Check Point Infinity Platform
Check Point · Cloud and network
Network and cloud threat prevention with unified management
Forescout Platform
Forescout · Cloud and Network Security
See and control every connected device, including IoT and operational technology.
Draft summary. This page summarises what the vendor's product family is generally known for. Each claim is pending confirmation against vendor documentation.
Overview
Forescout finds devices on the network without needing an agent, identifies what they are and assesses their risk. It can then restrict or isolate a device that is unmanaged, non-compliant or behaving suspiciously.
It is widely used in environments with many device types, such as offices, hospitals, factories and utilities, where IoT and operational technology cannot run security agents.
- Primary capability
- Device visibility, network access control and segmentation
- Deployment models
- On-premisesPending vendor confirmationHybridPending vendor confirmationSaaSPending vendor confirmation
- Management effort
- HighPending vendor confirmation
Customer challenges and business value
Unknown devices on the network
Unmanaged laptops, cameras, printers and industrial equipment connect without any record in IT inventories.
Agents cannot cover everything
Many devices cannot run an endpoint agent, so they stay outside normal security tooling.
Flat networks spread attacks
Once inside, an attacker can reach systems that have no business talking to the compromised device.
What this helps you achieve
- A current inventory of everything connected
- Access policy applied to devices that cannot run agents
- Smaller blast radius through segmentation
Key capabilities
- Agentless device discovery and classification across IT, IoT and OTPending vendor confirmation
- Risk and compliance assessment of devicesPending vendor confirmation
- Network access control and automated responsePending vendor confirmation
- Network segmentation policy design and enforcementPending vendor confirmation
- Integration with firewalls, endpoint tools and SIEMPending vendor confirmation
Technical architecture and deployment
Where the product sits in a typical security architecture, and what it connects to.
Data sources
- Network switches and traffic
- IT, IoT and OT devices
This product
Forescout platform
Outputs and actions
- Device inventory
- Access and segmentation policy
- Alerts to SIEM
Integration ecosystem
Categories of systems this type of product commonly connects to. Specific connectors and versions are confirmed with the vendor.
- Switches, wireless controllers and firewallsPending vendor confirmation
- Directory servicesPending vendor confirmation
- Endpoint security and vulnerability toolsPending vendor confirmation
- SIEM and ticketingPending vendor confirmation
Common use cases
- Building an asset inventory of IT, IoT and OT devices
- Blocking unmanaged devices from sensitive networks
- Segmenting operational technology
- Showing device compliance to auditors
Frequently asked questions
Does it need an agent on devices?
Discovery is agentless. Some enforcement features depend on integrations with the network equipment. We check this against your environment.
Where does the information on this page come from?
This page is a draft summary of what the vendor's product family is generally known for. Capabilities, deployment models and integrations are marked as pending until they are checked against vendor documentation. Ask us for a confirmed scope for your environment.
Related products
Cato SASE Cloud
Cato Networks · Cloud and network
Unified SD-WAN and cloud-delivered network security (SASE)
Horizon3.ai NodeZero
Horizon3.ai · Validation
Autonomous penetration testing and attack path discovery
Talk to an expert about Forescout Platform
Share your environment and requirements. We will confirm product details with the vendor and help you decide.
Request a consultation