Integrate Device Security with Forescout to identify and
quarantine IoT devices.
Where Can I Use This?
What Do I Need?
Device Security (Managed by Strata Cloud Manager)
(Legacy) IoT Security (Standalone portal)
One of the following subscriptions:
Device Security subscription for an advanced
Device Security product (Enterprise Plus,
Industrial OT, or Medical)
Device Security X subscription
One of the following Cortex XSOAR setups:
A free, cohosted, limited-featured
Cortex XSOAR instance
AND
A Cortex XSOAR Engine (on-premises integration)
A full-featured Cortex XSOAR server
You can integrate Device Security through Cortex
XSOAR with Forescout, a NAC (Network Access Control) platform. Once
integrated, you can manually export the attributes of devices in
the Device Security inventory to populate host properties on your
Forescout instance and thereby enrich its device inventory. Additionally,
when a security alert is triggered, you can send an attribute from
Device Security to Forescout that it can use to quarantine an endpoint device
or release it from quarantine.
Device Security integrates with
Forescout through Cortex XSOAR and an on-premises XSOAR engine.