No more typing reviews! Try our Samantha, our new voice AI agent.

Forescout Platform vs Palo Alto Networks IoT Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 3, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Forescout Platform
Ranking in IoT Security
5th
Average Rating
8.4
Reviews Sentiment
6.5
Number of Reviews
79
Ranking in other categories
Network Access Control (NAC) (6th), Endpoint Compliance (2nd), Extended Detection and Response (XDR) (35th)
Palo Alto Networks IoT Secu...
Ranking in IoT Security
3rd
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
11
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2026, in the IoT Security category, the mindshare of Forescout Platform is 8.2%, down from 12.2% compared to the previous year. The mindshare of Palo Alto Networks IoT Security is 5.5%, down from 7.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
IoT Security Mindshare Distribution
ProductMindshare (%)
Palo Alto Networks IoT Security5.5%
Forescout Platform8.2%
Other86.3%
IoT Security
 

Featured Reviews

AshishKumar Rai - PeerSpot reviewer
Security Consultant at a tech vendor with 10,001+ employees
Comprehensive visibility has strengthened endpoint control and automated threat response across networks
When it comes to improving Forescout Platform, I have faced some issues recently, particularly with the switch integration part. When integrating a switch, it asks for the vendor type, and often it does not match. For example, one series of HP switches may not be found in that vendor list. This leads to frustration because you have to check again with different HP models, and once you integrate a switch, you cannot edit the vendor list without removing it. Other issues are being worked on, particularly related to switch integration. I believe they will be fixed in the next upgrade or patch fix. There are no major issues, but the configuration changes needed for the switch model are necessary, and I think it would help if during integration, an admin user could check the password or credential used, as they currently cannot see the password after it is entered and saved.
reviewer2774463 - PeerSpot reviewer
Manager ERP (Insurance) at a manufacturing company with 10,001+ employees
Have used it to manage device updates remotely and now see potential for improved centralized control
One of the favorite features is that they can plug in a device and update it without being on the network, so you can perform an offline update. If all the IoT devices in the field can provide a single pane of glass and management through that platform in a controlled fashion, that would be really beneficial.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Forescout CounterACT has allowed us to better open our access and control wireless access globally from our HQ. This allows us to monitor the network access for every office globally. This has improved overall security, reducing risk and opening up the opportunity to provide greater end user flexibility."
"Forescout has a feature that blocks the endpoint at the point of collection. It sets preconditions and will block the system if those aren't met."
"The best parts of Forescout Platform are its orchestration features, discovery capabilities, classification buckets, and flexibility in creating policies."
"Its feature that I have found most valuable is that it is very granular. You can configure granular controls just as you want those policies to be implemented. It gives you that flexibility to go granular in how you want your controls to be implemented. That's something I like about it."
"Within three or four days, we have complete visibility of your infrastructure on the network. Compared to other solutions, the deployment of the solution is easier and we can close the project quickly."
"The 802.1X configuration, which is difficult for all switches, is not required, making it easier to work with switches and IoT devices."
"Forescout is easy to integrate with a lot of end systems."
"The most important feature is that this solution works well without a 802.1x feature, and you can use CounterACT to implement that feature and also have a very granular control of your devices, including shadow devices."
"The key strength of Palo Alto firewalls lies in their application-based approach, offering a much finer level of control compared to traditional firewalls."
"From a security standpoint, it provides a comprehensive range of standard security features that align with our requirements."
"I find Palo Alto Networks IoT Security to be highly responsive, and its separate management and data planes are a major advantage."
"Single-pass traffic processing enables very high throughput and low latency."
"I like the threat information, and we can share the logging data with Cortex Data Lake."
"This solution has been most valuable for establishing a VPN and implementing allow/deny rules. It has also enabled us to create security policies. It is an easy solution to customise when it comes to creating templates and pulling reports."
"Palo Alto is valued for its GlobalProtect feature, which offers a range of security options, including user ID mapping and VPNs."
"I like the Cortex Data Lake integration with security automation."
 

Cons

"The ability to block external devices in Mac is lacking and needs to be added."
"In the next release of the solution, it could benefit from being more flexible to allow for more freedom."
"The installation is not secure because it takes high admin privileges."
"The console is a fat client, and a web interface would be preferable."
"Custom integrations need to be better. I'd like to have the option, for example, to integrate the Forescout Platform with a customized application or any other software out there that I am using at the same time."
"Search - needs boolean functionality (or pseudo operand now working)."
"The licensing costs are quite high. With the amount of hardware we have, we need too many licenses to make the product effective and it's ultimately just too costly."
"As a user, if I am using a laptop that is Wi-Fi connected, Forescout identifies my port connectivity as one user license, and if I take that same laptop with the same username to a wired network, which is also the same network that is used for the Wi-Fi connection, Forescout detects it as a separate license."
"It would be beneficial to have a more centralized and user-friendly platform that could consolidate all the necessary information, which proved challenging during the initial POC phase."
"Palo Alto Networks IoT Security's reporting capabilities are less comprehensive and robust than those provided by Cisco."
"While not overly complex, its usability could be enhanced, making it a more intuitive experience for everyone."
"There can be more automation in terms of security and detection. It is already good."
"Essentially, this solution focuses on data analysis and cannot perform any physical actions."
"More application signatures are required."
"The cost is still high and licensing is still complex."
"I had to call the support because there were some devices that were not showing up."
 

Pricing and Cost Advice

"The price of the Forescout Platform is expensive. I purchased it for approximately 94 lakhs."
"The solution is not priced low. There are no hidden costs."
"The Forescout Platform's pricing is in the middle range, not too cheap or expensive."
"For one license, we pay around 3,000 Indian rupees."
"Forescout is more expensive than Cisco because Cisco gives high discounts."
"The cost of licensing for this product is quite high, but this cost covers all the features of the solution so it is a single payment for the term that has been selected."
"It's about $160,000, but I'm not sure how long that is for or what it includes. Because we were a test base, we were provided with servers, but now, Forescout wants us to buy servers because those servers are now end-of-life or end-of-service. For our lifecycle management program, in order to get a refresh on those servers, we would have to buy servers or use our own network resources to house Forescout. Forescout takes up about 13 or 14 virtual CPUs."
"We paid between $20,000 and $25,000 for a three-year license with maintenance."
"The successful migration trend suggests that Palo Alto provides a superior cost-benefit ratio for firewall solutions."
"The pricing for Palo Alto Networks IoT Security is a bit high."
"While Palo Alto Networks IoT Security might cost more than some competitors, its features and effectiveness justify the price tag."
"The initial investment is substantial, but the renewal costs make it financially unsustainable."
report
Use our free recommendation engine to learn which IoT Security solutions are best for your needs.
909,563 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
12%
Financial Services Firm
10%
Government
7%
Construction Company
7%
Performing Arts
13%
Financial Services Firm
9%
Manufacturing Company
9%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise10
Large Enterprise45
By reviewers
Company SizeCount
Small Business3
Large Enterprise7
 

Questions from the Community

What advice do you have for others considering Forescout Platform?
Forescout is a very powerful NAC product that does not rely on port level configuration. It can detect and block unauthorized devices very quickly. But it has a lot of capabilities and really would...
What advice do you have for others considering Forescout Platform?
I would rate the Forescout Device and Visibility Control Platform at a six out of ten.
What advice do you have for others considering Forescout Platform?
I recommend doing a compression demo. If people use it, they will buy it. So they have to see the product in place. That's the main recommendation is to do a proof of concept. If they do, they will...
What needs improvement with Palo Alto Networks IoT Security?
One thing I communicated to them is that they need to provide a managed update for their IoT devices.
What is your primary use case for Palo Alto Networks IoT Security?
I use it for one of my customers, and my role is to help my customer with the solution. They use it for their IoT devices in the field, and they have a lot of sensors out there for their heating eq...
What advice do you have for others considering Palo Alto Networks IoT Security?
The pricing is not that bad. I would rate this solution an 8 out of 10.
 

Also Known As

Forescout Platform, CounterACT for Endpoint Compliance, ForeScout CounterACT
No data available
 

Overview

 

Sample Customers

RWJ Barnabas HealthEnbridge EnergyToyota MotorsSt. Luke's University Health NetworkGlobal Credit Union
Information Not Available
Find out what your peers are saying about Forescout Platform vs. Palo Alto Networks IoT Security and other solutions. Updated: August 2026.
909,563 professionals have used our research since 2012.