Find A Technology Partner

The ForeScout Extended Module for Splunk® provides bi-directional communication with Splunk Enterprise and Splunk Enterprise Security. It combines ForeScout’s endpoint visibility, access control, and automated response capabilities with Splunk’s powerful correlation, analysis, and search features. This enables security teams to gain a better understanding of their overall security risk posture so they can more quickly respond to and mitigate a range of security issues.

The alliance combines the real-time endpoint visibility, profiling and remediation capabilities of ForeScout CounterACT® with multiple Palo Alto Networks® products to limit data breaches, detect advanced threats and take automated remediation actions. Joint capabilities are made possible through the following Extended Modules that enable threat intelligence sharing:

ForeScout Extended Module for Palo Alto Networks WildFire: ForeScout CounterACT® and Palo Alto Networks WildFire™ work together to leverage the best-of-breed capabilities of each solution. CounterACT provides the unique ability to see and control devices, including non-traditional devices, the instant they connect to the network. WildFire leverages a malware analysis environment to identify new and unknown malware and exploits on the network. With the ForeScout Extended Module for Palo Alto Networks WildFire, the combined solution improves visibility and real-time intelligence, detects advanced threats and zero-day malware, provides a rapid response to compromised endpoints and automates response to identified threats.

ForeScout Extended Module for Palo Alto Networks Next-Generation Firewall: The ForeScout Extended Module for Palo Alto Networks Next-Generation Firewall allows ForeScout to exchange rich visibility and contextual information about users and devices with Palo Alto Networks Next-Generation Firewall. This enables Next-Generation Firewall to better segment resources on a need-to-know basis, assign appropriate access regardless of location and create granular access policies based on user and device context. As a result organizations can reduce their overall attack surface, prevent unauthorized access to sensitive resources and minimize malware proliferation and data breaches.

ForeScout CounterACT® includes base module integrations with the VMware® vSphere Suite and NSX platforms to provide unified, cross-platform endpoint visibility, assessment and automated policy-based enforcement across your virtual and physical infrastructure. ForeScout also offers the ForeScout Mobile Integration Module that provides bi-directional communication and information sharing with VMware AirWatch® enabling automated real-time detection of mobile devices, seamless enrollment and installation of AirWatch agents.

ForeScout CounterACT and VMware integrations enable you to optimize resource utilization, streamline compliance and reduce risk by providing comprehensive visibility and policy-driven controls across your campus, mobile, data center and cloud devices.

ForeScout and CrowdStrike have partnered to strengthen endpoint defenses and proactively combat threats network-wide. The ForeScout^® Extended Module for CrowdStrike^® combines the real-time device visibility and control capabilities of ForeScout CounterACT® with the threat intelligence and advanced endpoint protection of the CrowdStrike Falcon platform. The joint solution allows you to proactively combat threats across both CrowdStrike-managed and unmanaged endpoints, and orchestrate workflows to isolate and remediate compromised devices. This enables you to accelerate threat response, limit malware propagation and reduce business impact.

The ForeScout Extended Module for ServiceNow® leverages CounterACT’s real-time visibility and provides up-to-date device properties, classification, configuration and network context to ServiceNow. This enables you to get a current view of networked assets, track their movement and remediate or retire these assets as required. As a result, you can make informed decisions by leveraging an accurate single-source-of-truth asset repository, avoid manual, time-consuming and error-prone processes and optimize IT governance and service operations.

The ForeScout Extended Module for CyberArk® leverages CounterACT’s real-time agentless visibility to discover and classify devices, assess their security posture and gather intelligence about local privileged accounts. This enables you to get a current view of networked devices with privileged accounts, true-up your CyberArk account inventory and take precise, policy-based actions to allow or limit network access. As a result, you can more effectively manage privileged accounts and reduce your overall attack surface.

This alliance combines the dynamic endpoint visibility, profiling, access control and remediation capabilities of ForeScout CounterACT® with several FireEye® products to provide security against zero-day threats and produce indicators of compromise (IOCs) to help ensure that threats are remediated before the endpoint is allowed on the network. Joint capabilities are made possible through the following Extended Modules that enable threat intelligence sharing:

ForeScout Extended Module for FireEye HX: FireEye HX detects malicious endpoints with advanced threats and IOCs. ForeScout CounterACT isolates the malicious endpoints to stop lateral propagation of threats. CounterACT also stores and leverages IOC information from FireEye to scan endpoints that are attempting to connect or are already connected to the network for the presence of infections.

ForeScout Extended Module for FireEye EX: FireEye EX scans for phishing emails as well as malicious software attachments. If a threat is detected, FireEye EX prevents it from entering the network. After analysis, FireEye produces IOCs and shares the threat intelligence with CounterACT and the FireEye Threat Prevention Platform. Shared threat intelligence allows FireEye EX to scan for known vulnerabilities within arriving email. It also allows CounterACT to identify existing threats on endpoints as they connect to the network and take the appropriate actions based on corporate policies.

ForeScout Extended Module for FireEye NX: FireEye NX uses sandboxing techniques to identify zero-day threats and informs CounterACT® about infected devices and IOC threat severity. CounterACT uses this information to enforce policy-based actions, including isolating devices, initiating remediation actions and scanning other devices to minimize threat propagation. CounterACT stores the latest IOC information in its database, scans devices attempting to connect to the network and performs remediation actions before the endpoint attempts an outbound call.

ForeScout has partnered with IBM® to deliver unique and powerful solutions for continuous monitoring and mitigation of enterprise risk and compliance gaps. With these joint solutions, you can achieve a more accurate real-time understanding of your device landscape and security posture, help enforce compliance on traditional and mobile devices, automatically mitigate endpoint risks and get more comprehensive compliance reports. The joint solutions combine ForeScout CounterACT with IBM BigFix®, IBM QRadar® and IBM MaaS360® via ForeScout Extended Modules.

Tripwire IP360 is an enterprise-class Vulnerability Management solution designed for large, complex network environments. The, The Tripwire IP360 Plugin for ForeScout, which is an extension of Tripwire IP360, leverages the ForeScout Open Integration Module (OIM) and ForeScout CounterACT to create a bi-directional integration of orchestrated information sharing and workflows. ForeScout detects endpoints the moment they connect to the network and informs Tripwire IP360. Policies can be set to automatically trigger an IP360 scan upon connection or allow operations to initiate a scan based on certain network activity. ForeScout policies monitor, manage, restrict and remediate endpoints based on Tripwire IP360 scan results.