ForeScout Extends Enterprise-Grade NAC to Cover Up to 400K Endpoints

• Executive Dashboard. IT administrators can now provide corporate executives an easy-to-understand view of complex compliance and trending data on a per-organization or per-policy basis. Data can be filtered using any pre-defined policy, and the dashboard results can be exported to pdf, email, print, third-party Network and Security Manager (NSM) tools, or projected onto a large-format LCD NOC display.
Guest Security Suite (GSS). Global guest access management has never been easier. The latest CounterACT features a suite of applications for managing guest registration/authentication, role-based access, post-connect monitoring and reporting. The suite greatly simplifies admission and access control over the periodic user, no matter who they may be: guest, contractor/consultant, business partner, student, visiting professor, doctor, auditor/assessor, or others.
Enterprise Management Control Suite (EMCS). The CounterACT Enterprise Manager and NAC family of appliances scale to cover up to 400K endpoints (OS and non-OS devices). To segregate, direct and control global user activities from a central EM command console in the largest deployments, more granular permission controls have been added, allowing NAC administrators to limit who can view and control their local network.
Preventative Security Suite (PSS). CounterACT offers a comprehensive threat prevention suite that: 1) detects/disables peer-to-peer and instant messaging applications; 2) allows white/black lists to be defined and used to detect/block any external storage device (USBs, USB/modem, mass storage, smart phones, etc.); 3) detects/blocks dual-homed connections, device impersonation, ARP spoofing attempts, and more.
McAfee ePO™ Integration. Together, CounterACT and McAfee ePO help to assure complete endpoint coverage. CounterACT connects to the McAfee ePO server to detect/control hosts with specific ePO attributes and to provide information back to the McAfee ePO server (for instance, on non-ePO hosts). NAC policies can be created based upon host data retrieved from the McAfee ePO server database; the ePO agent can be started on managed ePO hosts; unmanaged/non-ePO hosts can be redirected to the ePO install site for remediation.
Port-level Access Control. This new enforcement method introduces access control beyond 802.1x and VLAN steering (without being in-line). Using Layer 3 and Layer 4 access control lists (ACLs) at the switch port allows quarantining before a network connection occurs and eliminates the need to deploy remediation and/or guest VLANs. Business productivity is maintained, network operation is smoother, protection is higher, and end-points are protected from one another even within their VLAN ... without the cost of replacing or adding switch or NAC appliances in remote offices.