GOVERNMENT )) SOLUTION BRIEF

Securely Enable Government
Effectively monitor and manage cybersecurity risk
to be combat-ready and mission-enabled

Government agencies maintain a wealth of data for effectively delivering
government services, making them attractive targets for exploitation.
Compounding this ever-present security challenge is the need to balance
scarce labor, time and financial resources to support diverse agency
missions and goals. In addition to responsibility for continuously ensuring
cybersecurity and device compliance, agencies face auditing and reporting‘‘“In the past it took twopressures due to regulatory requirements such as:

to three hours to find an• Command Cyber Readiness Inspection (CCRI)

infected machine and• Federal Information Security Modernization Act (FISMA)

remediate it…With the• IRS Publication 1075

Forescout solution we can• CMS MARS-E

find the right machine andThe Forescout platform helps to keep
government operations available,
secure and compliant

shut it down within

The Forescout platform actively defends the Enterprise of Things byCISO, UTAH

identifying, segmenting, and enforcing compliance of every connected thing.
The Forescout platform is the most widely deployed, scalable, enterpriseclass solution for agentless device visibility and control. It deploys quickly on
your existing infrastructure - without the need for infrastructure upgrades andaccommodates both 802.1x and non-802.1x authentication.

seconds.”1

P H I L B AT E S

The Forescout platform helps government IT and security professionals
protect data, secure access to government resources and demonstratecompliance by addressing the following use cases for federal agencies andother public-sector entities.
1

forescout.com/industries/government/

salesdev@forescout.com

toll free 1-866-377-8771

GOVERNMENT )) SOLUTION BRIEF

SOFTWARE INVENTORY
Identify unused or under-utilized software for cost savings and/or consolidation and remove outdated software thatposes an increased threat due to legacy vulnerabilities. Gain visibility into authorized applications, rogue applications,operating systems, patch status and more.

Continuous asset discovery and profiling
The Forescout platform yields rich data about a variety of endpoints (IT, IoT and OT) without requiring
software agents or previous device knowledge.

WHO AREYOU?

WHERE/HOWARE YOUCONNECTING?

WHAT IS THE
DEVICEHYGIENE?

WHO OWNSYOUR DEVICE?

WHAT TYPE OF
DEVICE?

• Employee• Corporate• Windows, Mac• Switch/Port/PoE• Configuration• Partner• BYOD• iOS, Android• Wireless/• Software• Contractor• Rogue• Virtual machineController• Services• Guest• Non-user devices,
IoT, OT• VPN• IP, MAC
• VLANACCESS CONTROL
Enforce a Zero Trust architectural framework and, through policies, limit
access to information as well as service and application resources. NIST 800207 outlines three core components of a Zero Trust (ZT) architecture: policyengine, policy administrator and policy enforcement point. The Forescout• Patches‘‘• Security Agent“With the Forescout plat-platform serves not only as the policy engine in a ZT environment, but also

form, we expect to saveprovides comprehensive data about connected devices that informs trust

millions from exponentiallydecisions.

faster audits that produce

COMPLIANCE

fewer findings and require

The Forescout platform continuously monitors for the presence of required

less remediation effort.”

software, unauthorized software, rogue devices and configuration changes –P H I L B AT E S

to help you meet regulatory requirements (e.g., CCRI, FISMA, IRS 1075, CJIS,PCI, HIPAA, etc.). The platform also provides real-time contextual updates
to the asset database/CMDB, giving your teams a single source of truth forCHIEF INFORMATION SECURITY
OFFICER, STATE OF UTAH

2

forescout.com/industries/government/

salesdev@forescout.com

toll free 1-866-377-8771

GOVERNMENT )) SOLUTION BRIEF

accurate asset intelligence, governance, security operations management
and reporting. Further, this visibility and control platform directly addresses

The Forescout platformor supports security controls in widely used security standards such as

successfully identified

NIST 800-53 and the CIS Top 20 Controls, among others.

Chinese-made surveillance

INCIDENT RESPONSE

cameras for removal as

Understand all connected devices, including unmanaged and rogue devices,mandated by the National

to determine impact of known vulnerabilities and automate mitigation
response (e.g., block, patch, etc.), saving labor and reducing time to repair.

Defense Authorization Act

The Forescout platform provides rich device context so security teams

for FY 2019.2

can prioritize remediation of issues. In addition, policy-driven remediation
actions can be triggered automatically by the Forescout platform.

CONTINUOUS DIAGNOSTICS
AND MITIGATION (CDM)

SUPPLY CHAIN
Gain insight into embedded software and applications running on managed
and unmanaged devices. NIST 800-53 Rev. 5 introduces a new “supplychain risk management (SR)” control family, which includes twelve controls
and various sub-controls. Organizations should plan to implement controls
related to provenance (SR-4) and supplier assessments and reviews (SR-6),
among other things.

CDM provides cybersecurity tools,
integration services and dashboards
to federal agencies to strengthen thesecurity posture of the federal civilian
enterprise. CDM works in four phases,
each phase building upon the others:

Contract Vehicles and Certifications

Assets (phase 1), Users (phase 2),
Events and Boundary Protection (phase3), and Data Protection (phase 4). Taking

Contract vehicles

advantage of CDM phase 1 capabilities,

The Forescout platform is available through authorized Resellers andsecurity officials at the Department ofDistributors on the following contracts and purchasing schedules:

Homeland Security found an average of• GSA Schedules (Multiple Award Schedules and Federal SupplySchedules)

75 percent more assets than originallyreported, and in some cases that
number was as high as 200 percent.3• NASA SEWP (Solutions for Enterprise-Wide Procurement) GWAC
(Government-Wide Acquisition Contract)• ITES/2H (managed and used by U.S. Army. Also used by DoD and otherfederal agencies)

Forescout provides Hardware AssetManagement (HWAM) capabilities tomany civilian agencies. The Forescout
platform can provide real-time, accurate• Encore II [managed by Defense Information Systems Agency (DISA)]• Enterprise Software Initiative Blanket Purchase Agreement (ESI BPA)
(managed by NIWC Pacific)

asset intelligence across device types,
organizational units and functions,and it integrates with configuration
management database (CMDB) products• Various state and local contracts (NY OGS, TX DIR, SC, NC, CA SLP, etc.)from ServiceNow® and other leadingvendors.

3

forescout.com/industries/government/

salesdev@forescout.com

toll free 1-866-377-8771

GOVERNMENT )) SOLUTION BRIEF

Certifications

COMPLY-TO-CONNECT (C2C)

Trust a solution with the highest levels of military-grade and government
security certifications. Forescout has achieved the following U.S.
Government certifications and compliances:• U.S. Department of Defense Information Network Approved Products List(DoDIN APL) for v8.X – DODIN APL LINK (Search Forescout)Comply-to-Connect (C2C) is a U.S.
Department of Defense framework oftools and technologies that discover,identify and characterize all devices
connecting to the network. C2C• FIPS (Federal Information Processing Standards) 140-2• National Information Assurance Partnership (NIAP) Common Criteria
Certification for Forescout v8.1 – NIAP LINK

comprises a five-step process thatbegins with the ability to discover andidentify assets in an agentless andnon-disruptive way. Later steps of the• USMC ATO (Authority to Operate)

framework include: Interrogate (step• U.S. Navy ATO (Authority to Operate)2), Auto-remediate (step 3), Authorize• U.S. Army CoN (Certificate of Networthiness)

Connection (step 4) and Situational
Awareness and Enforcement (step 5).

Take the next step
To learn more about Forescout solutions for government agencies:• Request a Demo
• Visit our website

1. https://www.forescout.com/company/resources/state-of-utah/
2. https://www.bloomberg.com/news/articles/2019-07-10/banned-chinese-security-cameras-are-almost-impossible-to-remove
https://www.wsj.com/articles/u-s-government-still-uses-suspect-chinese-cameras-11571486400
3. Source: Interview with Kevin Cox, CDM Program Manager at DHS, https://www.meritalk.com/articles/cdm-the-story-so-far

Don’t just see it.
Secure it.
TMContact us today to actively
defend your Enterprise of Things.

forescout.com/industries/government/

salesdev@forescout.com

Forescout Technologies, Inc.
190 W Tasman Dr.
San Jose, CA 95134 USA
Toll-Free (US) 1-866-377-8771
Tel (Intl) +1-408-213-3191
Support +1-708-237-6591

toll free 1-866-377-8771

Learn more at Forescout.com© 2021 Forescout Technologies, Inc. All rights reserved. Forescout Technologies, Inc. is a Delaware
corporation. A list of our trademarks and patents is available at https://www.forescout.com/
company/legal/intellectual-property-patents-trademarks. Other brands, products, or service names
may be trademarks or service marks of their respective owners. Version 02_214