No more typing reviews! Try our Samantha, our new voice AI agent.

Forescout Platform vs Palo Alto Networks IoT Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 3, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Forescout Platform
Ranking in IoT Security
4th
Average Rating
8.4
Reviews Sentiment
6.5
Number of Reviews
78
Ranking in other categories
Network Access Control (NAC) (6th), Endpoint Compliance (3rd), Extended Detection and Response (XDR) (19th)
Palo Alto Networks IoT Secu...
Ranking in IoT Security
3rd
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
11
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of May 2026, in the IoT Security category, the mindshare of Forescout Platform is 8.4%, down from 13.7% compared to the previous year. The mindshare of Palo Alto Networks IoT Security is 6.3%, down from 6.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
IoT Security Mindshare Distribution
ProductMindshare (%)
Palo Alto Networks IoT Security6.3%
Forescout Platform8.4%
Other85.3%
IoT Security
 

Featured Reviews

AshishKumar Rai - PeerSpot reviewer
Security Consultant at a tech vendor with 10,001+ employees
Comprehensive visibility has strengthened endpoint control and automated threat response across networks
When it comes to improving Forescout Platform, I have faced some issues recently, particularly with the switch integration part. When integrating a switch, it asks for the vendor type, and often it does not match. For example, one series of HP switches may not be found in that vendor list. This leads to frustration because you have to check again with different HP models, and once you integrate a switch, you cannot edit the vendor list without removing it. Other issues are being worked on, particularly related to switch integration. I believe they will be fixed in the next upgrade or patch fix. There are no major issues, but the configuration changes needed for the switch model are necessary, and I think it would help if during integration, an admin user could check the password or credential used, as they currently cannot see the password after it is entered and saved.
reviewer2774463 - PeerSpot reviewer
Manager ERP (Insurance) at a manufacturing company with 10,001+ employees
Have used it to manage device updates remotely and now see potential for improved centralized control
One of the favorite features is that they can plug in a device and update it without being on the network, so you can perform an offline update. If all the IoT devices in the field can provide a single pane of glass and management through that platform in a controlled fashion, that would be really beneficial.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution offers very good management; it allows for good detection of all the vendor products we have on-site."
"This product allows monitoring and control of the PC fleet across the company."
"Obtaining visibility into the network and connected devices is very simple with this tool. It takes me three minutes to do a base deployment when all the parameters are available."
"As a result of using Forescout, we had a better overview of all the devices, known and unknown, that were connected to our network; it was a real advantage."
"The threat prevention feature provides complete visibility."
"I have noticed that in the last year the license model has changed from licensing the whole appliance to licensing the number of devices. It's more simple for a large installation, or a user to have CounterACT as their peripheral site in the company. It's a good choice to have changed the license policy."
"ForeScout CounterACT is like a Pandora's box, which contains a lot of functionalities that can be used to improve the customer's daily operation tasks and reduces manual workforce."
"Forescout Platform has granular features and one of the most impressive features is the agentless feature."
"I find Palo Alto Networks IoT Security to be highly responsive, and its separate management and data planes are a major advantage."
"The key strength of Palo Alto firewalls lies in their application-based approach, offering a much finer level of control compared to traditional firewalls."
"Single-pass traffic processing enables very high throughput and low latency."
"This solution has been most valuable for establishing a VPN and implementing allow/deny rules. It has also enabled us to create security policies. It is an easy solution to customise when it comes to creating templates and pulling reports."
"This solution has been most valuable for establishing a VPN and implementing allow/deny rules."
"Single-pass traffic processing enables very high throughput and low latency."
"From a security standpoint, it provides a comprehensive range of standard security features that align with our requirements."
"It is simple to use. We just need to enable features and then configure IoT policies."
 

Cons

"It's scalable, but not without a big investment. It doesn't do so well at the branch. At the home office, it does okay and not so well at the branch."
"The integration with Sync can be improved. We would like to see better integration with some other popular vendors."
"They should improve features related to IT security. ForeScout should analyze behavior to see if the behavior is malicious behavior and block this device. They should develop the ability to analyze the behavior of the device in my environment."
"Forescout Platform could improve the costs of integrations."
"They need to handle their Tier 1 cases differently. The biggest negative regarding Forescout is their support. Not having the ability to get instantly transferred to a support engineer for Tier 1 cases is pretty ridiculous."
"Forescout Platform could improve the integration or compatibility with other solutions, such as Chinese-made solutions. They do not have any integration with S33 which is a switch. They do not have good integration with new solutions in the market. They do integrate well with Rocket, Cisco, Juniper, and quite a few more but they could expand the integration."
"More detailed analysis during the authentication process, especially for troubleshooting access issues. We have found that troubleshooting RADIUS controls is quite arduous, as it is today. A trace function could easily resolve this by providing a means by which access issues from a certificate to passwords or accounts could easily be identified and remediated."
"As a product, there is nothing to complain about. However, they should improve their overall support. You need that level of knowledge, that level of information is clearly not available. First and foremost, that information is not accessible. The second point to mention is that once you purchase the later support and services. That is, they will continue to charge you for every service."
"Essentially, this solution focuses on data analysis and cannot perform any physical actions."
"While not overly complex, its usability could be enhanced, making it a more intuitive experience for everyone."
"The support is in line with Palo Alto Networks services for other products but needs improvement."
"The reporting for this solution could be improved. The logs we receive are only saved for one week. We would like to have the database timeframe increased to a month or two for historical reporting as well as increased storage capabilities to support this data and reporting."
"I had to call the support because there were some devices that were not showing up."
"More application signatures are required."
"The cost is still high and licensing is still complex."
"The cost is still high and licensing is still complex."
 

Pricing and Cost Advice

"Forescout Platform is too expensive, so the price should be reduced."
"Licenses are perpetual but can come with renewable support."
"5,000 user licenses will cost you between seven and eight million dollars, compared to 20 million for Aruba."
"Forescout's pricing is noted for its attractiveness, with potential discounts depending on partnership levels."
"It's about $160,000, but I'm not sure how long that is for or what it includes. Because we were a test base, we were provided with servers, but now, Forescout wants us to buy servers because those servers are now end-of-life or end-of-service. For our lifecycle management program, in order to get a refresh on those servers, we would have to buy servers or use our own network resources to house Forescout. Forescout takes up about 13 or 14 virtual CPUs."
"The price of the Forescout Platform is expensive. I purchased it for approximately 94 lakhs."
"The solution’s pricing is fine."
"The setup cost, pricing, and licensing are on the high side."
"The pricing for Palo Alto Networks IoT Security is a bit high."
"While Palo Alto Networks IoT Security might cost more than some competitors, its features and effectiveness justify the price tag."
"The initial investment is substantial, but the renewal costs make it financially unsustainable."
"The successful migration trend suggests that Palo Alto provides a superior cost-benefit ratio for firewall solutions."
report
Use our free recommendation engine to learn which IoT Security solutions are best for your needs.
892,943 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
11%
Financial Services Firm
10%
Government
8%
Computer Software Company
7%
Performing Arts
13%
Manufacturing Company
11%
Retailer
6%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise10
Large Enterprise44
By reviewers
Company SizeCount
Small Business3
Large Enterprise7
 

Questions from the Community

What advice do you have for others considering Forescout Platform?
Forescout is a very powerful NAC product that does not rely on port level configuration. It can detect and block unauthorized devices very quickly. But it has a lot of capabilities and really would...
What advice do you have for others considering Forescout Platform?
I would rate the Forescout Device and Visibility Control Platform at a six out of ten.
What advice do you have for others considering Forescout Platform?
I recommend doing a compression demo. If people use it, they will buy it. So they have to see the product in place. That's the main recommendation is to do a proof of concept. If they do, they will...
What needs improvement with Palo Alto Networks IoT Security?
One thing I communicated to them is that they need to provide a managed update for their IoT devices.
What is your primary use case for Palo Alto Networks IoT Security?
I use it for one of my customers, and my role is to help my customer with the solution. They use it for their IoT devices in the field, and they have a lot of sensors out there for their heating eq...
What advice do you have for others considering Palo Alto Networks IoT Security?
The pricing is not that bad. I would rate this solution an 8 out of 10.
 

Also Known As

Forescout Platform, CounterACT for Endpoint Compliance, ForeScout CounterACT
No data available
 

Overview

 

Sample Customers

NHS Sussex, SAP, SEGA, Vistaprint, Miami Children's Hospital, Pioneer Investments, New York Law School, OmnicomGroup, Meritrust
Information Not Available
Find out what your peers are saying about Forescout Platform vs. Palo Alto Networks IoT Security and other solutions. Updated: April 2026.
892,943 professionals have used our research since 2012.