Try our new research platform with insights from 80,000+ expert users

Appgate SDP vs Forescout Platform comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

iboss
Sponsored
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
19
Ranking in other categories
Secure Web Gateways (SWG) (5th), Internet Security (3rd), Web Content Filtering (1st), Cloud Access Security Brokers (CASB) (7th), ZTNA as a Service (7th), Secure Access Service Edge (SASE) (8th)
Appgate SDP
Average Rating
8.8
Reviews Sentiment
6.8
Number of Reviews
6
Ranking in other categories
ZTNA as a Service (13th), ZTNA (8th), Secure Access Service Edge (SASE) (15th), Microsegmentation Software (7th)
Forescout Platform
Average Rating
8.4
Reviews Sentiment
6.5
Number of Reviews
78
Ranking in other categories
Network Access Control (NAC) (5th), IoT Security (4th), Endpoint Compliance (5th), Extended Detection and Response (XDR) (20th)
 

Featured Reviews

reviewer2701851 - PeerSpot reviewer
Managing Director
Enhances web security with a single pane of glass and flexible deployment
I don't see any need for improvement; one of the really good things about iboss as a company is that they listen to customer feedback. I have suggested enhancements, and they are responsive, making changes for the better, and they do a lot of testing. To improve iboss, although we haven't used it, we considered the VPN solution that comes with the highest tier licensing, which includes DLP and various other add-ons. We prefer using another product which automatically logs you back onto your network when turning on your PC. With iboss, the connection is manual, which doesn't meet our needs. Additionally, sizing can be tricky because, although the initial recommendations may seem adequate, actual usage may require more gateways than anticipated.
IgnitiusMolepo - PeerSpot reviewer
Senior IP Network Defense at MTN
Helps us manage traffic-related issues and streamlines access management for the network
Appgate SDP has significantly streamlined our access management, providing a notably efficient solution compared to traditional VPNs. The simplicity of the SDP platform is a standout feature; instead of navigating through intricate details, users can seamlessly connect to the company's network or switch to the internet with minimal effort, unlike VPNs which often involve waiting for connection handling and unblocking. Recognizing the robustness of SDP, we made strategic decisions to minimize reliance on VPNs, reserving only two for administrative purposes. In a scenario where Appgate SDP significantly improved our network security posture, the platform played a crucial role in fortifying defenses against major threats. The encryption algorithms utilized by SDP provide a high level of security to our network architecture. Compared to Cisco, SDP proves to be most critical in protecting resources with the help of role-based policies. It only provides selective access to the application. The dynamic policy engine significantly enhances our access control mechanisms. It has single sign-on and multifactor authentication features. It makes processes faster and easier. It has helped our IT team to manage the workload with ease. It gives an intelligent solution whenever they face traffic-related problems. I rate it a nine out of ten.
AshishKumar Rai - PeerSpot reviewer
Security Consultant at a tech vendor with 10,001+ employees
Comprehensive visibility has strengthened endpoint control and automated threat response across networks
When it comes to improving Forescout Platform, I have faced some issues recently, particularly with the switch integration part. When integrating a switch, it asks for the vendor type, and often it does not match. For example, one series of HP switches may not be found in that vendor list. This leads to frustration because you have to check again with different HP models, and once you integrate a switch, you cannot edit the vendor list without removing it. Other issues are being worked on, particularly related to switch integration. I believe they will be fixed in the next upgrade or patch fix. There are no major issues, but the configuration changes needed for the switch model are necessary, and I think it would help if during integration, an admin user could check the password or credential used, as they currently cannot see the password after it is entered and saved.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We chose iboss for both zero trust and proxy (SWG) because their SWG was superior."
"Content filtering is the most useful feature of iboss."
"Iboss is a solution that prevents advanced persistent threats, and has a zero tolerance for attacks."
"Because of iboss, I did not have to assign web filtering tasks to my techs on a daily basis."
"Granular setup, which was able to set different levels of filters using the OUs in the AD."
"iboss is among the few products providing inline filtering where no application is needed on the device. It operates on the network side and is not device-based. This feature was one of the main reasons why we stayed with them for so long."
"The console is cloud-based, which is something I really appreciate."
"The security aspect of the solution, particularly the malware behind it, is excellent. That's something that really helped us out. It's not just a simple proxy that just blocks the insights of potential threats that come on behind it. They do malware detection and that helps us a lot."
"It is a scalable solution...The support answers your questions very fast."
"The interface is really friendly. It's simple to understand."
"One of the most important features is stopping lateral movement across our network."
"The flexibility of the tool is valuable. It is very robust. It has a very robust configuration capability."
"It is pretty stable."
"The simplicity of the SDP platform is a standout feature; instead of navigating through intricate details, users can seamlessly connect to the company's network or switch to the internet with minimal effort."
"The platform enables automated policy enforcement, allowing us to simulate and test policies before enforcement, streamlining our security operations."
"Within three or four days, we have complete visibility of your infrastructure on the network. Compared to other solutions, the deployment of the solution is easier and we can close the project quickly."
"The most valuable feature of the Forescout Platform it's highly customizable and flexible."
"The interface is easy to use."
"The plugins are very robust -- the ability scanner, patch management system, and SQL integrator."
"The most valuable feature is the blocking of USB devices."
"It's one of the tools that has given the federal government visibility into network devices and everything."
"We really like that we get full visibility of devices in the local network."
 

Cons

"Sometimes, obviously, there are bugs."
"Fold that in with the risk intelligence they're getting from all of the different subscriptions they are a part of. Now, these security companies subscribe to things like emerging threats, databases, etc. You can fold all this intelligence to decide what's happening on an endpoint. I would love to see them start moving into that space. That would compete directly with Microsoft. Maybe that's why they haven't. Having that ability native within the solution would be great. The other area in which I would love to see improvement is more detailed descriptions of why they block websites."
"Their on-premise hardware's network interface is capped at one gigabit, which is sort of a problem. If you stand a filter up where all traffic flows through that, according to them, in order to go above a gigabit, you have to have multiple devices, which in today's IT seems a little bit silly. They could easily put in an SFP port into their device that could accommodate 10 gigs or at least offer a box."
"One thing I would like to see differently with their Zero Trust platform is that some of the AI aspects related to high-risk activities have more false positives."
"Its pricing could be better."
"SSL decryption: We had issues with learners using apps instead of using web browsers. This type of encryption is tough for any appliance in a BYOD environment."
"Our iboss subscription access should be more secure with an OTP or VPN etc. It is easy to gain access if, for example, hackers obtain my username and password."
"To scale up, a new iboss Node Blade Chassis must be purchased."
"The user interface should be improved as it is not very easy to work with the updates."
"On the cloud, when you make some changes, it may be difficult."
"One thing that kind of sticks out to me is the ability to do a proper non-split tunnel. VPN tunnel-wise, it is not really a true unsplit tunnel, but I think that's just because of the way it's designed. A split VPN basically allows your system to talk to other systems without being forced down the tunnel. A VPN running in a non-split tunnel mode forces all the traffic down the tunnel to wherever you're VPNing to. It forces the traffic down so that the traffic is subject to the firewall and rules that you have in your corporate environment and such. It helps to prevent remote malicious folks that may be talking directly to that box from piggybacking into the corporate environment through it. They do it partially, but it would be nice to see more of an enterprise-level solution there."
"They could provide a single-box solution to manage tools for 4000 users. Additionally, they could add extra features to enhance remote micro connection."
"It would be better to connect to an application portal from any device. Documentation and support could be better."
"One limitation is that it's harder to provide access to multiple applications in the company with Appgate, but that's probably because of poor management."
"The cost is too high."
"The solution's customer support is bad and should be improved."
"It's scalable, but not without a big investment. It doesn't do so well at the branch. At the home office, it does okay and not so well at the branch."
"For the user, the policy that they have implemented sometimes needs adjustments. Sometimes the features that the customer asks for aren't involved in the main installation, and I need to bolt an add-on in. However, I never know if this policy is the right one when I do this."
"I should be able to integrate my Forescout with any other third party security technology, to build that connected security strategy."
"This solution is not that easy to scale but this depends on a company's needs."
"The initial setup is a bit complex."
"Forescout Platform could improve the vulnerability management as well as the control on the endpoint, which needs to be connected to my network."
 

Pricing and Cost Advice

"We have not priced the solution recently, but they were competitive with other vendors in the past."
"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."
"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."
"It is expensive compared to one of its competitors."
"It is probably in line with other solutions, but I do not deal with the financial side."
"The overall pricing for iboss is very competitive and transparent."
"The pricing is according to the market price. It is not a very cheap solution. They have some very aggressive promotions to sell the product in the market."
"We pay $100 per user per month. One license for the site is around $17."
"It is a pretty expensive tool. It is maybe about $20,000 per year for a hundred users or so."
"It is expensive because you have to pay for their CSM, the customer's access manager, and their professional services on top of that, and they charge you roughly $400 per hour, which is overhead."
"We went with the virtual appliance option. The biggest cost to running these types of appliances would be to either have multiple virtual appliances at every data center or running Remote SPAN hardware to provide you the real-time network visibility."
"We might have paid in the ballpark of $20,000 yearly for our licenses. I do not recall there being other fees over and above the standard licensing fee."
"I would rate Forescout Platform's pricing as four out of five."
"The fact that we were allowed to spin up as many servers as we had need of to support our geographic requirements while paying for licensing as an enterprise truly set Forescout apart from the crowd and improved the way we could design our access."
"We paid between $20,000 and $25,000 for a three-year license with maintenance."
"Devices with multiple IP's count multiple times against your license count."
"The solution’s pricing is fine."
report
Use our free recommendation engine to learn which ZTNA as a Service solutions are best for your needs.
879,711 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Computer Software Company
10%
Manufacturing Company
9%
Comms Service Provider
6%
Manufacturing Company
13%
Computer Software Company
9%
Financial Services Firm
9%
Government
6%
Manufacturing Company
12%
Financial Services Firm
11%
Computer Software Company
10%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise6
Large Enterprise5
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise1
Large Enterprise3
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise10
Large Enterprise44
 

Questions from the Community

What needs improvement with iboss?
For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company Exxon...
What is your primary use case for iboss?
Previously when I used iboss, we did the POC for iboss for ExxonMobil. Four or five people wanted to move from our ol...
What is your experience regarding pricing and costs for iboss?
Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern. There are cheaper alte...
What do you like most about Appgate SDP?
The simplicity of the SDP platform is a standout feature; instead of navigating through intricate details, users can ...
What needs improvement with Appgate SDP?
They could provide a single-box solution to manage tools for 4000 users. Additionally, they could add extra features ...
What is your primary use case for Appgate SDP?
We use Appgate SDP as a substitute for traditional VPN.
What advice do you have for others considering Forescout Platform?
Forescout is a very powerful NAC product that does not rely on port level configuration. It can detect and block unau...
What advice do you have for others considering Forescout Platform?
I would rate the Forescout Device and Visibility Control Platform at a six out of ten.
What advice do you have for others considering Forescout Platform?
I recommend doing a compression demo. If people use it, they will buy it. So they have to see the product in place. T...
 

Also Known As

iBoss Cloud Platform
No data available
Forescout Platform, CounterACT for Endpoint Compliance, ForeScout CounterACT
 

Overview

 

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.
United States Air Force  FINRA Weight Watchers Rackspace  DataDog SageNet  Verdant Norwegian Cruise Line  VoiceBase  The Third Floor 
NHS Sussex, SAP, SEGA, Vistaprint, Miami Children's Hospital, Pioneer Investments, New York Law School, OmnicomGroup, Meritrust
Find out what your peers are saying about Palo Alto Networks, Zscaler, Cato Networks and others in ZTNA as a Service. Updated: October 2025.
879,711 professionals have used our research since 2012.