Forescout Marketplace

To combat cyber threats, organizations use endpoint security solutions such as the CrowdStrike’s Falcon platform. However, unmanaged and transient devices that connect to the network unnoticed pose a risk that must still be addressed. If compromised devices are left undetected, they can be used as launch pads to target higher-value assets, gain access to sensitive information and cause significant business impact.

Forescout eyeExtend integrations with ITSM products help maintain a complete and accurate asset repository/CMDB at all times, automate IT service and security incident creation and prioritization with complete device and network context, and facilitate policy-driven remediation actions for noncompliant or compromised devices.

Forescout discovers, classifies and assesses all connected devices; compiles this information in the Splunk CIM format and shares it with Splunk. The additional device information from Forescout includes user information, device type, device configuration, network access patterns over time, network location and security posture. Splunk correlates rich contextual data from Forescout with other data sources and uses this information for long-term storage, swift anomaly detection and accurate trend analysis.