ForeScout Technologies, an Internet of Things (IoT) security company, has integrated its automated remediation and threat response capabilities into the Carbon Black endpoint protection solution.The integration combines ForeScout's agentless visibility and control capabilities with the threat intelligence of the Carbon Black solution, according to a prepared statement.The ForeScout-Carbon Black integration provides organizations with visibility across IoT, guest, off-premises and other network-connected devices, according to the companies. It allows organizations to leverage threat intelligence to combat advanced threats on both ForeScout- and Carbon Black-managed endpoints and orchestrate workflows to isolate and remediate compromised devices.
How Does the ForeScout-Carbon Black Integration Work?
The ForeScout-Carbon Black integration fosters information sharing and security workflows between the ForeScout CounterACT network access control software and Carbon Black solution, the companies said. It uses the following process to help organizations detect and address cyber threats:- CounterACT identifies managed and unmanaged devices on an organization's network.
- CounterACT confirms that the Carbon Black agent is operational.
- CounterACT begins Carbon Black enrollment or other remediation actions on non-compliant devices.
- Carbon Black tracks cyber threats on managed devices.
- Carbon Black shares indicators of compromise (IOCs) with CounterACT.
- CounterACT hunts for Carbon Black IOCs across the network and isolates, restricts or blocks infected devices based on an organization's security policy.
