- Agentless visibility lets you see unmanaged devices, such as Bring Your Own Device (BYOD) and non-traditional Internet of Things (IoT) endpoints
- Continuous monitoring and assessment discovers new devices and those that drop on and off the network
- ForeScout ControlFabric® Architecture shares contextual information and extends the enforcement capabilities of CounterACT to a wide range of IT and security management products
Network Access Control (NAC)
ForeScout CounterACT® expands the capabilities—and meaning—of network access control. CounterACT provides real-time visibility of users, devices, operating systems and applications that are connected to the network. After discovering and classifying devices, CounterACT provides comprehensive network access control capabilities to enforce your network access and compliance policies. Several CounterACT capabilities raise the bar well above traditional NAC offerings:
ForeScout can enforce the appropriate level of control—from modest to stringent—based on your security policies.
Improve Security with Advanced NAC Capabilities
CounterACT improves enterprise security by helping ensure that unauthorized users and unsanctioned applications and devices are not on your network. In addition, CounterACT can:
- Help ensure authorized endpoints are properly configure
- Verify host-based security applications, such as antivirus, are installed, running and updated
- Check that devices are patched and the latest versions of vulnerability software are installed
- Determine encryption and data loss prevention agents are running properly
Boost Operational Efficiencies to Save Time and Money
CounterACT can be centrally administered to dynamically manage tens or hundreds of thousands of endpoints from one console and help you be more efficient. CounterACT can:
- Eliminate manual labor associated with locating systems, opening or closing network ports and managing guest access
- Gain dynamic asset intelligence to streamline inventory management
- Automatically detect and categorize network devices such as printers and IoT devices
- Automatically grant, deny or limit network access according to policy
Enable Mobile Workforce Productivity
Unlike legacy NAC products, which use clunky, heavy-handed controls that disrupt users without ensuring an effective response, CounterACT provides an extensive range of automated controls that help keep people productive and business running efficiently. CounterACT can:
- Grant the right level of network access to people and devices, without intrusive intervention or software installation
- Provide several guest registration options, allowing you to tailor the guest admission process to your organization’s needs
- Allow employees and contractors who bring their own devices to be redirected to an automated onboarding portal rather than simply being blocked
Ensure Network Availability
CounterACT helps keep your network available and users productive. CounterACT can:
- Install out-of-band, avoiding latency or issues related to the potential for network failure
- Provide a full range of policy-based actions, such as allowing, denying and limiting network access based on device posture and security policies
- Quickly assess and remediate malicious or high-risk endpoints
