Try our new research platform with insights from 80,000+ expert users

Forescout Platform vs Palo Alto Networks IoT Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 3, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Forescout Platform
Ranking in IoT Security
4th
Average Rating
8.4
Reviews Sentiment
6.5
Number of Reviews
78
Ranking in other categories
Network Access Control (NAC) (5th), Endpoint Compliance (5th), Extended Detection and Response (XDR) (21st)
Palo Alto Networks IoT Secu...
Ranking in IoT Security
3rd
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
11
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of January 2026, in the IoT Security category, the mindshare of Forescout Platform is 8.1%, down from 15.7% compared to the previous year. The mindshare of Palo Alto Networks IoT Security is 6.2%, down from 7.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
IoT Security Market Share Distribution
ProductMarket Share (%)
Palo Alto Networks IoT Security6.2%
Forescout Platform8.1%
Other85.7%
IoT Security
 

Featured Reviews

AshishKumar Rai - PeerSpot reviewer
Security Consultant at a tech vendor with 10,001+ employees
Comprehensive visibility has strengthened endpoint control and automated threat response across networks
When it comes to improving Forescout Platform, I have faced some issues recently, particularly with the switch integration part. When integrating a switch, it asks for the vendor type, and often it does not match. For example, one series of HP switches may not be found in that vendor list. This leads to frustration because you have to check again with different HP models, and once you integrate a switch, you cannot edit the vendor list without removing it. Other issues are being worked on, particularly related to switch integration. I believe they will be fixed in the next upgrade or patch fix. There are no major issues, but the configuration changes needed for the switch model are necessary, and I think it would help if during integration, an admin user could check the password or credential used, as they currently cannot see the password after it is entered and saved.
Muhammad Ahsan Riaz - PeerSpot reviewer
Chief Information Security Officer at Packages Group
Responsive system enhances network management but integration needs refinement
I find Palo Alto Networks IoT Security to be highly responsive, and its separate management and data planes are a major advantage. As an insurance company in the financial sector, we must meet strict regulatory requirements, and Palo Alto has proven to be an excellent solution. Its management is straightforward, the dashboards and reporting are comprehensive, and most importantly, it functions exactly as described in the documentation. For example, when we needed to block YouTube on our network, Palo Alto successfully blocked access while our Cisco firewall failed to block access on iPhones. This highlights the inconsistency we've experienced with different firewalls, whereas Palo Alto has consistently performed as expected.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The interface is easy to use."
"The most valuable feature is the blocking of USB devices."
"I have noticed that in the last year the license model has changed from licensing the whole appliance to licensing the number of devices. It's more simple for a large installation, or a user to have CounterACT as their peripheral site in the company. It's a good choice to have changed the license policy."
"The product is very easy to work with and easy to deploy."
"The most valuable features of the Forescout Platform are ease of management and outstanding visibility. The visibility is simple to obtain."
"Within three or four days, we have complete visibility of your infrastructure on the network. Compared to other solutions, the deployment of the solution is easier and we can close the project quickly."
"The Forescout Platform's most valuable features include its agentless configuration, which allows for easy integration with switches, and its broad customizability of rules and conditions for policy configuration. By leveraging its Network Access Control capabilities, the tool controls network access, allowing administrators to enforce policies tailored to the organization's needs."
"The best parts of Forescout Platform are its orchestration features, discovery capabilities, classification buckets, and flexibility in creating policies."
"I find Palo Alto Networks IoT Security to be highly responsive, and its separate management and data planes are a major advantage."
"It is simple to use. We just need to enable features and then configure IoT policies."
"From a security standpoint, it provides a comprehensive range of standard security features that align with our requirements."
"I would recommend Palo Alto Networks IoT Security to any organization with automation plants or standard enterprise IT environments."
"I like the threat information, and we can share the logging data with Cortex Data Lake."
"Palo Alto is valued for its GlobalProtect feature, which offers a range of security options, including user ID mapping and VPNs."
"This solution has been most valuable for establishing a VPN and implementing allow/deny rules. It has also enabled us to create security policies. It is an easy solution to customise when it comes to creating templates and pulling reports."
"The key strength of Palo Alto firewalls lies in their application-based approach, offering a much finer level of control compared to traditional firewalls."
 

Cons

"More detailed analysis during the authentication process, especially for troubleshooting access issues. We have found that troubleshooting RADIUS controls is quite arduous, as it is today. A trace function could easily resolve this by providing a means by which access issues from a certificate to passwords or accounts could easily be identified and remediated."
"The console is a fat client, and a web interface would be preferable."
"Although Forescout manages endpoints and network devices, there is no capability for user management."
"When it comes to improving Forescout Platform, I have faced some issues recently, particularly with the switch integration part."
"I believe that the overall user experience has not always been preferable."
"It's scalable, but not without a big investment. It doesn't do so well at the branch. At the home office, it does okay and not so well at the branch."
"Forescout Platform isn't flexible with connections to devices like printers and forces you to re-enter details like the MAC address after any breakdowns."
"Regarding pricing, there is room for improvement to enhance competitiveness with other vendors and solutions."
"The cost is still high and licensing is still complex."
"I had to call the support because there were some devices that were not showing up."
"Essentially, this solution focuses on data analysis and cannot perform any physical actions."
"More application signatures are required."
"While not overly complex, its usability could be enhanced, making it a more intuitive experience for everyone."
"Palo Alto Networks IoT Security's reporting capabilities are less comprehensive and robust than those provided by Cisco."
"There can be more automation in terms of security and detection. It is already good."
"The support is in line with Palo Alto Networks services for other products but needs improvement."
 

Pricing and Cost Advice

"It is expensive because you have to pay for their CSM, the customer's access manager, and their professional services on top of that, and they charge you roughly $400 per hour, which is overhead."
"We went with the virtual appliance option. The biggest cost to running these types of appliances would be to either have multiple virtual appliances at every data center or running Remote SPAN hardware to provide you the real-time network visibility."
"The Forescout Platform's pricing is in the middle range, not too cheap or expensive."
"You can have a flexible license depending on your environment."
"For one license, we pay around 3,000 Indian rupees."
"We have a very clear licensing model for business. I don't have to have a Ph.D. to be able to understand the licensing model as you might need for other solutions. If I know exactly what we want, it can tell you which license you need. The solution is easy for purchasing, ordering, and ease of deployment as well."
"Forescout's pricing is noted for its attractiveness, with potential discounts depending on partnership levels."
"Devices with multiple IP's count multiple times against your license count."
"The pricing for Palo Alto Networks IoT Security is a bit high."
"The successful migration trend suggests that Palo Alto provides a superior cost-benefit ratio for firewall solutions."
"The initial investment is substantial, but the renewal costs make it financially unsustainable."
"While Palo Alto Networks IoT Security might cost more than some competitors, its features and effectiveness justify the price tag."
report
Use our free recommendation engine to learn which IoT Security solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
11%
Financial Services Firm
11%
Computer Software Company
9%
Government
8%
Performing Arts
15%
Manufacturing Company
10%
Computer Software Company
8%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise10
Large Enterprise44
By reviewers
Company SizeCount
Small Business3
Large Enterprise7
 

Questions from the Community

What advice do you have for others considering Forescout Platform?
Forescout is a very powerful NAC product that does not rely on port level configuration. It can detect and block unauthorized devices very quickly. But it has a lot of capabilities and really would...
What advice do you have for others considering Forescout Platform?
I would rate the Forescout Device and Visibility Control Platform at a six out of ten.
What advice do you have for others considering Forescout Platform?
I recommend doing a compression demo. If people use it, they will buy it. So they have to see the product in place. That's the main recommendation is to do a proof of concept. If they do, they will...
What needs improvement with Palo Alto Networks IoT Security?
One thing I communicated to them is that they need to provide a managed update for their IoT devices.
What is your primary use case for Palo Alto Networks IoT Security?
I use it for one of my customers, and my role is to help my customer with the solution. They use it for their IoT devices in the field, and they have a lot of sensors out there for their heating eq...
What advice do you have for others considering Palo Alto Networks IoT Security?
The pricing is not that bad. I would rate this solution an 8 out of 10.
 

Also Known As

Forescout Platform, CounterACT for Endpoint Compliance, ForeScout CounterACT
No data available
 

Overview

 

Sample Customers

NHS Sussex, SAP, SEGA, Vistaprint, Miami Children's Hospital, Pioneer Investments, New York Law School, OmnicomGroup, Meritrust
Information Not Available
Find out what your peers are saying about Forescout Platform vs. Palo Alto Networks IoT Security and other solutions. Updated: December 2025.
881,082 professionals have used our research since 2012.