Try our new research platform with insights from 80,000+ expert users

Cisco Identity Services Engine (ISE) vs macmon Network Access Control comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 5, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Identity Services Eng...
Ranking in Network Access Control (NAC)
1st
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
143
Ranking in other categories
Cisco Security Portfolio (1st)
macmon Network Access Control
Ranking in Network Access Control (NAC)
9th
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
3
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of July 2025, in the Network Access Control (NAC) category, the mindshare of Cisco Identity Services Engine (ISE) is 25.1%, down from 30.7% compared to the previous year. The mindshare of macmon Network Access Control is 2.9%, up from 1.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Access Control (NAC)
 

Featured Reviews

SunilkumarNaganuri - PeerSpot reviewer
Enhanced device administration hindered by complex deployment and security limitations
Cisco Identity Services Engine (ISE) needs to improve the profiling preauthentication. They are very poor in asset classification and should focus on improving the preauthentication profiling, especially for NAC use cases. This will give them a roadmap for software-defined access (SDA) use cases and network segmentation. Threat detection capabilities are very weak. Additionally, the product is vulnerable and has many bugs.
Yusuf Oezeren - PeerSpot reviewer
A robust solution that provides protection to effectively control the access to your network
The single sign-on process can be improved and the interface should be made more user-friendly. The interface is user-friendly but, for example, when we have new people starting to work, they never work with NetOne and it is a bit hard to expand in certain places. In addition, when I have to pull the last corrected MAC address, I need to put the space between it in order to find the address. If I don't put it in there, I don't get any resources. This needs improvement. They should maybe add integration with LanSuite. We can include it to see the direct information we get from our LAN Tree. If I click on the MAC address, I will then directly get the hostname, and that will open a tap-in line so I see what the last update was.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"One of the advantages is that you can easily find rogue endpoints. For example, if you don't want to allow any endpoints where you don't know the people plugging into what kind of devices, ISE can give you a big, clear picture, e.g., what kind of endpoints are getting connected to your network. That is one of the advantages."
"The endpoint profiling feature is among the most valuable because it keeps me from having to manually maintain a MAC address bypass list to track endpoints. I can have ISE profile them for me and then put them in the right bucket."
"I've had no issues with scalability. I started using it on two campuses, and now I'm using it across the country and scaling it across subsidiaries in other countries."
"The most valuable feature is the integration with StealthWatch and DNA as one fabric."
"It provides client provisions and profiling as well as guest access."
"The WiFi portal in Cisco ISE is very useful for WiFi customers."
"The initial setup was easy. It took around one month. We did the installation part within half an hour to two hours but we found a couple of issues so we raised a case and once everything was resolved it was a month in total."
"TACACS and .1X security are the most valuable features. TACACS acts for user control, so no one can authenticate to our network devices, and .1X is to validate that unauthorized devices are plugged into our network."
"We use it with our Cisco switches so we can see which switch it is actually connected to."
"The API is a great way to get information from other tools."
"The ease of connecting with the client is valuable for me."
 

Cons

"The user interface can be improved."
"The one main thing that it can improve on is the GUI. As the newest addition to the team, I struggle a little bit to get around it just because it has so many features."
"Automation [is an area for improvement]. It seems like everywhere I look, automation is super important. Automation and integrations. That's the area it could be improved..."
"The admin interface is really slow. It's horrible."
"Cisco ISE does not recognize devices and that is an issue we faced during its integration with our existing devices."
"The Cisco wireless​ controller needs to add more than one physical port."
"A main issue is that the upgrade process, over time, is extraordinarily fragile. Repeatedly, over the past several years, when we've tried to upgrade our Cisco ISE implementation, the upgrade has broken it. Ultimately, we have then had to rebuild it because we need it."
"The primary issue is the slowness of the application and the web interface. We have multiple admin nodes and app nodes. So when I need to get some information about a particular user, the GUI would take ten to fifteen seconds in loading when we need to know right away."
"The service macmon offers is already great."
"The solution must allow users to filter files based on dates."
"The single sign-on process can be improved and the interface should be made more user-friendly."
 

Pricing and Cost Advice

"The price of the solution is price fair for the features you receive."
"Cisco is moving towards a subscription service, which would mean additional costs."
"We are running Version 2.9 because Version 2.9 of the ISE has a persistent license — it's a one-time payment. The latest version (3.1) is only available if you do a yearly subscription."
"Previously, Cisco ISE had a perpetual licensing model, but now they have shifted to a subscription-based licensing system."
"It costs around 50,000 baht in the first year, but I'm unsure about the second year."
"I would rate the pricing an eight out of ten, one being cheap and ten being expensive."
"The licensing is subscription-based and based on the user account."
"The solution is not that cheap."
"The solution is not expensive."
report
Use our free recommendation engine to learn which Network Access Control (NAC) solutions are best for your needs.
863,901 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Financial Services Firm
10%
Government
9%
Manufacturing Company
9%
Computer Software Company
15%
Manufacturing Company
12%
Comms Service Provider
8%
Educational Organization
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Which is better - Aruba Clearpass or Cisco ISE?
Aruba ClearPass is a Network Access Control tool that gives secure network access to multiple device types. You can adapt the policies to VPN access, wired, or wireless access. You can securely ...
What are the main differences between Cisco ISE and Forescout Platform?
OK, so Cisco ISE uses 802.1X to secure switchports against unauthorized access. The drawback of this is that ISE cannot secure the port if a device does not support 802.1x. Cameras, badge readers, ...
How does Cisco ISE compare with Fortinet FortiNAC?
Cisco ISE uses AI endpoint analytics to identify new devices based on their behavior. It will also notify you if someone plugs in with a device that is not allowed and will block it. The user exper...
What do you like most about macmon Network Access Control?
The ease of connecting with the client is valuable for me.
What needs improvement with macmon Network Access Control?
There is no information on the protocol where the clients stop to authenticate. There are some policies, but I don't know whether the device stopped on the authentication or authorization levels. I...
 

Also Known As

Cisco ISE
macmon NAC
 

Overview

 

Sample Customers

Aegean Motorway, BC Hydro, Beachbody, Bucks County Intermediate Unit , Cisco IT, Derby City Council, Global Banking Customer, Gobierno de Castilla-La Mancha, Houston Methodist, Linz AG, London Hydro, Ministry of Foreign Affairs, Molina Healthcare, MST Systems, New South Wales Rural Fire Service, Reykjavik University, Wildau University
More than 1,500 installations in all over Europe in all industries: Stepchange, Volkswagen, Vivantes Healthcare, MBDA Weapons, APS engineering, Alfred Ritter GmbH (Ritter Sport), Haßberg-Kliniken, 1. FSV Mainz 05 eV., Siempelkamp, AEB etc.
Find out what your peers are saying about Cisco Identity Services Engine (ISE) vs. macmon Network Access Control and other solutions. Updated: July 2025.
863,901 professionals have used our research since 2012.