ForeScout | Access Ability

Overview

ForeScout CounterACT is an automated security control platform that measures compliance with your security policies and remediates endpoint security deficiencies.

Unlike agent-based security systems, ForeScout CounterACT operates in real-time, has no blind spots, and does not require cooperation from the endpoint.

Features include:

• Policy Manager. ForeScout CounterACT lets you create security policies that are right for your enterprise. Pre-built policy templates and wizards speed creation of the policies, and a built-in knowledgebase of common security configurations make it easy.
• Visibility. ForeScout CounterACT can identify non-compliant computers – who owns them, where they are, and how they are non-compliant with your security policies. A few examples of security posture information that CounterACT can see are:
  • Anti-malware agent status (installed/running)
  • Anti-malware signature version
  • Patch management agent status (installed/running)
  • Operating system vulnerabilities
  • Firewall status (installed/running)
  • Processes and services installed or running
  • Registry and configuration
  • Applications installed/running
  • P2P/IM clients installed/running
  • Peripheral devices (type, make, model)
  • Malicious traffic (worm propagation, device spoofing, intrusion, spam, etc.)
  • Rogue NAT/DHCP behavior
• Compliance Engine. ForeScout CounterACT will detect when devices or users are out of compliance with your security policy. Track down users who are engaging in risky behavior such as using P2P applications, USB drives, smart phones, and other unauthorized activities. Non-compliant computers and/or users will be displayed in the main console, including the reason for non-compliance and complete details such as location of the device.
• Policy Enforcement. When CounterACT detects a policy violation, CounterACT can automatically take action such as alert, advise, restrict, remediate, and disable. Unlike other products, CounterACT gives you a wide range of actions to choose from, including just-in-time notification to end-users that they have just violated security policy
• Endpoint Remediation. ForeScout CounterACT includes a wide range of endpoint remediation actions. CounterACT can direct the anti-virus server to auto-update the non-compliant host, or it can prompt the patch management system to update the device’s operating system, or it can disable unauthorized software. The complete range of actions is shown below.
• Integrated appliance. ForeScout CounterACT includes everything in a single appliance. No software to install, nothing to configure. Built-in integration lets you leverage your existing infrastructure including directory, endpoint security systems, patch management systems, ticketing systems and reporting systems.
• Scalability. ForeScout CounterACT has been proven in customer networks exceeding 250,000 endpoints. CounterACT appliances are available in a range of sizes to accommodate networks of all sizes.
• Clientless operation. Since ForeScout CounterACT is a clientless solution, it works with all type of endpoints–managed and unmanaged, known and unknown. Nothing escapes CounterACT. If it’s on your network, CounterACT sees it.
• Optional client. ForeScout CounterACT gives you the option to install either a persistent or a dissolvable lightweight client, giving you additional control over the endpoint. Client supports Windows, Mac and Linux and can be automatically deployed when the user connects to the network and registers their identity on the system.
• Reporting. ForeScout CounterACT has a fully integrated reporting engine that helps you monitor your level of policy compliance, fulfill regulatory audit requirements, and produce real-time inventory reports.