Try our new research platform with insights from 80,000+ expert users

Cisco Identity Services Engine (ISE) vs Sophos Network Access Control comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 5, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Identity Services Eng...
Ranking in Network Access Control (NAC)
1st
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
143
Ranking in other categories
Cisco Security Portfolio (1st)
Sophos Network Access Control
Ranking in Network Access Control (NAC)
8th
Average Rating
8.4
Reviews Sentiment
6.2
Number of Reviews
22
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of July 2025, in the Network Access Control (NAC) category, the mindshare of Cisco Identity Services Engine (ISE) is 25.1%, down from 30.7% compared to the previous year. The mindshare of Sophos Network Access Control is 1.7%, up from 1.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Access Control (NAC)
 

Featured Reviews

SunilkumarNaganuri - PeerSpot reviewer
Enhanced device administration hindered by complex deployment and security limitations
Cisco Identity Services Engine (ISE) needs to improve the profiling preauthentication. They are very poor in asset classification and should focus on improving the preauthentication profiling, especially for NAC use cases. This will give them a roadmap for software-defined access (SDA) use cases and network segmentation. Threat detection capabilities are very weak. Additionally, the product is vulnerable and has many bugs.
Vishal Deshwal - PeerSpot reviewer
Technical support excels but hardware enhancements are needed for faster processing
The best features in Sophos Network Access Control are fewer than FortiNAC and Cisco ISE, but when discussing budget and customer support, different vendors have different perspectives. Cisco is better in support, FortiNAC is better in security, and different vendors maintain different perspectives. I utilized the device quarantine feature around eight months ago. It is specifically for when any malicious or harmful file comes to the system. Through NAC, we can put it in quarantine, and if anything comes or goes from this system, it will be monitored continuously. We can define these parameters as needed. The role-based access controls feature of Sophos Network Access Control allows persons at different positions in an organization to have different types of roles. We can give them full access as an administrator, provide some network access, or give users only read-only access. This depends on the user's requirements and the position they hold within the organization, allowing us to grant roles according to their post. The integration capabilities of Sophos Network Access Control are good, as it can easily integrate with other solutions and vendors.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"One of the advantages is that you can easily find rogue endpoints. For example, if you don't want to allow any endpoints where you don't know the people plugging into what kind of devices, ISE can give you a big, clear picture, e.g., what kind of endpoints are getting connected to your network. That is one of the advantages."
"The solution cuts down on the repercussions of getting malware or ransomware."
"It's keeping our company safe from rogue devices connecting to our network. From a security standpoint, there's peace of mind knowing that every device that connects is a good one."
"They have recently made a lot of improvements. My clients don't have much to complain about."
"The access policies, and all of the policies in Cisco ISE, are important to us."
"The most valuable feature is 801.1x and another very good feature is the TACACS."
"I really enjoy the live log section. Sometimes, you will have someone who is having issues connecting to the network, and then you have to ask them the dreaded question of, "Did you type a password wrong?" They will probably tell you, "No," but the live log can help sort that out. It gives us that extra ability to assist the end user and make sure that we are making them happy."
"Typically, the installation is pretty simple."
"The role-based access controls feature of Sophos Network Access Control allows persons at different positions in an organization to have different types of roles."
"Sophos has helped us to save time and money and to better manage web activities. It has also helped us to reduce misuse of the network and restrict hacking attempts."
"The platform's most valuable features include robust reporting and analytics capabilities, which provide deep insights into our sales performance and customer behavior."
"What Sophos has done is integrate almost the entire OSI layer infrastructure. It gives me visibility across my infrastructure. It gives me visibility into all the mobile devices that are on my network and into the security I have on those mobile devices."
"The installation is very straightforward."
"Sophos Network Access Control saves our clients time and money."
"The wifi control is fantastic and makes it very easy to administer."
"Web protection, URL filtering, and application filtering are the most valuable features of Sophos Network Access Control."
 

Cons

"Difficult to figure out the protocols and nodes in order to implement correctly."
"They should improve the upgrades. It's not easy to upgrade the solution."
"They should improve their licensing. Licensing is always trouble with Cisco, and Cisco Identity Services Engine is no different. The way the product is licensed could be improved."
"It should be virtualized because many people have begun migrating to the cloud. They should offer a hybrid version."
"Cisco ISE is very complex and not very easy to deploy."
"There are always some things that I would request."
"The solution lacks properly knowledgeable support, especially internationally, and this is why I am exploring other applications."
"Troubleshooting and multi-ISE can be challenging with the solution."
"It would be beneficial to consider some improvements regarding the dashboard."
"An area that could be improved is the information about licensing, which is fairly confusing at present."
"What needs to be improved on is the fact that Sophos consumes a lot of processor resources and, once it starts scanning, the RAM utilization is very high."
"There is room for improvement in pricing."
"The solution could offer more useful documentation."
"In order to provide better management, it would be ideal with they offered better plugins for their firewall."
"I would like to see mobile administration capabilities in the next release so that we can administer the device from a mobile device."
"Users are not controlled by role-based access; it's basically device-based control. The definition of role-based control is a little vague here because on the cloud level, it regulates access rather than tasks."
 

Pricing and Cost Advice

"I get very good pricing from Cisco, so I don't have a problem with that. I also don't have a problem with licensing because we get enterprise or global licensing."
"Over the years, licensing has been confusing and complicated because there are so many different licenses for each different product and each different iteration of the product."
"The price is a bit on the high side."
"The price is okay."
"That's where things got a bit more complicated. Previously, it was a one-time purchase and we just had to renew support. These days, there's a subscription model, which is supposed to be easier and cheaper as well, but it's more pricey"
"Previously, Cisco ISE had a perpetual licensing model, but now they have shifted to a subscription-based licensing system."
"Licensing has got much simpler since Cisco moved to the DNA model because we just have the three tiers, but it could always stand to be improved upon."
"There are three levels of pricing: basic, plus, and apex. Basic satisfied our needs."
"Sophos Network Access Control is very cheap compared to other solutions like Cisco, Barracuda, and Palo Alto."
"It provides a moderate pricing option for all of its features and benefits."
"I rate the price of Sophos Network Access Control a five out of ten."
"Sophos Network Access Control is an expensive solution."
"It is quite expensive."
"Sophos Network Access Control is costly but has a similar price range as CrowdStrike and Check Point. The product can get more market share if Sophos can play around with Sophos Network Access Control pricing and improve it."
report
Use our free recommendation engine to learn which Network Access Control (NAC) solutions are best for your needs.
863,901 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Financial Services Firm
10%
Government
9%
Manufacturing Company
9%
Computer Software Company
13%
Government
8%
Manufacturing Company
7%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is better - Aruba Clearpass or Cisco ISE?
Aruba ClearPass is a Network Access Control tool that gives secure network access to multiple device types. You can adapt the policies to VPN access, wired, or wireless access. You can securely ...
What are the main differences between Cisco ISE and Forescout Platform?
OK, so Cisco ISE uses 802.1X to secure switchports against unauthorized access. The drawback of this is that ISE cannot secure the port if a device does not support 802.1x. Cameras, badge readers, ...
How does Cisco ISE compare with Fortinet FortiNAC?
Cisco ISE uses AI endpoint analytics to identify new devices based on their behavior. It will also notify you if someone plugs in with a device that is not allowed and will block it. The user exper...
What do you like most about Sophos Network Access Control?
Sophos Network Access Control has a useful interface, and I like its dashboard, which is very useful for us to check everything.
What is your experience regarding pricing and costs for Sophos Network Access Control?
I am not able to say much on the financial specifics as it pertains to the sales unit.
What needs improvement with Sophos Network Access Control?
Sophos Network Access Control could be improved by having an ASIC chip similar to FortiNAC, as this would provide better processing for big organizations. In larger organizations, we need higher sp...
 

Also Known As

Cisco ISE
No data available
 

Overview

 

Sample Customers

Aegean Motorway, BC Hydro, Beachbody, Bucks County Intermediate Unit , Cisco IT, Derby City Council, Global Banking Customer, Gobierno de Castilla-La Mancha, Houston Methodist, Linz AG, London Hydro, Ministry of Foreign Affairs, Molina Healthcare, MST Systems, New South Wales Rural Fire Service, Reykjavik University, Wildau University
Rushmoor Borough Council
Find out what your peers are saying about Cisco Identity Services Engine (ISE) vs. Sophos Network Access Control and other solutions. Updated: July 2025.
863,901 professionals have used our research since 2012.