No more typing reviews! Try our Samantha, our new voice AI agent.

Appgate SDP vs Forescout Platform comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

iboss
Sponsored
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
22
Ranking in other categories
Secure Web Gateways (SWG) (6th), Internet Security (3rd), Web Content Filtering (1st), Cloud Access Security Brokers (CASB) (7th), ZTNA as a Service (8th), Secure Access Service Edge (SASE) (8th)
Appgate SDP
Average Rating
8.8
Reviews Sentiment
6.8
Number of Reviews
6
Ranking in other categories
ZTNA as a Service (20th), ZTNA (9th), Secure Access Service Edge (SASE) (20th), Microsegmentation Software (9th)
Forescout Platform
Average Rating
8.4
Reviews Sentiment
6.5
Number of Reviews
79
Ranking in other categories
Network Access Control (NAC) (6th), IoT Security (4th), Endpoint Compliance (3rd), Extended Detection and Response (XDR) (19th)
 

Featured Reviews

Ashok Ananthula - PeerSpot reviewer
Senior Consultant Proxy Engineering at a financial services firm with 10,001+ employees
Cloud gateway has strengthened remote web security and now needs better Mac and ISP support
The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent for the Mac agents. That is where in 2025, we had to migrate to the Palo Alto-based platform. If your use case is for just Windows laptops,you can consider this platform as an option One issue is the data center resiliency part. In India especially, they are not tied up with the Tier 1 ISPs like Tata or Airtel; they were having Tier 2 ISPs and encountered many issues reaching few major sites that my organization depends on, and they were having problems that they could not fix quickly. They also lack a mechanism to route that traffic within their data center; rather, they ask customers to make a pac file change to route it to Singapore explicitly. It would be better if they route from their backend , i mean even if I send it to India DC, they should be able to route it internally to make that work; however, they fail to do that and ask the customer to route it in the pac file. Another suggestion is that in China, they do not have the proper setup; they used to have numerous problems with slowness and lack of premium circuits in China as well. That leads to multiple sites working slowly with latency-related issues. So the main issue is the ISP-related problems that need to be solved.
IgnitiusMolepo - PeerSpot reviewer
Senior IP Network Defense at MTN
Helps us manage traffic-related issues and streamlines access management for the network
Appgate SDP has significantly streamlined our access management, providing a notably efficient solution compared to traditional VPNs. The simplicity of the SDP platform is a standout feature; instead of navigating through intricate details, users can seamlessly connect to the company's network or switch to the internet with minimal effort, unlike VPNs which often involve waiting for connection handling and unblocking. Recognizing the robustness of SDP, we made strategic decisions to minimize reliance on VPNs, reserving only two for administrative purposes. In a scenario where Appgate SDP significantly improved our network security posture, the platform played a crucial role in fortifying defenses against major threats. The encryption algorithms utilized by SDP provide a high level of security to our network architecture. Compared to Cisco, SDP proves to be most critical in protecting resources with the help of role-based policies. It only provides selective access to the application. The dynamic policy engine significantly enhances our access control mechanisms. It has single sign-on and multifactor authentication features. It makes processes faster and easier. It has helped our IT team to manage the workload with ease. It gives an intelligent solution whenever they face traffic-related problems. I rate it a nine out of ten.
AshishKumar Rai - PeerSpot reviewer
Security Consultant at a tech vendor with 10,001+ employees
Comprehensive visibility has strengthened endpoint control and automated threat response across networks
When it comes to improving Forescout Platform, I have faced some issues recently, particularly with the switch integration part. When integrating a switch, it asks for the vendor type, and often it does not match. For example, one series of HP switches may not be found in that vendor list. This leads to frustration because you have to check again with different HP models, and once you integrate a switch, you cannot edit the vendor list without removing it. Other issues are being worked on, particularly related to switch integration. I believe they will be fixed in the next upgrade or patch fix. There are no major issues, but the configuration changes needed for the switch model are necessary, and I think it would help if during integration, an admin user could check the password or credential used, as they currently cannot see the password after it is entered and saved.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Our primary use case for this product is DLP,"
"Granular setup, which was able to set different levels of filters using the OUs in the AD."
"I would definitely recommend iboss for web filtering purposes to other organizations or individuals."
"From a use-case scenario, what I like the most is the plug-in. I like the fact that we can do the filtering of these devices offsite independent of the network they are connected to, and we do not have to have traffic coming back inside our network."
"It was a very easy product to install. It can be deployed very fast."
"I would say iboss is a very good product; its scalability is very good, and it's seamless for the user."
"Technical support is pretty sharp and very responsive."
"iboss is among the few products providing inline filtering where no application is needed on the device."
"It is a scalable solution...The support answers your questions very fast."
"One of the most important features is stopping lateral movement across our network."
"It is pretty stable."
"The simplicity of the SDP platform is a standout feature; instead of navigating through intricate details, users can seamlessly connect to the company's network or switch to the internet with minimal effort."
"The interface is really friendly. It's simple to understand."
"The flexibility of the tool is valuable; it is very robust, has a very robust configuration capability, is pretty well documented, and is also good interface-wise."
"Appgate SDP is the best solution for micro-segmentation and supplying VPN solutions."
"The flexibility of the tool is valuable. It is very robust. It has a very robust configuration capability."
"The platform enables automated policy enforcement, allowing us to simulate and test policies before enforcement, streamlining our security operations."
"Being able to actively identify the client without a certificate allows you to control every device on your network regardless of the make, model, and software running. This allows for end-to-end security."
"Without access specific numbers, we now have the ability to instantly shut down internal malicious hosts or traffic, refuse or restrict access to non-compliant hosts, discover risks on the network we didn't know were there, and automate the remediation of a multitude of security risks."
"ForeScout is a powerful network access control tool that has some features found in insider threat solutions, though it is not exactly made for that."
"The compliance aspects of the solution are excellent and one of the solution's best features."
"Emergency response, risk assessment information to get a view of the of the vulnerability."
"The user interface is quite simple."
"I help customers use the Forescout Platform for compliance enforcement. We can specify what needs to be installed on devices connecting to the network, like antivirus, updates, and security software."
 

Cons

"Our biggest problem with their service was it did not recognize the device and filtering did not always work correctly."
"Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern."
"I am currently doing a PoC of the zero trust aspect of it. Compared to other similar solutions, it is hard to get around each feature. It takes a while to get used to it."
"Sometimes the agent stops working in iboss, and we have to reinstall the agent."
"If they could implement an extra security layer preventing access to iboss from the open internet, it would be great."
"The dashboards for local use could be better."
"The solution could be stronger on the integration side and offer more cloud applications like G Suite or Oracle."
"The endpoint-type solution is an area that needs some improvement."
"They could provide a single-box solution to manage tools for 4000 users. Additionally, they could add extra features to enhance remote micro connection."
"The user interface should be improved as it is not very easy to work with the updates."
"One thing that kind of sticks out to me is the ability to do a proper non-split tunnel."
"It would be better to connect to an application portal from any device. Documentation and support could be better."
"On the cloud, when you make some changes, it may be difficult."
"One limitation is that it's harder to provide access to multiple applications in the company with Appgate, but that's probably because of poor management."
"One thing that kind of sticks out to me is the ability to do a proper non-split tunnel. VPN tunnel-wise, it is not really a true unsplit tunnel, but I think that's just because of the way it's designed. A split VPN basically allows your system to talk to other systems without being forced down the tunnel. A VPN running in a non-split tunnel mode forces all the traffic down the tunnel to wherever you're VPNing to. It forces the traffic down so that the traffic is subject to the firewall and rules that you have in your corporate environment and such. It helps to prevent remote malicious folks that may be talking directly to that box from piggybacking into the corporate environment through it. They do it partially, but it would be nice to see more of an enterprise-level solution there."
"On the cloud, when you make some changes, it may be difficult."
"It was not so easy to deploy in our environment, the learning curve for this solution is quite hard."
"From the wireless standpoint, I would say that the reliability was somewhat poor, but CounterACT worked with us over a couple month period and did push out a patch."
"When it comes to improving Forescout Platform, I have faced some issues recently, particularly with the switch integration part."
"We only looked at it in terms of discovery modes and I think it's too expensive to use for that purpose alone."
"The logging of Forescout is horrible compared to other things that we've used."
"Forescout Platform isn't flexible with connections to devices like printers and forces you to re-enter details like the MAC address after any breakdowns."
"The ability to block external devices in Mac is lacking and needs to be added."
"Forescout Platform sometimes returns false positives, so there's some fine-tuning to be done there."
 

Pricing and Cost Advice

"The overall pricing for iboss is very competitive and transparent."
"We have not priced the solution recently, but they were competitive with other vendors in the past."
"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."
"It is expensive compared to one of its competitors."
"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."
"It is probably in line with other solutions, but I do not deal with the financial side."
"We pay $100 per user per month. One license for the site is around $17."
"It is a pretty expensive tool. It is maybe about $20,000 per year for a hundred users or so."
"The pricing is according to the market price. It is not a very cheap solution. They have some very aggressive promotions to sell the product in the market."
"It's about $160,000, but I'm not sure how long that is for or what it includes. Because we were a test base, we were provided with servers, but now, Forescout wants us to buy servers because those servers are now end-of-life or end-of-service. For our lifecycle management program, in order to get a refresh on those servers, we would have to buy servers or use our own network resources to house Forescout. Forescout takes up about 13 or 14 virtual CPUs."
"For one license, we pay around 3,000 Indian rupees."
"The price of the solution is reasonable. We have paid for the license for five years. We have integration with Symantec AV for orchestration, and we have an additional license."
"The price of the Forescout Platform is expensive. I purchased it for approximately 94 lakhs."
"Forescout Platform is too expensive, so the price should be reduced."
"The price of Forescout is reasonable when compared to Cisco ISE."
"The ROI is priceless."
"The product's pricing is reasonable."
report
Use our free recommendation engine to learn which ZTNA as a Service solutions are best for your needs.
894,998 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Manufacturing Company
9%
Computer Software Company
9%
Construction Company
7%
Manufacturing Company
12%
Financial Services Firm
8%
Government
6%
Comms Service Provider
6%
Manufacturing Company
11%
Financial Services Firm
10%
Government
8%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise7
Large Enterprise8
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise1
Large Enterprise3
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise10
Large Enterprise45
 

Questions from the Community

What needs improvement with iboss?
The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent ...
What is your primary use case for iboss?
We used iBoss mainly for Internet Access by having an Agent on Windows laptops Primarily because when we try to use i...
What is your experience regarding pricing and costs for iboss?
I am not involved in pricing, but as per the information I have, during that time, the Blue Coat proxies we were usin...
Ask a question
Earn 20 points
What advice do you have for others considering Forescout Platform?
Forescout is a very powerful NAC product that does not rely on port level configuration. It can detect and block unau...
What advice do you have for others considering Forescout Platform?
I would rate the Forescout Device and Visibility Control Platform at a six out of ten.
What advice do you have for others considering Forescout Platform?
I recommend doing a compression demo. If people use it, they will buy it. So they have to see the product in place. T...
 

Also Known As

iBoss Cloud Platform
No data available
Forescout Platform, CounterACT for Endpoint Compliance, ForeScout CounterACT
 

Overview

 

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.
United States Air Force  FINRA Weight Watchers Rackspace  DataDog SageNet  Verdant Norwegian Cruise Line  VoiceBase  The Third Floor 
NHS Sussex, SAP, SEGA, Vistaprint, Miami Children's Hospital, Pioneer Investments, New York Law School, OmnicomGroup, Meritrust
Find out what your peers are saying about Zscaler, Okta, Cisco and others in ZTNA as a Service. Updated: May 2026.
894,998 professionals have used our research since 2012.