eyeExtend for Check Point® NGFW - Forescout Marketplace

Features and Benefits

Enable dynamic network segmentation
Forescout eyeExtend for Check Point NGFW matches connecting devices’ IP addresses with NGFW user IDs and captures user
information, device properties, classification and security posture. It then dynamically assigns these devices to their appropriate
Check Point NGFW groups. Based on pre-defined roles, Check Point NGFW allows differentiated access to these users such as
visitors access to internet, contractors to Exchange server and partners to only internal ordering, thereby restricting them to their
individual functional needs. This enables business continuity while preventing unauthorized access to sensitive resources.
Continuously assess device compliance and enforce network segmentation policies
The Forescout platform continuously monitors device posture and compliance context of all connected devices. If a device falls
out of compliance due to out-of-date antivirus software, for example, eyeExtend sends an automatic notification to the network
administrator, removes the device from its assigned NGFW group and reassigns it to a different group with more limited network
access.

Discover, Auto-classify and Assess
Discover, auto-classify and
assess all IP connected
devices
Device Security Posture
Get device security posture
and compliance context of
all devices
Real-time Device Identity
Receive real-time device
identity information by
mapping detected IP
addresses to NGFW user IDs
Dynamically Assign Devices
Dynamically assign devices
to predefined NGFW groups
based on granular device
and user context
Network Access Control
Enforce user- and role-based
network access control
in real time, reducing
dependency on network
devices

Similar Applications