manufacturing Company
8%
Educational Organization
6%
Educational Organization
24%
Computer Software Company
14%
Financial Services Firm
8%
Government
7%
Manufacturing Company
15%
Computer Software Company
13%
Financial Services Firm
12%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is better - Aruba Clearpass or Cisco ISE?
Aruba ClearPass is a Network Access Control tool that gives secure network access to multiple device types. You can...
What is the biggest difference between Aruba ClearPass and FortiNAC?
I've done quite a lot of work with ClearPass, and not a lot with FortiNAC/Bradford. ClearPass incorporates a number ...
What do you like most about Aruba ClearPass?
If you are looking at the base installation, then it was a very straightforward process, which I would rate an eight ...
What are the main differences between Cisco ISE and Forescout Platform?
OK, so Cisco ISE uses 802.1X to secure switchports against unauthorized access. The drawback of this is that ISE cann...
How does Cisco ISE compare with Fortinet FortiNAC?
Cisco ISE uses AI endpoint analytics to identify new devices based on their behavior. It will also notify you if some...
What do you like most about Cisco ISE (Identity Services Engine)?
Cisco ISE is a comprehensive solution that allows you to control access to network resources granularly based on poli...
What do you like most about Portnox CORE?
It's easy to manage and troubleshoot thanks to the lightweight components.
What is your experience regarding pricing and costs for Portnox CORE?
It's not cheap. It's not expensive. It's in the middle, so I'll probably give it a seven out of ten, where one is che...
What needs improvement with Portnox CORE?
We have been having some issues with it. That's why we're considering migrating to Portnox Clear due to some limitati...
 

Also Known As

Avenda eTIPS
Cisco ISE
Access Layers Portnox, Portnox CLEAR
 

Interactive Demo

Demo not available
Demo not available
 

Overview

 

Sample Customers

Consulate Health Care, Los Angeles Unified School District, Science Applications International Corp (SAIC), San Diego State University, KFC, ACTS Retirement-Life Communities
Aegean Motorway, BC Hydro, Beachbody, Bucks County Intermediate Unit , Cisco IT, Derby City Council, Global Banking Customer, Gobierno de Castilla-La Mancha, Houston Methodist, Linz AG, London Hydro, Ministry of Foreign Affairs, Molina Healthcare, MST Systems, New South Wales Rural Fire Service, Reykjavik University, Wildau University
Data Realty, Royal London, Wales Millennium Centre, McLaren Construction Group, EL AL Israeli Airlines, 
Find out what your peers are saying about Cisco, Hewlett Packard Enterprise, Fortinet and others in Network Access Control (NAC). Updated: May 2025.
852,764 professionals have used our research since 2012.