Any serious attempt to manage security risk must start with complete knowledge of who and what is on your network and whether those devices are secure. ForeScout CounterACT extends McAfee ePolicy Orchestrator (McAfee ePO) software’s visibility to unmanaged devices through real-time network security — including visibility into device type, such as personal laptops, smartphones, and rogue wireless access points. ForeScout CounterACT also provides McAfee Enterprise Security Manager with important host property information in real time, including the applications running on them. This real-time monitoring approach ensures that McAfee Enterprise Security Manager has a continuous, current view of what is on your network.

Integration with ForeScout CounterACT also helps automate the installation of security agents, including those from McAfee, and assures that those agents are active and current on new and previously unmanaged systems. Finally, integration with ForeScout CounterACT allows IT security managers to quarantine endpoints that do not comply with security standards.

Figure 1. Integration between ForeScout CounterACT and McAfee ePO.

Figure 2. Integration between ForeScout CounterACT and McAfee ESM.

ForeScout CounterACT 6.3.4 with McAfee ePO and SIEM integration modules; McAfee ePO 4.5 and 4.6; McAfee Enterprise Security Manager 9.0 and 9.1.

Data integration: ForeScout provides real-time security information to McAfee ePO and McAfee ESM for both managed and unmanaged assets.

The integration is available directly from ForeScout with the products that comprise the McAfee Compatible solution.