No more typing reviews! Try our Samantha, our new voice AI agent.

Cisco Identity Services Engine (ISE) vs Symantec Privileged Access Manager comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Identity Services Eng...
Average Rating
8.2
Reviews Sentiment
6.6
Number of Reviews
144
Ranking in other categories
Network Access Control (NAC) (2nd), Cisco Security Portfolio (4th)
Symantec Privileged Access ...
Average Rating
7.8
Reviews Sentiment
7.0
Number of Reviews
53
Ranking in other categories
Privileged Access Management (PAM) (12th)
 

Mindshare comparison

Cisco Identity Services Engine (ISE) and Symantec Privileged Access Manager aren’t in the same category and serve different purposes. Cisco Identity Services Engine (ISE) is designed for Network Access Control (NAC) and holds a mindshare of 18.5%, down 24.2% compared to last year.
Symantec Privileged Access Manager, on the other hand, focuses on Privileged Access Management (PAM), holds 2.0% mindshare, up 1.5% since last year.
Network Access Control (NAC) Mindshare Distribution
ProductMindshare (%)
Cisco Identity Services Engine (ISE)18.5%
Aruba ClearPass17.8%
Fortinet FortiNAC11.7%
Other52.0%
Network Access Control (NAC)
Privileged Access Management (PAM) Mindshare Distribution
ProductMindshare (%)
Symantec Privileged Access Manager2.0%
Idira Privileged Access Manager8.6%
Safeguard by One Identity4.4%
Other85.0%
Privileged Access Management (PAM)
 

Featured Reviews

SunilkumarNaganuri - PeerSpot reviewer
Service Line Manager (Service Operations Expert) - Network Access Control at a pharma/biotech company with 10,001+ employees
Enhanced device administration hindered by complex deployment and security limitations
Cisco Identity Services Engine (ISE) needs to improve the profiling preauthentication. They are very poor in asset classification and should focus on improving the preauthentication profiling, especially for NAC use cases. This will give them a roadmap for software-defined access (SDA) use cases and network segmentation. Threat detection capabilities are very weak. Additionally, the product is vulnerable and has many bugs.
Muzi Lubisi - PeerSpot reviewer
Senior technical Consultant at CA Africa
Secure management of sensitive servers and seamless applications with direct linking
The credential injection feature is highly valued, particularly for RDP sessions. A majority of customers use it for RDP, and a couple for Linux servers. The broader capabilities, including access to multiple systems, web-based applications, and clustering, have never posed an issue. The threat analytics aspect is also a robust feature that analyzes all pertinent information.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I like the guest access feature, which has been important for us."
"The live logs and live sessions for troubleshooting are the most valuable features because they provide a detailed report of any issues."
"It does what it's supposed to. We use a certificate-based authentication method for corporate-managed devices. That means when a user walks in with their managed laptop and plugs it into the network, it chats with Cisco ISE in the background, allows it on the network, and away they go."
"It provides client provisions and profiling as well as guest access."
"The product has many useful features, enhances compliance and security posture, and provides client provisions and profiling as well as guest access, features not available in other solutions."
"Cisco is expensive, but it's the cost for all the functions and value it brings."
"It's scalable."
"Cisco Identity Services Engine (ISE) has simplified guest access management for us without compromising security for our organization."
"You can do A2A integration. You can have your own script, which can then run outside of PA to retrieve the password and perform other tasks."
"Transparent login and cluster synchronization are quite stable compared with other products, and it is easy to manage for the administrator."
"The RDP-gateway: For limiting which server an operator can access."
"Monitoring privileged users’ actions is valuable because of the high level of trust and wide-ranging access insiders typically enjoy."
"One of the most valuable items is the load balancing feature."
"One of the key things for us about the product is around its simplicity. Being able to put in the technology that allows the business to remove complexity and also allow the security improvements."
"I think it's a good solution for anybody who is looking for a single sign-on implementation for administration of the servers."
"According to the users who have actually used CyberArk and CA PAM, they have said that CA PAM is ten times easier to use and manage."
 

Cons

"Licensing is a disaster. It's a mess and I hope they fix it soon."
"The user interface could be more user-friendly."
"If Cisco could grant more control, the features could be more focused on network and security administration, reducing the need for integration with other components."
"Cisco ISE does not recognize devices and that is an issue we faced during its integration with our existing devices."
"Cisco ISE is complex. The deployment and design of networks with it is so complex. If it could change it would be better."
"In an upcoming release, it would be nice to have NAC already standard in the solution."
"The knocks I have against the product are the number of bugs that we encounter, constantly, and the amount of upgrading that we have to do."
"The price could be better. I would like to see more integration with third-party solutions in the next release. This is because many of my clients don't have Cisco."
"They need to have zero tier and active-active setup ​with zero minimum downtime, which they are working on it. ​"
"A better discovery interface of accounts. It does do discovery of accounts for Windows servers, and you could do UNIX servers as well, but it's kind of clunky how it does it."
"We experience stability issues after every patch upgrade. This is a place where CA needs to improve drastically."
"Recent releases need improvement in webpage management. For instance, navigating through a webpage that acts like a wizard, where I proceed to the next page and enter more information, is not handled well by the system."
"Technical support is average. They took a long time to provide good answers, only recommended to upgrade SW version which in some environments is not an option and they don’t even know if that will fix the problem."
"Bring more technology into the portfolio and being able to collapse those products into a much more integrated way."
"Yeah, it still does not support HA in Multi AZ subnets."
"Session limitation is a very critical feature that cannot be addressed by CA PAM."
 

Pricing and Cost Advice

"Being fully honest, the Cisco licensing model right now is really confusing. We don't know what licenses we have where. We have Smart licensing, but the different levels are way confusing."
"That's where things got a bit more complicated. Previously, it was a one-time purchase and we just had to renew support. These days, there's a subscription model, which is supposed to be easier and cheaper as well, but it's more pricey"
"The price is okay."
"The pricing is good. The last time we purchased four new appliances the price was doable for any organization of our size."
"I believe I have paid around $1,000 in licensing fees. The license is annual."
"It's an expensive solution when compared to other vendors."
"Our customers pay for the license of Cisco ISE (Identity Services Engine). They have an annual subscription, rather than a monthly subscription."
"In general, licensing can be quite complex with Cisco products. It would be nice if it was a bit more intuitive and had fewer "gotchas" in there."
"Don’t go with an agent model. Don’t go with a model that has you buying a thousand different parts. Go with PAM that gives you everything, or you’ll just be paying costs of implementing another tool that PAM would have just given you up front."
"They offer per-device, per-user, or monthly and yearly licensing models."
"I would prefer better licensing options for the 20-100 users we have at a given time."
"The prices are not low, but one can ask for a discount. It’s not the cheapest PAM solution."
"Pricing is fair compared to other top vendors."
"The licensing is simple and scalable."
"Cost-wise, CA was better compared to others in the market. ​"
"It is reasonably priced."
report
Use our free recommendation engine to learn which Network Access Control (NAC) solutions are best for your needs.
917,433 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
11%
Financial Services Firm
10%
Outsourcing Company
9%
Comms Service Provider
7%
Outsourcing Company
19%
Construction Company
12%
Manufacturing Company
11%
Financial Services Firm
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business45
Midsize Enterprise32
Large Enterprise91
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise6
Large Enterprise30
 

Questions from the Community

Which is better - Aruba Clearpass or Cisco ISE?
Aruba ClearPass is a Network Access Control tool that gives secure network access to multiple device types. You can adapt the policies to VPN access, wired, or wireless access. You can securely ...
What are the main differences between Cisco ISE and Forescout Platform?
OK, so Cisco ISE uses 802.1X to secure switchports against unauthorized access. The drawback of this is that ISE cannot secure the port if a device does not support 802.1x. Cameras, badge readers, ...
How does Cisco ISE compare with Fortinet FortiNAC?
Cisco ISE uses AI endpoint analytics to identify new devices based on their behavior. It will also notify you if someone plugs in with a device that is not allowed and will block it. The user exper...
What is your experience regarding pricing and costs for Symantec Privileged Access Manager?
Due to the nature of the solution, it is hard to gauge, but compared to competitors, the pricing is very good. I would rate it as an eight and a half out of ten.
What needs improvement with Symantec Privileged Access Manager?
Recent releases need improvement in webpage management. For instance, navigating through a webpage that acts like a wizard, where I proceed to the next page and enter more information, is not handl...
What is your primary use case for Symantec Privileged Access Manager?
With the customers that I have so far, I help them broker RDP sessions to sensitive servers, particularly those that manage aspects like physical access. I have also done it for backend databases, ...
 

Also Known As

Cisco ISE
CA PAM, Xceedium Xsuite, CA Privileged Access Manager
 

Overview

 

Sample Customers

Aegean Motorway, BC Hydro, Beachbody, Bucks County Intermediate Unit , Cisco IT, Derby City Council, Global Banking Customer, Gobierno de Castilla-La Mancha, Houston Methodist, Linz AG, London Hydro, Ministry of Foreign Affairs, Molina Healthcare, MST Systems, New South Wales Rural Fire Service, Reykjavik University, Wildau University
NEOVERA, Telesis, eSoft
Find out what your peers are saying about Hewlett Packard Enterprise, Cisco, ThreatLocker and others in Network Access Control (NAC). Updated: September 2026.
917,433 professionals have used our research since 2012.