NAC Appliance/Guest/Profiler vs. ISE Comparison

 

NAC Appliance vs ISE Features


NAC Appliance 4.9ISE 1.0ISE 1.1ISE 2.0
FIPS Compliance
IPv6Profiling
RADIUS
Internationalization/Localization
DHCP Server
Windows SSO“AD SSO” (NAC Agent/Kerberos based)Supplicant-dependentSupplicant-dependentSupplicant-dependent
RADIUS SSOBased on RADIUS Accounting from gatewayBased on RADIUS Auth from gatewayBased on RADIUS Auth from gatewayBased on RADIUS Auth from gateway
Host-based policies✓ (during inline operation only)
L3 Inline deployment option
VLAN Control based on RADIUS Control Plane
VLAN Control based on SNMP Control Plane
Posture Services
Offline Posture / Client Provisioning Updates
Posture Policy based on Conditions OTHER THAN role / OS
Posture: Get Restricted Access (bypass agent)✓ (Explicit button following user web auth)Default Authorization Policy can permit restricted accessDefault Authorization Policy can permit restricted accessDefault Authorization Policy can permit restricted access
Client Provisioning based on Conditions
Discovery Host configuration based on Conditions
Agent profiles and branding based on Conditions
Guest Services (Self-Service)
Guest Services (Sponsored)
Customizable Web Auth portalBasicFullFullFull
Self-Service Device Registration
Profiling Services
Security Group Access Support
API - Add/Remove Users/Endpoints
Active/Standby appliance HA
Active/Active appliance HA
L3 HA
Cluster/LB Support
LicensingLimited by ServerPer DeploymentPer DeploymentPer Deployment

 

 

 

NAC Guest Server vs ISE Guest Services


NAC Guest Server 2.0ISE 1.0ISE 1.1ISE 2.0
3rd-party Billing (authorize.net)
Guest Services API
Guest Services (Self-Service)
Guest Services (Sponsored)
Customizable Web Auth portal
Self-Service Device Registration
Integration with NAC Appliance (API)
Immediate guest account Activation✓ (1.1.1)
SSO for Sponsor login using Windows
Guest access based on start-end date/time
Guest access based on time from account creation
Guest access based on time from account creation
Guest access based on time from user login
Guest access based on total login time (time used)
Guest access restrictions based on select days of week
Guest access restrictions based on select time ranges in day
Guest access based on traffic (bytes/packets)
Self-service: Auto populate username
Self-service: Send notification
Support Local and Centralized Web-auth
Simple Sponsor URL using default http(s) ports
Integration with NAC portfolio Administration / Monitoring / Services (Posture,Profile,Auth)
Integrated guest and non-guest authentication
HA support beyond 2 nodes
Active/Standby appliance HA
Active/Active appliance HA
L3 HA
Cluster/LB Support

 

 

 

NAC Profiler vs. ISE Profiling Services

 

NAC Profiler 3.1ISE 1.0ISE 1.1ISE 2.0
Wired Endpoint Profiling
Wireless Endpoint Profiling
Pre-built Profile LibraryBasicAdvancedAdvanced~500
Dynamic Profile Feeds
Custom Profile Support
Advanced Customization via XML
Hierarchical Profile Model
Profiling Data (modules/probes)
RADIUS?
SNMP Query
SNMP Trap
Syslog
CDP (SNMP)   
DHCP
Netflow
AD LookupIntegrated into auth policy, not profiling policyIntegrated into auth policy, not profiling policyIntegrated into auth policy, not profiling policy
DNS Lookup
Active Endpoint Port Scan
OS Scan
Re-auth via RADIUS COA?
Re-auth via SNMP COA
Re-auth via SNMP Port Bounce
Dedicated Profile Data Collection
IOS Sensor Integration
NAC Appliance Integration✓ (1.0MR)
Integrated Monitoring (Logging and Reporting) with Posture, Guest, AAA Services
Integrated Administration with Posture, Guest, AAA Services
Active/Standby appliance HA
Active/Active appliance HA
L3 HA
Cluster/LB Support
LicensingLimited by CollectorPer DeploymentPer DeploymentPer Deployment