CounterACT

The Forescout platform offers unique agentless visibility capabilities, including passive-only discovery and profiling techniques to provide essential visibility without risking business disruption. It extends your visibility into operational technology (OT) environments and IPv6 systems, such as:

• Industrial and critical infrastructure systems
• IPv6 addressable devices
• Devices managed by centralized cloud controllers

The Forescout Device Cloud is a crowdsourced repository of all types of devices seen in customer networks. It allows Forescout analysts to research IoT and OT device types and regularly provide improved classification profile libraries, allowing you to:

• Gain access from a growing community of over 500 production customer networks across 10+ different industries/verticals
• Leverage intelligence for over 3 million enterprise devices
• Auto-classify devices and device types you’ve never seen before

Understand, prioritize and reduce the risk associated with IoT and OT devices (in addition to traditional devices), and enforce policy-based controls to reduce your attack surface. Unlike other solutions that rely on agents for posture assessment, Forescout’s agentless capabilities let you assess the security and compliance risk associated with the fastest growing device types on your network and eliminate time-consuming manual processes.

• Identify IoT and other devices with factory default and commonly used credentials
• Enforce policy-based controls to ensure strong passwords are in place
• Help avoid dangerous Mirai malware attacks that target IoT devices

The Forescout platform includes a new web dashboard with fully customizable views of all your devices across the extended enterprise. This single-pane-of-glass view shows device classification, compliance and risk status, device connection context and more.

• Provide your CISO and compliance officers with up-to-the-minute risk and compliance status
• Assist IT and help desk teams with a comprehensive view of connected devices and security posture for more effective compliance management
• Help your SOC team and threat hunters with risk status, incident prioritization and more, contributing to reduced incident response time

The Forescout platform now provides enhanced scalability and new deployment options to further improve time-to-value.

• Manage up to 2 million devices in a single deployment across your extended enterprise
• Optimize rack space and data center utilization as per-appliance capacity is now doubled with half the footprint, providing a 4x improvement in deployment density
• Choose new deployment options such as KVM for virtual deployments, in addition to VMware and Hyper-V. Auto IP-allocation lets you auto-distribute IP ranges across a cluster of appliances to scale with ease and reduce administrative tasks.

Forescout continues to enhance security orchestration with other security solutions. You can now share increased depth and breadth of IoT and OT device context with your other IT systems to:

• Enrich your ServiceNow CMDB with information about industrial and critical infrastructure systems that Forescout passively discovers and profiles
• Provide IoT classification and assessment context to your Splunk®, QRadar® or ArcSight® SIEM to leverage this information for correlation and incident prioritization
• Tag IoT and OT devices based on classification and assessment so your Palo Alto Networks® or Check Point® NGFWs can implement segmentation policies

Forescout Flexx is our new licensing approach, allowing you to purchase, deploy and manage your licenses in a more natural, more flexible way. With Forescout Flexx, you can:

• Purchase software and hardware separately based on your expanding business needs
• Gain deployment flexibility and license portability across your extended enterprise (licenses are pooled)
• Streamline license management functions, reduce administrative overhead and facilitate license compliances

Learn more at http://www.forescout.com/Licensing