Integration for VMware vCenter

eyeSight’s strength is its ability to to provide extensive visibility into all assets connected to the network. This functionality combined with the vCenter integration vastly extends into a data-center wide visibility into an organization’s SDDC and private cloud by discovering and classifying rogue, unmanaged or unapproved VMs as well as providing a unified view of both physical and virtual assets.

With eyeSight, administrators can create automated policies to help ensure VMs adhere to guidelines or security benchmarks. For non-compliant VMs, users can take corrective actions based on threat severity or risk level, including isolating them in pre-defined port/security groups or requiring the presence of functional security agents. This allows for improving response times and reducing manual intervention. Organizations can also use automation to reduce network provisioning time from days to seconds to improve operational efficiency.

The integration allows for dynamic access control and network segmentation policies that adjust based on the real-time security posture of VMs. For instance, if a VM is found to be non-compliant or compromised, it can be automatically isolated to prevent the spread of threats, all while ensuring minimal impact on business operations.

This integration enables the Forescout platform to send non-affecting email or SIEM messages to support the management of virtual machines. VMware administrators can use this “take action” information to prioritize efforts and assist in automation of workflows such as port-group moves or suspension of virtual machines.

The integration enhances the ability to detect and respond to security incidents within the virtualized environment. By correlating data from VMware vCenter with Forescout’s monitoring and control capabilities, organizations can quickly identify suspicious activities and automate responses to mitigate risks.