Cisco Identity Services Engine (ISE) vs Ivanti Policy Secure (IPS) comparison

Why PeerSpot?

Cisco and Ivanti are both solutions in the Network Access Control (NAC) category. Cisco is ranked #2 with an average rating of 7.3, while Ivanti is ranked #14. Cisco holds a 18.5% mindshare in NAC, compared to Ivanti’s 3.2% mindshare. Additionally, 87% of Cisco users are willing to recommend the solution, compared to 100% of Ivanti users who would recommend it.

Cisco Identity Services Eng...

Read 144 Cisco Identity Services Engine (ISE) reviews

22,110 Views
14,372 Comparison Views

87% willing to recommend

Ivanti Policy Secure (IPS)

Read 3 Ivanti Policy Secure (IPS) reviews

1,478 Views
1,463 Comparison Views

100% willing to recommend

Cisco Identity Services Eng...

Ivanti Policy Secure (IPS)

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on May 20, 2026

Cisco Identity Services Engine and Ivanti Policy Secure are competing solutions within the network security sphere, focusing on access management and policy enforcement. Cisco generally receives favorable comparisons for its comprehensive security capabilities.

Features: Cisco offers advanced threat defense, extensive network access control, and robust integration capabilities, making it a preferred choice for complex security environments. Ivanti, although feature-rich, emphasizes seamless network access and simple policy management, providing effective endpoint compliance with less complexity. The choice depends on whether advanced integration or straightforward functionality is prioritized.

Ease of Deployment and Customer Service: Ivanti is recognized for its relatively straightforward deployment process and solid customer support, appealing to organizations with limited IT resources. Cisco offers a rich set of tools and may require a more intricate setup and specialized skill set for deployment, but provides extensive training resources. Ease of deployment is often an advantage for Ivanti where simplicity is a priority.

Pricing and ROI: Cisco is perceived as having a higher initial setup cost but is often justified by its expansive feature set and scalability. Ivanti, with a more affordable entry point, is attractive for those seeking a cost-effective solution. ROI may favor Cisco in larger deployments due to its comprehensive coverage and sophisticated network protection, whereas Ivanti is suited for businesses requiring efficient cost management without compromising on essential capabilities.

To learn more, read our detailed Cisco Identity Services Engine (ISE) vs. Ivanti Policy Secure (IPS) Report (Updated: September 2026).

Buyer's Guide

Cisco Identity Services Engine (ISE) vs. Ivanti Policy Secure (IPS)

September 2026

Download the complete report

Helped 915,325 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cisco Identity Services Eng...

Ranking in Network Access Control (NAC)

2nd

Average Rating

8.2

Reviews Sentiment

6.6

Number of Reviews

144

Ranking in other categories

Cisco Security Portfolio (4th)

Ivanti Policy Secure (IPS)

Ranking in Network Access Control (NAC)

14th

Average Rating

7.6

Reviews Sentiment

7.5

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of October 2026, in the Network Access Control (NAC) category, the mindshare of Cisco Identity Services Engine (ISE) is 18.5%, down from 24.2% compared to the previous year. The mindshare of Ivanti Policy Secure (IPS) is 3.2%, up from 1.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Network Access Control (NAC) Mindshare Distribution
Product	Mindshare (%)
Cisco Identity Services Engine (ISE)	18.5%
Ivanti Policy Secure (IPS)	3.2%
Other	78.3%

Network Access Control (NAC)

Featured Reviews

NicolasFigaro

IT Network Manager at a tech services company with 10,001+ employees

Has improved authentication management and simplified visitor network access

The log capacity in Cisco Identity Services Engine (ISE) could be enhanced because today natively on the ISE can only have a look at the logs from the day before. You cannot search into the oldest logs; you have to use another tool for that. This can be blocking if you don't have any log consolidation solution. To do a search for an issue or something that happened two days ago, you cannot search directly in there. The capacity of Cisco Identity Services Engine (ISE) could be enhanced. Something between one week and one month for the log capacity would be nice.

Read full review

Le Ban

IT Security Manager & Chief IT Engineer at JVPC

Affordable product with an easy initial setup process

Ivanti NAC's most valuable feature is reasonable pricing The product's performance needs improvement. We are doing the PoC of Ivanti NAC. I rate the platform's stability an eight out of ten. I rate Ivanti NAC's scalability an eight out of ten. We have 150 users for it. I contacted the…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We have seen ROI. It has done its job. It has protected us when we needed it to."

"The solution is very reliable."

"The most valuable feature is the provisioning of the device so as to ensure that they are compliant with the security policy that we need to have."

"It works as a good RADIUS server. It has lots of features. It works with all the proprietary Cisco AB pairs and features."

"Easy to use and provides good support"

"Cisco Identity Services Engine (ISE) is very stable."

"Now that we have it in, I feel it's pretty much a game changer on locking down our network so that we're not penetrated from inside or outside because everything going through the VPN has to meet a certain standard."

"I would recommend this solution as it is very easy to set up and has a very easy user interface."

More Cisco Identity Services Engine (ISE) pros

"Integration with other vendors is possible."

"Ivanti NAC's most valuable feature is reasonable pricing."

"The profiler option allows me to see every detail in a systematic manner from a switch. I can choose the switch and I can see the port NAC address and time."

Cons

"Segmentation can be improved."

"Sometimes some of Cisco ISE's graphical interfaces could be a little bit smoother. However, with the different versions, the product is getting better and better."

"There should be an easier way to do the upgrades. There are a lot of steps to get to the next version from the previous version which ends up being a bit of the headache with the upgrade."

"The web interface needs improvement. The new web interface that they have is not as easy to manage and we find it to be very slow."

"We face many bugs."

"I would like the product to include support for OSVS version three."

"Cisco ISE could be simplified somewhat. I would also prefer certificate-based authentication over confirmation-based authentication for all the processes. It's possible for us to do a workaround, but the process needs to be simplified."

"The support could be faster and the pricing could be reduced."

More Cisco Identity Services Engine (ISE) cons

"The product's performance needs improvement."

"At some point, the server got cached and we faced several issues that impacted our customers. We would like to have this resolved."

"The documentation needs to be improved. There are a lot of details that are missed which makes it confusing."

Pricing and Cost Advice

"The technology is good, but to use some of the other features, and capabilities, they request that we purchase the Cisco DNA Center. As a result, the bundled price is a little high."

"There are other cheaper options available."

"Cisco is moving towards a subscription service, which would mean additional costs."

"Cybersecurity resilience has been very important to our organization and has been a big factor. We've had issues in the past, but one of the things I like about ISE is its logging features. Security wise or information wise, it really has been a powerful tool."

"Standard licensing gives backup access and very few features, and then there's VM licensing - each VM we use needs to be licensed."

"We are running Version 2.9 because Version 2.9 of the ISE has a persistent license — it's a one-time payment. The latest version (3.1) is only available if you do a yearly subscription."

"I am not aware of the current price for Cisco ISE, but considering it is a Cisco product, it is likely to be quite high."

"The price can be lower, especially for subscriptions. It should be a lot cheaper to have a wide range of customers. The price should be comparable to competitive products like Forescout or Fortinet FortiNAC. Forescout is cheaper for customers looking for a cloud solution."

More Cisco Identity Services Engine (ISE) pricing and cost advice

"The product is cost-effective."

See which vendors are best for you

Use our free recommendation engine to learn which Network Access Control (NAC) solutions are best for your needs.

See recommendations

915,325 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

11%

Financial Services Firm

Outsourcing Company

Comms Service Provider

Outsourcing Company

17%

Comms Service Provider

13%

Manufacturing Company

10%

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	45
Midsize Enterprise	32
Large Enterprise	91

No data available

Questions from the Community

Which is better - Aruba Clearpass or Cisco ISE?

Aruba ClearPass is a Network Access Control tool that gives secure network access to multiple device types. You can adapt the policies to VPN access, wired, or wireless access. You can securely ...

See all answers

What are the main differences between Cisco ISE and Forescout Platform?

OK, so Cisco ISE uses 802.1X to secure switchports against unauthorized access. The drawback of this is that ISE cannot secure the port if a device does not support 802.1x. Cameras, badge readers, ...

See all answers

How does Cisco ISE compare with Fortinet FortiNAC?

Cisco ISE uses AI endpoint analytics to identify new devices based on their behavior. It will also notify you if someone plugs in with a device that is not allowed and will block it. The user exper...

See all answers

Ask a question

Earn 20 points

Comparisons

Aruba ClearPass vs Cisco Identity Services Engine (ISE)

Compared 33% of the time

Fortinet FortiNAC vs Cisco Identity Services Engine (ISE)

Compared 9% of the time

Forescout Platform vs Cisco Identity Services Engine (ISE)

Compared 5% of the time

Portnox vs Cisco Identity Services Engine (ISE)

Compared 4% of the time

Idira Privileged Access Manager vs Cisco Identity Services Engine (ISE)

Compared 2% of the time

More Cisco Identity Services Engine (ISE) Competitors

Portnox vs Ivanti Policy Secure (IPS)

Compared 12% of the time

Fortinet FortiNAC vs Ivanti Policy Secure (IPS)

Compared 11% of the time

Aruba ClearPass vs Ivanti Policy Secure (IPS)

Compared 10% of the time

Forescout Platform vs Ivanti Policy Secure (IPS)

Compared 9% of the time

Genian NAC vs Ivanti Policy Secure (IPS)

Compared 6% of the time

More Ivanti Policy Secure (IPS) Competitors

Product Reports

Buyer's Guide

Cisco Identity Services Engine (ISE)

October 2026

Cisco Identity Services Engine (ISE) report

Download Cisco Identity Services Engine (ISE) product report

Buyer's Guide

Network Access Control (NAC)

September 2026

Download Ivanti Policy Secure (IPS) product report

Also Known As

Cisco ISE

Pulse Policy Secure

Overview

Cisco Identity Services Engine offers robust authentication, posture profiling, guest and secure access, and dynamic policy management. Known for its seamless integration with Cisco tools and network access control features, it ensures secure device and user authentication across networks.

Cisco Identity Services Engine is renowned for its capabilities in managing authentication, guest access, and policy management through segmentation. Its TrustSec functionality, alongside RADIUS and TACACS+ support, provides enhanced security, further augmented by its ability to operate in diverse environments. Its scalability and integration with Cisco solutions aid in maintaining network visibility and access control. Challenges include the complexity of initial deployments, somewhat cumbersome documentation, and limited integration in multi-vendor environments. While encountering issues in stability and updates, the demand for better analytics and straightforward troubleshooting alongside cost-effective licensing is notable.

What are the key features of Cisco Identity Services Engine?

Authentication: Secures user and device access to networks using robust authentication protocols.
Posture Profiling: Provides in-depth analysis of device compliance with security policies.
Guest Access Management: Allows controlled network access for guest users through streamlined processes.
Dynamic Policy Management: Enables automatic adjustment of security policies based on real-time data.
Segmentation via TrustSec: Enhances security levels by segmenting network traffic based on identity.

What benefits or ROI should users expect from Cisco Identity Services Engine?

Comprehensive Security: Ensures enforceable security policies across network access points.
Enhanced Integration: Facilitates seamless collaboration with existing Cisco infrastructures.
Improved Compliance: Helps meet industry security standards for network access and user rights.
Increased Visibility: Provides detailed insights into network traffic and user activities.
Device Management Efficiency: Streamlines the process of managing diverse devices within a single framework.

Industries implement Cisco Identity Services Engine primarily for network access control, ensuring secure authentication and segmentation in both wired and wireless environments. Supporting policies like bring-your-own-device and compliance standards, ISE manages identity-based access control, especially beneficial for entities that require detailed user rights management and integration within enterprise networks.

Cisco

Dynamic endpoint policy enforcement and access control, seamless roaming from VPN to on-premises and more.

Ivanti

Sample Customers

Aegean Motorway, BC Hydro, Beachbody, Bucks County Intermediate Unit , Cisco IT, Derby City Council, Global Banking Customer, Gobierno de Castilla-La Mancha, Houston Methodist, Linz AG, London Hydro, Ministry of Foreign Affairs, Molina Healthcare, MST Systems, New South Wales Rural Fire Service, Reykjavik University, Wildau University

Entegrus

Buyer's Guide

Cisco Identity Services Engine (ISE) vs. Ivanti Policy Secure (IPS)

September 2026

Free Report: Cisco Identity Services Engine (ISE) vs. Ivanti Policy Secure (IPS)

Find out what your peers are saying about Cisco Identity Services Engine (ISE) vs. Ivanti Policy Secure (IPS) and other solutions. Updated: September 2026.

DOWNLOAD NOW

915,325 professionals have used our research since 2012.

See our Cisco Identity Services Engine (ISE) vs. Ivanti Policy Secure (IPS) report.

See our list of best Network Access Control (NAC) vendors.

We monitor all Network Access Control (NAC) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.