Try our new research platform with insights from 80,000+ expert users

ExtremeControl vs Forescout Platform vs Portnox comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

As of May 2025, in the Network Access Control (NAC) category, the mindshare of ExtremeControl is 1.8%, up from 1.7% compared to the previous year. The mindshare of Forescout Platform is 12.6%, down from 13.2% compared to the previous year. The mindshare of Portnox is 3.6%, up from 2.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Access Control (NAC)
 

Featured Reviews

Jose Mota - PeerSpot reviewer
Has a simple setup process, but it could be affordable
We have noticed similarities between Extreme and Ubiquiti, particularly in their functionality, like how they operate wirelessly and can be managed from the cloud or locally. Based on our experience, Ubiquiti's system may be more user-friendly and capable of handling heavy loads. Still, Extreme could be more reliable, although you have yet to compare them side by side directly. For instance, we have observed Extreme performing well in a warehouse environment, which might have a different level of network traffic than a convention center.
Odai Halawani - PeerSpot reviewer
It's an easy and effective solution, especially for device profiling without agents
Forescout Platform's most valuable aspect is its excellent device profiling for devices without agents, which is crucial for our work due to challenges with agent-based devices. Its isolation and blocking actions are particularly effective for network security. The device compliance feature helps us ensure device compliance through immediate actions like updating antivirus software. We have already integrated Forescout with antivirus and vulnerability assessment tools, allowing it to monitor vulnerability scores and automatically isolate devices if critical vulnerabilities are detected.
Scott Kerr - PeerSpot reviewer
It is seamless and integrates well with our Azure setup
We use devices like PLCs and controllers, and when we receive a request to allow one on the network, we bypass typical authentication, associate it with a group account, and push it to a firewalled VLAN. However, problems arise when the same MAC address is requested for a different project. Our current system only finds authenticated MAC addresses, making it difficult to troubleshoot when the same device is used for multiple purposes. Ideally, we should be able to search for any MAC address in the database, regardless of its authentication status, to see all its associated groups and potential conflicts.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution is easy to use."
"The company also uses Cisco ISE in other places. I have been told that ExtremeControl is easier to use than ISE. The other reason we prefer ExtremeControl is stability. That's why they chose it for this big hospital in Oslo."
"I can know which end users are using which features."
"It has effectively enhanced network security and integrated with other security tools to streamline operations."
"Overall, I would rate ExtremeControl nine out of ten."
"There is information on migrating most of the cloud system's features."
"The most valuable features are remote access and administration scripts."
"The most valuable feature is the ease of deployment, which does not require the use of an agent."
"The product is very easy to work with and easy to deploy."
"The threat prevention feature provides complete visibility."
"The most valuable features of the Forescout Platform are NAC for sharing, Network Access Control, and port sharing of the devices."
"I can integrate Forescout with products from multiple vendors in my environment, and also, the integration is searchable. It can be used with 802.1X and non-802.1X to integrate with my existing network. I don't need to upgrade any existing networks in my system, and I don't need to replace existing devices to integrate with Forescout. I find value in not having to spend money upgrading existing devices and networks."
"Vulnerability remediation is valuable. We can narrow down a system and its properties. We can go granular on the properties of each endpoint, such as which operating system you're using."
"I have noticed that in the last year the license model has changed from licensing the whole appliance to licensing the number of devices. It's more simple for a large installation, or a user to have CounterACT as their peripheral site in the company. It's a good choice to have changed the license policy."
"The Portnox dashboard is very easy to use, and the UI is simple."
"The minute people have issues on their network, we can see what is happening right away."
"Portnox helped to free up staff time and resources for other IT security priorities and IT work."
"There is an add-on feature for application control to kill unwanted applications when launched on a user's device."
"This is a self-sufficient network monitoring and security product that saves time and employee resources."
"The simplicity of the product is commendable."
"The cloud-based feature of Portnox is excellent."
"It's so easy to set up, you don't need outside assistance."
 

Cons

"The installation is easy, it can take between five minutes to four hours depending on the complexity of the environment. The speed of the installation could improve for more complex environments."
"One improvement could be better clarification, namely that the system only works optimally with all components purchased together."
"There isn't enough development for the on-premises controller."
"I would rate their technical support five out of ten. They have strict upgrade policies."
"The initial setup was not easy. It requires an experienced person to deploy ExtremeControl, and deployment can take from days to weeks depending on the complexity of the network."
"I'd like to have access to more information on the traffic passing through."
"Initially, the implementation of the Forescout Platform took some time to figure out. The reason is we are a manufacturing unit and we have certain silos that are insulated areas where certain systems will not connect to the internet or to the LAN. Since there are many parts of it, we have to have an inclusive view of all those systems. It took a while for us to initially implement, but after a few months, everything worked well."
"The console is a fat client, and a web interface would be preferable."
"Definitely, having more third-party integration would be an improvement."
"More detailed analysis during the authentication process, especially for troubleshooting access issues. We have found that troubleshooting RADIUS controls is quite arduous, as it is today. A trace function could easily resolve this by providing a means by which access issues from a certificate to passwords or accounts could easily be identified and remediated."
"Forescout needs to improve its cloud management and remote connectivity."
"They should improve features related to IT security. ForeScout should analyze behavior to see if the behavior is malicious behavior and block this device. They should develop the ability to analyze the behavior of the device in my environment."
"Although Forescout manages endpoints and network devices, there is no capability for user management."
"The reporting feature needs improvement."
"We have been having some issues with it. That's why we're considering migrating to Portnox Clear due to some limitations with CORE."
"Ideally, we should be able to search for any MAC address in the database, regardless of its authentication status, to see all its associated groups and potential conflicts."
"Their filtering system tends to lag quite a bit, so when I'm doing filtering at times, it doesn't filter the items properly."
"It would be good to integrate Portnox CORE with CLEAR."
"The Wi-Fi integration could be done better from their end."
"One of the things for the on-premise is that sometimes you click on it and it takes a while for it to respond."
"As there are no agents in Portnox Clear, the customers of the product cannot download any agents on their devices, making them unsure if the product offers proper security."
"It could be a little cheaper."
 

Pricing and Cost Advice

"ExtremeControl can be expensive compared to other options in the market."
"5,000 user licenses will cost you between seven and eight million dollars, compared to 20 million for Aruba."
"We went with the virtual appliance option. The biggest cost to running these types of appliances would be to either have multiple virtual appliances at every data center or running Remote SPAN hardware to provide you the real-time network visibility."
"They base the license on the number of devices, which is quite misleading."
"The price of the solution is reasonable. We have paid for the license for five years. We have integration with Symantec AV for orchestration, and we have an additional license."
"Licenses are perpetual but can come with renewable support."
"There are no additional costs that I am aware of."
"The tool's pricing is expensive but reasonable."
"The setup cost, pricing, and licensing are on the high side."
"Portnox CORE's pricing is adequate and cheaper compared to other complex solutions. Its licensing costs are yearly and include support. Cost is calculated per device."
"Pricing is not cheap. It is based on licenses per port. After licensing is purchased, you only pay for support."
"The solution is very expensive and I would rate it 10 out of 10."
"Pricing is quite reasonable."
"The tool is more expensive than Fortinet."
"The cost of Portnox Clear is reasonable."
"The pricing is a bit high, possibly due to the cloud features and running instances across regions like the US, Asia, and Europe."
"It's not cheap. It's not expensive. It's in the middle."
report
Use our free recommendation engine to learn which Network Access Control (NAC) solutions are best for your needs.
850,747 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Healthcare Company
9%
Government
9%
Retailer
8%
Educational Organization
29%
Computer Software Company
11%
Financial Services Firm
8%
Government
7%
Manufacturing Company
15%
Computer Software Company
14%
Financial Services Firm
12%
Insurance Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about ExtremeControl?
It has effectively enhanced network security and integrated with other security tools to streamline operations.
What needs improvement with ExtremeControl?
ExtremeControl is a great solution, but it is mainly focused on wireless. For their wired network, especially with th...
What is your primary use case for ExtremeControl?
We have projects with mostly government entities. They want to create some policies for individuals who access Active...
What advice do you have for others considering Forescout Platform?
Forescout is a very powerful NAC product that does not rely on port level configuration. It can detect and block unau...
What advice do you have for others considering Forescout Platform?
I would rate the Forescout Device and Visibility Control Platform at a six out of ten.
What advice do you have for others considering Forescout Platform?
I recommend doing a compression demo. If people use it, they will buy it. So they have to see the product in place. T...
What do you like most about Portnox CORE?
It's easy to manage and troubleshoot thanks to the lightweight components.
What is your experience regarding pricing and costs for Portnox CORE?
It's not cheap. It's not expensive. It's in the middle, so I'll probably give it a seven out of ten, where one is che...
What needs improvement with Portnox CORE?
We have been having some issues with it. That's why we're considering migrating to Portnox Clear due to some limitati...
 

Also Known As

Extreme Access Control, Enterasys NAC
Forescout Platform, CounterACT for Endpoint Compliance, ForeScout CounterACT
Access Layers Portnox, Portnox CLEAR
 

Interactive Demo

Demo not available
Demo not available
 

Overview

 

Sample Customers

Street Crane, Robert Bosch, Molex Chengdu, Weir Valves & Controls UK, Renault, AESSEAL, Ducati, Alexander Dennis, UK Ministry of Defence, Manz
NHS Sussex, SAP, SEGA, Vistaprint, Miami Children's Hospital, Pioneer Investments, New York Law School, OmnicomGroup, Meritrust
Data Realty, Royal London, Wales Millennium Centre, McLaren Construction Group, EL AL Israeli Airlines, 
Find out what your peers are saying about Cisco, Hewlett Packard Enterprise, Fortinet and others in Network Access Control (NAC). Updated: April 2025.
850,747 professionals have used our research since 2012.