ForeScout expands device visibility platform to secure the extended enterprise


  • Supports up to 2 million devices in a single enterprise manager for industry-leading scalability and increased visibility across entire enterprise environment, including operational technology and critical infrastructure
  • ForeScout’s Device Cloud now includes 3+ million devices from more than 500 customers for crowd-sourced IoT device insight and enables auto-classification of enterprise devices
  • New IoT assessment capability identifies vulnerable IoT devices for compliance and risk mitigation
  • New software-centric licensing model gives enterprises flexible purchasing, deployment and management options

Sydney, Australia ForeScout Technologies (NASDAQ: FSCT), a leading Internet of Things (IoT) security company, announced new foundational innovations in ForeScout CounterACT® 8 that raise the bar on device visibility and control to mitigate risk, reduce the attack surface and automate incident response across the extended enterprise network – from the campus to data center, cloud and critical infrastructure. The enhanced ForeScout device visibility platform adds increased scalability, cloud-based device intelligence, IoT device assessment, and flexible centralised licensing to help enterprises see and control more than 5 billion[i] IP-connected devices, including traditional, mobile, virtual, IoT and Operational Technology (OT).

“The industry has a massive visibility problem that is only growing as the number of corporate unmanaged IP-connected devices continues to explode. Enterprises can’t protect their networks if they don’t know what’s on their networks,” said Michael DeCesare, CEO and president, ForeScout Technologies. “The result of two years of engineering innovation, our enhanced device visibility platform represents a step forward and sets a foundation for the deep, scalable device visibility and control required to secure the new generation of enterprise networks.”

In the last year, organisations have had to keep pace with the rapid growth of devices while managing security hygiene and compliance. Companies are discovering up to 60 percent[ii] more devices on their network than previously known with an increasing majority that cannot support management and security agents. Threat actors have also begun to exploit the expanded attack surface represented by non-traditional IoT and OT devices as entry points into the enterprise. To solve these challenges, ForeScout has expanded its device visibility platform to deliver the following key features and benefits:

  • Expanded device visibility: The platform now provides better insight into some of the fastest growing enterprise devices, including industrial and critical infrastructure systems, IPv6 addressable devices and devices managed by cloud controllers such as Cisco Meraki.
  • Increased device intelligence: Launched in July 2017, the ForeScout Device Cloud has grown to be one of the largest crowd-sourced device repositories in the world, now housing more than three million enterprise devices from more than 500 customers that share anonymised device insight. ForeScout’s platform uses the data to analyse device types and publish new and improved device profiles for better auto-classification. Additionally, ForeScout’s platform now includes a new IoT risk assessment capability that allows organisations to identify devices with default or weak credentials and automate policy actions to ensure compliance and mitigate risks. Lastly, the device visibility platform adds new passive-only discovery and profiling to provide organisations with real-time OT and industrial device inventory without introducing operational risk or impacting reliability.
  • Improved scalability and deployment: Improved management scale from one million to two million devices per single deployment allows enterprises to keep pace with device growth. They can also optimise rack space and data center utilisation by managing up to 20,000 devices on a single 1U appliance with full 10Gbps traffic monitoring. A new virtual deployment option includes KVM support, in addition to VMware and Hyper-V. The new auto IP-allocation feature allows customers to automate IP distribution and management across a multi-appliance cluster and reduce manual administrative tasks.
  • Flexible purchasing and deployment options: New ForeScout Flexx licensing provides customers choice and simplifies portability and entitlement management by enabling them to purchase ForeScout’s CounterACT and Enterprise Manager platform as a centralised software license.

Supporting Comments:

According to a January 2018 Forrester report by Chase Cunningham, The Zero Trust eXtended (ZTX) Ecosystem, “IoT and network-enabled device technologies have introduced a massive area of potential compromise for networks and enterprises. Smart TVs, mobile devices, and even smart coffee makers are all over the market now, and each of those items introduces new avenues of code and assets that security teams must track and treat as untrusted in any infrastructure. In order to really move toward a Zero Trust strategy, security teams must be able to isolate, secure, and control every device on the network at all times.”

“Instead of kicking the thousands of IoT off our network, which would impact business operations and productivity, ForeScout gives us complete visibility and control of these devices. During the outbreak of WannaCry, ForeScout detected, prioritised and automated patching saving HubSpot’s security practitioners hours on manual processes to safeguard against ransomware infections,” said Nick Duda, principal security engineer, HubSpot. “Since we can’t trust the system integrator to implement our device configuration best practices, we use ForeScout policies to inspect their security posture and automate risk mitigation actions if they are non-compliant.”

Additional Resources:

About ForeScout

ForeScout Technologies, Inc. helps make the invisible visible. Our company provides Global 2000 enterprises and government agencies with agentless visibility and control of traditional and IoT devices the instant they connect to the network. Our technology integrates with disparate security tools to help organizations accelerate incident response, break down silos, automate workflows and optimize existing investments. Learn more at

[i] Figure based on ForeScout Device Model Methodology

[ii] Based on ForeScout end-customer feedback