Try our new research platform with insights from 80,000+ expert users

Forescout Platform vs Palo Alto Networks IoT Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 3, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Forescout Platform
Ranking in IoT Security
3rd
Average Rating
8.4
Reviews Sentiment
6.6
Number of Reviews
77
Ranking in other categories
Network Access Control (NAC) (4th), Endpoint Compliance (4th), Extended Detection and Response (XDR) (15th)
Palo Alto Networks IoT Secu...
Ranking in IoT Security
4th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
10
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of July 2025, in the IoT Security category, the mindshare of Forescout Platform is 12.8%, down from 18.2% compared to the previous year. The mindshare of Palo Alto Networks IoT Security is 6.9%, down from 7.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
IoT Security
 

Featured Reviews

AmjadKhan1 - PeerSpot reviewer
Blocks users who don't follow the policies and enforces compliance
The solution has a compliance enforcement feature that sends non-compliant systems to quarantine. Forescout Platform is a good product that provides seamless integration with Cisco Juniper and other devices. We wanted Forescout Platform to integrate with our firewalls and some vulnerability patch management solutions. Forescout Platform is currently the best product and top-of-the-line NAC solution in the market. I always recommend this product to other companies as well. We have 365 subsidiary companies. I work in the head office, and I always recommend it. This solution will be purchased by other companies in the next financial year. Overall, I rate the solution ten out of ten.
Muhammad Ahsan Riaz - PeerSpot reviewer
Responsive system enhances network management but integration needs refinement
I find Palo Alto Networks IoT Security to be highly responsive, and its separate management and data planes are a major advantage. As an insurance company in the financial sector, we must meet strict regulatory requirements, and Palo Alto has proven to be an excellent solution. Its management is straightforward, the dashboards and reporting are comprehensive, and most importantly, it functions exactly as described in the documentation. For example, when we needed to block YouTube on our network, Palo Alto successfully blocked access while our Cisco firewall failed to block access on iPhones. This highlights the inconsistency we've experienced with different firewalls, whereas Palo Alto has consistently performed as expected.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The interface is easy to use."
"It's one of the tools that has given the federal government visibility into network devices and everything."
"The visibility is the main benefit. We now know how many devices are connected, what the use for each device is and what kind of devices we have in our environment."
"Forescout has a feature that blocks the endpoint at the point of collection. It sets preconditions and will block the system if those aren't met."
"Automated policy enforcement is particularly valuable as it significantly reduces the need for manual intervention, thus enhancing efficiency and security."
"Forescout Platform's most valuable aspect is its excellent device profiling for devices without agents, which is crucial for our work due to challenges with agent-based devices. Its isolation and blocking actions are particularly effective for network security. The device compliance feature helps us ensure device compliance through immediate actions like updating antivirus software. We have already integrated Forescout with antivirus and vulnerability assessment tools, allowing it to monitor vulnerability scores and automatically isolate devices if critical vulnerabilities are detected."
"The platform enables automated policy enforcement, allowing us to simulate and test policies before enforcement, streamlining our security operations."
"Vulnerability remediation is valuable. We can narrow down a system and its properties. We can go granular on the properties of each endpoint, such as which operating system you're using."
"Palo Alto is valued for its GlobalProtect feature, which offers a range of security options, including user ID mapping and VPNs."
"I like the threat information, and we can share the logging data with Cortex Data Lake."
"This solution has been most valuable for establishing a VPN and implementing allow/deny rules. It has also enabled us to create security policies. It is an easy solution to customise when it comes to creating templates and pulling reports."
"I find Palo Alto Networks IoT Security to be highly responsive, and its separate management and data planes are a major advantage."
"I like the Cortex Data Lake integration with security automation."
"Single-pass traffic processing enables very high throughput and low latency."
"The key strength of Palo Alto firewalls lies in their application-based approach, offering a much finer level of control compared to traditional firewalls."
"It is simple to use. We just need to enable features and then configure IoT policies."
 

Cons

"The solution needs more definitive pricing. The costs are hard to nail down."
"The technical support could be improved in terms of response time and first-level support quality."
"Customer support could be improved by providing direct assistance from Forescout employees or specialists at customer sites to enhance the support experience and effectiveness."
"Regarding pricing, there is room for improvement to enhance competitiveness with other vendors and solutions."
"The product needs to improve its support. I know a case that dragged on for about one and a half years. They eventually suggested professional services and closed the ticket. We followed their advice, engaging the account manager and professional service team, only to discover that the issue was a bug. After reopening the case, it's been about six months, and the problem still hasn't been resolved."
"We experienced some detection issues when checking compliance for the Sophos agent."
"The solution does have a bit of complexity, and there's some complexity in the deployment. Users need to be trained before undertaking an initial setup."
"Logging would be one area for improvement. When we're troubleshooting, there are not a lot of clear things on Google that we can look up for ourselves. When we have an issue with it, we have to call the company to get the vendors involved. The logging of Forescout is horrible compared to other things that we've used."
"There can be more automation in terms of security and detection. It is already good."
"While not overly complex, its usability could be enhanced, making it a more intuitive experience for everyone."
"More application signatures are required."
"Essentially, this solution focuses on data analysis and cannot perform any physical actions."
"The cost is still high and licensing is still complex."
"It would be beneficial to have a more centralized and user-friendly platform that could consolidate all the necessary information, which proved challenging during the initial POC phase."
"Palo Alto Networks IoT Security's reporting capabilities are less comprehensive and robust than those provided by Cisco."
"It would be beneficial if Palo Alto IoT Security could integrate with Let's Encrypt for free SSL certificates."
 

Pricing and Cost Advice

"Forescout's pricing is noted for its attractiveness, with potential discounts depending on partnership levels."
"The tool's pricing is expensive but reasonable."
"It might not be the cheapest solution, but you get what you pay for."
"It is expensive because you have to pay for their CSM, the customer's access manager, and their professional services on top of that, and they charge you roughly $400 per hour, which is overhead."
"Forescout Platform is on the expensive side."
"5,000 user licenses will cost you between seven and eight million dollars, compared to 20 million for Aruba."
"The cost of the solution depends on the customer's requirement because the customer is asking for different integration with a different product. Forescout Platform's price would start to get a bit higher. However, overall the price is a little expensive. It's can fit within the customer budget."
"I would rate Forescout Platform's pricing as four out of five."
"While Palo Alto Networks IoT Security might cost more than some competitors, its features and effectiveness justify the price tag."
"The pricing for Palo Alto Networks IoT Security is a bit high."
"The successful migration trend suggests that Palo Alto provides a superior cost-benefit ratio for firewall solutions."
"The initial investment is substantial, but the renewal costs make it financially unsustainable."
report
Use our free recommendation engine to learn which IoT Security solutions are best for your needs.
860,592 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Educational Organization
12%
Financial Services Firm
10%
Government
9%
Manufacturing Company
17%
Computer Software Company
14%
Performing Arts
8%
Energy/Utilities Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What advice do you have for others considering Forescout Platform?
Forescout is a very powerful NAC product that does not rely on port level configuration. It can detect and block unauthorized devices very quickly. But it has a lot of capabilities and really would...
What advice do you have for others considering Forescout Platform?
I would rate the Forescout Device and Visibility Control Platform at a six out of ten.
What advice do you have for others considering Forescout Platform?
I recommend doing a compression demo. If people use it, they will buy it. So they have to see the product in place. That's the main recommendation is to do a proof of concept. If they do, they will...
What do you like most about Palo Alto Networks IoT Security?
From a security standpoint, it provides a comprehensive range of standard security features that align with our requirements.
What needs improvement with Palo Alto Networks IoT Security?
The major challenge is the integration with existing complex production lines. These architectures were developed with a focus on automation functionalities, not security. Finding the right integra...
What is your primary use case for Palo Alto Networks IoT Security?
I use Palo Alto Networks IoT Security ( /products/palo-alto-networks-iot-security-reviews ) for discovering automation devices and detecting various types of data traffic on automation infrastructu...
 

Also Known As

Forescout Platform, CounterACT for Endpoint Compliance, ForeScout CounterACT
No data available
 

Overview

 

Sample Customers

NHS Sussex, SAP, SEGA, Vistaprint, Miami Children's Hospital, Pioneer Investments, New York Law School, OmnicomGroup, Meritrust
Information Not Available
Find out what your peers are saying about Forescout Platform vs. Palo Alto Networks IoT Security and other solutions. Updated: June 2025.
860,592 professionals have used our research since 2012.