ForeScout Technologies has integrated its NAC automated security control system with HP ArcSight in order to deliver real time visibility and remediation.
The NAC platform will be available connected to the HP ArcSight ESM system, with the aim of helping IT organisations increase operational efficiency and react faster to security incidents.
Using a single HP ArcSight ESM console, businesses can improve automation and gain fuller endpoint configuration, access, identity and security information, as well as enforce security policies and mitigate threats using ForeScout CounterACT. With the tie-up, ForeScout also becomes an ArcSight Gold Partner.
ForeScout said users of the combined product would have access to a single administrative console to improve visibility, network access control to enable guest networking, mobile security and endpoint compliance; real-time endpoint security intelligence to obtain better configuration and security details of all devices and users ; automatic remediation and mitigation; and mobile security management.
ForeScout CounterACT, when integrated with ArcSight, will deliver 33 data fields of real-time endpoint security posture information, including anti-virus information, patch management, firewall and vulnerability information, and network information.
Scott Gordon, VP worldwide marketing at ForeScout, told Techworld the development of the tool was prompted by several end-user challenges, and addressed issues such as network access control and endpoint compliance remediation not offered within ArcSight alone.
“Companies lack real time network asset visibility,” he said, including device identification, user and group association and configuration details. With the systems, all devices, systems, users and applications are captured and compared to policy when a user attempts to access the network.
The other problems addressed by the system are a need to optimise on endpoint security investments, in order to reduce security and compliance risks, as well as to remediate security issues and mitigate violations.
If a device is not in compliance or if there is a security issue, ForeScout CounterACT can remediate the issue with “little to no IT intervention”, he said. HP ArcSight meanwhile cross-correlates security information enterprise-wide to identify security threats and violations.