Bahrain, Saudi Arabia
ForescoutKnow every device on your network, and control what it can reach
Forescout discovers and classifies IP-connected devices across IT, IoT, operational technology (OT) and medical devices without installing agents, then assesses their risk and enforces access policy.
- Agentless
- Discovers managed, unmanaged, legacy and headless devices without installing software on them
- IT, IoT, OT, IoMT
- One platform covering office IT, connected devices, industrial systems and medical devices
- 802.1X optional
- Network access control that works in 802.1X and non-802.1X networks
- Flexible deployment
- Physical or virtual appliances, containers, hybrid and cloud options
Problems Forescout is used to solve
Most networks now carry far more than laptops and servers. These are the issues that usually lead organisations to look at device visibility and network access control (NAC).
| Topic | What it can lead to | How Forescout helps |
|---|---|---|
| No accurate inventory of connected devices | What it can lead to: Printers, cameras, building systems and personal devices go unpatched and unmonitored because nobody knows they are there. | How Forescout helps: Continuous agentless discovery and classification of IP-connected devices, with device context in a real-time inventory. |
| Devices that cannot run an agent | What it can lead to: IoT, OT and medical devices sit outside endpoint protection, so risky or vulnerable devices are invisible to security tools. | How Forescout helps: Discovery and risk assessment that do not depend on agents, covering IoT, OT and medical devices. |
| Anyone can plug in and get access | What it can lead to: Unknown or non-compliant devices join the same network as critical systems. | How Forescout helps: Posture checks before and after connection, with policy-based VLAN assignment, access control lists or containment. |
| Flat networks | What it can lead to: A single compromised device can reach far more of the network than it needs to. | How Forescout helps: Network segmentation design and enforcement based on device type and role. |
| 802.1X projects that stall | What it can lead to: Partial rollouts because older switches or devices cannot support 802.1X. | How Forescout helps: Access control that works in both 802.1X and non-802.1X environments. |
| Security tools that do not share context | What it can lead to: Analysts lack device details when investigating, and response is manual. | How Forescout helps: Integrations that share device context with tools such as SIEM, ticketing and endpoint security, and automate response actions. |
What Forescout does
Forescout presents its offering as one platform with modules that can be adopted separately. These are the capabilities most organisations start with.
Asset discovery and inventory
Finds IP-connected devices using active and passive techniques, classifies them and keeps a real-time inventory with device context.
Network access control
Checks device identity and security posture, then applies policy: assigning VLANs, applying access control lists or containing non-compliant devices.
Network segmentation
Helps design and deploy segmentation so devices can reach only what their role requires, without disrupting operations.
OT and IoT security
Agentless visibility and threat detection for operational technology and IoT, with separate coverage for medical devices.
Exposure management
Finds, assesses and ranks cyber risk across connected assets so teams can work on the riskiest devices first.
Security automation
Shares device context with other IT and security tools and coordinates response actions across them.
Forescout modules and what each covers
Forescout lists these modules on its platform page. Most organisations begin with visibility and access control and add others as needs grow.
| Topic | What it covers | Typical starting question |
|---|---|---|
| Asset Inventory | What it covers: Real-time inventory and device context for connected assets | Typical starting question: What is actually connected to our network? |
| Network Access Control | What it covers: Identifies connected assets, checks posture and enforces access policy | Typical starting question: How do we stop unknown or non-compliant devices getting in? |
| Network Segmentation | What it covers: Designing and deploying segmentation | Typical starting question: How do we limit what a compromised device can reach? |
| OT Security | What it covers: Agentless visibility and threat detection for OT and industrial control system (ICS) networks | Typical starting question: What is happening on our industrial networks? |
| IoT Security | What it covers: Discovery, risk assessment and control of IoT devices | Typical starting question: Which cameras, building systems and other IoT devices are on our network? |
| Medical Device Security | What it covers: Discovering medical devices and assessing their risk | Typical starting question: Which clinical devices are on the network, and how exposed are they? |
| Exposure Management | What it covers: Ranking cyber risk across devices | Typical starting question: Which devices should we fix first? |
| Automated Compliance | What it covers: Continuous checks of device security hygiene and compliance, with automated remediation | Typical starting question: Can we prove our devices meet policy? |
Module names and packaging change over time. Confirm the current modules and licensing with Forescout or with our team before you plan a purchase.
Before you deploy network access control
Useful preparation for any NAC or device visibility project, whichever product you choose. Nothing you tick is saved or sent.
How VirtuThinko helps you adopt Forescout
- 01
Requirements
We can help you map your network, device types and goals, and identify which Forescout modules fit.
- 02
Proof of concept
A discovery-only trial on part of your network, so you can see what Forescout finds before committing.
- 03
Design and deployment
Appliance or virtual deployment design, integration with your network equipment and tools, and initial policies.
- 04
Tuning and enforcement
Refining classification and policies in monitor mode, then phasing in enforcement, followed by handover and documentation.
- 05
Ongoing support
Policy changes, upgrades and troubleshooting as your network changes.
No. Forescout describes its discovery, classification and posture assessment as agentless, which is why it can cover devices such as printers, cameras, OT and medical devices that cannot run software.
No. Forescout states that its network access control supports both 802.1X and non-802.1X networks, so you can enforce policy on switches and devices that do not support 802.1X.
According to Forescout, policies can assign devices to the appropriate VLANs, apply access control lists, or contain non-compliant and high-risk devices. Enforcement can apply before and after a device connects.
Forescout lists on-premises appliances, virtual machines and Docker containers, with air-gapped, hybrid and cloud-based options. The right design depends on your sites and network architecture.
Forescout uses both passive and active discovery techniques. For sensitive environments, discovery can be planned to rely on passive monitoring; agree the approach with your OT or clinical engineering team first.
Forescout states that it integrates with a range of IT and security products, including SIEM, ticketing, endpoint and firewall tools, to share device context and automate actions. Check the specific integrations you need with Forescout.
Explore Forescout for your organisation
Tell us about your network, the device types you need to see and control, and your sites. A member of our team will contact you to arrange an initial conversation.