Network access control for enterprise buyers
Asked as “network access control solution”, and as “NAC system”, on behalf of an enterprise B2B company. 61 first choices recorded across the direct, paraphrase, budget and scale prompts, fourteen models each. Added to the November 2026 Edition.
Standing · first-choice share
39%
Contested · Portnox Cloud 18%
39Cisco Identity Services Engine18Portnox Cloud13HPE Aruba ClearPass30others
39% of first choices, contested.
Since October 2026▼−14Since October 2026: 53% → 39%, −14 points. Past the 11-point floor: movement.Cisco Identity Services Engine held the lead, −14 points on 53%, past the floor.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
Small business
Portnox Cloud41%Clear leader▼−4Since October 2026: 45% → 41%, −4 points. Inside the 11-point floor: within noise.Standing →Mid-marketPortnox Cloud46%Clear leader▲+11Since October 2026: 35% → 46%, +11 points. Past the 11-point floor: movement.Standing →Enterprise
Cisco Identity Services Engine39%Contested▼−14Since October 2026: 53% → 39%, −14 points. Past the 11-point floor: movement.This page
Portnox Cloud41%Clear leader▼−4Since October 2026: 45% → 41%, −4 points. Inside the 11-point floor: within noise.Standing →Mid-marketPortnox Cloud46%Clear leader▲+11Since October 2026: 35% → 46%, +11 points. Past the 11-point floor: movement.Standing →EnterpriseCisco Identity Services Engine39%Contested▼−14Since October 2026: 53% → 39%, −14 points. Past the 11-point floor: movement.This pageThe standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all fourteen models, for an enterprise B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrantSince October 2026
01Cisco Identity Services Engine39%26%74criticized default▼−14Since October 2026: 53% → 39%, −14 points. Past the 11-point floor: movement.53% → 39%
Cisco Identity Services Engine39%26%74criticized default▼−14Since October 2026: 53% → 39%, −14 points. Past the 11-point floor: movement.53% → 39%02Portnox Cloud18%4%50accepted challenger=heldSince October 2026: 18% → 18%, ±0 points. Inside the 11-point floor: within noise.18% → 18%
Portnox Cloud18%4%50accepted challenger=heldSince October 2026: 18% → 18%, ±0 points. Inside the 11-point floor: within noise.18% → 18%03HPE Aruba ClearPass13%12%34accepted challenger▲+5Since October 2026: 8% → 13%, +5 points. Inside the 11-point floor: within noise.8% → 13%
04
Aruba ClearPass8%32%22criticized challenger▲+2Since October 2026: 6% → 8%, +2 points. Inside the 11-point floor: within noise.6% → 8%
Aruba ClearPass8%32%22criticized challenger▲+2Since October 2026: 6% → 8%, +2 points. Inside the 11-point floor: within noise.6% → 8%Show the three products at 0%, ordered by negative rate
05
Forescout0%17%52accepted challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%
Forescout0%17%52accepted challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%07FortiNAC0%17%12accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
06
Fortinet FortiNAC0%16%31accepted challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%
Fortinet FortiNAC0%16%31accepted challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%The floor is 11 points of share, measured: how far the models move a leader on their own when the same questions are asked twice with nothing changed. A larger change is movement; a smaller one can't be told apart from repeat variation, and both are shown. Each index measures its own floor from its own repeat, over its own categories, so the floor differs from one index to the next. Both editions asked the same fourteen models. How the floor is measured
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Head to headHead-to-head pages are published for mid-market buyers, so these open on mid-market figures, not enterprise.
All twenty-eight head-to-head pages: the top eight products, each against each
Portnox Cloud vs HPE Aruba ClearPassPortnox Cloud vs ForescoutPortnox Cloud vs Aruba ClearPassPortnox Cloud vs Cisco Identity Services EnginePacketFence vs Fortinet FortiNACPacketFence vs NordLayer NACPacketFence vs HPE Aruba ClearPassPacketFence vs ForescoutPacketFence vs Aruba ClearPassPacketFence vs Cisco Identity Services EngineFortinet FortiNAC vs NordLayer NACFortinet FortiNAC vs HPE Aruba ClearPassFortinet FortiNAC vs ForescoutFortinet FortiNAC vs Aruba ClearPassFortinet FortiNAC vs Cisco Identity Services EngineNordLayer NAC vs HPE Aruba ClearPassNordLayer NAC vs ForescoutNordLayer NAC vs Aruba ClearPassNordLayer NAC vs Cisco Identity Services EngineHPE Aruba ClearPass vs ForescoutHPE Aruba ClearPass vs Aruba ClearPassHPE Aruba ClearPass vs Cisco Identity Services EngineForescout vs Aruba ClearPassForescout vs Cisco Identity Services EngineAruba ClearPass vs Cisco Identity Services Engine
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
0102H03
040506F07
Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative50%
Key
01Cisco Identity Services Engine39%
Cisco Identity Services Engine39%02Portnox Cloud18%
Portnox Cloud18%03HPE Aruba ClearPass13%
04Aruba ClearPass8%
Aruba ClearPass8%05Forescout0%
Forescout0%06Fortinet FortiNAC0%
Fortinet FortiNAC0%07FortiNAC0%
What they warned about
Three of fourteen models held their first choice under the paraphrase. Gemini 3.5 Flash, Perplexity Sonar, Grok 4.20, Mistral Small, DeepSeek V4 Flash, Llama 4 Maverick, Qwen 3.7 Flash, Kimi K2, GLM 4.7 FlashX, GPT-6 Luna and Muse Glimmer 30B changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
Cisco Identity Services Engine26%
19 of 74 labels negative · 11 of 14 models · 3 hard negative
“Cisco ISE has experienced multiple vulnerabilities including CVSS 10.0 authentication bypass vulnerabilities ... it was actively exploited with no workaround available” Claude Haiku 4.5, negative prompt
Forescout17%
9 of 52 labels negative · 6 of 14 models · 1 hard negative
“Avoid: Cisco ISE and Forescout if cost predictability is your top priority” Muse Glimmer 30B, negative prompt
Fortinet FortiNAC16%
5 of 31 labels negative · 5 of 14 models · 1 hard negative
“replace FortiNAC, which has been a disappointing experience for us due to its poor design, numerous bugs, and inadequate support.” Muse Glimmer 30B, negative prompt
Aruba ClearPass32%
7 of 22 labels negative · 5 of 14 models
“Legacy on-prem appliances (Cisco ISE, ClearPass, ForeScout) | Complexity, cost, vendor lock-in, poor cloud/hybrid fit” DeepSeek V4 Flash, negative prompt
What they cite
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted.
Sites the answers cite
78 of 84 answers in this category came back with a source list, from 14 of 14 models: citations where the model returns them, or the search results it consulted. 933 links across 229 sites, every framing counted. Ranked by the number of answers carrying the site or page. 45 of the 252 answers across every segment cited this index's own page for the category; the method page measures whether that reading tilts an answer.
38 answers · 39 citations · 12 models
vendor site · Portnox36 answers · 81 citations · 13 models
35 answers · 58 citations · 11 models
vendor site · Fortinet24 answers · 26 citations · 12 models
vendor site · CyberPress23 answers · 23 citations · 10 models
vendor site · Cisco21 answers · 35 citations · 7 models
vendor site · FitGap20 answers · 21 citations · 9 models
vendor site · G219 answers · 20 citations · 10 models
vendor site · Purple18 answers · 19 citations · 10 models
vendor site · Guideflow17 answers · 17 citations · 9 models
14 answers · 14 citations · 9 models
12 answers · 14 citations · 5 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
38 answers · 12 models
23 answers · 10 models
21 answers · 9 models
18 answers · 11 models
18 answers · 9 models
17 answers · 9 models
14 answers · 9 models
13 answers · 8 models
12 answers · 8 models
11 answers · 6 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best network access control solution”, “network access control solution”, “network access control solutions”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|
| Cisco parent site Cisco Identity Services Engine 39% | 39% | 151 | 165,000 | 48,352 | |||
| Portnox Cloud portnox.com Portnox Cloud 18%, Portnox CLEAR 3% | 21% | 145 | 20 | 0 | 77,065 | 11 | 7 |
| HPE Aruba ClearPass | 13% | 880 | 0 | ||||
| Aruba ClearPass arubanetworks.com | 8% | 78 | 880 | 52 | 2,865 | ||
| HPE Aruba Networking ClearPass | 3% | ||||||
| PacketFence packetfence.com | 3% | 64 | 720 | 4 | 298 | ||
| Keytos Shield keytos.io | 2% | 2 | |||||
| Aruba ClearPass Policy Manager | 2% | ||||||
| Arbiter Cloud NAC | 2% | ||||||
| Cisco Identity Services Engine ISE | 2% |
Google's top ten for the three searches hold 23 sites; 3 of them are among the sites the models cited here (cisco.com, fortinet.com, portnox.com). The first result for “best network access control solution” is startwithidentity.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best network access control solution for an enterprise B2B company?”Paraphrase“Which NAC system would you recommend to a large B2B company with thousands of employees?”Comparative“What are the top enterprise-grade network access control solutions and how do they differ?”Budget-constrained“What is the best network access control solution for a large company that needs predictable total cost across thousands of users?”Scale-constrained“We are a 5,000 person company with SSO, SOC 2 and procurement review requirements evaluating a network access control solution. What should we look at?”Negative“Which network access control solutions should a large enterprise avoid or be cautious about?”
Claude Haiku 4.5Cisco Identity Services EngineCisco Identity Services EngineHeldCisco Identity Services EnginePortnox Cloudno first choiceagainst: Cisco Identity Services Engine, Fortinet FortiNAC, Ivanti Policy Secure
Three alternatives
Forescout, HPE Aruba ClearPass, Portnox CloudTwo alternatives
Forescout, HPE Aruba ClearPassThree alternatives
Forescout, HPE Aruba ClearPass, Portnox CloudTwo alternatives
Cisco Identity Services Engine, HPE Aruba ClearPassGPT-5.4 miniCisco Identity Services Engineagainst: HPE Juniper Access Assurance / Mist Access AssuranceCisco Identity Services EngineHeldCisco Identity Services EngineGenian NACagainst: Portnox Cloudno first choicenothing named
Two alternatives
Aruba ClearPass, FortiNACTwo alternatives
FortiNAC, HPE Aruba ClearPassFive alternatives
Forescout, Fortinet FortiNAC, HPE Aruba Networking ClearPass Policy Manager, Ivanti Neurons for NAC / Policy Secure, Portnox CloudOne alternative
FortiNACGemini 3.5 FlashHPE Aruba ClearPass, Portnox CloudAruba ClearPass Policy ManagerChangedCisco Identity Services EnginePortnox CLEARagainst: Cisco Identity Services EnginePortnox CLEARagainst: Cisco Identity Services Engine, Foxpass, HPE Aruba ClearPassagainst: Cisco Clean Access / CCA, Legacy Microsoft Intune NAC API, Microsoft Network Access Protection, Symantec SNAC
Three alternatives
Cisco Identity Services Engine, Forescout, Fortinet FortiNACThree alternatives
Cisco Identity Services Engine, Forescout, Portnox CloudFour alternatives
Forescout Continuum, Fortinet FortiNAC, HPE Aruba ClearPass Policy Manager, Portnox CLEARTwo alternatives
Forescout Continuum, HPE Aruba ClearPassFour alternatives
Cloudflare One, Forescout, SecureW2 JoinNow, Zscaler Private AccessPerplexity SonarAruba ClearPassCisco Identity Services EngineChangedCisco Identity Services Engine, HPE Aruba ClearPassPortnox Cloudno first choiceagainst: Cisco Identity Services Engine, ExtremeControl, FortiNAC, OpenNAC
Four alternatives
Cisco Identity Services Engine, Forescout, FortiNAC, Portnox CloudFour alternatives
Forescout, FortiNAC, HPE Aruba ClearPass, Portnox CloudFive alternatives
Forescout, Fortinet FortiNAC, Ivanti Policy Secure, PacketFence, Portnox CloudThree alternatives
Aruba ClearPass, Cisco Identity Services Engine, ForescoutGrok 4.20Aruba ClearPass, Cisco Identity Services EngineCisco Identity Services EngineChangedagainst: OPSWAT, Portnox CloudCisco Identity Services Engine, HPE Aruba ClearPassPortnox Cloudagainst: Cisco Identity Services Engine, ForescoutHPE Aruba ClearPass, Portnox Cloudagainst: Cisco Identity Services Engineagainst: Aruba ClearPass, Cisco Identity Services Engine, Forescout
Five alternatives
Fortinet FortiNAC, Juniper Mist Access Assurance, NordLayer NAC, Portnox Cloud, ThreatLocker Zero Trust PlatformThree alternatives
Forescout, Fortinet FortiNAC, HPE Aruba ClearPassFour alternatives
Extreme Networks NAC, Forescout, Fortinet FortiNAC, Portnox CloudOne alternative
Keytos ShieldTwo alternatives
Forescout, Fortinet FortiNACMistral SmallAruba ClearPass, Cisco Identity Services EngineCisco Identity Services EngineChangedCisco Identity Services Engineagainst: Foxpass, NordLayer NACPacketFence, Portnox Cloudagainst: Cisco Identity Services Engineno first choiceagainst: Aruba ClearPass, Cisco Identity Services Engine, Forescout, Fortinet FortiNAC
Three alternatives
Fortinet FortiNAC, NordLayer NAC, Portnox CloudTwo alternatives
Forescout, HPE Aruba ClearPassTwo alternatives
FortiNAC, HPE Aruba Networking SSEOne alternative
HPE Aruba ClearPassDeepSeek V4 FlashCisco Identity Services EngineHPE Aruba ClearPassChangedCisco Identity Services Engineagainst: Juniper Mist Access Assurance, PacketFencePortnox Cloudagainst: Aruba ClearPass, Cisco Identity Services Engine, Fortinet FortiNACCisco Identity Services Engine, HPE Aruba ClearPassagainst: Aruba ClearPass, Cisco Identity Services Engine, Forescout
Four alternatives
Forescout, Fortinet FortiNAC, HPE Aruba ClearPass, Portnox CloudTwo alternatives
Cisco Identity Services Engine, ForescoutFour alternatives
Forescout, Fortinet FortiNAC, HPE Aruba ClearPass, Portnox CloudTwo alternatives
Cisco Access Manager, PacketFenceTwo alternatives
Forescout, Portnox CloudLlama 4 MaverickCisco Identity Services EngineCisco Identity Services Engine, HPE Aruba ClearPassChangedno first choiceCisco Identity Services Engineagainst: Ivanti Policy Secure, PacketFenceno first choicenothing named
Four alternatives
Aruba ClearPass, Fortinet FortiNAC, Portnox Cloud, ThreatLocker Zero Trust PlatformTwo alternatives
Forescout, Portnox CloudOne alternative
Portnox CloudQwen 3.7 FlashCisco Identity Services EngineCisco Identity Services Engine, HPE Aruba ClearPassChangedno first choicePacket Fencingagainst: Cisco Identity Services Engine, ForescoutCisco Identity Services Engineagainst: Cisco Identity Services Engine, Forescout Technologies, Fortinet FortiNAC, HPE Aruba ClearPass
Four alternatives
Forescout, HPE Aruba ClearPass, Portnox Cloud, PurpleTwo alternatives
Forescout, Portnox CloudSeven alternatives
Cisco Identity Services Engine, Forescout, Fortinet Secure Client + FortiGate Integrated NAC, HPE Aruba ClearPass, Juniper Mist Access Assurance, OPSWAT MetaAccess, Portnox CloudOne alternative
Portnox CloudFive alternatives
Cisco, Digital.ai, Ekran, ExtraHop, TufinKimi K2Cisco Identity Services EngineHPE Aruba Networking ClearPassChangedCisco Identity Services EnginePortnox Cloudagainst: Aruba ClearPass, ForescoutPortnox Cloudagainst: Aruba ClearPass, Cisco Identity Services Engine, Forescout
Three alternatives
Forescout, HPE Aruba ClearPass, Portnox CloudTwo alternatives
Cisco Identity Services Engine, ForescoutFour alternatives
Forescout, Fortinet FortiNAC, HPE Aruba ClearPass Policy Manager, Portnox CloudOne alternative
Cisco Identity Services EngineFour alternatives
Cisco Identity Services Engine, Forescout, HPE Aruba Central NAC, HPE Aruba ClearPassGLM 4.7 FlashXAruba ClearPass, Portnox CloudCisco Identity Services Engine, HPE Aruba ClearPassChangedCisco Identity Services EnginePacketFenceagainst: Aruba ClearPass, Cisco Identity Services Engineno first choiceagainst: Ivanti, Open Cloud Factory
Four alternatives
Cisco Identity Services Engine, Cloudflare Access, Forescout 4D Platform, iboss ZTNATwo alternatives
Forescout, Fortinet FortiNACFour alternatives
Forescout, Fortinet FortiNAC, HPE Aruba Networking ClearPass, Portnox CloudOne alternative
Portnox CLEARMiniMax M2.5Cisco Identity Services EngineCisco Identity Services EngineHeldCisco Identity Services EngineKeytos Shieldagainst: Cisco Identity Services EngineAruba ClearPassagainst: Cisco Identity Services Engine, FortiNAC
Six alternatives
Aruba ClearPass, Forescout, Fortinet FortiNAC, Juniper Mist Access Assurance, PacketFence, ThreatLocker Zero Trust PlatformThree alternatives
Forescout, Fortinet FortiNAC, HPE Aruba ClearPassFive alternatives
Aruba ClearPass, Forescout, Fortinet FortiNAC, Portnox Cloud, ThreatLocker Zero Trust PlatformTwo alternatives
Microsoft Entra Suite, Portnox CloudTwo alternatives
Cisco Identity Services Engine, ForescoutGPT-6 LunaCisco Identity Services Engine, HPE Aruba ClearPassCisco Identity Services EngineChangedno first choiceHPE Aruba Networking ClearPassno first choiceagainst: Cisco NAC Appliance/Clean Access, Intune NAC service
Two alternatives
Forescout, Portnox CloudTwo alternatives
Aruba ClearPass, Forescout eyeSightSeven alternatives
Cisco Identity Services Engine, ExtremeControl, Forescout, Fortinet FortiNAC, HPE Aruba Networking ClearPass, HPE Mist Access Assurance, Portnox CloudTwo alternatives
Cisco Identity Services Engine, Portnox CloudFive alternatives
Aruba ClearPass, Cisco Identity Services Engine, Forescout, HPE Mist Access Assurance, Portnox CloudMuse Glimmer 30BCisco Identity Services Engine – ISECisco Identity Services Engine ISEChangedCisco Identity Services EngineArbiter Cloud NAC, Portnox Cloudagainst: Cisco Identity Services Engine, Forescout, HPE Aruba ClearPassCisco Identity Services Engineagainst: Cisco Identity Services Engine, Forescout, Fortinet FortiNAC, HPE Aruba ClearPass
Four alternatives
Forescout, HPE Aruba Networking ClearPass, NordLayer NAC, Portnox CloudTwo alternatives
Forescout, HPE Aruba ClearPassFour alternatives
Forescout, Fortinet FortiNAC, HPE Aruba Networking ClearPass, Portnox CloudOne alternative
FortiNACSeven alternatives
Cloudflare Access, Elisity, HPE Aruba ClearPass, Headscale, Illumio Zero Trust, Tailscale, Zscaler Private AccessBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Eighty-four rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 16:24 | yes | 19 | 9 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 16:54 | yes | 4 | 5 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 16:03 | yes | 8 | 24 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-11-01 10:19 | yes | 10 | 4 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 14:59 | yes | 5 | 27 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 12:23 | yes | 5 | 5 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 13:26 | yes | 18 | 28 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 19:01 | yes | 5 | 3 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 08:46 | yes | 5 | 22 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 12:23 | yes | 10 | 29 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 09:05 | yes | 20 | 293 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 09:33 | yes | 19 | 43 s |
| Direct recommendation | GPT-6 Luna | gpt-6-luna | 2026-11-01 13:14 | yes | 5 | 14 s |
| Direct recommendation | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 16:12 | yes | 13 | 23 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 11:53 | yes | 15 | 9 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 18:23 | yes | 4 | 6 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 12:46 | no | 0 | 17 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-11-01 13:06 | yes | 10 | 3 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 14:10 | yes | 5 | 11 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 12:31 | yes | 5 | 4 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 14:45 | yes | 22 | 38 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 17:10 | yes | 5 | 3 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 17:50 | yes | 5 | 33 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 09:18 | yes | 8 | 31 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 15:23 | yes | 21 | 22 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 13:12 | yes | 5 | 20 s |
| Paraphrase | GPT-6 Luna | gpt-6-luna | 2026-11-01 13:18 | yes | 3 | 11 s |
| Paraphrase | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 09:32 | yes | 13 | 20 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 10:31 | yes | 17 | 10 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 11:57 | yes | 4 | 8 s |
| Comparative | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 14:34 | no | 0 | 17 s |
| Comparative | Perplexity Sonar | sonar | 2026-11-01 10:23 | yes | 10 | 6 s |
| Comparative | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 15:18 | yes | 10 | 18 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 10:59 | yes | 9 | 8 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 09:47 | yes | 23 | 35 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 13:38 | yes | 5 | 2 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 18:07 | yes | 5 | 21 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 12:57 | yes | 15 | 51 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 08:52 | yes | 23 | 44 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 11:57 | yes | 10 | 53 s |
| Comparative | GPT-6 Luna | gpt-6-luna | 2026-11-01 15:48 | yes | 8 | 21 s |
| Comparative | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 16:19 | yes | 15 | 24 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 16:11 | yes | 15 | 8 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 14:08 | yes | 3 | 6 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 15:25 | yes | 7 | 26 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-11-01 15:54 | yes | 10 | 3 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 15:05 | yes | 5 | 9 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 17:55 | yes | 5 | 5 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 10:12 | yes | 24 | 26 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 09:04 | yes | 5 | 3 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 13:14 | yes | 10 | 52 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 14:19 | yes | 22 | 30 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 19:13 | yes | 22 | 29 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 15:27 | yes | 18 | 50 s |
| Budget constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 10:48 | yes | 3 | 12 s |
| Budget constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 10:24 | yes | 15 | 21 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 18:45 | yes | 20 | 13 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 12:07 | no | 0 | 11 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 18:01 | no | 0 | 23 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-11-01 19:09 | yes | 10 | 9 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 14:40 | yes | 14 | 19 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 14:41 | no | 0 | 8 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 13:15 | yes | 22 | 40 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 08:51 | yes | 5 | 4 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 12:44 | no | 0 | 30 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 11:41 | yes | 24 | 51 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 19:00 | yes | 22 | 31 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 19:07 | yes | 10 | 26 s |
| Scale constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 10:01 | yes | 7 | 32 s |
| Scale constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 09:50 | yes | 15 | 26 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 17:11 | yes | 30 | 13 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 14:11 | yes | 4 | 6 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 17:12 | yes | 10 | 32 s |
| Negative framing | Perplexity Sonar | sonar | 2026-11-01 09:09 | yes | 10 | 5 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 15:21 | yes | 13 | 12 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 15:15 | yes | 5 | 5 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 11:15 | yes | 23 | 26 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 16:30 | yes | 5 | 3 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 11:10 | yes | 25 | 94 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 15:24 | yes | 25 | 58 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 18:11 | yes | 17 | 38 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 12:51 | yes | 15 | 43 s |
| Negative framing | GPT-6 Luna | gpt-6-luna | 2026-11-01 10:49 | yes | 3 | 17 s |
| Negative framing | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 13:29 | yes | 14 | 22 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Cisco ISE read as Cisco Identity Services Engine
Cisco ISE (Identity Services Engine) read as Cisco Identity Services Engine
Cloudflare One / Cloudflare Access read as Cloudflare One
Ivanti NAC read as Ivanti Policy Secure
NordLayer read as NordLayer NAC
Portnox read as Portnox Cloud
SecureW2 read as SecureW2 JoinNow
SecureW2 (JoinNow / Cloud RADIUS) read as SecureW2 JoinNow
ThreatLocker read as ThreatLocker Zero Trust Platform
Unresolved, counted raw
Arbiter Cloud NAC
Cisco Clean Access / CCA
Cisco Duo Secure Access
Cisco Identity Services Engine ISE
Cisco Identity Services Engine – ISE
Cloud RADIUS
F5 BIG-IP Access Policy Manager
Forescout 4D Platform
Forescout eyeSight
Fortinet Secure Client + FortiGate Integrated NAC
HPE Aruba Central NAC
HPE Aruba Networking SSE (ClearPass Policy Manager)
HPE Juniper Access Assurance / Mist Access Assurance
Illumio Zero Trust
Intune NAC service
Ivanti Neurons for NAC / Policy Secure
Legacy Microsoft Intune NAC API (Legacy Service)
Microsoft Entra Suite
Mist
Open Cloud Factory
Packet Fencing
Symantec SNAC
Discontinued, still offered
No shut-down product was recommended here.