Rechercher
Contactez-nous Suivez-nous sur Twitter En francais English Language
 











Freely subscribe to our NEWSLETTER

Newsletter FR

Newsletter EN

Vulnérabilités

Unsubscribe

Attivo Networks and ForeScout Team Up to Provide Real-Time Threat Detection and the Automated Quarantining and Blocking of Cyber Attacks

July 2016 by Marc Jacob

Attivo Networks®, the award-winning in deception for cyber security threat detection, today announced a partnership and technology integration with ForeScout Technologies, Inc., the pioneer in agentless cybersecurity. The combined solution will provide real-time detection of cyber-attacks and will automatically update the ForeScout® CounterACT® solution to instantly block and quarantine cyber threats. The integration is designed to dramatically reduce incident response time and provide customers with the ability to help prevent the exfiltration of company data and the spread of infection to other devices.

The Attivo Deception Platform has two primary products which both integrate with ForeScout CounterACT. First, the BOTsink management platform, which is designed to provide inside-the-network threat detection, attack analysis and forensics. In addition, the Attivo End-Point Deception Suite provides the end-point deception lures used to deceive and misdirect attackers.

• The integration with the BOTsink management platform includes the detection of all vectors of cyber-attack including reconnaissance, stolen credentials, phishing, ransomware and multi-stage exploit kits. Attack information gathered from engagement with an attacker is analysed and automatically communicated to CounterACT for the automated blocking of data exfiltration and communications with Command and Control, and to quarantine the infected device from the network so that additional systems do not become infected.

• Integration with the Attivo End-point Deception Suite and CounterACT provides an additional option to expedite and simplify the deployment of the Suite for large-scale end-point deployments. Integrations with Microsoft Active Directory and Casper are also available deployment options.

ForeScout CounterACT is a physical or virtual security solution that dynamically identifies and evaluates network endpoints the instant they connect to your network. Because CounterACT doesn’t require agents, it works with your endpoints — managed and unmanaged, known and unknown, PC and mobile, embedded and virtual. CounterACT can quickly determine information about the endpoint such as user, owner, operating system, device configuration, software, services, patch state and the presence of security agents. Next, it continuously monitors endpoints as they come and go from the network and works with third-party tools to initiate policy-based remediation actions. CounterACT works with leading network infrastructure, third-party security and IT management solutions.


See previous articles

    

See next articles












Your podcast Here

New, you can have your Podcast here. Contact us for more information ask:
Marc Brami
Phone: +33 1 40 92 05 55
Mail: ipsimp@free.fr

All new podcasts