


Find out what your peers are saying about Hewlett Packard Enterprise, Cisco, Fortinet and others in Network Access Control (NAC).
Using Aruba ClearPass has resulted in less engineering time compared to other products we've used.
The investment is huge for enterprise clients, but Aruba ClearPass makes processes easier.
If I compare this to an on-premises environment using Cisco ISE or Aruba ClearPass, it would require phenomenally large teams for infrastructure management.
If you were moving from a traditional on-premise NAC that was 100% managed by the IT department, there would be great savings in going to a cloud-based NAC with Portnox.
Most customers feel value immediately upon deployment.
Portnox is one level up, as their customer support is outstanding.
We have faced delays in the resolution of production issues after raising tickets, which impacts productivity.
If Aruba ClearPass is not working, then the organization is not working because this is the access control in the organization.
We have had experience with their technical support and must pay additionally for maintenance, support, and regional service.
The main area needing improvement is the technical knowledge of support staff.
For very high severity issues where the entire office is non-functional, response time is within 30 minutes.
They respond very immediately and provide detailed, amazing support.
I believe the scalability of ClearPass is rated as ten out of ten.
Everything will be handled when you add new users because all configurations are deployed from the beginning.
In our environment, ClearPass handles up to 100,000 users, which is better than some other NAC solutions like Fortinox that scale up to 25,000.
Scalability can be costly since a physical box needs to be installed for every site.
We have never had any challenge based on a customer who has 1,000 devices versus a customer who has 30,000 devices; the feel is the same.
They ensure the backend can support it and do the provisioning while maintaining headroom and elasticity.
I rate scalability a ten; you simply pay and you get more.
I have experienced more than three years without zero downtime with Aruba ClearPass.
There are issues with some versions, especially in integrating with AD and SSL configurations over port sixty-three.
However, there are disadvantages when it is not on-premises, as every NAC suffers from it if it is not on-premises.
I would rate its stability as 9.5 out of ten.
The product itself is available and its uptime is 100%.
In the four years that I used Portnox, if it crashed or the server crashed, that would not have been more than once.
If there is a version one and another version, the communication between the organization using it and Portnox should be firm so they can coordinate effectively.
The language and policy enforcement mechanisms are not clear, making it difficult to use the product effectively.
It is also better to improve threat intelligence for built-in threat detection and prevention.
A more streamlined menu of licensing options would be helpful.
It would help if during integration, an admin user could check the password or credential used, as they currently cannot see the password after it is entered and saved.
Forescout Platform could enhance its integration of AI to improve IoT and OT device security to better meet our needs.
The console is a fat client, and a web interface would be preferable.
Ideally, we should be able to search for any MAC address in the database, regardless of its authentication status, to see all its associated groups and potential conflicts.
When I reach the technical support, they give solutions that do not help me much, so I try to search the internet for other users' experiences to find solutions.
When I'm doing filtering at times, it doesn't filter the items properly.
Achieving the best price requires careful selection from a menu of licensing options.
We cannot mix in prices, and of course, prices are going higher.
Aruba ClearPass is a premium product with higher pricing, which seems unnecessary given its complexity.
Installing a physical box on each site can be expensive.
The overall pricing of Forescout Platform is reasonable for the functionality it provides.
The price of Forescout Platform is reasonable and not overly costly.
If you compare Portnox with all other well-known standard products, it is the cheapest.
The pricing is a bit high, possibly due to the cloud features and running instances across regions like the US, Asia, and Europe.
You are charged according to the number of users.
In Aruba ClearPass, you can have control of all authentication in the company.
The ClearPass solution has reduced the amount of engineering time compared to previous solutions, making it more efficient for our purposes.
The most effective feature for us is the OnGuard feature.
One of the most valuable features of Forescout Platform is its automation, particularly the ability to automate remediation of rogue devices on the network.
The most effective feature has been network access management, which has been crucial for our primary use cases in the organization.
When it comes to the effectiveness of Forescout Platform's real-time visibility in reducing the overall attack surface, I give it a 9 out of 10.
It's notable how Portnox has improved operational efficiency.
It is a very robust application because three teams use that part: the network team, the security team, and the support people.
It is possible to find the MAC address in the switch, but in Portnox, it is very useful to see the status of those ports, and that increases our security.
| Product | Mindshare (%) |
|---|---|
| Aruba ClearPass | 20.8% |
| Forescout Platform | 10.3% |
| Portnox | 5.4% |
| Other | 63.5% |



| Company Size | Count |
|---|---|
| Small Business | 44 |
| Midsize Enterprise | 25 |
| Large Enterprise | 33 |
| Company Size | Count |
|---|---|
| Small Business | 30 |
| Midsize Enterprise | 10 |
| Large Enterprise | 44 |
| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 5 |
| Large Enterprise | 9 |
Aruba ClearPass is a network access control (NAC) solution that provides a range of security and access management capabilities for wired, wireless, and VPN networks. ClearPass enables organizations to secure their networks and devices, enforce security policies, and provide secure access to network resources.
Aruba ClearPass Features
Aruba ClearPass has many valuable key features. Some of the most useful ones include:
Aruba ClearPass Benefits
There are many benefits to implementing Aruba ClearPass. Some of the biggest advantages the solution offers include:
Reviews from Real Users
Aruba ClearPass is a solution that stands out when compared to many of its competitors. Some of its major advantages are that it’s easy to use, has a valuable Guest Captive Portal and virtual security enforcement, and has a good web dashboard and policy manager.
“It is easy to use and more integrated with the Aruba wireless networks,” says Muhammad N., Network & Information Security Engineer at a healthcare company.
Ammar F., Head of IT at Hubtech, explains, “What I like most about Aruba ClearPass is that it has the best enforcement feature for the network. I also like its Guest Captive Portal and virtual security enforcement features, but the virtual security enforcement feature is still under testing by my company. Aruba ClearPass also has a wonderful UI which I find valuable."
Another PeerSpot reviewer mentions, "The web dashboard and the policy manager are very intuitive and very easy for the engineers to use."
Forescout Platform provides today’s busy enterprise organizations with policy and protocol management, workflow coordination, streamlining, and complete device and infrastructure visibility to improve overall network security. The solution also provides concise real-time intelligence of all devices and users on the network. Policy and protocols are delineated using gathered intelligence to facilitate the appropriate levels of remediation, compliance, network access, and all service operations. Forescout Platform is very flexible, integrates well with most of today’s leading network security products, and is a very cost-effective solution.
Forescout Platform Features
Real User Reviews
An important main feature of Forescout is the visibility the solution offers.
One reviewer who is a Consultant at a tech services company, says, "Within three or four days, you can have complete visibility of your infrastructure on the network. Compared to other solutions, the deployment of the solution is easier and we can close the project quickly."
Users also appreciate that the user interface is clear and easy to understand.
An Instructor at a tech services company, shares, "The most valuable feature of the Forescout Platform is the large capacity it can handle. Additionally, the interface of the platform is good."
Portnox provides advanced network visibility and proactive security without complexity, ensuring easy setup and scalability. Its agentless nature and intuitive design enable seamless device management and system integration, promoting efficient network operations and endpoint security.
Portnox is known for offering comprehensive network access control, providing firms with vital tools for managing authentication and securing endpoint devices. It's praised for ease of use in integrating with systems such as RADIUS servers and offering detailed analytical capabilities to ensure compliance and control unauthorized access. While users appreciate the intuitive interface and device management, improvements have been suggested in the areas of better GUI, integration with firewalls, and enhanced configuration methods. Portnox aids in handling dynamic VLAN assignments and securing access in both wired and wireless networks, proving particularly valuable for on-premises and remote environments.
What are the key features of Portnox?In industries where network security is paramount, such as finance and healthcare, Portnox is implemented to fortify access control and manage endpoint connections effectively. Its ability to secure both on-premises and remote environments makes it a versatile choice across sectors that require stringent access management, particularly where unauthorized device connections pose significant risks.