Forescout Network Security Pros and Cons

Forescout Counter Act is an Agentless security appliance.

Instant discovery and classification of endpoints connected to our network

Policy based automatic action Review collected by and hosted on G2.com.

Observed a very few number of false positives Review collected by and hosted on G2.com.

Forescout is one of the most trusted vendor and an incredible solution when we talk about Network Access Control. The features provided by it are incredible and the most intresting part is that it suport hetrogeneous environment. It works with both pre-auth and post-auth feature. Forescout gives an complete visibility of the environment in which it is placed. Visbility is not limited to only IT devices. Forescout works beyond that. It gives the asset inventory and endpoint visibility of all IP based devices. The devices can be IT, IoT, IoMT, and OT. Apart from visibilty it helps to achieve posture assessment, classification and orchestation. The best part is that it support multi vendor switch environment. If device is found to be non-compliant then it automatically takes the control action based on the policies defined. It works agentless as well as as with agent based approach. Overall it is best NAC solution in market. Review collected by and hosted on G2.com.

Third party integartion through connect and api call is difficult task and proper documentation is also not available on the portal. TAC takes so much time in resolving the problem if any case is raised. Radius feature has very much complications and sometimes domain do not get joins for authentication purpose. Upgradingthe appliances and enterprise manager is big task and takes lot of time. Implemenation part is very comlex and there is so much dependency from network and firewall side as required ports need to opened for proper communication and nmap scan. Deploying agent is big task for the environment if they does not have any any centralized solution for pushing agent. Review collected by and hosted on G2.com.

Forescout NAC solution is an incredible tool for detecting and managing the endpoint. It gives us the visibility of all our IP-based endpoints and their posture assessment. We can make policies according to organization compliance and block the unwanted system if required. We can have a complete asset inventory of what operating systems are running in our environment, the switch models, and how many users are logged in. We get complete information about the endpoint at which port the system is connected and at what switch it is. Customer will get the best visibility of their endpoints and network devices. Review collected by and hosted on G2.com.

Implementation takes a lot of time because it needs a lot of integration, like integration with switches, active directories,sccm servers etc. The TAC support is pathetic, and they don't provide any solution in the initial meetings. Troubleshooting switches takes a lot of time as they do not have the required permission. There is a lot of bug in the new version when released; hence it is not stable. The pricing part is very high compared to other NAC solutions. Review collected by and hosted on G2.com.

Forescout is an NAC solution that can be integrated with existing network infrastructure without upgrades or replacing existing devices. Forescout is a solution with and without agent/802.1x. Forescout is a flexible integration. Forescout provides 100% visibility. Visibility of devices that are connected to our network, with excellent monitoring. Forescout prohibits unauthorized devices from connecting with our network and directs them to sign in as guests. Forescout triggers automated security responses if security issues arise. Forescout restrict non-corporate domain/guest machines from connecting to the network. Review collected by and hosted on G2.com.

Integration with 3rd party solution can be complex. It would be great if the dashboard were more creative. Forescout policy-based control is inflexible; they may isolate assets while mediating threats at an inconvenient moment. TAC support can be improved. There should be training for new features added in the forecourt, such as API integration. Technical support is required for quick response on tickets raised. Forescout should have a 2-factor authentication feature in it. Review collected by and hosted on G2.com.

Forescout is a platform that help user to protect its important sensitive information and secure access to resources. Review collected by and hosted on G2.com.

Nothing more dislike but need to purify the user interface. Review collected by and hosted on G2.com.

Forescout solution provides Network access control and visibility inside the organization. The best part is that it supports multi-vendor and allows several third-party integrations. We do not need to upgrade our current network environment to deploy Forescout. It can work with both 802.1x or without 802.1x. It provides complete visibility of what IP-based devices are running in our network and their posture assessment, as well as other useful details which are very helpful for an organization. The best part is that it is an agentless solution; hence, it is very easy to deploy and can work with OT/IoT devices. Review collected by and hosted on G2.com.

If we face any problems, the TAC team takes time to resolve the issue. There are some bugs when a new version is launched; hence, the classification of devices becomes slow. Their patches are released later to remediate the bugs, which is a long process. Clustering is a little bit tough when we need devices for high availability. Pricing is a bit high, and one can get other NAC solutions that cost less than this. Review collected by and hosted on G2.com.

A SIEM without proper visibility will not be utilized to its best potential. Knowing exactly what you have connected in the environment and feeding the information to your SIEM allows you to determine your organization's risk quickly. This visibility, along with policy and protocol management, makes forescout stand out. Review collected by and hosted on G2.com.

As with all technologies, a skillset is required to properly manage workflows, identify bugs, and develop complex policies. I also find that the graphical interface could be made more appealing. Review collected by and hosted on G2.com.

It is easily accessible and has good UI. Review collected by and hosted on G2.com.

Nothing as such, it is a good platform to work upon Review collected by and hosted on G2.com.

Better visibility of the complete portfolio of end user connected devices and well structured policy-based controls. Review collected by and hosted on G2.com.

It is a little difficult to manage. Although lot of integration options are provided, but maneuvering them requires some skillset. Review collected by and hosted on G2.com.

The Forescout Platform is quick and easy to use. The connection from my phone to my computer is the best way to manage my expenses. Review collected by and hosted on G2.com.

Honestly, The system works perfectly for my travel experiences so I don't have any dislikes for this platform. Review collected by and hosted on G2.com.