Forescout Platform vs Palo Alto Networks IoT Security comparison

Forescout Platform vs. Palo Alto Networks IoT Security

Download the complete report

Helped 849,686 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Forescout Platform

Ranking in IoT Security

2nd

Average Rating

8.4

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

Network Access Control (NAC) (4th), Endpoint Compliance (5th), Extended Detection and Response (XDR) (16th)

Palo Alto Networks IoT Secu...

Ranking in IoT Security

4th

Average Rating

8.4

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of May 2025, in the IoT Security category, the mindshare of Forescout Platform is 13.8%, down from 18.7% compared to the previous year. The mindshare of Palo Alto Networks IoT Security is 6.8%, down from 7.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

IoT Security

Featured Reviews

Odai Halawani

Sr. Security Engineer at Topvision

It's an easy and effective solution, especially for device profiling without agents

Forescout Platform's most valuable aspect is its excellent device profiling for devices without agents, which is crucial for our work due to challenges with agent-based devices. Its isolation and blocking actions are particularly effective for network security. The device compliance feature helps us ensure device compliance through immediate actions like updating antivirus software. We have already integrated Forescout with antivirus and vulnerability assessment tools, allowing it to monitor vulnerability scores and automatically isolate devices if critical vulnerabilities are detected.

Read full review

Engineerinfosec67

Senior Information Security Engineer at Westcon-Comstor

Recognizing and classifying devices with AI and machine learning boosts security without extra network controls

Palo Alto Networks IoT Security ( /products/palo-alto-networks-iot-security-reviews ) integrates with a cloud-based engine that uses artificial intelligence and machine learning for device recognition and classification based on traffic types. This adaptability, which does not rely strictly on a static database, allows for identifying a wider range of devices. The behavior-based identification of devices enhances the capabilities of security controls, extending the network security platform's recognition capacity without deploying a separate network access control system.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Forescout Platform's best feature is plug-in integration."

"The valuable feature of the product stems from the fact that it is easy to implement."

"Forescout Platform's most valuable aspect is its excellent device profiling for devices without agents, which is crucial for our work due to challenges with agent-based devices. Its isolation and blocking actions are particularly effective for network security. The device compliance feature helps us ensure device compliance through immediate actions like updating antivirus software. We have already integrated Forescout with antivirus and vulnerability assessment tools, allowing it to monitor vulnerability scores and automatically isolate devices if critical vulnerabilities are detected."

"Forescout has a feature that blocks the endpoint at the point of collection. It sets preconditions and will block the system if those aren't met."

"The most valuable feature is the blocking of USB devices."

"The best parts of Forescout Platform are its orchestration features, discovery capabilities, classification buckets, and flexibility in creating policies."

"Forescout Platform has made it possible to block people working near our construction sites who should not have access to our network."

"We think it's simple. We think it's very useful and we really like reports and everything."

More Forescout Platform pros

"From a security standpoint, it provides a comprehensive range of standard security features that align with our requirements."

"I like the Cortex Data Lake integration with security automation."

"Palo Alto is valued for its GlobalProtect feature, which offers a range of security options, including user ID mapping and VPNs."

"It is simple to use. We just need to enable features and then configure IoT policies."

"I would recommend Palo Alto Networks IoT Security to any organization with automation plants or standard enterprise IT environments."

"I find Palo Alto Networks IoT Security to be highly responsive, and its separate management and data planes are a major advantage."

"The key strength of Palo Alto firewalls lies in their application-based approach, offering a much finer level of control compared to traditional firewalls."

"This solution has been most valuable for establishing a VPN and implementing allow/deny rules. It has also enabled us to create security policies. It is an easy solution to customise when it comes to creating templates and pulling reports."

More Palo Alto Networks IoT Security pros

Cons

"Logging would be one area for improvement. When we're troubleshooting, there are not a lot of clear things on Google that we can look up for ourselves. When we have an issue with it, we have to call the company to get the vendors involved. The logging of Forescout is horrible compared to other things that we've used."

"More detailed analysis during the authentication process, especially for troubleshooting access issues. We have found that troubleshooting RADIUS controls is quite arduous, as it is today. A trace function could easily resolve this by providing a means by which access issues from a certificate to passwords or accounts could easily be identified and remediated."

"I'd like to see improvements in the reporting aspect of Forescout Platform. While the dashboards are good, the reports are lacking and need enhancement, especially in terms of standardization and customization options. Apart from that, all the features and functionalities are working well without any issues."

"The initial setup is a bit complex."

"The console is a fat client, and a web interface would be preferable."

"Forescout Platform could improve the integration or compatibility with other solutions, such as Chinese-made solutions. They do not have any integration with S33 which is a switch. They do not have good integration with new solutions in the market. They do integrate well with Rocket, Cisco, Juniper, and quite a few more but they could expand the integration."

"The installation is not secure because it takes high admin privileges."

"For improvements, I think technical support could be enhanced. The time zone difference makes remote support difficult - I'm in Indonesia, and they're in the US. Maybe the Forescout Platform could provide engineers from Asia Pacific."

More Forescout Platform cons

"It would be beneficial if Palo Alto IoT Security could integrate with Let's Encrypt for free SSL certificates."

"It would be beneficial to have a more centralized and user-friendly platform that could consolidate all the necessary information, which proved challenging during the initial POC phase."

"The cost is still high and licensing is still complex."

"More application signatures are required."

"Essentially, this solution focuses on data analysis and cannot perform any physical actions."

"The reporting for this solution could be improved. The logs we receive are only saved for one week. We would like to have the database timeframe increased to a month or two for historical reporting as well as increased storage capabilities to support this data and reporting."

"There can be more automation in terms of security and detection. It is already good."

"While not overly complex, its usability could be enhanced, making it a more intuitive experience for everyone."

More Palo Alto Networks IoT Security cons

Pricing and Cost Advice

"They base the license on the number of devices, which is quite misleading."

"The fact that we were allowed to spin up as many servers as we had need of to support our geographic requirements while paying for licensing as an enterprise truly set Forescout apart from the crowd and improved the way we could design our access."

"Licenses are perpetual but can come with renewable support."

"It is expensive because you have to pay for their CSM, the customer's access manager, and their professional services on top of that, and they charge you roughly $400 per hour, which is overhead."

"Forescout's pricing is noted for its attractiveness, with potential discounts depending on partnership levels."

"You can have a flexible license depending on your environment."

"The price of the Forescout Platform is expensive. I purchased it for approximately 94 lakhs."

"Forescout is more expensive than Cisco because Cisco gives high discounts."

More Forescout Platform pricing and cost advice

"The initial investment is substantial, but the renewal costs make it financially unsustainable."

"While Palo Alto Networks IoT Security might cost more than some competitors, its features and effectiveness justify the price tag."

"The pricing for Palo Alto Networks IoT Security is a bit high."

"The successful migration trend suggests that Palo Alto provides a superior cost-benefit ratio for firewall solutions."

See which vendors are best for you

Use our free recommendation engine to learn which IoT Security solutions are best for your needs.

See recommendations

849,686 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

30%

Computer Software Company

11%

Financial Services Firm

Government

Manufacturing Company

16%

Computer Software Company

15%

Comms Service Provider

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What advice do you have for others considering Forescout Platform?

Forescout is a very powerful NAC product that does not rely on port level configuration. It can detect and block unauthorized devices very quickly. But it has a lot of capabilities and really would...

What advice do you have for others considering Forescout Platform?

I would rate the Forescout Device and Visibility Control Platform at a six out of ten.

What advice do you have for others considering Forescout Platform?

I recommend doing a compression demo. If people use it, they will buy it. So they have to see the product in place. That's the main recommendation is to do a proof of concept. If they do, they will...

What do you like most about Palo Alto Networks IoT Security?

From a security standpoint, it provides a comprehensive range of standard security features that align with our requirements.

What needs improvement with Palo Alto Networks IoT Security?

The major challenge is the integration with existing complex production lines. These architectures were developed with a focus on automation functionalities, not security. Finding the right integra...

What is your primary use case for Palo Alto Networks IoT Security?

I use Palo Alto Networks IoT Security ( /products/palo-alto-networks-iot-security-reviews ) for discovering automation devices and detecting various types of data traffic on automation infrastructu...

Aruba ClearPass vs Forescout Platform

Comparisons

Compared 23% of the time

Cisco Identity Services Engine (ISE) vs Forescout Platform

Compared 22% of the time

Fortinet FortiNAC vs Forescout Platform

Compared 14% of the time

Nozomi Networks vs Forescout Platform

Compared 6% of the time

Portnox vs Forescout Platform

Compared 4% of the time

More Forescout Platform Competitors

Nozomi Networks vs Palo Alto Networks IoT Security

Compared 55% of the time

Armis vs Palo Alto Networks IoT Security

Compared 33% of the time

Microsoft Defender for IoT vs Palo Alto Networks IoT Security

Compared 13% of the time

More Palo Alto Networks IoT Security Competitors

Product Reports

Forescout Platform

Download Forescout Platform product report

Palo Alto Networks IoT Security

Download Palo Alto Networks IoT Security product report

Also Known As

Forescout Platform, CounterACT for Endpoint Compliance, ForeScout CounterACT

No data available

Overview

Forescout Platform provides today’s busy enterprise organizations with policy and protocol management, workflow coordination, streamlining, and complete device and infrastructure visibility to improve overall network security. The solution also provides concise real-time intelligence of all devices and users on the network. Policy and protocols are delineated using gathered intelligence to facilitate the appropriate levels of remediation, compliance, network access, and all service operations. Forescout Platform is very flexible, integrates well with most of today’s leading network security products, and is a very cost-effective solution.

Forescout Platform Features

Real-time complete visibility: With Forescout eyeSight, each and every device is classified when any attempt to access your network has been made. This includes - but is not limited to - desktops, laptops, android devices, virtual machines, switches, VoIP phones, USB memory sticks, webcams, IoT devices, and more.
Policy-based and manual controls: In today’s busy robust environment, networks are continually changing; there are different types and amounts of devices connected, various software applications, network compliance requirements, and the constant potential for risk make managing an IT network a very daunting challenge. The Forescout Console is used to simplify the administration and management of important alerts, remediation, and access controls to keep the network secure.
Intuitive real-time dashboards: Forescout Dashboards, a component of Forescout WebClient, is a comprehensive web-based intelligence center that gives full visibility and real-time insight of the complete network using both out-of-the-box and user-created widgets. The dashboards are very intuitive and deliver robust, easy-to-understand information about device visibility, compliance, health monitoring, and more.
Advanced reporting capabilities: The Forescout Reports Plugin will generate numerous valuable reports indicating real-time and overall status information about endpoint compliance, device details, networks guests, protocols, and more. The reports help to ensure IT administrators, executives, security teams, and other important shareholders stay well-informed about all network activity at all times.
Comprehensive third-party overview: Forescout eyeExtend facilitates seamless information sharing with third-party vendors, networks, and IT management solutions supporting improved automated workflows, productivity, cost-effectiveness, and overall security.

Real User Reviews

An important main feature of Forescout is the visibility the solution offers.

One reviewer who is a Consultant at a tech services company, says, "Within three or four days, you can have complete visibility of your infrastructure on the network. Compared to other solutions, the deployment of the solution is easier and we can close the project quickly."

Users also appreciate that the user interface is clear and easy to understand.

An Instructor at a tech services company, shares, "The most valuable feature of the Forescout Platform is the large capacity it can handle. Additionally, the interface of the platform is good."

Forescout

Introducing comprehensive IoT Security solutions tailored for enterprises, healthcare, and industrial operations. Safeguard every device, visible or unseen, with Zero Trust security protocols, ensuring protection against known and unknown threats. With rapid 15X faster deployment times, Enterprise IoT Security, Medical IoT Security, and Industrial OT Security streamline operations, allowing teams to prioritize security over setup. Seamlessly integrate with Palo Alto Networks ML-Powered NGFWs or Prisma Access for swift implementation, making your infrastructure IoT-aware within minutes. Eliminate blind spots across existing IT and security solutions with playbook-driven, built-in integrations, and simplify cloud delivery for deployment across any architecture without the need for multiple sensors or network redesign. Protect your assets and ensure uninterrupted operations with our comprehensive IoT security solutions.

Palo Alto Networks

Sample Customers

NHS Sussex, SAP, SEGA, Vistaprint, Miami Children's Hospital, Pioneer Investments, New York Law School, OmnicomGroup, Meritrust

Information Not Available

Forescout Platform vs. Palo Alto Networks IoT Security