Forescout Platform Reviews

My main use case for Forescout Platform was to prevent unknown devices from entering my network. It was primarily used in a manufacturing company with IT and OT networks.

Forescout Platform was really useful for my operations team because everything is done automatically, eliminating the need for manual intervention.

We use the solution to configure several policies and for internal security purposes. We have configured switching and several devices in our infrastructure.

When users don't have the required updates, security patches, and antivirus, the tool blocks them from our network. It is the most valuable feature of the solution.

The product is used especially in scenarios where you have an abandoned server that did not have any updates or any security updates or a stable operating system, owing to which you had to shut it down in your environment. If, somehow, somebody tries to switch on an abandoned server, Forescout will check if the operating system and antivirus are updated or not, and if they are not, then it will immediately disconnect such a server from the network and isolate it.

The valuable feature of the product stems from the fact that it is easy to implement. The person who implemented the tool had a security team and a department that took care of the implementation and defined the policies along with everything else. For patching purposes, my company uses Ivanti Endpoint Management Software.

We use it to enforce maintenance tasking orders or time compliance network orders that are passed down. 

We can do a lot with Forescout. We use it to quarantine non-compliant machines. We use it to mitigate vulnerabilities. We can push patches, and we can push scripts through Forescout. For example, if we need to know how many Windows machines are using the 10.9 image or whatever, we can look that up easily.

Forescout Platform works as our next-gen solution, helping us monitor and manage devices connected or disconnected from the network. Additionally, it assists in remediating noncompliant devices.

Forescout Platform's most valuable aspect is its excellent device profiling for devices without agents, which is crucial for our work due to challenges with agent-based devices. Its isolation and blocking actions are particularly effective for network security. The device compliance feature helps us ensure device compliance through immediate actions like updating antivirus software. We have already integrated Forescout with antivirus and vulnerability assessment tools, allowing it to monitor vulnerability scores and automatically isolate devices if critical vulnerabilities are detected.

Our primary use of the Forescout Platform is to enhance network security. It is deployed in an on-premises environment, although there is interest in exploring cloud-based solutions.

Automated policy enforcement is particularly valuable as it significantly reduces the need for manual intervention, thus enhancing efficiency and security.

We have two main use cases: wired networks and wireless networks. In the wireless scenario, our main focus is on authenticating users to ensure compliance before granting access to our private network.

We use the Forescout Platform for device visibility and control in our network. It's very helpful for tracking malicious or unusual activity. We use it to track which ports are open, which machines are running specific services, and to identify vulnerabilities. For example, there was a vulnerability related to SMB, and we could use the product to determine which machines inside our organization were allowing SMB traffic.

The tool's most valuable feature is its ease of configuring and controlling endpoints, particularly in building policies for endpoint management. Its interface is simple to use and offers good visibility.

When compared with other solutions, the Forescout Platform's standout feature is its ability to integrate with various systems. This capability is particularly valuable as it supports the implementation of a zero-trust architecture. We are currently in the process of constructing our zero-trust architecture, wherein the tool serves as a pivotal component.

The solution's compliance capabilities have indeed been very beneficial for our organization. Unlike other solutions, it allows us to implement controls swiftly. Typically, transitioning to a blocking mode with other solutions would take around six months. However, we achieved this with the Forescout Platform within just one month.

We use the Forescout Platform for radius authentication, as well as visibility control and enforcement. Such as discovery, classification, control, and orchestration for all possible use cases.

This is clearly the best product for the NAC use cases in this field for Forescout. It is difficult to implement. I wouldn't say it's complicated in that sense. It all depends on who is using it. 

If people don't understand the product, it's obviously complicated because it has multiple components that are difficult to mix and match and bring into the environment, which we faced a couple of years ago. But now that we know how the products and different licensing models work, we can bring in the right components, such as modules and all. It's kind of like once you know the product is simple.  Otherwise, you must understand that this is somewhat complicated.