6.7 Vendor Comparison¶
6.7.1 Alternative Solutions Evaluated¶
| Vendor | Solution | Evaluation Status |
|---|---|---|
| Cisco | DNA Center + ISE + SD-Access | SELECTED |
| Aruba | ClearPass + Central + CX Fabric | Evaluated |
| Juniper | Mist + NAC + Campus Fabric | Evaluated |
| Extreme | ExtremeCloud + Control + Fabric | Not evaluated |
6.7.2 Comparison Matrix¶
| Criteria | Weight | Cisco | Aruba | Juniper |
|---|---|---|---|---|
| SD-Access Maturity | 20% | 9/10 | 7/10 | 6/10 |
| Policy Engine | 15% | 9/10 | 8/10 | 7/10 |
| Automation Capability | 15% | 9/10 | 8/10 | 8/10 |
| AI/ML Analytics | 10% | 8/10 | 9/10 | 9/10 |
| Integration (existing) | 15% | 10/10 | 6/10 | 5/10 |
| TCO (5-year) | 15% | 7/10 | 8/10 | 8/10 |
| Vendor Support | 10% | 8/10 | 7/10 | 7/10 |
| Weighted Score | 100% | 8.5 | 7.5 | 7.0 |
6.7.3 Selection Rationale¶
Cisco DNA Center + ISE Selected Because:
- Existing Investment: Leverages current Cisco infrastructure (60% of devices)
- SD-Access Maturity: Most mature fabric solution in market
- ISE Leadership: Industry-leading policy engine, TrustSec/SGT support
- Integration: Native integration with existing WAN, firewalls
- Skill Availability: Existing team has Cisco certifications
- CVD Documentation: Comprehensive validated designs available
- TAC Support: Global support organization with SD-Access expertise
Trade-offs Accepted: - Higher licensing cost vs. alternatives - Proprietary technology lock-in - Complex initial deployment