Forescout Platform Reviews

In both the environment I have used CounterACT to permit guests access and recognize automatically domain/white list members

It permit to treats the access policy without lists of macaddresses but by mean a dynamic policy

it permits to discover and classify a lot of devices that the organization forgets to have to manage

The last two or three versions that have been released on CounterACT Forescout have allowed for the possibility to search for any kind of device. Before that, I could only search for guest domain users.

For the user, the policy that they have implemented sometimes needs adjustments. Sometimes the features that the customer asks for aren't involved in the main installation, and I need to bolt an add-on in. However, I never know if this policy is the right one when I do this.

I've been using the solution for five years.

It is a very good product.

Very good policy has been released with the for device licenses that permit to "paint" the better solution using virtual appliances.

It has very good support, it is very easy to contact the country post-selling engineer.

The initial setup is very, very simple. It's more complex to tune the product in the company environment and usually, that requires two days. I need a few days to tune the product correctly. I do also need to do a lot of tests during the initial implementation.

We implemented together vendor team.

I have noticed that in the last year the license model has changed from licensing the whole appliance to licensing the number of devices. It's more simple for a large installation, or a user to have CounterACT as their peripheral site in the company. It's a good choice to have changed the license policy.

no, I have used only forescout and I haven't need to use anything else

I have installed the solution for two customers. For one, I have used the CounterACT CT 1000. In another environment, I did a more complex installation and I have used the appliances and management in a tray.

Forescout is a very good company that delivers very good features. I love it. I'd rate it nine out of ten.

Obtaining visibility into the network and connected devices is very simple with this tool. It takes me three minutes to do a base deployment when all the parameters are available.

The reporting for audits start with the knowledge of the devices in the network and the services running on them. ForeScout provides the foundation for the needed information.

Using passive and active methods to learn about the network. Even hybrid parts, like production, can be discovered with the passive method, while the office LAN can be discovered with both.

Multitenancy should be included in the next version so it could be used as a managed service provider.

It gives us a clear initial and secondary view of what's happening on our network to determine its health. We can see what's coming in and going out and to be able to directly management that. If there's something that needs to be quarantined, it will alert us and mark it as a threat.

The reporting could be improved. Also, it needs more analytics to see what's going on as we like to do trends.

We've been using for over seven years since the beginning of the SOC.

We've had no issues with deployment.

It's been very stable. We've had no issues with stability.

We probably have 172,000 users in our department, so I would say that it's scalable. It's in the SOC. We'll probably need to scale it further as we expand it to our 20 other departments.

I've never had to use technical support.

We also use FireEye, NetWitness, Blue Coat, and a few others I can't remember.

I joined the department when it was all setup already.

Go for it.

The network access control is a valuable feature for us. It provides endpoint visibility of our network and controls who can access network resources. That's really powerful.

The problem with vendors like Cisco is that their solutions are limited their to own ecosystem, and in general they don't work well with other vendors. With virtual machines, it can actually collect data from a variety of different network solutions, such as Cisco, Bloomberg, etc. Any routing platform out there, you can import it today. It can basically integrate these products and you can use it for enforcement. You can use them to collect the data. 

The other one is obviously that CounterACT can provide you with virtual ability to control who gets access to the network. It can act as a super-based machine and provide a level of security. It is integrated more easily than other vendors.

The integration with Sync can be improved. We would like to see better integration with some other popular vendors. 

Also, the reporting needs improvement, as well as integration with PAL services. It also needs more options for different sizes of customers. It does really work well in the big departments. For smaller organizations it might be a little overkill of a solution.

We've had no issues with deployment.

We've had no issues with stability.

We've had no issues with scalability.

It's a little bit too complex. A little bit of simplification when it comes to deployment might actually be better.

I think it is a good product and definitely fills the gap. I don't think we have many competitors at this stage. The major competitor is Cisco, but the biggest advantage of CounterACT is vendor agnostic. It means that it can work with a variety of different products. That is the biggest advantage.

• Alerting as to non-compliant machines
• Ability to quarantine infected machines
• Ability to determine if patches are not up to date

If a machine becomes infected by a user accessing the web, ForeScout has the ability to immediately quarantine that machine, isolating it from the network. Before this, someone would literally have to run down the hall and shut off a machine in the event of a breach and infection by malware.

It needs enhanced mobile support, but I have heard that this is coming.

We've used it for six months.

It took some time to get the policies set up and applied once ForeScout was physically in place. A dedicated resource and timely decisions from management can make this deployment faster. Make sure you account for anything and everything in your environment which has an IP address. We also had one device that was DOA but it was quickly replaced.

We have had no stability issues.

Scalability was not a problem for this site as we have less than 1000 endpoints.

Excellent. Our support engineer was extremely helpful and available.

This was the first of its kind in the environment.

With the assistance of the support engineer, it wasn't too bad. But it depends upon the state of your network. If everything is set up correctly, it will go much smoother. For example, having SNMPv3 activated everywhere is a requirement so that ForeScout can see everything.

We used our in-house personnel with the support engineer guiding us along via WebEx.

They are competitively priced for a medium-to-large sized organization.

This is not a very crowded segment for this kind of a product, and ForeScout is the best known of this small field.

They also offer a monitoring service which is a good value if you do not have someone in house to monitor ForeScout on site. This can be full or part time. ForeScout is a powerful network access control tool that has some features found in insider threat solutions, though it is not exactly made for that.

Forescout Platform provides continuous security monitoring and mitigation.

The most valuable feature of the Forescout Platform is the large capacity it can handle. Additionally, the interface of the platform is good.

If you want to deploy a new solution to block, you can't do it by yourself. You need the Forescout to deploy these solutions. They could prove this by making it better.

There are virtual machine limitations, this is not a solution that they use to protect my company.

In the next release of the solution, it could benefit from being more flexible to allow for more freedom.

I have been using the Forescout Platform for approximately two years.

Forescout Platform has the NAC solution and it is necessary to deployment. It's not exactly the same, but it can save some money rather than using another approach for NAC.

I rate Forescout Platform an eight out of ten.

We are using the Forescout Platform for authentication and for 100% device visibility.

Forescout Platform provides multiple features. They have a very effective device fingerprinting in their cloud. You do not need to add any devices manually, such as in Mac devices. Other solutions you have to add IoT devices and OT devices manually. This is one of the major areas that Forescout Platform is excelling in.

There are features that you can protect your organization.

I have been working with Forescout Platform for approximately eight months.

I have observed the solution to be stable.

Forescout Platform is a scalable solution and it is easy to scale.

Forescout Platform is new to the market here in Pakistan and customers prefer Cisco. We recommend the Forescout Platform to our customers because they are comparable solutions. Many of them are considering the Forescout Platform for their upcoming project. Customers in the financial sector have been interested in the solution.

I have been satisfied with their support. Their response to all of our queries has been very helpful.

I have previously used Cisco ISE.

The initial setup of the Forescout Platform is very straightforward when compared to Cisco.  Cisco ISE is very complex.

The time it takes for the deployment depends on the availability of the customer, and the team. If the customer can provide some information as soon as possible then the deployment can be done within 60 days for a large organization. This can be between 1,000 to 20,000 endpoints.

The cost of the solution depends on the customer's requirement because the customer is asking for different integration with a different product. Forescout Platform's price would start to get a bit higher. However, overall the price is a little expensive. It's can fit within the customer budget.

My advice for someone looking to implement the Forescout Platform, it is a product that tells you what are the devices connecting your network. Without installing agents or without doing manual work, you can automatically know the inventory of your devices in your organization.  It's a very good feature that you can discover all devices connected to the network, such as printers or iPhones. You do not need to categorize the devices or find the MAC address of the devices connected on the remote side.

I rate Forescout Platform a nine out of ten.

If the price was cheaper then I would rate the solution a ten.

We use this solution to implement compliance on our client's systems and prevent access from outside the organization.

The virtual firewall available on this solution is great and assists us in securing our servers. Additionally, the threat prevention feature provides complete visibility. It is very helpful in detecting, blocking and monitoring heavy scanning on the system.

The security features can be improved because we use it for sensitive information, such as compliance. Additionally, the system controls could be better.

We have been using this solution for approximately one year.

The solution is stable and provides real-time monitoring for users, switches and other available features.

The solution is scalable. We recommend it for all companies. It can be installed in enterprise, and we currently have it for over 4000 users.

The initial setup was easy to integrate with the customer's environment. It doesn't have any downtime. I rate the setup process an eight out of ten.

We implemented this solution through an in-house team.

I don't have details on the licensing costs or pricing because it changes frequently, and a different department deals with it.

I rate this solution an eight out of ten. The solution is good, but the systems control and security features could be better.