Try our new research platform with insights from 80,000+ expert users

Forescout Platform vs Palo Alto Networks IoT Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 3, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Forescout Platform
Ranking in IoT Security
2nd
Average Rating
8.4
Reviews Sentiment
6.6
Number of Reviews
76
Ranking in other categories
Network Access Control (NAC) (4th), Endpoint Compliance (5th), Extended Detection and Response (XDR) (16th)
Palo Alto Networks IoT Secu...
Ranking in IoT Security
4th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
10
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of April 2025, in the IoT Security category, the mindshare of Forescout Platform is 14.2%, down from 18.9% compared to the previous year. The mindshare of Palo Alto Networks IoT Security is 6.7%, down from 6.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
IoT Security
 

Featured Reviews

Odai Halawani - PeerSpot reviewer
It's an easy and effective solution, especially for device profiling without agents
Forescout Platform's most valuable aspect is its excellent device profiling for devices without agents, which is crucial for our work due to challenges with agent-based devices. Its isolation and blocking actions are particularly effective for network security. The device compliance feature helps us ensure device compliance through immediate actions like updating antivirus software. We have already integrated Forescout with antivirus and vulnerability assessment tools, allowing it to monitor vulnerability scores and automatically isolate devices if critical vulnerabilities are detected.
Engineerinfosec67 - PeerSpot reviewer
Recognizing and classifying devices with AI and machine learning boosts security without extra network controls
Palo Alto Networks IoT Security ( /products/palo-alto-networks-iot-security-reviews ) integrates with a cloud-based engine that uses artificial intelligence and machine learning for device recognition and classification based on traffic types. This adaptability, which does not rely strictly on a static database, allows for identifying a wider range of devices. The behavior-based identification of devices enhances the capabilities of security controls, extending the network security platform's recognition capacity without deploying a separate network access control system.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Its feature that I have found most valuable is that it is very granular. You can configure granular controls just as you want those policies to be implemented. It gives you that flexibility to go granular in how you want your controls to be implemented. That's something I like about it."
"This solution can be used to organize guest portals, integrate switches, and create policies. Some of its standard use cases also include completing key process upgrades and anti-virus of Windows OS."
"Automated policy enforcement is particularly valuable as it significantly reduces the need for manual intervention, thus enhancing efficiency and security."
"Forescout Platform has made it possible to block people working near our construction sites who should not have access to our network."
"Forescout Platform's most valuable aspect is its excellent device profiling for devices without agents, which is crucial for our work due to challenges with agent-based devices. Its isolation and blocking actions are particularly effective for network security. The device compliance feature helps us ensure device compliance through immediate actions like updating antivirus software. We have already integrated Forescout with antivirus and vulnerability assessment tools, allowing it to monitor vulnerability scores and automatically isolate devices if critical vulnerabilities are detected."
"The actions that the agentless visibility, allow us to perform on the endpoint, are really amazing, especially in the way that it is done."
"The stability is amazing for the Forescout Platform. We have been using Forescout for four years, and no one complained about the stability."
"Provides a good overview of all devices on a network."
"I like the Cortex Data Lake integration with security automation."
"From a security standpoint, it provides a comprehensive range of standard security features that align with our requirements."
"Palo Alto is valued for its GlobalProtect feature, which offers a range of security options, including user ID mapping and VPNs."
"I find Palo Alto Networks IoT Security to be highly responsive, and its separate management and data planes are a major advantage."
"I would recommend Palo Alto Networks IoT Security to any organization with automation plants or standard enterprise IT environments."
"This solution has been most valuable for establishing a VPN and implementing allow/deny rules. It has also enabled us to create security policies. It is an easy solution to customise when it comes to creating templates and pulling reports."
"The key strength of Palo Alto firewalls lies in their application-based approach, offering a much finer level of control compared to traditional firewalls."
"It is simple to use. We just need to enable features and then configure IoT policies."
 

Cons

"The cost is too high."
"In the next release of the solution, it could benefit from being more flexible to allow for more freedom."
"Custom integrations need to be better."
"Forescout Platform would benefit from using AI. Everything has to be set up manually, but AI can learn and suggest rules over time. It also lacks visualization, and some interface configurations need improvement. The visualization seems a couple of years behind compared to other products."
"Definitely, having more third-party integration would be an improvement."
"More detailed analysis during the authentication process, especially for troubleshooting access issues. We have found that troubleshooting RADIUS controls is quite arduous, as it is today. A trace function could easily resolve this by providing a means by which access issues from a certificate to passwords or accounts could easily be identified and remediated."
"The console is a fat client, and a web interface would be preferable."
"I'd like to see improvements in the reporting aspect of Forescout Platform. While the dashboards are good, the reports are lacking and need enhancement, especially in terms of standardization and customization options. Apart from that, all the features and functionalities are working well without any issues."
"It would be beneficial if Palo Alto IoT Security could integrate with Let's Encrypt for free SSL certificates."
"There can be more automation in terms of security and detection. It is already good."
"The reporting for this solution could be improved. The logs we receive are only saved for one week. We would like to have the database timeframe increased to a month or two for historical reporting as well as increased storage capabilities to support this data and reporting."
"While not overly complex, its usability could be enhanced, making it a more intuitive experience for everyone."
"Essentially, this solution focuses on data analysis and cannot perform any physical actions."
"The support is in line with Palo Alto Networks services for other products but needs improvement."
"Palo Alto Networks IoT Security's reporting capabilities are less comprehensive and robust than those provided by Cisco."
"More application signatures are required."
 

Pricing and Cost Advice

"The solution is not priced low. There are no hidden costs."
"We need to pay for integration for each integration that we want to do and there is an additional license fee. This adds more costs. It is not something that anyone can afford. If you want to integrate this with a lot of other tools, it can be costly."
"We went with the virtual appliance option. The biggest cost to running these types of appliances would be to either have multiple virtual appliances at every data center or running Remote SPAN hardware to provide you the real-time network visibility."
"There are no additional costs that I am aware of."
"We have a very clear licensing model for business. I don't have to have a Ph.D. to be able to understand the licensing model as you might need for other solutions. If I know exactly what we want, it can tell you which license you need. The solution is easy for purchasing, ordering, and ease of deployment as well."
"We paid between $20,000 and $25,000 for a three-year license with maintenance."
"The price of the solution is reasonable. We have paid for the license for five years. We have integration with Symantec AV for orchestration, and we have an additional license."
"Forescout Platform is on the expensive side."
"While Palo Alto Networks IoT Security might cost more than some competitors, its features and effectiveness justify the price tag."
"The pricing for Palo Alto Networks IoT Security is a bit high."
"The initial investment is substantial, but the renewal costs make it financially unsustainable."
"The successful migration trend suggests that Palo Alto provides a superior cost-benefit ratio for firewall solutions."
report
Use our free recommendation engine to learn which IoT Security solutions are best for your needs.
845,406 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
33%
Computer Software Company
10%
Financial Services Firm
8%
Government
7%
Manufacturing Company
16%
Computer Software Company
16%
Energy/Utilities Company
6%
Comms Service Provider
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What advice do you have for others considering Forescout Platform?
Forescout is a very powerful NAC product that does not rely on port level configuration. It can detect and block unauthorized devices very quickly. But it has a lot of capabilities and really would...
What advice do you have for others considering Forescout Platform?
I would rate the Forescout Device and Visibility Control Platform at a six out of ten.
What advice do you have for others considering Forescout Platform?
I recommend doing a compression demo. If people use it, they will buy it. So they have to see the product in place. That's the main recommendation is to do a proof of concept. If they do, they will...
What do you like most about Palo Alto Networks IoT Security?
From a security standpoint, it provides a comprehensive range of standard security features that align with our requirements.
What needs improvement with Palo Alto Networks IoT Security?
The major challenge is the integration with existing complex production lines. These architectures were developed with a focus on automation functionalities, not security. Finding the right integra...
What is your primary use case for Palo Alto Networks IoT Security?
I use Palo Alto Networks IoT Security ( /products/palo-alto-networks-iot-security-reviews ) for discovering automation devices and detecting various types of data traffic on automation infrastructu...
 

Also Known As

Forescout Platform, CounterACT for Endpoint Compliance, ForeScout CounterACT
No data available
 

Overview

 

Sample Customers

NHS Sussex, SAP, SEGA, Vistaprint, Miami Children's Hospital, Pioneer Investments, New York Law School, OmnicomGroup, Meritrust
Information Not Available
Find out what your peers are saying about Forescout Platform vs. Palo Alto Networks IoT Security and other solutions. Updated: March 2025.
845,406 professionals have used our research since 2012.