Forescout Joins MISA and Announces Integration with Microsoft Sentinel to Provide Automated Cyber ​​Threat Management Services Across Enterprise Infrastructures

Forescout, a global cybersecurity leader, today announced integrations with Microsoft Sentinel as part of a broader initiative to support the Microsoft Security Portfolio.

These integrations will provide real-time visibility, cyber threat management and incident response capabilities across multiple enterprise infrastructures: campus, datacenter, remote workers, cloud, mobile, IoT and IoMT endpoints.

The problem

The continued increase in the severity, sophistication and number of cyberattacks has demonstrated that many organizations' current disparate cybersecurity frameworks and tools are insufficient. Understaffed security operations centers (SOCs), the proliferation of unmanaged devices, and newly discovered and exploitable vulnerabilities on legacy systems compound and exacerbate the risk and likelihood of a breach. More sophisticated adversaries target increasingly complex and heterogeneous cyber environments, while security teams are inundated with false positives and threats that go undetected, prioritized or responded to appropriately.

The solution

Forescout helps companies continuously identify and classify every type of connected asset (IT, OT, IoT and IoMT, managed, unmanaged or non-agent) and enables the automated application of appropriate security and compliance measures to reduce risks.

“We are proud to join the Microsoft Intelligent Security Association (MISA) through our integration with Microsoft Sentinel, to provide customers with a comprehensive and holistic approach to cybersecurity,” said Barry Mainz, CEO of Forescout. “With this integration, Forescout helps security teams more fully understand the risks within their network, helps mitigate cyber attacks and, most importantly, helps them respond quickly and accurately if they occur.”

Microsoft's Sentinel platform adds a crucial layer of automated intelligence by providing an automated and impactful way to dramatically improve the signal-to-noise ratio that security teams grapple with on a daily basis.

Integration

Forescout's new comprehensive integration with Microsoft Sentinel, along with long-standing touchpoints with Microsoft's broad suite of Enterprise solutions, provides joint customers with real-time device context, risk insights, and automated mitigation and remediation capabilities which will improve overall security response times to incidents and events. This allows customers to remove complexity from the incident response process by leveraging Forescout's automation and artificial intelligence to quickly make contextual decisions to improve security or mitigate a cyber incident.

The advantages

Benefits of integrating Forescout with Microsoft include:

• Fastest Average Time to Response (MTTR) : Enables orchestration of host-based remediation via Microsoft Defender, via integrations with Microsoft Sentinel along with network-based response via Forescout, to accelerate average response time for the SOC.
• Comprehensive, real-time asset discovery and inventory: provides a holistic 360-degree view of the business environment. This includes valuable device context such as logical and physical network location, risk exposure, device identity, and taxonomy.
• Asset lifecycle management: automatically evaluates behavior and enforces compliance, identifies known vulnerabilities and indicators of compromise, quarantines at-risk devices, remediates issues, and allows endpoints to rejoin the network with appropriate network segmentation policies, all enforced by a single platform. An ideal set of features to integrate “comply to connect” initiatives with a proven ability to never lose context of resources at any stage of the process.
• Attack surface and automated threat management: real-time risk assessment and endpoint behavior resolution to harden devices, segmentation policies to enforce least privilege network connectivity, automated discovery and quarantine controls that together enable a true Zero Trust architecture.

About Forestcout

Forescout Technologies, Inc., a global leader in cybersecurity, continuously identifies, protects and helps ensure compliance of all managed and unmanaged connected computing assets: IT, IoT, IoMT and OT. For more than 20 years, Fortune 100 organizations and government agencies have relied on Forescout to provide automated, vendor-neutral cybersecurity at scale. The Forescout® platform offers comprehensive capabilities for network security, risk and exposure management, and extended detection and response. By seamlessly sharing context and orchestrating workflow through ecosystem partners, it enables customers to more effectively manage cyber risk and mitigate threats. www.forescout.com

BlogInnovazione.it