ENTERPRISE-WIDE NETWORK SEGMENTATION )) SOLUTION BRIEF

Enterprise-Wide
Network Segmentation
Simplify Zero Trust segmentation without disruption

The promise of digital transformation efficiencies, innovation andproductivity has resulted in flat, interconnected networks. Thesesystems are susceptible to lateral movement of threats and unable tosecure the growing numbers of connected Enterprise of Things (EoT)
devices. As IT teams explore segmentation options to implement Zero
Trust controls and increase security, concerns about complicateddeployments and costly business disruption tax organizational
confidence and stall progress. Challenges include:‘‘

IoT and network-enableddevice technologies haveintroduced potential com-• Lack of confidence to move forward on segmentation projects

promise of networks and• Multivendor operational complexity and inconsistency insegmentation policies across multi-domain environments

enterprises…Security teams• Lack of skills, resources and tools to effectively design, build andcontrol every device on the

deploy network segmentation across the extended enterprise

Forescout: the best-in-class Zero Trust
segmentation solution
If these challenges sound familiar, now is an excellent time to evaluate
the Forescout solution, which simplifies Zero Trust segmentation andoptimizes risk management for your connected EoT environment.
The Forescout platform accelerates dynamic, context-driven network
segmentation without complexity, excessive cost or negative impact onbusiness.

must isolate, secure, andnetwork, continuously. 1
FORRESTER RESEARCH
June 2020

1

forescout.com/solutions/network-segmentation

salesdev@forescout.com

toll free 1-866-377-8771

ENTERPRISE-WIDE NETWORK SEGMENTATION )) SOLUTION BRIEF

We’ll meet your needs by helping you:

EXTEND THE VALUE OF YOURSECURITY & IT INVESTMENTS• Accelerate Zero Trust segmentation across the extended enterprise• Gain an instant understanding of your network segmentation state
in real time on any device, anywhere•

Enable non-disruptive anddynamic segmentation• Reduce your attack surface and maintain compliance throughdynamic segmentation across IT, IoT and IoMT (Internet of MedicalThings) systems•

Accelerate network Zero Trust
segmentation projects withconfidence• Simplify threat analysis with fewer tools and dashboards•• Reduce compliance risk and cost by efficiently managing
cybersecurity detection and response

Reduce the risk of businessdisruption•

Reduce operational cost•

Rapidly adapt to complianceand regulatory requirements• Optimize cross-team workflows and leverage existing investmentswith a consistent segmentation policy across the entire enterprise

Not a cookie-cutter approach
There is no one-size-fits-all solution to network segmentation. All segmentation tools have specificstrengths, use cases and areas on the network where they are most effective. The Forescout platform,
including Forescout eyeSegment, bridges these disparate technologies to accelerate the design, planningand deployment of dynamic network segmentation across the extended enterprise to implement effective
Zero Trust policies, reduce regulatory risk and limit the attack surface.

Removing the complexity from Zero Trust segmentation
Forescout simplifies segmentation policy planning, design and implementation across heterogeneous
networks using a unique, three-tier architecture.
POLICY LAYER
Devices | Applications | Users | Services | Traffic
Design, test and validate context-aware policies
Know & Visualize

Design & Simulate

Monitor & Respond

CONTROL ORCHESTRATION LAYER
Orchestrate policies across networks & multivendor enforcement points

ENFORCEMENT LAYERTechnology Partner Ecosystem

Cloud

Data CenterCampus

IoTOT2

forescout.com/solutions/network-segmentation

salesdev@forescout.com

toll free 1-866-377-8771

ENTERPRISE-WIDE NETWORK SEGMENTATION )) SOLUTION BRIEF

IDENTIFY
Forescout eyeSight: Rich context for every IP
address
The eyeSight product provides unparalleled insightand context into the entire connected network fromcampus to data center to the cloud—transforming
your connected inventory into a logical taxonomy
of devices, applications, users and services. Use
this taxonomy to group all connected devices into alogical business hierarchy for network segmentation.
Visit http://www.forescout.com/platform/eyeSight
for more details.

SEGMENT
Forescout eyeSegment: Simplify Zero Trust
segmentation for any device, anywhere
Forescout eyeSegment accelerates the design,planning and deployment of dynamic Zero Trust
segmentation across the extended enterprise.
It enables organizations to embrace Zero Trustprinciples for EoT security. eyeSegment enables

rapid acceleration of segmentation projects acrossthe extended enterprise to reduce the attack surface,
limit the blast radius and mitigate regulatory andbusiness risk. Visit http://www.forescout.com/
platform/eyeSegment for more details.

ENFORCEeyeControl/eyeExtend: Orchestrate consistentcontrols across network domains and multivendor
environments• eyeControl enables consistent enforcement ofcontext-aware segmentation policies and controls
to existing underlying technologies—eliminating
the need for agents. Learn how at www.forescout.
com/platform/eyeControl• eyeExtend products orchestrate controls via
out-of-the-box integrations with leading nextgeneration firewall (NGFW) vendors. Learn more
about Forescout NGFW integrations atwww.forescout.com/platform/eyeExtend

Visualize traffic to understand policy design
Monitor traffic flows in real time to learn device and process dependencies as you create desired Zero Trust
segmentation policies. Understanding this context helps you build micro-segmented zones while maintaining
business continuity.

3

forescout.com/solutions/network-segmentation

salesdev@forescout.com

toll free 1-866-377-8771

ENTERPRISE-WIDE NETWORK SEGMENTATION )) SOLUTION BRIEF

Segmentation expertise for every use case
The Forescout network segmentation solution addresses a widearray of use cases within Healthcare, OT (operational technology),Financial Services, Government, Retail and other industry sectors. In
every case, the Forescout platform’s flexibility helps to reduce the riskof business disruption and minimize operating costs related to Zero
Trust implementation and segmentation projects. Read our Network
Segmentation Use Case Overview to learn more.
Learn more

SEGMENTATION CONSULTING

Are you extending your Forescout
deployment into advanced
segmentation control scenarios?
Forescout’s Architecture Workshop
can help ensure that your network
segmentation policies andimplementation align with yourbusiness strategy. Learn more.

Learn more about Forescout’s non-disruptive approach to Zero
Trust segmentation – including how the Forescout platform helps
you achieve dynamic segmentation on any heterogeneous network
using your existing enforcement technologies. Visit our Forescout
eyeSegment web page.
1. Mitigating Ransomware With Zero Trust, Forrester Research, Inc., June 8, 2020

Don’t just see it.
Secure it.
TMContact us today to actively
defend your Enterprise of Things.

forescout.com/solutions/network-segmentation

Forescout Technologies, Inc.
190 W Tasman Dr.
San Jose, CA 95134 USA
Toll-Free (US) 1-866-377-8771
Tel (Intl) +1-408-213-3191
Support +1-708-237-6591

salesdev@forescout.com

toll free 1-866-377-8771

Learn more at Forescout.com© 2020 Forescout Technologies, Inc. All rights reserved. Forescout Technologies, Inc. is a Delawarecorporation. A list of our trademarks and patents is available at https://www.forescout.com/
company/legal/intellectual-property-patents-trademarks. Other brands, products, or service names
may be trademarks or service marks of their respective owners. Version 09_20

4