Datasheet

Forescout eyeExtend
for Tenable®

Uncover device vulnerabilities in real time andmitigate your risk exposure
Many of today’s sophisticated cyberattacks exploit well-known device vulnerabilities
to break into the enterprise network. Stopping these attacks requires detecting every
single endpoint as it connects and remediating its vulnerabilities immediately, before
it can become a target. Unfortunately, the proliferation of transient and unmanaged
bring your own devices (BYOD) and guest devices makes it almost impossible todetect and remediate vulnerabilities across an organization’s entire attack surface.
Vulnerability scanner and management tools such as Tenable can scan the network
for known devices and vulnerabilities, but they cannot possibly scan devices they’re
not aware of. Periodic scans also miss transiently connected devices with dangerous
vulnerabilities that expose an organization to data breaches.
Forescout eyeExtend for Tenable lets you harness complete device visibility andautomate response workflows for device compliance, remediation and risk mitigation.

Challenges• Understanding the risk exposure across the extended enterprise• Scanning, detecting and remediating endpoint vulnerabilities immediately when
new devices attempt to connect• Reducing IT and security staffs’ manual workload of managing and securing anever-increasing number of connected devices, vulnerabilities and threats• Preventing devices from accessing sensitive network systems until vulnerabilities
have been discovered and remediated

The Solution
Forescout eyeExtend for Tenable integration with Tenable.sc ® (formerly Tenable
SecurityCenter®) and Tenable.io® helps eliminate cyberattacks that target unmanaged
and transient endpoints, prevent damaging data breaches and slash IT and security
workload managing vulnerabilities across your extended enterprise (including IT,
Operational Technology (OT) and cloud infrastructures).
Forescout eyeExtend for Tenable leverages the comprehensive device visibility andcontext provided by Forescout eyeSight. With complete device discovery and in-depth
device information, Forescout eyeExtend makes Tenable aware of every single
network attached device—whether managed, unmanaged or transient—the instant it
connects, enabling Tenable to detect vulnerabilities across the entire enterprise attack
surface.
eyeExtend for Tenable infinitely extends vulnerability management by allowing
operators to trigger Tenable vulnerability scans manually or create a policy that

Benefits
Enhance the power of Tenableproducts by extending it toevery single network endpoint,
whether managed, unmanaged
or transient
Increase operational efficiency
through real-time discovery,
assessment and response tovulnerabilities
Streamline network and security
operations by continuously
enforcing device compliance at
all times
Automate remediation andresponse for noncompliant
devices

Highlights
Get complete visibility into
corporate, personal, guest andtransient devices across IT,
cloud and OT networks
Assess device configuration andcompliance when and after it
connects to the network
Initiate scans based ontime of last scan, severity ofvulnerability, change in device
posture and Tenable-specificmetrics
Isolate vulnerable devices andremediate vulnerabilities before
being allowed back onto thenetwork.
Control network access throughquarantining or blocking
vulnerable devices dynamically1Datasheet
initiates a scan automatically every time a device connects, whether it’s a new device or one with an outdated scan history, posturechanges or higher-vulnerability risks. If Tenable scans find vulnerabilities, Tenable can trigger Forescout platform in real time toisolate the device completely or allow access to low-security segments only and initiate remediation workflows, either throughbuilt-in policies or via activation of external patch management tools.
In summary, with Forescout eyeExtend for Tenable you can extend and automate vulnerability management on every single device
when and after it connects to the enterprise network, eliminating considerable IT and security staff's time and resources spent
tracking and protecting a myriad of managed and unmanaged network devices and their vulnerabilities

Use Cases
Assess device vulnerabilities on-connect
Gain real-time insight into risks and vulnerabilities on your network. eyeExtend for Tenable prevents exploitation of unmanaged
or transient endpoints by detecting devices immediately on connect. After determining if the device is new, unmanaged or has
an outdated scan, eyeExtend initiates real-time scans from Tenable, eliminating the problem of missing or out-of-date scans ondevices.
Apply policy-based conditional scans
Manage device vulnerabilities after devices connect. Operators can create a Forescout platform policy that initiates a Tenable scan
automatically in the event of a device configuration change or noncompliance. For example, Forescout platform policies can beused to trigger a scan on devices that have not been scanned in X number of days or if a device’s vulnerability severity is greaterthan X or if any monitored item has changed since the last scan. Forescout platform can also use this information to initiate
remediation in these instances.
Automate response and risk mitigationLimit network access or quarantine high-risk devices identified by Tenable and initiate remediation actions automatically to fix
vulnerabilities. When Tenable identifies a device as noncompliant, it shares the information with Forescout eyeExtend. Forescout
platform quarantines or blocks the device from accessing the network dynamically and initiates remediation workflows until
the device is deemed compliant and healthy. Forescout platform can also target remediation actions such as installing required
security software, updating agents or applying security patches proactively. Once all vulnerabilities are addressed, the device isallowed back onto the network.
Tenable SecurityCenter
Tenable.ioeyeExtend for Tenable3

A device attempts to connect to thenetwork. Forescout platform
immediately detects it

2

Forescout platform optionally puts
the device in a limited access zone
and requests Tenable to initiate areal-time scan of the device

3

Tenable scans the connecting
device and shares scan results with
Forescout platform

4

Forescout platform quarantines orblocks the high-risk device so it doesn’t
become a launching point for infection

5

Forescout platform initiates built-in
remediation actions or triggers external remediation via patch management

521Internet

14

FirewallCorporateDevice

BYOD/ Guest Devices

Forescout Technologies, Inc.
190 W Tasman Dr.
San Jose, CA 95134 USA
Toll-Free (US) 1-866-377-8771
Tel (Intl) +1-408-213-3191
Support +1-708-237-6591

Learn more at Forescout.com© 2020 Forescout Technologies, Inc. All rights reserved. Forescout Technologies, Inc.
is a Delaware corporation. A list of our trademarks and patents can be found atwww.forescout.com/company/legal/intellectual-property-patents-trademarks. Other
brands, products, or service names may be trademarks or service marks of theirrespective owners. Version 02_20B2