Forescout Platform and CyberArk Endpoint Privilege Manager both compete in the network security and endpoint management sector. While Forescout is preferred for its robust NAC capabilities that are ideal for large-scale projects, CyberArk boasts superior privilege management and ransomware protection, lending it an advantage in delivering tangible ROI.
Features: The standout features of Forescout Platform include its robust Network Access Control (NAC) with the flexibility to operate without 802.1x, extensive endpoint visibility, and seamless integration with third-party security products, making it suitable for large, multi-site deployments. On the other side, CyberArk Endpoint Privilege Manager provides granular control over user privileges, effective protection against ransomware, and integration capabilities with active directories and SIEM systems.
Room for Improvement: Forescout needs to enhance its reporting capabilities, improve third-party integrations, and offer a more user-friendly interface, also addressing issues with patch management and false positives. CyberArk's areas for improvement include simplifying administration processes, especially policy setup, enhancing application integration, and updating its APIs to reduce bulkiness.
Ease of Deployment and Customer Service: Forescout Platform is mostly deployed on-premises with hybrid options; it's praised for ease of deployment but requires expert handling. Their customer support could improve, specifically in technical response times. CyberArk provides deployment options that include on-premises, public, and hybrid clouds, adaptable to various business needs, and is known for fast, efficient customer service.
Pricing and ROI: Forescout is perceived as costly primarily due to its device-based licensing, yet recognized for its network security value. CyberArk, though also expensive, is considered effective in generating a measurable ROI due to its strong security features. Both products yield significant ROI through enhanced security and reduced vulnerabilities.
Deploying CyberArk Endpoint Privilege Manager has secured the infrastructure, which saves money, time, and resources.
They respond immediately to our inquiries, resolve issues promptly, and provide valuable guidance, especially in critical situations.
We engage them when needed and receive prompt responses that typically resolve our issues.
Earlier, we received support for normal tickets within a day, but now it takes one or two days to resolve issues.
We can set permissions per team or department, allowing some teams to elevate specific applications while others have different permissions.
CyberArk Endpoint Privilege Manager is quite scalable.
The available reports and other security tools assist in scaling it according to my organization's needs.
Scalability can be costly since a physical box needs to be installed for every site.
It is a robust solution that has effectively supported our environment without major issues.
Since implementing it, we have not experienced any outages or stability issues.
CyberArk Endpoint Privilege Manager offers multiple options for creating and stopping policies.
I would rate its stability as 9.5 out of ten.
CyberArk Endpoint Privilege Manager could be improved by simplifying the administration process, specifically when setting up policies and applications.
Currently, no user-based policy option is available inside the EPM console.
Some features provided in the self-hosted version of EPM are not supported in the software as a service version, like connection to some analysis applied by Palo Alto.
The console is a fat client, and a web interface would be preferable.
CyberArk Endpoint Privilege Manager is slightly expensive, but costs can be negotiated to become more competitive.
CyberArk Endpoint Privilege Manager is costly compared to other solutions.
Installing a physical box on each site can be expensive.
CyberArk Endpoint Privilege Manager effectively reduces malicious content in applications by allowing us to identify and block dangerous applications.
CyberArk Endpoint Privilege Manager enhances computer security by providing minimal access, effectively preventing ransomware attacks.
The most valuable feature is the ability to control users with admin rights.
One of the most valuable features of Forescout Platform is its automation, particularly the ability to automate remediation of rogue devices on the network.
CyberArk Endpoint Privilege Manager, a critical and foundational endpoint control addresses the underlying weaknesses of endpoint defenses against a privileged attacker and helps enterprises defend against these attacks through removing local admin rights, enforcing least privilege, and implementing foundational endpoint security controls across all Windows, macOS and Linux endpoints from hybrid to cloud environments.
Click here for a free 30 day trial: CyberArk Endpoint Privilege Manager free trial
Forescout Platform provides today’s busy enterprise organizations with policy and protocol management, workflow coordination, streamlining, and complete device and infrastructure visibility to improve overall network security. The solution also provides concise real-time intelligence of all devices and users on the network. Policy and protocols are delineated using gathered intelligence to facilitate the appropriate levels of remediation, compliance, network access, and all service operations. Forescout Platform is very flexible, integrates well with most of today’s leading network security products, and is a very cost-effective solution.
Forescout Platform Features
Real User Reviews
An important main feature of Forescout is the visibility the solution offers.
One reviewer who is a Consultant at a tech services company, says, "Within three or four days, you can have complete visibility of your infrastructure on the network. Compared to other solutions, the deployment of the solution is easier and we can close the project quickly."
Users also appreciate that the user interface is clear and easy to understand.
An Instructor at a tech services company, shares, "The most valuable feature of the Forescout Platform is the large capacity it can handle. Additionally, the interface of the platform is good."
We monitor all Endpoint Compliance reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.