Forescout Marketplace

Configuring firewalls, routers, and switches securely plays a foundational role in macro segmentation and attack surface resilience and readiness. To ensure that business-critical systems are operationally resilient and meet industry-specific requirements, Network and Security Operations (NOC and SOC) teams need continuous visibility of segment-by-segment exposure to (i) indicators of macro segmentation compromise resulting from configuration changes and software vulnerabilities and (ii) sector-specific attack vectors and TTPs.

By combining Forescout's enterprise-wide device visibility and automated incident response capabilities with Nipper Enterprise’s proactive configuration analysis, NOC and SOC teams have near real-time awareness of the impact of every device configuration change on network segmentation and attack surface posture. This enables these teams to prioritize remediation and response, ensuring that business-critical systems remain ready for and resilient to cyber incidents as well as compliant with zero trust programs and operational resilience standards, such as DoD C2C and CORA as well as EU DORA and NIS2.

In today’s atmosphere, modern security solutions cannot solely rely on rules, external threat intel, or historical attack data. The Darktrace ActiveAI Security Platform correlates anomalies across the entire organization, delivering proactive cyber resilience with real-time detection and autonomous response to known and novel threats. Through Darktrace's open architecture, it's easy to bring AI to your data, extend autonomous response, and view Darktrace intelligence wherever your teams need it. Integrate anything. Expand autonomous response features to Forescout eyeExtend and unlock new ways to contain anomalous activity. When integrated, Forescout corresponds an action value to a RESPOND state in Darktrace, which indicates if the action is executed, extended, or even existing but to be deleted. It can also be used to determine custom actions.

This app queries the Elastic Security APIs to discover endpoints with Elastic Agent + Defend deployed to it. The app performs discovery and will create new hosts if not already found in Forescout, otherwise, it will add the details to the existing host record.

The app allows you to leverage the Elastic Defend Isolate action to restrict a host's access if Network Controls fail. It also allows a case to be created in Elastic Security when the Isolate action is performed.

This app queries the Dell Wyse Management Studio API to discover Thin Clients and information about the thin client. The app also allows some interaction to be performed against the thin client endpoint via the Wyse API.

Enable the ability to adapt to the evolving landscape of cyber threats and technological advancements. This integration enhances network security, ensures compliance, and streamlines IT management processes. Forescout connects to a Microsoft System Center Configuration Manager (SCCM) and Microsoft Endpoint Configuration Manager (ECM) server to collect information from network components in order to install and update software on endpoints.

Cisco pxGrid is a network communication protocol that allows security tools to share information and work together to automate tasks and respond to threats. When combined with Forescout, this integration provides visibility and assessment for policy decisions, while continuing to use Cisco ISE (Identity Services Engine) as an enforcement point.

The AWS cloud security integration with Forescout is designed to safeguard critical workloads with unparalleled visibility and proactive defense mechanisms. The AWS integration connects the Forescout Platform to the Amazon® Web Services (AWS) public cloud environment to retrieve information on Elastic Compute Cloud (EC2) instances and other AWS entities such as Identity and Access Management (IAM) users, Virtual Private Clouds (VPCs), and Amazon Simple Storage Service (S3). This integration brings the detailed visibility, control, and compliance capabilities of the Forescout to EC2 instances and the associated AWS cloud configurations.

Forescout simplifies the management of complex cloud and hybrid networks with the Microsoft® Azure integration. Through this integration, Forescout administrators can connect to the Azure public cloud to gain real-time insight into Virtual Machine instances and other Azure entities such as Virtual Networks (VNets) and manage them as they would other endpoints. The integration enables automated security assessments and compliance enforcement for cloud resources by maintaining a consistent security posture across both cloud and on-premises environments.