Product Description: ActiveScout™ security appliance delivers an entirely unique approach to preventing network intrusions: Stop attackers based on their "proven intent" to attack. ForeScout's patented technology detects attackers' reconnaissance and responds to them with counterfeit information. If an intruder attempts to use this information to attack the network, he has proven his malicious intent and can be blocked before the network is compromised. ActiveScout's ensures elimination of threats before they ever reach the network - without ever requiring signatures, deep packet inspection, anomalous behavior or manual intervention.
Absolute accuracy when detects attackers through early stage identification of their pre-attack activity, and ensures that no pre-attack activity goes unnoticed, stopping even the most sophisticated and intelligent attackers.
Identify “low and slow” scans even when carried out with a considerable amount of time between each step, track attackers who change IP addresses, and detect attackers who avoid scanning and attempt to find available resources by launching mass attacks at multiple targets.
Detects and automatically blocks active threats such as self-propagating malware, espionage, and malicious hacker attacks in real-time.
Automated response system requires no prior knowledge of the attack to provide an unparalleled level of protection against “zero-day” threats.
Customized blocking can be selectively activated, depending on corporate security policies. Blocking can be activated for specific attack categories, with configurable action duration and alert options.
Advanced TCP session reset is activated during the initiation of the TCP session, providing efficient blocking.
Firewall-based blocking makes the firewall dynamic by creating rules in real-time enabling he automated blocking of intruders.
Highlights: Since ActiveScout uses a patented technology that is based off reconnaissance activity, it is completely signature-less and is behavior-based, therefore eliminating the need for manual updates as well as reduces the chance of false positives. In addition, this provides a higher level of protection to the network while users may have not yet downloaded the latest AV files.
End-Users: Medium to Large Enterprises.
ForeScout Technologies
10001 N De Anza Blvd Suite 220
Cupertino , CA 95014 USA Tel: 1-408-213-3191
Pros
:
Cons
:
Recommend to others
:
Yes
No
Yes, I want to subscribe to email newsletters from Info Security Products Guide
Yes, I am an end-user and would like to be included in the voters list
Full Name
:
Company Name
:
Title
:
Address
:
City
:
State
:
Country
:
Telephone
:
(with area & country code)
Email Address
:
Renter Email Address
:
I am:
Existing end-user
Prospective Customer
Other: