Forescout Platform Reviews and Pricing

Forescout Platform Overview

Forescout Platform is the #1 ranked solution in our list of top IoT Security tools. It is most often compared to Cisco ISE (Identity Services Engine): Forescout Platform vs Cisco ISE (Identity Services Engine)

What is Forescout Platform?

ForeScout offers Global 2000 enterprises and government organizations the unique ability to see devices, including non-traditional devices, the instant they connect to the network. Equally important, ForeScout lets you control these devices and orchestrate information sharing and operation among disparate security tools to accelerate incident response. Unlike traditional security alternatives, ForeScout achieves this without requiring software agents or previous device knowledge. The company’s solutions integrate with leading network, security, mobility and IT management products to overcome security silos, automate workflows and enable significant cost savings.

Forescout Platform is also known as Forescout Platform, CounterACT for Endpoint Compliance, ForeScout CounterACT.

Forescout Platform Buyer's Guide

Download the Forescout Platform Buyer's Guide including reviews and more. Updated: June 2021

Forescout Platform Customers

NHS Sussex, SAP, SEGA, Vistaprint, Miami Children's Hospital, Pioneer Investments, New York Law School, OmnicomGroup, Meritrust

Forescout Platform Video

Pricing Advice

What users are saying about Forescout Platform pricing:

"It might not be the cheapest solution, but you get what you pay for."
"Time savings in finding rogue devices as well as identifying potentially unwanted devices on the network has saved the organization time and money."
"We might have paid in the ballpark of $20,000 yearly for our licenses. I do not recall there being other fees over and above the standard licensing fee."
"We went with the virtual appliance option. The biggest cost to running these types of appliances would be to either have multiple virtual appliances at every data center or running Remote SPAN hardware to provide you the real-time network visibility."
"The ROI is priceless."

"Licenses are perpetual but can come with renewable support."

"The fact that we were allowed to spin up as many servers as we had need of to support our geographic requirements while paying for licensing as an enterprise truly set Forescout apart from the crowd and improved the way we could design our access."

Filter Reviews

SecEng3904

Senior Security Engineer at a healthcare company with 10,001+ employees

May 19, 2020

Download

Identifying potentially unwanted devices on the network has saved the organization time and money

What is our primary use case?

Asset Discovery. We were not able to accurately see devices in our network and/or have the ability to either remove rogue devices from the network or move them off to another VLAN. With corporate owned assets, we also have the ability to see if something is missing or not up-to-date on a product, then we have the ability to push the update down to the asset. We have not integrated the wireless access points into the product, but we are able to gain better visibility with wireless access points for mobile devices to do the same thing.

Pros and Cons

"Being able to sort on device types or devices with open ports is helpful when narrowing down assets of possible misconfigured devices that may be vulnerable on the network. We can take action on those devices based off of corporate policy."

"When adding what is in scope to a policy, it would be nice if you could select multiple policies instead of one policy at a time to add what is in the scope for network segmentation. I have found that during the install and configuration of the policies that if you want to modify multiple policies or enable multiple policies that you need to define what is in the scope (IP range or segments) one rule at a time. This caused some slow downs when implementing policies."

What other advice do I have?

The product has proven to be worth the cost and time savings alone in finding rogue devices. It helps with ROI and increasing our security posture. You can't protect what you don't know about or can't see.

See Entire Forescout Platform Review (799 Words) »

Jonathan Soto

Ingeniero Senior en seguridad y telecomunicaciones at a non-tech company with 1,001-5,000 employees

Feb 26, 2021

Download

A straightforward setup with good technical support and good stability

What is our primary use case?

We needed some protection in our environment. We use this product in some areas in our network to monitor the security of the endpoints of our users.

Pros and Cons

"The user management has been very easy for the most part."

"The licensing costs are quite high. With the amount of hardware we have, we need too many licenses to make the product effective and it's ultimately just too costly."

What other advice do I have?

I do not recall which version of the solution we are using. We use the on-premises deployment model, however, we also have some clients on the cloud. I would advise other organizations that, if they have multi-vendors in their network, use Forescout. However, if most of the devices are Cisco, it is best to use Cisco ISE. It is a great tool and solution. We looked into it with the Magic Quadrant of Gartner and we have seen that it is a leader in the space. However, for us, it just doesn't work as well in terms of compatibility. I'd recommend the solution. I would rate it at an eight out of ten.

See Entire Forescout Platform Review (788 Words) »

Free Report: Forescout Platform Reviews and More

Learn what your peers think about Forescout Platform. Get advice and tips from experienced pros sharing their opinions. Updated: June 2021.

Download now

511,307 professionals have used our research since 2012.

reviewer1348908

Senior Network Engineer at Tessy Plastics

May 16, 2020

Download

Our environment is significantly more secure

What is our primary use case?

We primary use the Forescout appliances to identify, segment, and control all of our internal, manufacturing, automation, and IoT networks. In addition, we use Forescout to deploy guest wireless by utilizing self-registration to allow employees and guests onto our network. Forescout is also responsible for maintaining and showing us all threat data, such as vulnerabilities. We also use it to identify and prevent all malicious network scans throughout our entire network. These powerful tools allow us to secure our network end-to-end.

Pros and Cons

"Being able to actively identify the client without a certificate allows you to control every device on your network regardless of the make, model, and software running. This allows for end-to-end security."

"They need to handle their Tier 1 cases differently. The biggest negative regarding Forescout is their support. Not having the ability to get instantly transferred to a support engineer for Tier 1 cases is pretty ridiculous."

What other advice do I have?

The product has been fantastic for us, meeting our needs. We have hardly had any bugs to speak of. With that being said, please allow Tier 1 cases to be directly transferred to an available engineer.

See Entire Forescout Platform Review (779 Words) »

Avraham Sonenthal

Senior Network Engineer at a government with 5,001-10,000 employees

Sep 24, 2020

Download

Provides good network visibility, allowing us to detect and remove unknown threats

What is our primary use case?

We are using this product as a NAC to secure our network and to meet IRS audit requirements. For example, we are using it to lock down our VPN solution. Until now we had strict requirements for people logging in through VPN, including AD credentials and multifactor authentication, but no requirements for the actual hardware they were using. With Forescout, we can inspect every computer using VPN and block ones we don't permit, or remediate the ones we do permit. Also, we will be able to quarantine and block computers that are not agency equipment on regular switch ports or wireless.

Pros and Cons

"You can quickly filter your view of devices and zero in on the ones you want using a variety of tools, such as what subnet it is on or what it has been classified as."

"The reporting feature needs improvement."

What other advice do I have?

It is the only NAC product I know of that does not require 802.1x on every switch port. Big win. But, make sure that you invest in training up your personnel. It is not a simple product. Importantly, the vast capabilities make it worthwhile.

See Entire Forescout Platform Review (737 Words) »

reviewer1363347

Product Manager - IT Security at a tech services company with 11-50 employees

Aug 13, 2020

Download

You can configure granular controls just as you want those policies to be implemented

What is our primary use case?

Our primary use case is for device compliance and access control.

Pros and Cons

"Its feature that I have found most valuable is that it is very granular. You can configure granular controls just as you want those policies to be implemented. It gives you that flexibility to go granular in how you want your controls to be implemented. That's something I like about it."

"I should be able to integrate my Forescout with any other third party security technology, to build that connected security strategy."

What other advice do I have?

On a scale of one to ten I would give Forescout Platform a nine.

See Entire Forescout Platform Review (663 Words) »

reviewer1348911

Sr. Network Engineer at William Blair & Company

May 13, 2020

Download

Monitors network access globally and improves overall security while reducing risk

What is our primary use case?

To be able to improve security within our network. We needed Network Access Control (NAC). As such, we reviewed the available vendors who could provide this service to us and selected the Forescout CounterACT (CA) product primarily because we needed to be able to position the product in several regional locations. At the same time, we managed and controlled it locally and dynamically where we have it responding to a single control center. While we have implemented today strictly for wireless access, we will be extending that to include wired access in the future.

Pros and Cons

"Forescout CounterACT has allowed us to better open our access and control wireless access globally from our HQ. This allows us to monitor the network access for every office globally. This has improved overall security, reducing risk and opening up the opportunity to provide greater end user flexibility."

"More detailed analysis during the authentication process, especially for troubleshooting access issues. We have found that troubleshooting RADIUS controls is quite arduous, as it is today. A trace function could easily resolve this by providing a means by which access issues from a certificate to passwords or accounts could easily be identified and remediated."

See Entire Forescout Platform Review (632 Words) »

Miguel Santiago

Owner at Securnet

Mar 10, 2020

Download

Has a valuable Bring Your Own Device feature and good usability

What is our primary use case?

We are using the Forescout Platform mostly for the Bring Your Own Device features. So we like it very much. We like the dashboard, the usability, and the Bring Your Own Device feature. That's our main usage of the Forescout.

Pros and Cons

"We think it's simple. We think it's very useful and we really like reports and everything."

"The biggest disadvantage is the pricing."

What other advice do I have?

I recommend doing a compression demo. If people use it, they will buy it. So they have to see the product in place. That's the main recommendation is to do a proof of concept. If they do, they will buy it. I would rate Forscout Device Visibility and Control Platform at a nine out of ten.

See Entire Forescout Platform Review (597 Words) »

reviewer1155042

Chief Information Security Officer at a tech services company with 501-1,000 employees

Feb 22, 2020

Download

Good compliance with simple user interface, and lots of plugins

What is our primary use case?

We've been able to use the solution for a couple of tasks including using it to monitor for anti-virus compliance. We also use it to monitor the health of the security history of our endpoints.

Pros and Cons

"The user interface is quite simple."

"The solution does have a bit of complexity, and there's some complexity in the deployment. Users need to be trained before undertaking an initial setup."

What other advice do I have?

I'd advise companies to ensure their teams are well trained in ForeScout before starting implementation of any kind. Those setting up and using the solution should have a basic background in networking. If users are comfortable with configuring, they can create processes for the environment. That way, it will be deployed properly. Teams should also test the solution first before they launch so there won't be any surprises. If they need to make changes, they need to manage the process properly. I'd rate the solution nine out of ten. If it was a bit less complex, I'd give it perfect marks.

See Entire Forescout Platform Review (537 Words) »

See 9 more Forescout Platform Reviews

Read archived reviews (2+ years old)

Product Categories

Network Access Control IoT Security Endpoint Compliance