Try our new research platform with insights from 80,000+ expert users

Cisco Identity Services Engine (ISE) vs Microsoft Enterprise Mobility + Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Identity Services Eng...
Average Rating
8.2
Reviews Sentiment
6.5
Number of Reviews
144
Ranking in other categories
Network Access Control (NAC) (1st), Cisco Security Portfolio (2nd)
Microsoft Enterprise Mobili...
Average Rating
8.2
Reviews Sentiment
6.4
Number of Reviews
13
Ranking in other categories
Enterprise Mobility Management (EMM) (15th)
 

Mindshare comparison

Cisco Identity Services Engine (ISE) and Microsoft Enterprise Mobility + Security aren’t in the same category and serve different purposes. Cisco Identity Services Engine (ISE) is designed for Network Access Control (NAC) and holds a mindshare of 24.2%, down 29.5% compared to last year.
Microsoft Enterprise Mobility + Security, on the other hand, focuses on Enterprise Mobility Management (EMM), holds 1.1% mindshare, up 0.7% since last year.
Network Access Control (NAC) Market Share Distribution
ProductMarket Share (%)
Cisco Identity Services Engine (ISE)24.2%
Aruba ClearPass23.6%
Fortinet FortiNAC17.9%
Other34.30000000000001%
Network Access Control (NAC)
Enterprise Mobility Management (EMM) Market Share Distribution
ProductMarket Share (%)
Microsoft Enterprise Mobility + Security1.1%
Microsoft Intune31.3%
Workspace ONE UEM11.6%
Other56.0%
Enterprise Mobility Management (EMM)
 

Featured Reviews

SunilkumarNaganuri - PeerSpot reviewer
Enhanced device administration hindered by complex deployment and security limitations
Cisco Identity Services Engine (ISE) needs to improve the profiling preauthentication. They are very poor in asset classification and should focus on improving the preauthentication profiling, especially for NAC use cases. This will give them a roadmap for software-defined access (SDA) use cases and network segmentation. Threat detection capabilities are very weak. Additionally, the product is vulnerable and has many bugs.
Robert Veprek - PeerSpot reviewer
Have experienced inconsistent support while maintaining strong outcomes in complex projects
My biggest advantage with Microsoft Enterprise Mobility + Security is that I have really deep knowledge about Microsoft licenses, allowing me to offer our customers some non-usual configurations or special offers because I have experience working in Microsoft and many contacts, helping us to provide the best conditions for long-time contracts. The installation of Microsoft Enterprise Mobility + Security is quite easy. Azure Active Directory Premium helps to manage user access and security; it's the basis of our communication and our project, as it's essential for all security for our customers. Features within Microsoft Intune such as MDM and MAM help to protect data in general. Intune is a general tool for mobility management and device and user management.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution is great for establishing trust for every access request no matter where it comes from."
"It is stable and easy to use."
"The most valuable feature is the visibility element, the ability for customers to be able to see what devices are actually on their network. Without a solution like ISE, they would have no idea what devices are connected to their network. It offers them the ability to authenticate devices via mobile."
"In terms of features, I think they've done a lot of improvement on the graphical user interface — it looks really good right now."
"There are a lot of integrations available with multiple vendors. This has made the solution easier to work with."
"For device administration, all devices have multifactor authentication in collaboration with IT, so it secures access to all of our devices. For guest and wireless access, it's a matter of a lowly manager who we give access to the portal and he can assign access to the guests, so it's a very simple process now. It keeps the IT focusing on their work, and gives the business people the right access."
"I have found that all of the features are valuable. It is very easy to deploy because we are able to port users directly from Active Directory (AD) and LDAP."
"It provides client provisions and profiling as well as guest access."
"Microsoft Enterprise Mobility + Security is a basic part of all of our projects because it's a very important basis for any customer wanting to set up Microsoft technology, as they need to manage all users and devices on a security basis."
"A good feature that is present is MAM or Mobile Application Management. We can deploy this feature on the device, which is not managed by the organization. If I apply some security configuration on a personal device, the user would be really disappointed. What we do instead is that we give all access to the applications related to corporate and ask the users to use the application. We secure the application by putting the security features on the applications and not on the users' devices. This way, the users are happy, and we also meet our company's compliance standards. Then, everyone is happy."
"Microsoft Mobility and EMS include Intune for Mobility, which provides mobile device management and mobile application management. With mobile device management, you can control the entire device in an organization."
"The product is centralized and we can use it for security purposes."
"Integration between our departments has been the most valuable."
"The solution is very good at securing files. For example, if I forward a secure document, it's blocked from others, as I can send it with restrictions in relation to who can open it."
"You can scale the solution up or down by department."
"It is a stable solution...It is a scalable solution."
 

Cons

"Cisco ISE is complex. The deployment and design of networks with it is so complex. If it could change it would be better."
"Cisco ISE's performance could be better, faster, and more robust."
"There are still some bugs in ISE that need to be worked out."
"The user interface could be improved to make it more user-friendly."
"This product doesn't work in isolation."
"I would like to see the product simplified more, especially with the configuration."
"I don't like the fact that we can see the logs only for 24 hours. Maybe that happens because of the way we set it up."
"I'm frustrated by the resource consumption and how many resources it needs to run. It takes a lot of RAM. It takes a lot of space and a lot of IO power. It's frustrating to do upgrades because it takes a long time."
"Technical support could be improved. Sometimes they use a third party that's not so knowledgeable in the product and that can slow down things a bit."
"The licensing is quite expensive."
"The auditing and reporting could be updated and upgraded. I would like to see light applications because they consume a lot of the device's memory at present."
"Microsoft's feature management is based on licenses. Microsoft follows ethical licensing and hence do not restrict the use of it."
"The MDM part of the engine could be better."
"We did the deployment with the help of Microsoft's consultants. But sometimes, we found it difficult to educate the application developers to integrate."
"Microsoft Enterprise Mobility + Security is expensive."
"Sometimes the application gets hung or restarts multiple times in the background, consuming battery life."
 

Pricing and Cost Advice

"I am not aware of the current price for Cisco ISE, but considering it is a Cisco product, it is likely to be quite high."
"There are other cheaper options available."
"Being fully honest, the Cisco licensing model right now is really confusing. We don't know what licenses we have where. We have Smart licensing, but the different levels are way confusing."
"The price can be lower, especially for subscriptions. It should be a lot cheaper to have a wide range of customers. The price should be comparable to competitive products like Forescout or Fortinet FortiNAC. Forescout is cheaper for customers looking for a cloud solution."
"The solution is not that cheap."
"Its licensing could be improved. It used to be perpetual, but now they are moving away from that."
"This solution requires an annual license and it is a bit expensive than competitors."
"According to my sales and account team, the prices we're getting are pretty good."
"The increase in the prices of the product might not be the actual problem, but things become complex with some new plans that were introduced by Microsoft recently."
"The solution is cost-effective."
"I would rate pricing at eight out of ten. It is a bit higher because of the security features that Microsoft provides."
"We have to pay 10 dollars per user. I would rate the tool's pricing a six out of ten."
report
Use our free recommendation engine to learn which Network Access Control (NAC) solutions are best for your needs.
872,706 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Manufacturing Company
10%
Financial Services Firm
9%
Government
9%
Computer Software Company
14%
Pharma/Biotech Company
13%
Manufacturing Company
11%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise31
Large Enterprise91
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise1
Large Enterprise5
 

Questions from the Community

Which is better - Aruba Clearpass or Cisco ISE?
Aruba ClearPass is a Network Access Control tool that gives secure network access to multiple device types. You can adapt the policies to VPN access, wired, or wireless access. You can securely ...
What are the main differences between Cisco ISE and Forescout Platform?
OK, so Cisco ISE uses 802.1X to secure switchports against unauthorized access. The drawback of this is that ISE cannot secure the port if a device does not support 802.1x. Cameras, badge readers, ...
How does Cisco ISE compare with Fortinet FortiNAC?
Cisco ISE uses AI endpoint analytics to identify new devices based on their behavior. It will also notify you if someone plugs in with a device that is not allowed and will block it. The user exper...
What is your experience regarding pricing and costs for Microsoft Enterprise Mobility + Security?
The increase in the prices of the product might not be the actual problem, but things become complex with some new plans that were introduced by Microsoft recently. Initially, my company used to ha...
What needs improvement with Microsoft Enterprise Mobility + Security?
The technical support from Microsoft could be better. Because there are many changes in Microsoft, and most support centers or representatives moved to India, I can share that my experience with su...
 

Also Known As

Cisco ISE
Enterprise Mobility + Security E3, Enterprise Mobility + Security E5, MS Enterprise Mobility + Security
 

Overview

 

Sample Customers

Aegean Motorway, BC Hydro, Beachbody, Bucks County Intermediate Unit , Cisco IT, Derby City Council, Global Banking Customer, Gobierno de Castilla-La Mancha, Houston Methodist, Linz AG, London Hydro, Ministry of Foreign Affairs, Molina Healthcare, MST Systems, New South Wales Rural Fire Service, Reykjavik University, Wildau University
Mars, Whole Foods, Land O'Lakes, Dow
Find out what your peers are saying about Cisco, Hewlett Packard Enterprise, Fortinet and others in Network Access Control (NAC). Updated: October 2025.
872,706 professionals have used our research since 2012.