IoT Solution Brief 2022

IoT Security

Choose a flexible zerotrust approach to secure
nontraditional devices inyour digital terrain

ZERO TRUSTDEFINED
Zero Trust Architecture (ZTA) isa data-centric security model
based on least-privileged
access, not a fixed solution
or technology that can bepurchased from a single
vendor. It assumes that abreach is inevitable or has
likely already occurred, soit constantly limits accessto only what is needed
and looks for anomalousor malicious activity.
Forescout is participatingin the NIST National
Cybersecurity Center ofExcellence’s ZTA Projectbased on SP 800-207,
which will provide practical,

Internet of Things (IoT) devices often remain invisible on enterprisenetworks. Unlike traditional systems, they can’t be easily tracked
and rarely support software agents. These devices expand the attack
surface and greatly increase organizations’ risks, as they can becompromised and used as entry points into vulnerable networks.
Enterprises need a platform that can continuously identify, segment
and enforce compliance of every IoT device on heterogeneous networks.

IoT devices: Is the risk worth the reward?
IoT devices are valuable and often critical corporate assets. They boost
productivity, enhance product and service quality and improve the bottomline. Sophisticated, well-funded bad actors are constantly on the lookout forareas in an organization to exploit such as gaps in IoT visibility and security– gaps that lead to downtime, compromised data, loss of intellectual
property and reputational damage. Consider this:▶

IoT products surpassed traditional internet-connected devices in 2019
and the ratio is projected to be around 3:1 by 2025.

▶

70% of survey respondents have low or average confidence in thesecurity of their organizations’ IoT devices.

In today’s digital terrain where countless IT, IoT and OT (operationaltechnology) things connect and intersect, organizations need a security
solution that makes IoT and all IP-connected devices visible andcontrollable, and that conforms to a ZTA. Otherwise, any device can becompromised and exploited for malicious purposes.

interoperable approaches todesigning and building ZTAs.

1

IoT Solution Brief 2022

The Forescout zero trust approach“Forescout is thevendor for zerotrust IoT/OT-focusedsecurity. IoT/OT
device security is
one of the hardest
problems to solve
within the enterprise.
This is Forescout’s
sweet spot, and thevendor’s platform
capabilities for IoT/OT security shine
above those of thecompetition.”—Forescout believes that IoT security must be based on a zero trust approachthat combines complete device visibility, proactive network segmentationand least-privilege access control of all digital assets – devices, users,
apps and workloads. The Forescout Continuum Platform lets you
effectively manage cyber, operational and compliance risks across yourenvironment by:▶

Providing complete visibility into unmanaged IoT, Internet of MedicalThings (IoMT) and OT devices as well as all IP-connected systems▶

Assessing and identifying IoT devices with factory-default or weakcredentials and automating policy actions to enforce strong passwords▶

Providing real-time insight into IoT devices’ communication and risky
behavior across the extended environment▶

Segmenting devices into trusted zones by enforcing least-privilege
access by zero trust policy▶

Automating unified zero trust policy orchestration across multivendorenvironments and multiple network domains▶

Knocking down security management silos to accelerate response andmaximize the value of your investments in other security solutions▶

Helping health delivery organizations proactively detect and reduce
vulnerabilities and granularly enforce segmentation and network
access rules, and immediately contain medical device threats while
facilitating remediation

The Forrester Wave: Zero
Trust Extended Ecosystem
Platform Providers, Forrester
Research, October 2019

PROACTIVEPROTECTION

ADAPTIVEMITIGATION• Design trust zones for IoTs

• Continuously monitor for changes• Identify and classify devices• Detect spoofing & vulnerabilities• Place IoTs in appropriate zones• Isolate & contain high risk devices• Limit exposure and blast radius• Orchestrate & automate response

VISIBILITY
2

IoT Solution Brief 2022

Discover and classify 100% of IP-connected devices“Today we know
what’s on our network– including IoT devices
such as printers,
VoIP phones andsecurity cameras.
Forescout classifies
the device and slips it
onto the appropriate
VLAN segment.”—Ken Compres, Senior Network Security
and Integration Engineer/CSO,
Hillsborough Community CollegeIt’s essential to obtain complete visibility and device context of all IoT,OT and critical infrastructure endpoints across your heterogeneousenvironment. The Forescout Continuum Platform:▶

Continuously discovers all IP-connected devices, physical and virtual,
the instant they enter your network–no software agents required •Provides in-depth visibility into all devices using 20+ active and passive
discovery, profiling and classification techniques▶

Leverages the Forescout Device Cloud, the world’s largest data lakeof crowdsourced device intelligence, providing a cross-industry singlesource of truth on the fingerprints, behavior and risk profiles of morethan 18 million devices

Implement dynamic network segmentation andautomate controls
In today’s heterogeneous environments, an organization that adopts
the zero trust model must be capable of network segmentation andorchestrated incident response across all domains. With Forescout
Continuum, you can:▶

Correlate access with user identities (who is doing what, where, whenand why)▶

Provision devices to dynamic network segments based on policies andreal-time context▶

Map data flows to design segmentation policies and simulate them fornon-disruptive deployment▶

Automate segmentation to reduce cyber and operational risk

Orchestrate security and enforce compliance
Most organizations are inundated with expensive, single-purpose security
solutions that can’t share knowledge or coordinate incident response.
Forescout offers the cure for this inefficiency. Forescout eyeExtend
products share device context between the Forescout platform and other
IT and security products to automate workflows and policy enforcement
across disparate solutions. These orchestration capabilities can help you:

▶
▶
▶
▶

Increase IoT security and overall device compliance
Reduce mean time to detect and respond
Increase ROI from your existing tools
Automate your configuration management database (CMDB)
updating process, eliminating time-consuming and error-prone
manual inventorying

Forescout Technologies, Inc.

©2022 Forescout Technologies, Inc. All rights reserved. Forescout Technologies,

Toll-Free (US) 1-866-377-8771
Tel (Intl) +1-408-213-3191
Support +1-708-237-6591

Inc. is a Delaware corporation. A list of our trademarks and patents is available at
Other brands, products, or service names may be trademarks or service marks ofLearn more at Forescout.com

their respective owners. Version 01_02

www.forescout.com/company/legal/intellectual-property-patents-trademarks.

3