Forescout Platform Reviews

The product is used especially in scenarios where you have an abandoned server that did not have any updates or any security updates or a stable operating system, owing to which you had to shut it down in your environment. If, somehow, somebody tries to switch on an abandoned server, Forescout will check if the operating system and antivirus are updated or not, and if they are not, then it will immediately disconnect such a server from the network and isolate it.

The valuable feature of the product stems from the fact that it is easy to implement. The person who implemented the tool had a security team and a department that took care of the implementation and defined the policies along with everything else. For patching purposes, my company uses Ivanti Endpoint Management Software.

I have been using Forescout Platform for a year. I use the solution's latest version.

Stability-wise, I rate the solution an eight and a half to nine out of ten. I provide my ratings based on my experiences associated with the product. There is another team in my company that takes care of the configuration and implementation process attached to the product. I have not even seen the interface of the product except for a few of its features, including how its policies are made.

It may be a scalable solution, but I don't know much about it.

I believe that my company has implemented the tool for around 8,000 to 9,000 users.

The implementation of the tool was taken care of by the security team and not me.

The solution is deployed on the cloud and on an on-premises model.

The product may not yield any return on investment since it is only used to make your environment more reliable and secure.

Considering that my company is learning and implementing new things, the tool's UI and UX are okay.

I recommend the tool to others. I don't know what the competitive products of Forescout Platform are, but in our environment, they are the best.

The tool's policy enforcement capabilities are good and streamlined to our company's security operation.

I don't think there is any AI feature in Forescout Platform.

I rate the tool an eight out of ten.

We use the Forescout Platform primarily for asset management.

The federal government's continuous diagnostics and mitigation programs are the focus of the current project I'm working on. 

It's one of the tools that has given the federal government visibility into network devices and everything.

The most common complaint I hear about Forescout is about their technical support.

Some sort of highly scalable platform, such as a private cloud, that can be distributed across a network quickly and grow rapidly, would be beneficial.

I believe that the overall user experience has not always been preferable.

I have been working with Forescout Platform since 2018.

I haven't had enough direct experience with the current project to know, but I know the federal government has a variety of various stages of Forescout deployment, but I believe it's just different versions of the CounterACTs appliances and such.

It has a place in terms of stability. I believe Forescout is likely to compete with other NAC tools used by agencies, such as Cisco ISE and new EDR tools that are entering the market. I believe, will be considered. But, overall, the asset management, is effective.

In terms of our deployment, it's basically just buying more CounterACT appliances whenever we need to scale up. It can be done, but it's not scalable in the way that a cloud deployment is, it's somewhere in the middle.

We have a large number of users, in our organization. 

It has been implemented in a large number of federal agencies, including the Departments of Health and Human Services, Agriculture, and the Treasury. It's quite large.

I believe that the current state should be maintained. I don't believe there are any major plans to increase our usage. Maybe just upgrades or future license upgrades, or something like that.

Technical support needs improvement. They are not very responsive to existing customers.

My interactions with them have been satisfactory, but I've heard from federal agencies that they had difficulties because they brought it to us.

When we arrived, Forescout was still in the process of being deployed. I don't believe they had the kind of capability that Forescout provides prior to our arrival. If anything, they had different NAC tools.

Because of the way it is deployed, the initial setup was complex.

I would rate the initial setup a three out of five.

It took a long time to complete. It's a massive deployment, depending on the agency, it could take at least six months to get it up and running and collect the data we require. Some of it is still ongoing.

To my knowledge, Forescout did the majority of the deployment.

We are Forescout Platform integrators, consultants, and partners.

Most agencies, I believe, have NAC engineers who manage it, and they most likely have training skillsets for it. I would say that most shops require two to three, three to four people to maintain.

In terms of ROI, I've never seen any data.

I don't have pricing information.

There are no additional costs that I am aware of.

They evaluated other solutions before choosing the Forescout Platform.

Before you begin deploying it, I would suggest that you define how you intend to use it. Just have an end state in mind so that you can build towards it and ensure you have all the functions you need for the design in place. Whatever you want to do with the data that comes out of it, try to define it first.

I would rate Forescout Platform a six out of ten.

We use the solution for network admission control. It manages the admission of endpoints to the networks.

Firstly, I like the stability. Secondly, the ease of deployment— it's not complex. Thirdly, there's a great support team that becomes actively engaged whenever we encounter issues. Their technical support is amazing. Fourthly, good documentation is available. We have detailed information about the product.

For sales purposes, the product has limitations. It does not support the TACACS+ protocol. This creates a need for another product to work with.

I have been using this solution for the past two and a half years.

The product is stable. Once you deploy it, you don't need to touch it again.

The solution is highly scalable. I currently use it for corporate use within my company and for other clients. We have three to four engineers for deployment and maintenance tasks.

We have rarely contacted customer service and support, as the website is straightforward.

The initial setup was straightforward and not complex. The deployment process took six weeks. It's shorter than the typical six months for similar products.

The deployment process involves an initial assessment, checking the security policy against the required tasks, preparing the network for deployment, and then the deployment itself.

I recommend using the solution because it gives verified control over the environment. It has a great visibility feature. Also, it gives visibility on what's happening on the network. Proceed with the prerequisites, particularly the initial assessment. It has to be conducted properly. Otherwise, the solution might not follow a straightforward path.

The first step is the initial assessment, followed by the second step of collecting clear requirements. Clarity in requirements is crucial because the solution can be directed in any direction you tell it to go. Therefore, you need to know exactly what you need to do. Overall, I rate the product a nine out of ten.

We're a financial institution with about 30,000 users. 

Forescout has a feature that blocks the endpoint at the point of collection. It sets preconditions and will block the system if those aren't met. 

Forescout needs to improve its cloud management and remote connectivity.

We have been using Forescout since 2018.

Forescout's scalability isn't robust or straighforward enough. You need to plan ahead and purchase the correct appliance before scaling up. You will be limited if you buy a smaller plan. 

You often need in-person support, so Forescout should invest more in training its customers. Customers need to be confident that they can service the solution themselves because it's often hard to get a technician to show up on-site. 

We also use FortiClient, depending on the use case. Both solutions are good.

Deploying Forescout is complex and takes about four hours. You have to configure the devices before you can send packets. If you miss any of those devices, the application endpoint security will be compromised  In other solutions, you don't need to start the configuration before you can access the network advice. It pushes a policy based on the outcome of the process.  

The price could be reduced. During COVID, many offices switched to remote work, but you still need to pay the same cost to renew the license even though workers are connecting remotely through one VPN.

I rate Forescout Platform six out of 10.

I had to gain visibility across my network and be able to block any unknown device connected to my network and this is what I use Forescout Platform for.

The most valuable features of the Forescout Platform are ease of management and outstanding visibility. The visibility is simple to obtain.

Forescout Platform could improve the costs of integrations.

I have been using the Forescout Platform for one year.

The stability of the Forescout Platform is good.

Forescout Platform can scale very easily. You can deploy as many servers as you want, and it's highly scalable. There is console to manage all the Forescout servers which make for easy scalability. 

Forescout Platform is used by only the network and security administrators. There is a total of 10 people using it.

Forescout Platform is very simple to deploy. We did the deployment within a few hours, and I gained visibility at the end of the day. I had visibility across my whole network.

Forescout Platform does not require a lot of maintenance. It is a low-maintenance platform.

We need to pay for integration for each integration that we want to do and there is an additional license fee. This adds more costs. It is not something that anyone can afford. If you want to integrate this with a lot of other tools, it can be costly.

The initial cost of the Forescout Platform was $200,000 for three years. There are only additional costs for upgrades.

My advice to others is to use the Forescout professional services. They are offering a fixed price to deploy the solution, and it's major pain relief as you are talking with experts committed to achieving your objectives.

I rate Forescout Platform a ten out of ten.

We use the Forescout Platform to manage all of the devices connected to our network.

The interface is easy to use.

The 802.1X configuration, which is difficult for all switches, is not required. It makes it easier to work with switches and IoT devices.

Forescout Platform is too expensive, so the price should be reduced.

Although Forescout manages endpoints and network devices, there is no capability for user management. This is something that should be added. For example, if I find that something is wrong in the services and need to disable a user's access, there should be no need to go to Active Directory and disable the user there. As it is now, computers and devices can be disabled, but not users.

I have been using Forescout for one year and am preparing to get my certificate.

This is a stable solution.

The Forescout Platform is easy to scale. We have more than 200,000 endpoints and at least 150,000 users.

I am working in the Security Operations team, which does not contact Forescout technical support directly. They are not responsible for the types of problems we have, such as checking for computer compliance and installing a new computer.

The complexity of the initial setup depends on the environment. I am managing an enterprise environment, so any deployment or any implementation will not be easy. Generally, however, Forescout is not difficult to configure.

This is a good product and I recommend it.

I would rate this solution a nine out of ten.

The most valuable feature of the solution is that it is not dependent on whatever suite or product you use.

The product is very easy to work with and easy to deploy.

Weaknesses of the product are usually present from the side of vendors. In the case of Cisco's vendors, they do have a presence in the South African region. The fact that Forescout Platform doesn't have a presence in the South African region is a weakness because of which you can't ask for help from them if you have any problems. Though they offer support, Forescout Platform does not offer a vendor like other products do for even East Africa ensuring they deliver better services to their customers. The aforementioned area can be considered for improvement.

Maybe integration with or onboarding an XDR solution is something I would like to see in future product releases.

I have experience with Forescout Platform for about three years. My company has a partnership with Forescout. We are also resellers of Forescout.

It is a stable solution.

It is a scalable solution.

I can recommend the solution to medium and enterprise-sized companies. I recommend an open-source product over Forescout Platform to small businesses.

The solution's technical support can onboard more users. I rate the technical support a seven out of ten.

Neutral

An advantage of Forescout Platform is that it is easy to deploy.

The deployment process took around a week.

The product's pricing is reasonable. Considering the deployment or the professional service, on the other side, along with the basic service, which was a bit technical, with the product and the licenses, Forescout Platform can compete with other products.

My company does help our customers manage Forescout Platform.

I would definitely recommend the solution to those planning to use it.

Overall, I rate the solution a nine and a half out of ten.

Mostly, I use this solution for endpoint compliance, antivirus updates to block malicious traffic access to the internal network, and for visibility, to see who is connected to the network and the infrastructure.

I can integrate Forescout with products from multiple vendors in my environment, and also, the integration is searchable. It can be used with 802.1X and non-802.1X to integrate with my existing network. I don't need to upgrade any existing networks in my system, and I don't need to replace existing devices to integrate with Forescout. I find value in not having to spend money upgrading existing devices and networks.

Other solutions have TACACS+, but Forescout does not. In the next release, I would like to see Forescout have accounting.

I've been working with this solution for around two years.

The scalability varies. If you have 1000 endpoints, Forescout recommends the 2000 endpoint plan. Depending on the scalability you choose, the hardware and license can be extended.

We currently have three people who use this solution, including an
IT security person, an administrator, and a technical person.

For technical support, they have ActiveCare Basic, ActiveCare Advanced, and ActiveCare Premium. Mostly, I have used ActiveCare Advanced for technical support requests, and they have responded depending on the severity and also my support plan.

With regard to initial setup, it can take a bit to customize policies. Forescout requires in-depth knowledge to customize policies to monitor endpoint visibility.

It takes around one or two hours to deploy the software and have it up and running. This includes configuration and integration with the existing network. Customization takes a long time because some departments require more customization.

I had a consultant do the deployment, and it could have been better.

You can have a flexible license depending on your environment.

If you are looking for a NAC solution and you want to integrate the existing network infrastructure without upgrades or without replacing existing devices, then you should go with Forescout. Also, if you don't want to run an agent in the endpoint, Forescout is the way to go because it does not require an agent. It is optional. If you are concerned about having to run too many agents in your endpoint and don't want to add an another agent, this solution is a good choice.

Because Forescout has flexible integration and flexible pricing, I would give it a general rating of nine out of ten.