


Find out what your peers are saying about Hewlett Packard Enterprise, Fortinet, Cisco and others in Network Access Control (NAC).
Direct comparisons with Forescout reveal up to 30% to 40% difference in cost savings.
We have saved resources and time, and we have also secured our network, confirming we have a return on investment.
If I compare this to an on-premises environment using Cisco ISE or Aruba ClearPass, it would require phenomenally large teams for infrastructure management.
If you were moving from a traditional on-premise NAC that was 100% managed by the IT department, there would be great savings in going to a cloud-based NAC with Portnox.
Most customers feel value immediately upon deployment.
I rate the technical support as one out of ten.
Cisco support has pretty good teams for support and every time we had good answers and we could somehow solve the issues we had.
Sometimes it's challenging to identify which support team is responsible for certain issues, which is a significant concern.
They provide sessions to help with various questions.
They could do more to improve, not because of the product itself but because of the support they provide.
Fortinet FortiNAC's customer support is very good, as is typical from Fortinet.
The main area needing improvement is the technical knowledge of support staff.
For very high severity issues where the entire office is non-functional, response time is within 30 minutes.
In terms of support, it is usually quite impressive. I usually get support in a matter of minutes or seconds, depending on the priority of the ticket.
Factors like architecture, business nature, and legal limitations such as GDPR affect it.
However, you can have some latency issues depending on where your devices are.
The pricing model makes it challenging as the cost is substantial due to the per-node licensing model.
We have never had any challenge based on a customer who has 1,000 devices versus a customer who has 30,000 devices; the feel is the same.
They ensure the backend can support it and do the provisioning while maintaining headroom and elasticity.
I rate scalability a ten; you simply pay and you get more.
Cisco Identity Services Engine (ISE) is considered very reliable and stable.
The stability of Cisco Identity Services Engine (ISE) is poor for certain use cases, like authentication.
Sometimes when we have upgrades or failovers with Cisco Identity Services Engine (ISE), we had some minor issues.
The product itself is available and its uptime is 100%.
In the four years that I used Portnox, if it crashed or the server crashed, that would not have been more than once.
If there is a version one and another version, the communication between the organization using it and Portnox should be firm so they can coordinate effectively.
The whole setup works well with Cisco access points and Cisco switches, but when you have multiple vendors in the environment, such as HP switches or access points like Aruba, you'll find they will not work well with Cisco Identity Services Engine (ISE).
Pricing can be more expensive compared to other vendors, and there is a significant price gap observed, which doesn't seem justified by some specific features.
They are very poor in asset classification and should focus on improving the preauthentication profiling, especially for NAC use cases.
Improvement in the interface design would make FortiNAC a better solution.
The graphical user interface (GUI) of Fortinet FortiNAC is very poor compared to competitors like Forcepoint and Cisco ISE.
Fortinet FortiNAC can be improved as the GUI is very poor compared to other competitors such as Cisco ISE.
Ideally, we should be able to search for any MAC address in the database, regardless of its authentication status, to see all its associated groups and potential conflicts.
When I reach the technical support, they give solutions that do not help me much, so I try to search the internet for other users' experiences to find solutions.
When I'm doing filtering at times, it doesn't filter the items properly.
Compared to other solutions like HPE ClearPass, Cisco is more costly, and the conversation suggests a possible forty percent price gap compared to competitors.
The license costs can range between $50,000 to $100,000 per year for enterprises.
Cloud solutions are expensive, while on-prem setups with shared environments are cheaper but not effective.
My experience with pricing, setup cost, and licensing for Fortinet FortiNAC is that, as is typical from Fortinet, all their products have a very good licensing model and competitive pricing.
Fortinet FortiNAC is relatively cheap compared to other solutions.
If you compare Portnox with all other well-known standard products, it is the cheapest.
The pricing is a bit high, possibly due to the cloud features and running instances across regions like the US, Asia, and Europe.
You are charged according to the number of users.
Cisco Identity Services Engine (ISE) offers authentication using RADIUS, enhancing network security by separating and segregating networks.
There is value because it helps us secure the network and prevents certain things from happening which could cause financial loss.
The adaptability of Cisco Identity Services Engine (ISE) policy enforcement can fit to the site we have depending on which kind of devices we have on site and then the needs for authentication, granting access and then assigning each device into its correct network for segmentation.
I appreciate the feature where it can connect with different vendor equipment, regardless of the network devices from other vendors.
The best features Fortinet FortiNAC offers include great integration with other Fortinet products.
The main advantage of Fortinet FortiNAC is its integration with the entire Fortinet product portfolio.
It's notable how Portnox has improved operational efficiency.
It is a very robust application because three teams use that part: the network team, the security team, and the support people.
It is possible to find the MAC address in the switch, but in Portnox, it is very useful to see the status of those ports, and that increases our security.
| Product | Mindshare (%) |
|---|---|
| Fortinet FortiNAC | 13.7% |
| Cisco Identity Services Engine (ISE) | 18.6% |
| Portnox | 6.9% |
| Other | 60.800000000000004% |


| Company Size | Count |
|---|---|
| Small Business | 45 |
| Midsize Enterprise | 32 |
| Large Enterprise | 91 |
| Company Size | Count |
|---|---|
| Small Business | 30 |
| Midsize Enterprise | 14 |
| Large Enterprise | 14 |
| Company Size | Count |
|---|---|
| Small Business | 17 |
| Midsize Enterprise | 5 |
| Large Enterprise | 10 |
Cisco Identity Services Engine offers robust authentication, posture profiling, guest and secure access, and dynamic policy management. Known for its seamless integration with Cisco tools and network access control features, it ensures secure device and user authentication across networks.
Cisco Identity Services Engine is renowned for its capabilities in managing authentication, guest access, and policy management through segmentation. Its TrustSec functionality, alongside RADIUS and TACACS+ support, provides enhanced security, further augmented by its ability to operate in diverse environments. Its scalability and integration with Cisco solutions aid in maintaining network visibility and access control. Challenges include the complexity of initial deployments, somewhat cumbersome documentation, and limited integration in multi-vendor environments. While encountering issues in stability and updates, the demand for better analytics and straightforward troubleshooting alongside cost-effective licensing is notable.
What are the key features of Cisco Identity Services Engine?Industries implement Cisco Identity Services Engine primarily for network access control, ensuring secure authentication and segmentation in both wired and wireless environments. Supporting policies like bring-your-own-device and compliance standards, ISE manages identity-based access control, especially beneficial for entities that require detailed user rights management and integration within enterprise networks.
Fortinet FortiNAC is integral for enhancing network access control by providing security, visibility, and control over IoT devices. Known for its user-friendly interface and powerful automation, it streamlines network management and access control while supporting policy enforcement and guest management.
Fortinet FortiNAC offers robust security by integrating seamlessly with Fortinet products, enhancing compatibility with external vendors, and allowing users to manage wired and wireless networks efficiently. Known for its ability to prevent unauthorized connections, it enhances network visibility and control, particularly in managing Bring Your Own Device (BYOD) and compliance. However, integration with non-Fortinet systems, better reporting capabilities, and intuitive interface improvements are areas for enhancement. Setup complexities, additional equipment needs for features like single sign-on, and improved support and documentation are noted challenges.
What are the key features of Fortinet FortiNAC?In education and healthcare, Fortinet FortiNAC is applied extensively to manage Wi-Fi access for non-domain devices, ensuring secure network access without traditional password-based systems. It integrates with Fortinet Security Fabric, offering endpoint profiling and posture assessments to ensure adherence to security standards. This implementation enhances BYOD management, allowing organizations to meet compliance and security requirements effectively across diverse environments.
Portnox provides advanced network visibility and proactive security without complexity, ensuring easy setup and scalability. Its agentless nature and intuitive design enable seamless device management and system integration, promoting efficient network operations and endpoint security.
Portnox is known for offering comprehensive network access control, providing firms with vital tools for managing authentication and securing endpoint devices. It's praised for ease of use in integrating with systems such as RADIUS servers and offering detailed analytical capabilities to ensure compliance and control unauthorized access. While users appreciate the intuitive interface and device management, improvements have been suggested in the areas of better GUI, integration with firewalls, and enhanced configuration methods. Portnox aids in handling dynamic VLAN assignments and securing access in both wired and wireless networks, proving particularly valuable for on-premises and remote environments.
What are the key features of Portnox?In industries where network security is paramount, such as finance and healthcare, Portnox is implemented to fortify access control and manage endpoint connections effectively. Its ability to secure both on-premises and remote environments makes it a versatile choice across sectors that require stringent access management, particularly where unauthorized device connections pose significant risks.