Try our new research platform with insights from 80,000+ expert users

Cisco Identity Services Engine (ISE) vs Microsoft Enterprise Mobility + Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Identity Services Eng...
Average Rating
8.2
Reviews Sentiment
6.5
Number of Reviews
144
Ranking in other categories
Network Access Control (NAC) (1st), Cisco Security Portfolio (2nd)
Microsoft Enterprise Mobili...
Average Rating
8.2
Reviews Sentiment
6.4
Number of Reviews
13
Ranking in other categories
Enterprise Mobility Management (EMM) (15th)
 

Mindshare comparison

Cisco Identity Services Engine (ISE) and Microsoft Enterprise Mobility + Security aren’t in the same category and serve different purposes. Cisco Identity Services Engine (ISE) is designed for Network Access Control (NAC) and holds a mindshare of 24.2%, down 29.5% compared to last year.
Microsoft Enterprise Mobility + Security, on the other hand, focuses on Enterprise Mobility Management (EMM), holds 1.1% mindshare, up 0.7% since last year.
Network Access Control (NAC) Market Share Distribution
ProductMarket Share (%)
Cisco Identity Services Engine (ISE)24.2%
Aruba ClearPass23.6%
Fortinet FortiNAC17.9%
Other34.30000000000001%
Network Access Control (NAC)
Enterprise Mobility Management (EMM) Market Share Distribution
ProductMarket Share (%)
Microsoft Enterprise Mobility + Security1.1%
Microsoft Intune31.3%
Workspace ONE UEM11.6%
Other56.0%
Enterprise Mobility Management (EMM)
 

Featured Reviews

SunilkumarNaganuri - PeerSpot reviewer
Enhanced device administration hindered by complex deployment and security limitations
Cisco Identity Services Engine (ISE) needs to improve the profiling preauthentication. They are very poor in asset classification and should focus on improving the preauthentication profiling, especially for NAC use cases. This will give them a roadmap for software-defined access (SDA) use cases and network segmentation. Threat detection capabilities are very weak. Additionally, the product is vulnerable and has many bugs.
Robert Veprek - PeerSpot reviewer
Have experienced inconsistent support while maintaining strong outcomes in complex projects
My biggest advantage with Microsoft Enterprise Mobility + Security is that I have really deep knowledge about Microsoft licenses, allowing me to offer our customers some non-usual configurations or special offers because I have experience working in Microsoft and many contacts, helping us to provide the best conditions for long-time contracts. The installation of Microsoft Enterprise Mobility + Security is quite easy. Azure Active Directory Premium helps to manage user access and security; it's the basis of our communication and our project, as it's essential for all security for our customers. Features within Microsoft Intune such as MDM and MAM help to protect data in general. Intune is a general tool for mobility management and device and user management.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature is the visibility element, the ability for customers to be able to see what devices are actually on their network. Without a solution like ISE, they would have no idea what devices are connected to their network. It offers them the ability to authenticate devices via mobile."
"Since migrating towards doing wired ports over ISE with 802.1X and MAB authentication, our organization's security risk has been better. We have been able to establish better layouts, so devices can move and we don't have to worry about where they need to go."
"I like the guest access feature, which has been important for us."
"It does what it's supposed to. We use a certificate-based authentication method for corporate-managed devices. That means when a user walks in with their managed laptop and plugs it into the network, it chats with Cisco ISE in the background, allows it on the network, and away they go."
"SGTs are valuable because they make it easy to enforce policies, instead of pushing them across all the other platforms."
"It integrates with the rest of our platform, like our firewall, and helps us a lot. It also does a good job establishing trust for every access request."
"The most valuable features are the ability to retrieve information about Active Directory user names, viewing the log files to see which MAC address tried to connect with the created SSIDs, portal designing for your company, hotspot tools, and creating network rules for WiFi access."
"Cisco offers automation, visibility, and control as well as third party integration capabilities."
"A good feature that is present is MAM or Mobile Application Management. We can deploy this feature on the device, which is not managed by the organization. If I apply some security configuration on a personal device, the user would be really disappointed. What we do instead is that we give all access to the applications related to corporate and ask the users to use the application. We secure the application by putting the security features on the applications and not on the users' devices. This way, the users are happy, and we also meet our company's compliance standards. Then, everyone is happy."
"You can scale the solution up or down by department."
"Integration between our departments has been the most valuable."
"The product is centralized and we can use it for security purposes."
"It is a stable solution...It is a scalable solution."
"The solution is scalable."
"The product is a unified solution and you don't require to purchase tools from different vendors. The system analyzes behavior and activity and takes steps for protection."
"Microsoft Mobility and EMS include Intune for Mobility, which provides mobile device management and mobile application management. With mobile device management, you can control the entire device in an organization."
 

Cons

"The UI is not as intuitive as some other products, even products inside of Cisco's wheelhouse."
"In an upcoming release, the solution needs to be more agentless and more independent. Additionally, there could be improved integration with other next-generation solutions, such as Palo Alto, Fortinet, or Check Point."
"This product doesn't work in isolation."
"If Cisco could grant more control, the features could be more focused on network and security administration, reducing the need for integration with other components."
"The initial setup was a little bit complex. It's not that simple because it requires a lot of prerequisites for the solution to get a hold on."
"When I work with customers to do my knowledge transfer, they're really overwhelmed with the navigation of the product and the number of things you can do with it. From a user interface standpoint, Cisco could focus on making certain tasks a bit more guided and easier for customers to walk through. That is, a user-friendly interface and streamlined workflows would be great."
"Cisco ISE can become quite complex, especially with policy sets, the entire authentication process, and everything involved."
"A lot of people tell you the hardware requirements for ISE are pretty substantial. If you're running a virtual environment, you're going to be dedicating quite a bit of resources to an ISE VM. That is something that could be worked on."
"Its performance needs enhancement."
"Technical support could be improved. Sometimes they use a third party that's not so knowledgeable in the product and that can slow down things a bit."
"There are certain shortcomings in the licensing model of the product where improvements are required."
"The technical support from Microsoft could be better."
"Sometimes the application gets hung or restarts multiple times in the background, consuming battery life."
"The auditing and reporting could be updated and upgraded. I would like to see light applications because they consume a lot of the device's memory at present."
"The MDM part of the engine could be better."
"The licensing is quite expensive."
 

Pricing and Cost Advice

"Pricing is not a problem for Cisco because it has a lot of features and not much competition, although it's more expensive than other products. But if I do a cost-benefit analysis, Cisco provides high quality."
"This solution requires an annual license and it is a bit expensive than competitors."
"The price of Cisco ISE (Identity Services Engine) is expensive and we are thinking about changing to FortiGate."
"It's damn expensive and the licensing is terrible... If you have perpetual licenses on 2.7 and you upgrade to 3, you are forced to go with Essentials. That is one of the issues that I'm seeing with my clients now."
"I think the price is okay."
"It's an expensive solution when compared to other vendors."
"Licensing is a disaster. It's a mess and I hope they fix it soon."
"If you go directly with Cisco for the implementation it's very, very expensive."
"We have to pay 10 dollars per user. I would rate the tool's pricing a six out of ten."
"I would rate pricing at eight out of ten. It is a bit higher because of the security features that Microsoft provides."
"The solution is cost-effective."
"The increase in the prices of the product might not be the actual problem, but things become complex with some new plans that were introduced by Microsoft recently."
report
Use our free recommendation engine to learn which Network Access Control (NAC) solutions are best for your needs.
872,778 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Manufacturing Company
10%
Financial Services Firm
9%
Government
9%
Computer Software Company
14%
Pharma/Biotech Company
13%
Manufacturing Company
11%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise31
Large Enterprise91
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise1
Large Enterprise5
 

Questions from the Community

Which is better - Aruba Clearpass or Cisco ISE?
Aruba ClearPass is a Network Access Control tool that gives secure network access to multiple device types. You can adapt the policies to VPN access, wired, or wireless access. You can securely ...
What are the main differences between Cisco ISE and Forescout Platform?
OK, so Cisco ISE uses 802.1X to secure switchports against unauthorized access. The drawback of this is that ISE cannot secure the port if a device does not support 802.1x. Cameras, badge readers, ...
How does Cisco ISE compare with Fortinet FortiNAC?
Cisco ISE uses AI endpoint analytics to identify new devices based on their behavior. It will also notify you if someone plugs in with a device that is not allowed and will block it. The user exper...
What is your experience regarding pricing and costs for Microsoft Enterprise Mobility + Security?
The increase in the prices of the product might not be the actual problem, but things become complex with some new plans that were introduced by Microsoft recently. Initially, my company used to ha...
What needs improvement with Microsoft Enterprise Mobility + Security?
The technical support from Microsoft could be better. Because there are many changes in Microsoft, and most support centers or representatives moved to India, I can share that my experience with su...
 

Also Known As

Cisco ISE
Enterprise Mobility + Security E3, Enterprise Mobility + Security E5, MS Enterprise Mobility + Security
 

Overview

 

Sample Customers

Aegean Motorway, BC Hydro, Beachbody, Bucks County Intermediate Unit , Cisco IT, Derby City Council, Global Banking Customer, Gobierno de Castilla-La Mancha, Houston Methodist, Linz AG, London Hydro, Ministry of Foreign Affairs, Molina Healthcare, MST Systems, New South Wales Rural Fire Service, Reykjavik University, Wildau University
Mars, Whole Foods, Land O'Lakes, Dow
Find out what your peers are saying about Cisco, Hewlett Packard Enterprise, Fortinet and others in Network Access Control (NAC). Updated: October 2025.
872,778 professionals have used our research since 2012.