Forescout Marketplace

Forescout eyeExtend for Palo Alto Networks WildFire® enhances the power of the
Palo Alto Networks solution by helping organizations detect, share and hunt for
indicators of compromise (IOCs) across all network-connected devices and contain
compromised devices to prevent lateral malware propagation.

Forescout eyeExtend for Check Point Threat Prevention enhances the power of Check Point’s solution by helping organizations identify their entire attack surface, extend threat hunting to managed and unmanaged devices, and accelerate threat response.

Protects against known and unknown
advanced attacks. Trellix Network Security uses sandboxing techniques to
observe and record zero-day threats and informs Forescout CounterACT about
infected systems and indicators of compromise (IOCs).

Forescout eyeExtend for Trellix Endpoint Security (HX Series) provides a
comprehensive approach to security that spans complete device visibility across
your extended enterprise, helps enforce device compliance, extends threat hunting
to unmanaged devices and automates network access control for threat mitigation
in real time.

Forescout eyeExtend for Trellix Email Security enhances the power of Trellix’s
Email Security solution by helping organizations detect, share and hunt for
Indicators of Compromise (IOCs) across all network-connected devices, including
unmanaged devices, and contain compromised devices dynamically to limit
malware propagation and minimize data breaches.

To combat cyber threats, organizations use endpoint security solutions such as the CrowdStrike’s Falcon platform. However, unmanaged and transient devices that connect to the network unnoticed pose a risk that must still be addressed. If compromised devices are left undetected, they can be used as launch pads to target higher-value assets, gain access to sensitive information and cause significant business impact.

Forescout eyeExtend integrations with ITSM products help maintain a complete and accurate asset repository/CMDB at all times, automate IT service and security incident creation and prioritization with complete device and network context, and facilitate policy-driven remediation actions for noncompliant or compromised devices.

Forescout discovers, classifies and assesses all connected devices; compiles this information in the Splunk CIM format and shares it with Splunk. The additional device information from Forescout includes user information, device type, device configuration, network access patterns over time, network location and security posture. Splunk correlates rich contextual data from Forescout with other data sources and uses this information for long-term storage, swift anomaly detection and accurate trend analysis.