CounterACT & InsightVM

Streamline Mitigation of Network Based Risks

ForeScout delivers pervasive network security by allowing organizations to continuously monitor and mitigate security exposures and cyber attacks. The company’s CounterACT® appliance dynamically identifies and assesses network users, endpoints, and applications to provide visibility, intelligence, and policy-based mitigation of security issues. ForeScout’s open ControlFabric® technology allows a broad range of IT security products and management systems to share information and automate remediation actions.

Rapid7 InsightVM and Nexpose are the only vulnerability management solutions that prioritize vulnerabilities, controls, and configurations across the modern network to make better risk management decisions, faster. They leverage RealContext, RealRisk, and critical threat awareness from our Metasploit product to prioritize and validate your risk, so you can focus on fixing the issues that have impact. Together, Rapid7 and ForeScout streamline remediation efforts.

How It Works

As a member of the ForeScout ControlFabric® partner program, Rapid7’s InsightVM* will work with CounterACT® to enable real-time assessment and policy-based mitigation of endpoint security risks. Specifically, Rapid7 InsightVM will run a scan and create an XML report; ForeScout CounterACT® will then pull that report and mitigate based on the contents to perform real-time vulnerability assessments and automated remediation.

Real-time vulnerability assessment

An integrated CounterACT® and InsightVM solution will invoke real-time discovery and assessment of devices as they connect to the network, including the transient ones. CounterACT® can detect a device when it connects to the network, or when a monitored property of a network device changes, and can invoke InsightVM to scan the device—in that moment.

Automated remediation and reduced mean time to resolve (MTTR)

Working together, CounterACT® can act on information received from InsightVM to improve compliance by directly remediating endpoints, initiating external remediation processes, and limiting or removing network access of devices that present a high security risk to the network.

For owners of both products, this instantaneous identification, assessment and mitigation gives security teams a better ROI as the automated efforts frees up time and effort for the organization.

What You Need

• Rapid7 InsightVM or Nexpose
• ForeScout CounterACT

*All mentions of Rapid7 InsightVM associated with the ForeScout CounterACT® also apply to Rapid7 Nexpose.