Try our new research platform with insights from 80,000+ expert users

Forescout Platform vs Palo Alto Networks IoT Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 3, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Forescout Platform
Ranking in IoT Security
2nd
Average Rating
8.4
Reviews Sentiment
6.6
Number of Reviews
76
Ranking in other categories
Network Access Control (NAC) (4th), Endpoint Compliance (5th), Extended Detection and Response (XDR) (16th)
Palo Alto Networks IoT Secu...
Ranking in IoT Security
4th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
10
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of April 2025, in the IoT Security category, the mindshare of Forescout Platform is 14.2%, down from 18.9% compared to the previous year. The mindshare of Palo Alto Networks IoT Security is 6.7%, down from 6.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
IoT Security
 

Featured Reviews

Odai Halawani - PeerSpot reviewer
It's an easy and effective solution, especially for device profiling without agents
Forescout Platform's most valuable aspect is its excellent device profiling for devices without agents, which is crucial for our work due to challenges with agent-based devices. Its isolation and blocking actions are particularly effective for network security. The device compliance feature helps us ensure device compliance through immediate actions like updating antivirus software. We have already integrated Forescout with antivirus and vulnerability assessment tools, allowing it to monitor vulnerability scores and automatically isolate devices if critical vulnerabilities are detected.
Engineerinfosec67 - PeerSpot reviewer
Recognizing and classifying devices with AI and machine learning boosts security without extra network controls
Palo Alto Networks IoT Security ( /products/palo-alto-networks-iot-security-reviews ) integrates with a cloud-based engine that uses artificial intelligence and machine learning for device recognition and classification based on traffic types. This adaptability, which does not rely strictly on a static database, allows for identifying a wider range of devices. The behavior-based identification of devices enhances the capabilities of security controls, extending the network security platform's recognition capacity without deploying a separate network access control system.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Forescout CounterACT has allowed us to better open our access and control wireless access globally from our HQ. This allows us to monitor the network access for every office globally. This has improved overall security, reducing risk and opening up the opportunity to provide greater end user flexibility."
"The actions that the agentless visibility, allow us to perform on the endpoint, are really amazing, especially in the way that it is done."
"I help customers use the Forescout Platform for compliance enforcement. We can specify what needs to be installed on devices connecting to the network, like antivirus, updates, and security software."
"The most valuable feature of Forescout Platform is that it has everything that Aruba has at significantly less cost."
"The most valuable features of the Forescout Platform are ease of management and outstanding visibility. The visibility is simple to obtain."
"Its feature that I have found most valuable is that it is very granular. You can configure granular controls just as you want those policies to be implemented. It gives you that flexibility to go granular in how you want your controls to be implemented. That's something I like about it."
"It's one of the tools that has given the federal government visibility into network devices and everything."
"The Forescout Platform's most valuable features include its agentless configuration, which allows for easy integration with switches, and its broad customizability of rules and conditions for policy configuration. By leveraging its Network Access Control capabilities, the tool controls network access, allowing administrators to enforce policies tailored to the organization's needs."
"I would recommend Palo Alto Networks IoT Security to any organization with automation plants or standard enterprise IT environments."
"It is simple to use. We just need to enable features and then configure IoT policies."
"I like the Cortex Data Lake integration with security automation."
"From a security standpoint, it provides a comprehensive range of standard security features that align with our requirements."
"Single-pass traffic processing enables very high throughput and low latency."
"I like the threat information, and we can share the logging data with Cortex Data Lake."
"Palo Alto is valued for its GlobalProtect feature, which offers a range of security options, including user ID mapping and VPNs."
"The key strength of Palo Alto firewalls lies in their application-based approach, offering a much finer level of control compared to traditional firewalls."
 

Cons

"Forescout Platform isn't flexible with connections to devices like printers and forces you to re-enter details like the MAC address after any breakdowns."
"The product needs to improve its support. I know a case that dragged on for about one and a half years. They eventually suggested professional services and closed the ticket. We followed their advice, engaging the account manager and professional service team, only to discover that the issue was a bug. After reopening the case, it's been about six months, and the problem still hasn't been resolved."
"Forescout Platform sometimes returns false positives, so there's some fine-tuning to be done there."
"Initially, the implementation of the Forescout Platform took some time to figure out. The reason is we are a manufacturing unit and we have certain silos that are insulated areas where certain systems will not connect to the internet or to the LAN. Since there are many parts of it, we have to have an inclusive view of all those systems. It took a while for us to initially implement, but after a few months, everything worked well."
"I believe that the overall user experience has not always been preferable."
"More detailed analysis during the authentication process, especially for troubleshooting access issues. We have found that troubleshooting RADIUS controls is quite arduous, as it is today. A trace function could easily resolve this by providing a means by which access issues from a certificate to passwords or accounts could easily be identified and remediated."
"Forescout Platform could improve the vulnerability management as well as the control on the endpoint, which needs to be connected to my network."
"Regarding pricing, there is room for improvement to enhance competitiveness with other vendors and solutions."
"Palo Alto Networks IoT Security's reporting capabilities are less comprehensive and robust than those provided by Cisco."
"The cost is still high and licensing is still complex."
"There can be more automation in terms of security and detection. It is already good."
"It would be beneficial if Palo Alto IoT Security could integrate with Let's Encrypt for free SSL certificates."
"The support is in line with Palo Alto Networks services for other products but needs improvement."
"While not overly complex, its usability could be enhanced, making it a more intuitive experience for everyone."
"Essentially, this solution focuses on data analysis and cannot perform any physical actions."
"It would be beneficial to have a more centralized and user-friendly platform that could consolidate all the necessary information, which proved challenging during the initial POC phase."
 

Pricing and Cost Advice

"The Forescout Platform's pricing is in the middle range, not too cheap or expensive."
"I would rate Forescout Platform's pricing as four out of five."
"We have a very clear licensing model for business. I don't have to have a Ph.D. to be able to understand the licensing model as you might need for other solutions. If I know exactly what we want, it can tell you which license you need. The solution is easy for purchasing, ordering, and ease of deployment as well."
"The price of the solution is reasonable. We have paid for the license for five years. We have integration with Symantec AV for orchestration, and we have an additional license."
"The solution’s pricing is fine."
"Time savings in finding rogue devices as well as identifying potentially unwanted devices on the network has saved the organization time and money."
"The pricing structure should be enhanced."
"Forescout Platform is too expensive, so the price should be reduced."
"While Palo Alto Networks IoT Security might cost more than some competitors, its features and effectiveness justify the price tag."
"The successful migration trend suggests that Palo Alto provides a superior cost-benefit ratio for firewall solutions."
"The pricing for Palo Alto Networks IoT Security is a bit high."
"The initial investment is substantial, but the renewal costs make it financially unsustainable."
report
Use our free recommendation engine to learn which IoT Security solutions are best for your needs.
848,253 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
31%
Computer Software Company
11%
Financial Services Firm
8%
Government
7%
Manufacturing Company
17%
Computer Software Company
15%
Energy/Utilities Company
6%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What advice do you have for others considering Forescout Platform?
Forescout is a very powerful NAC product that does not rely on port level configuration. It can detect and block unauthorized devices very quickly. But it has a lot of capabilities and really would...
What advice do you have for others considering Forescout Platform?
I would rate the Forescout Device and Visibility Control Platform at a six out of ten.
What advice do you have for others considering Forescout Platform?
I recommend doing a compression demo. If people use it, they will buy it. So they have to see the product in place. That's the main recommendation is to do a proof of concept. If they do, they will...
What do you like most about Palo Alto Networks IoT Security?
From a security standpoint, it provides a comprehensive range of standard security features that align with our requirements.
What needs improvement with Palo Alto Networks IoT Security?
The major challenge is the integration with existing complex production lines. These architectures were developed with a focus on automation functionalities, not security. Finding the right integra...
What is your primary use case for Palo Alto Networks IoT Security?
I use Palo Alto Networks IoT Security ( /products/palo-alto-networks-iot-security-reviews ) for discovering automation devices and detecting various types of data traffic on automation infrastructu...
 

Also Known As

Forescout Platform, CounterACT for Endpoint Compliance, ForeScout CounterACT
No data available
 

Overview

 

Sample Customers

NHS Sussex, SAP, SEGA, Vistaprint, Miami Children's Hospital, Pioneer Investments, New York Law School, OmnicomGroup, Meritrust
Information Not Available
Find out what your peers are saying about Forescout Platform vs. Palo Alto Networks IoT Security and other solutions. Updated: March 2025.
848,253 professionals have used our research since 2012.