Try our new research platform with insights from 80,000+ expert users

Aruba ClearPass vs Cisco Identity Services Engine (ISE) vs Varonis Platform comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

Network Access Control (NAC)
Network Access Control (NAC)
Data Loss Prevention (DLP)
 

Featured Reviews

Abdelhamid Saber - PeerSpot reviewer
Secures the network with flexible controls and excellent support
We use Aruba ClearPass as a network access control solution. It prevents unauthorized access and allows access for users in the internal environment, performing checks and onboarding We use ClearPass to secure our environment. Before ClearPass, our environment wasn't as secure. The most…
SunilkumarNaganuri - PeerSpot reviewer
Enhanced device administration hindered by complex deployment and security limitations
Cisco Identity Services Engine (ISE) needs to improve the profiling preauthentication. They are very poor in asset classification and should focus on improving the preauthentication profiling, especially for NAC use cases. This will give them a roadmap for software-defined access (SDA) use cases and network segmentation. Threat detection capabilities are very weak. Additionally, the product is vulnerable and has many bugs.
Frederic  Delos - PeerSpot reviewer
Offers the ability to identify sensitive areas, allowing you to drill down into the sensitive data
The most effective feature for me is its ability to identify sensitive areas, allowing you to drill down into the sensitive data, provided you have access, to determine whether it's a false positive or a true positive. That's the best thing for me, out of all of it. It's got everything, like other ones, but I like to be able to look at something if I'm doing forensics on the alert and say, "Okay, do I really need to do something with this?" For example, we don't want sensitive data in our OneDrive. So it identifies the sensitive data that's possibly in the OneDrive. And what I can do is look at it and identify whether it's actually sensitive data in Datalert or whether it looks like sensitive data, but I know it's a false positive. If it is a false positive, I can basically say ignore this pattern based on X, Y, and Z, you know, whether it's Redjax or keyword proximity. So I like that. With other tools, I gotta go through a whole process because it's a little bit more complex. Here, I can tag it and bag it in one shot. And the next good time I scan, it slips over it. So it helps in that.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The ClearPass solution includes role and role-based user and machine access, and they handle network segmentation using wired and wireless access methods."
"Aruba ClearPass is feature-rich and fairly straightforward to implement."
"The most valuable feature of Aruba ClearPass is the ease of deployment and integration with other equipment in the network."
"The visibility and security features are most valuable. We get a clear view. It is a very secure product for educational institutions."
"Access Tracker is invaluable for troubleshooting access control incidents and quickly getting to the root cause."
"The web dashboard and the policy manager are very intuitive and very easy for the engineers to use."
"The most valuable feature is flexibility as it supports solutions from multiple vendors."
"I'd rate the solution ten out of ten."
"There is good integration with third-party systems like antivirus patch management, MDM."
"The TACACS and RADIUS have been the most valuable features so far."
"It does what it's supposed to. We use a certificate-based authentication method for corporate-managed devices. That means when a user walks in with their managed laptop and plugs it into the network, it chats with Cisco ISE in the background, allows it on the network, and away they go."
"We found all the features of the product to be valuable."
"It's flexible and stable. It's been good as a standard environment to run."
"It's easy to change and add policies."
"The way the ISE works is you can get into defining. Let's say, in my case, I've got a Windows laptop and I've got an Apple product and those have unique identifiers, unique back addresses. It would say that this in my profile so I could get to those apps with either device, 24/seven. That's how granular the ISE or these NAC Solutions can get."
"The most valuable thing in ISE is the adoption of EAP deep that came in [version] 2.7, so we can do authentication based on user and machine certificates in one authentication."
"The solution's classification engine is highly configurable and efficient."
"Varonis offers robust data access governance, allowing us to understand which sensitive data exists and who has access to it."
"The telemetry to capture everything and the reports are very easy to configure without having a developer degree."
"Technical support from Varonis is rated as nine out of ten."
"On the Varonis side, technical support is phenomenal. Their ability to explain is very good, and they seem to be very knowledgeable. When I get an alert that doesn't quite make sense, they dive in there and kind of take me through it. That's very useful and very good. There are some false alerts, but it is better to have a false alert than no alert at all."
"It can easily identify unusual behavior or access patterns that may pose a potential threat, while operating as a unified reporting system."
"The solution has significantly improved data security and compliance posture by allowing us to track and monitor activities. We can see who accesses data and when files are created and understand what's happening in our environment."
"The most important feature is remediation. In remediation support, there is no group permission. We'll go ahead and remediate the access from the Dell folder to the parent folder."
 

Cons

"​​The AirWave Dashboard heat maps could be better designed."
"Aruba ClearPass needs significant improvement in being user-friendly. The configuration and overall use are not easily understandable."
"The initial setup phase of the solution was really very difficult, owing to which the setup phase can be considered as an area that can be improved."
"Like most security products, ClearPass is difficult to deploy. You need to use the CLI to implement security products from any vendor, so configuring the authentication is complicated."
"The platform's API integration could be better. Additionally, its pricing could be affordable."
"The product's technical support services need improvement."
"It should be clearer in the pre-sales stage that clear, documented, executive-supported InfoSec policy is the key to success."
"I found the internal authentication policy and user authentication problematic. I was facing issues with user authentication, but we eventually resolved these problems."
"We do tend to run into a lot of issues with ISE when it comes to bugs."
"The interface could be more user-friendly and the ability to apply rules to MAC addresses, for example, if I wanted to allow a certain MAC address access at a particular time I cannot make this adjustment."
"There can be a little bit more integration between the controller management and ISE. There are two dashboards, you have the controller dashboards, and you have the ISE dashboard it would is a way to maybe integrate that into one. That would be great. It's not that bad. It would be easier if it could be combined into one dashboard."
"It does a good job of establishing trust for every access request. We have had a little bit of a challenge with profiling, but we are probably about 80% there."
"The solution can lag somewhat as we have a large database."
"I would say they need to expand the hardware compatibility. The whole setup works well with Cisco access points and Cisco switches, but when you have multiple vendors in the environment, such as HP switches or access points like Aruba, you'll find they will not work well with Cisco Identity Services Engine (ISE)."
"I believe that Cisco can improve the way its policies are built because it's a little complex."
"It would be nice if it could be configured easily by default."
"The GUI should be more functional. There should be a process for connecting through Chrome, Internet Explorer, etc."
"Varonis requires more access permissions for its core functions compared to competitors, which can be a concern for companies about data safety."
"I would like it to have cloud integration."
"There is one thing that if I add something manually, I get so many alerts. That's the biggest bad thing."
"One area for improvement is the calculation engine. When applying rules in Varonis, especially for large datasets (terabytes of data), the calculations can be slow and require time to process. Speeding up this process would be beneficial."
"It is significantly complex."
"The product is very complicated."
"The remediation process can be improved. There will be no existing permission group for the McAfee channel domains. We can create a new permissions group for the required folder."
 

Pricing and Cost Advice

"Compared to the functionality, the pricing is very favorable. It's affordable and provides good value for the money."
"We pay an annual licensing fee for Aruba and there are no additional costs."
"The pricing is not bad and everything is included."
"You can get Aruba ClearPass either where you purchase it outright or you can be subscription-based. The cost will vary according to what is selected, but it's licensed per device. For example, for a hundred users or a hundred device license, it would cost approximately $2,000."
"It is affordable. In Lebanon, companies are small, and they do not have a big budget. They cannot invest a lot of money, and Aruba ClearPass is quite affordable for them."
"The solution has a licensing model."
"​Cost is important. I switched because Aruba's costs were well below Cisco's."
"The solution is costly."
"I don't know too much about the actual pricing on it. The licensing part is pretty straightforward. It's a lot more simple than some of the other Cisco licensing models. In that aspect, it's great."
"The pricing is complicated."
"The technology is good, but to use some of the other features, and capabilities, they request that we purchase the Cisco DNA Center. As a result, the bundled price is a little high."
"Licensing is a disaster. It's a mess and I hope they fix it soon."
"Cisco has actually transitioned to a lot of subscription models, fees, and licenses."
"If you're not going through an agreement, it's very expensive."
"The pricing is good. The last time we purchased four new appliances the price was doable for any organization of our size."
"It's an expensive solution when compared to other vendors."
"You could do a subscription, where you pay yearly, or you could purchase it outright. The licensing cost is based on the number of users on the system that you are monitoring."
"I would rate the pricing an eight out of ten, with ten being the most expensive."
"The pricing is good. It neither expensive nor cheap. It is average."
"It's expensive, kind of, really expensive."
"Varonis Platform wasn't certainly the cheapest solution."
"Licensing is on an annual basis. Maintenance and renewal fees are separate. Varonis Datalert is quite expensive."
"The platform is expensive. I rate the pricing a nine out of ten."
report
Use our free recommendation engine to learn which Network Access Control (NAC) solutions are best for your needs.
850,671 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Government
9%
Manufacturing Company
8%
Educational Organization
6%
Educational Organization
24%
Computer Software Company
14%
Financial Services Firm
8%
Government
7%
Financial Services Firm
16%
Computer Software Company
10%
Manufacturing Company
9%
Healthcare Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is better - Aruba Clearpass or Cisco ISE?
Aruba ClearPass is a Network Access Control tool that gives secure network access to multiple device types. You can...
What is the biggest difference between Aruba ClearPass and FortiNAC?
I've done quite a lot of work with ClearPass, and not a lot with FortiNAC/Bradford. ClearPass incorporates a number ...
What do you like most about Aruba ClearPass?
If you are looking at the base installation, then it was a very straightforward process, which I would rate an eight ...
What are the main differences between Cisco ISE and Forescout Platform?
OK, so Cisco ISE uses 802.1X to secure switchports against unauthorized access. The drawback of this is that ISE cann...
How does Cisco ISE compare with Fortinet FortiNAC?
Cisco ISE uses AI endpoint analytics to identify new devices based on their behavior. It will also notify you if some...
What do you like most about Cisco ISE (Identity Services Engine)?
Cisco ISE is a comprehensive solution that allows you to control access to network resources granularly based on poli...
What do you like most about Varonis Platform?
The solution has significantly improved data security and compliance posture by allowing us to track and monitor acti...
What needs improvement with Varonis Platform?
Varonis started as an on-premises solution and is transitioning to cloud. It hasn't fully moved yet, which is an area...
What is your primary use case for Varonis Platform?
The primary use case for Varonis Platform is data discovery, specifically for discovering sensitive data in our organ...
 

Also Known As

Avenda eTIPS
Cisco ISE
No data available
 

Overview

 

Sample Customers

Consulate Health Care, Los Angeles Unified School District, Science Applications International Corp (SAIC), San Diego State University, KFC, ACTS Retirement-Life Communities
Aegean Motorway, BC Hydro, Beachbody, Bucks County Intermediate Unit , Cisco IT, Derby City Council, Global Banking Customer, Gobierno de Castilla-La Mancha, Houston Methodist, Linz AG, London Hydro, Ministry of Foreign Affairs, Molina Healthcare, MST Systems, New South Wales Rural Fire Service, Reykjavik University, Wildau University
Nottingham Building Society
Find out what your peers are saying about Cisco, Hewlett Packard Enterprise, Fortinet and others in Network Access Control (NAC). Updated: April 2025.
850,671 professionals have used our research since 2012.