Try our new research platform with insights from 80,000+ expert users

BeyondTrust Endpoint Privilege Management vs Cisco Identity Services Engine (ISE) comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.8
Organizations maximize BeyondTrust for compliance, integrating it within zero-trust frameworks to meet standards and enhance security.
Sentiment score
8.4
Cisco ISE users report enhanced security, cost savings, seamless integration, improved efficiency, and reliable threat mitigation with positive ROI.
Direct comparisons with Forescout reveal up to 30% to 40% difference in cost savings.
 

Customer Service

Sentiment score
7.1
BeyondTrust Endpoint Privilege Management offers skilled support with some delays, particularly outside U.S. hours, yet generally efficient service.
Sentiment score
5.3
Cisco Identity Services Engine's support is responsive but inconsistent, with reliance on partners and occasional delays in complex issues.
Support is critical, especially when challenges arise related to PAM.
I rate the technical support as one out of ten.
Sometimes it's challenging to identify which support team is responsible for certain issues, which is a significant concern.
 

Scalability Issues

Sentiment score
7.4
BeyondTrust Endpoint Privilege Management is scalable, reliable, and adaptable for diverse organizational needs, supporting large infrastructures seamlessly.
Sentiment score
7.1
Cisco ISE is scalable and flexible, but may require careful planning and specific hardware for complex environments.
The initial understanding of the environment is crucial, followed by a simple deployment process.
Factors like architecture, business nature, and legal limitations such as GDPR affect it.
 

Stability Issues

Sentiment score
7.5
BeyondTrust Endpoint Privilege Management is stable, reliable, with minimal issues, praised for driver compatibility and cloud deployment stability.
Sentiment score
7.7
Cisco ISE is reliable and consistent, with some instability during updates or heavy loads, but overall well-regarded.
Cisco Identity Services Engine (ISE) is considered very reliable and stable.
The stability of Cisco Identity Services Engine (ISE) is poor for certain use cases, like authentication.
 

Room For Improvement

BeyondTrust requires UI and reporting enhancements, better integration, more updates, improved navigation, lower cost, and increased support responsiveness.
Cisco ISE needs UI, integration, performance, and stability improvements, with enhanced documentation, real-time analytics, and security capabilities.
The ability to view recorded live sessions of specific users is a crucial benefit.
Pricing can be more expensive compared to other vendors, and there is a significant price gap observed, which doesn't seem justified by some specific features.
Additionally, the product is vulnerable and has many bugs.
 

Setup Cost

BeyondTrust Endpoint Privilege Management's pricing is flexible but often viewed as high, especially for Mac clients compared to competitors.
Cisco ISE pricing is complex and costly, particularly challenging for small businesses, with value dependent on feature utilization.
If a solution fits a customer's budget, considerations must be made that it may not have all the features of more expensive solutions.
Compared to other solutions like HPE ClearPass, Cisco is more costly, and the conversation suggests a possible forty percent price gap compared to competitors.
Cloud solutions are expensive, while on-prem setups with shared environments are cheaper but not effective.
 

Valuable Features

BeyondTrust Endpoint manages privileges and vulnerabilities, enhancing security, compliance, and operational control with integration and efficiency across platforms.
Cisco Identity Services Engine enhances network security with integration, robust features, and centralized management supporting zero-trust principles.
Administrators need a tool that provides visibility and clarity about endpoint management within the organization.
Cisco Identity Services Engine (ISE) is very good at device administration.
The solution is integrated with other Cisco devices and can offer automation for an organization, making deployments more dynamic and providing real-time visibility.
 

Categories and Ranking

BeyondTrust Endpoint Privil...
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
29
Ranking in other categories
Privileged Access Management (PAM) (9th), Anti-Malware Tools (12th)
Cisco Identity Services Eng...
Average Rating
8.2
Reviews Sentiment
6.6
Number of Reviews
141
Ranking in other categories
Network Access Control (NAC) (1st), Cisco Security Portfolio (1st)
 

Mindshare comparison

BeyondTrust Endpoint Privilege Management and Cisco Identity Services Engine (ISE) aren’t in the same category and serve different purposes. BeyondTrust Endpoint Privilege Management is designed for Privileged Access Management (PAM) and holds a mindshare of 4.5%, down 6.0% compared to last year.
Cisco Identity Services Engine (ISE), on the other hand, focuses on Network Access Control (NAC), holds 28.4% mindshare, down 31.7% since last year.
Privileged Access Management (PAM)
Network Access Control (NAC)
 

Featured Reviews

Prashant Uppuluri - PeerSpot reviewer
Provides critical application control and ensures security with a flexible setup process
Regarding the feedback scenario, it's a tough question as I have thoroughly gone through the entire partner portal and library of BeyondTrust, as well as BeyondTrust University. I have also interacted with support whenever a ticket is raised, ranging from P1 to P3 or P2. Most end users and partners seem happy and content with BeyondTrust. The deployment of the solution is generally easy, flexible, and scalable. However, it can be challenging in certain environments, especially regarding management. Improvements could focus on adding more AI features to automate processes that are currently manual or challenging for end users. In some cases of competition, I have noted specific use cases where the recording of sessions was an endpoint for BeyondTrust, providing an edge for higher management. The ability to view recorded live sessions of specific users is a crucial benefit.
SunilkumarNaganuri - PeerSpot reviewer
Enhanced device administration hindered by complex deployment and security limitations
Cisco Identity Services Engine (ISE) needs to improve the profiling preauthentication. They are very poor in asset classification and should focus on improving the preauthentication profiling, especially for NAC use cases. This will give them a roadmap for software-defined access (SDA) use cases and network segmentation. Threat detection capabilities are very weak. Additionally, the product is vulnerable and has many bugs.
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
831,683 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
17%
Computer Software Company
14%
Manufacturing Company
10%
Government
8%
Educational Organization
28%
Computer Software Company
14%
Financial Services Firm
7%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Looking for recommendations and a pros/cons template for software to detect insider threats
This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...
What do you like most about BeyondTrust Endpoint Privilege Management?
The solution's least privilege enforcement has helped us ensure access is given to only the required people.
Which is better - Aruba Clearpass or Cisco ISE?
Aruba ClearPass is a Network Access Control tool that gives secure network access to multiple device types. You can adapt the policies to VPN access, wired, or wireless access. You can securely ...
What are the main differences between Cisco ISE and Forescout Platform?
OK, so Cisco ISE uses 802.1X to secure switchports against unauthorized access. The drawback of this is that ISE cannot secure the port if a device does not support 802.1x. Cameras, badge readers, ...
How does Cisco ISE compare with Fortinet FortiNAC?
Cisco ISE uses AI endpoint analytics to identify new devices based on their behavior. It will also notify you if someone plugs in with a device that is not allowed and will block it. The user exper...
 

Also Known As

BeyondTrust PowerBroker, BeyondTrust Endpoint Privilege Management for Windows, BeyondTrust Endpoint Privilege Management for Mac, BeyondTrust Endpoint Privilege Management for Linux, BeyondTrust Endpoint Privilege Management for Unix, Avecto Defendpoint
Cisco ISE
 

Overview

 

Sample Customers

Aera Energy LLC, Care New England, James Madison University
Aegean Motorway, BC Hydro, Beachbody, Bucks County Intermediate Unit , Cisco IT, Derby City Council, Global Banking Customer, Gobierno de Castilla-La Mancha, Houston Methodist, Linz AG, London Hydro, Ministry of Foreign Affairs, Molina Healthcare, MST Systems, New South Wales Rural Fire Service, Reykjavik University, Wildau University
Find out what your peers are saying about CyberArk, Delinea, One Identity and others in Privileged Access Management (PAM). Updated: January 2025.
831,683 professionals have used our research since 2012.