Try our new research platform with insights from 80,000+ expert users

Cisco Identity Services Engine (ISE) vs Sophos Network Access Control comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 5, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Identity Services Eng...
Ranking in Network Access Control (NAC)
1st
Average Rating
8.2
Reviews Sentiment
6.5
Number of Reviews
144
Ranking in other categories
Cisco Security Portfolio (2nd)
Sophos Network Access Control
Ranking in Network Access Control (NAC)
8th
Average Rating
8.4
Reviews Sentiment
6.1
Number of Reviews
23
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of October 2025, in the Network Access Control (NAC) category, the mindshare of Cisco Identity Services Engine (ISE) is 24.2%, down from 29.5% compared to the previous year. The mindshare of Sophos Network Access Control is 1.8%, up from 1.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Access Control (NAC) Market Share Distribution
ProductMarket Share (%)
Cisco Identity Services Engine (ISE)24.2%
Sophos Network Access Control1.8%
Other74.0%
Network Access Control (NAC)
 

Featured Reviews

SunilkumarNaganuri - PeerSpot reviewer
Enhanced device administration hindered by complex deployment and security limitations
Cisco Identity Services Engine (ISE) needs to improve the profiling preauthentication. They are very poor in asset classification and should focus on improving the preauthentication profiling, especially for NAC use cases. This will give them a roadmap for software-defined access (SDA) use cases and network segmentation. Threat detection capabilities are very weak. Additionally, the product is vulnerable and has many bugs.
HirenPatel2 - PeerSpot reviewer
Have faced delays in support despite strong multi-layer policy configuration
I have observed some disadvantages as we have experienced one particular problem. We were facing an issue of synchronization of the endpoint with our firewall with help on a cloud for heartbeat syncing. However, it was not syncing as per our requirement. The user has to connect our firewall with the help of VPN. We were supposed to assume a solution on a cloud, which has good synchronization on a cloud with Sophos Central. It will sync with our firewall as well with the help of Sophos Central. Endpoint and firewall synchronization is not as smooth as we are expecting from Sophos Network Access Control. We have to connect with VPN. We are expecting that if we have already installed an endpoint on our system and it is connected to the internet, then it must be synchronized on a cloud with Sophos Central. Through Sophos Central, it must connect with our firewall. If the endpoint is configured on Sophos Central and the firewall is also configured in Sophos Central, then there should be no need to connect to VPN.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I have found that all of the features are valuable. It is very easy to deploy because we are able to port users directly from Active Directory (AD) and LDAP."
"It has all of the features available, in fact, more than what you need."
"Cisco Identity Services Engine (ISE) has simplified guest access management for us without compromising security for our organization."
"After the product was installed, no one could access the secure connection network. In order for any laptop or any endpoint device to attach to my network, it needs to be authorized or be certified to be connected."
"I love the policy sets, they are really nice and dynamic."
"The ability to allow or deny hosts onto the network is valuable. It provides great security to the network environment."
"The solution enables us to authenticate with AD."
"The solution is very reliable."
"Web protection, URL filtering, and application filtering are the most valuable features of Sophos Network Access Control."
"We have had interactions with the technical support team through the Xnet platform. It's good."
"Sophos' technical support is great, very fast and responsive, and they always know how to fix the problem."
"The installation is very straightforward."
"The role-based access controls feature of Sophos Network Access Control allows persons at different positions in an organization to have different types of roles."
"I am very satisfied with this solution overall. All of the features that we use have been working successfully."
"I found all Sophos Network Access Control features valuable, but IP blocking is the most useful."
"The user interface makes it easy to configure and use."
 

Cons

"The tracking mechanism in Cisco ISE is relatively costly, especially its vendor-specific protocol."
"It does a good job of establishing trust for every access request. We have had a little bit of a challenge with profiling, but we are probably about 80% there."
"If Cisco could grant more control, the features could be more focused on network and security administration, reducing the need for integration with other components."
"The pricing is fair."
"There are issues with respect to the posture assessment function. It's been observed that customers are not receiving total access to the network because the assessment agent is glitchy and malfunctions from time-to-time. I would like to see refining of the compliance assessment and adding more detailed compliance of endpoints on the user end."
"I would say they need to expand the hardware compatibility. The whole setup works well with Cisco access points and Cisco switches, but when you have multiple vendors in the environment, such as HP switches or access points like Aruba, you'll find they will not work well with Cisco Identity Services Engine (ISE)."
"I believe that Cisco can improve the way its policies are built because it's a little complex."
"When I work with customers to do my knowledge transfer, they're really overwhelmed with the navigation of the product and the number of things you can do with it. From a user interface standpoint, Cisco could focus on making certain tasks a bit more guided and easier for customers to walk through. That is, a user-friendly interface and streamlined workflows would be great."
"An area that could be improved is the information about licensing, which is fairly confusing at present."
"Continuous development in specific areas might be required."
"What needs to be improved on is the fact that Sophos consumes a lot of processor resources and, once it starts scanning, the RAM utilization is very high."
"The interface on the cloud could be a bit better - just to give more performance on it."
"Users are not controlled by role-based access; it's basically device-based control. The definition of role-based control is a little vague here because on the cloud level, it regulates access rather than tasks."
"The difficult thing was finding the metrics."
"I would like to be able to fully customize the reports."
"The user interface, in terms of managing the product, could be better."
 

Pricing and Cost Advice

"ISE has always been expensive compared to other products in terms of what it does on a user level."
"Previously, Cisco ISE had a perpetual licensing model, but now they have shifted to a subscription-based licensing system."
"I am not aware of the current price for Cisco ISE, but considering it is a Cisco product, it is likely to be quite high."
"The Essentials licensing is reasonable, but I would like the Premier version to be perpetual instead of a subscription."
"Cisco ISE is not inexpensive, but the solution is well-built and worth the expense."
"The price for Cisco ISE is high."
"In terms of the licensing and the pricing structure of the Cisco Identity Services Engine, there's been a huge advantage to our clients recently with the advent of the enterprise agreement."
"Cisco has actually transitioned to a lot of subscription models, fees, and licenses."
"Sophos Network Access Control is an expensive solution."
"It provides a moderate pricing option for all of its features and benefits."
"Sophos Network Access Control is costly but has a similar price range as CrowdStrike and Check Point. The product can get more market share if Sophos can play around with Sophos Network Access Control pricing and improve it."
"Sophos Network Access Control is very cheap compared to other solutions like Cisco, Barracuda, and Palo Alto."
"I rate the price of Sophos Network Access Control a five out of ten."
"It is quite expensive."
report
Use our free recommendation engine to learn which Network Access Control (NAC) solutions are best for your needs.
872,778 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Manufacturing Company
10%
Financial Services Firm
9%
Government
9%
Computer Software Company
11%
Government
10%
Manufacturing Company
7%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise31
Large Enterprise91
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise3
Large Enterprise3
 

Questions from the Community

Which is better - Aruba Clearpass or Cisco ISE?
Aruba ClearPass is a Network Access Control tool that gives secure network access to multiple device types. You can adapt the policies to VPN access, wired, or wireless access. You can securely ...
What are the main differences between Cisco ISE and Forescout Platform?
OK, so Cisco ISE uses 802.1X to secure switchports against unauthorized access. The drawback of this is that ISE cannot secure the port if a device does not support 802.1x. Cameras, badge readers, ...
How does Cisco ISE compare with Fortinet FortiNAC?
Cisco ISE uses AI endpoint analytics to identify new devices based on their behavior. It will also notify you if someone plugs in with a device that is not allowed and will block it. The user exper...
What do you like most about Sophos Network Access Control?
Sophos Network Access Control has a useful interface, and I like its dashboard, which is very useful for us to check everything.
What needs improvement with Sophos Network Access Control?
I have observed some disadvantages as we have experienced one particular problem. We were facing an issue of synchronization of the endpoint with our firewall with help on a cloud for heartbeat syn...
 

Also Known As

Cisco ISE
No data available
 

Overview

 

Sample Customers

Aegean Motorway, BC Hydro, Beachbody, Bucks County Intermediate Unit , Cisco IT, Derby City Council, Global Banking Customer, Gobierno de Castilla-La Mancha, Houston Methodist, Linz AG, London Hydro, Ministry of Foreign Affairs, Molina Healthcare, MST Systems, New South Wales Rural Fire Service, Reykjavik University, Wildau University
Rushmoor Borough Council
Find out what your peers are saying about Cisco Identity Services Engine (ISE) vs. Sophos Network Access Control and other solutions. Updated: September 2025.
872,778 professionals have used our research since 2012.