ForeScout CounterACT
  • 19 Feb 2024
  • 3 Minutes to read
  • Dark
    Light
  • PDF

ForeScout CounterACT

  • Dark
    Light
  • PDF

Article summary

ForeScout CounterACT platform provides insight into network-connected devices.

Types of Assets Fetched

This adapter fetches the following types of assets:

  • Devices

Parameters

NOTE
To allow Axonius use the ForeScout eyeExtend Connect Module for Web API, you need to install and configure that module, especially user credentials and valid IP addresses. For details, see 'How to Install' and 'Configure the Module' sections in the ForeScout eyeExtend Connect Module for Web API Plugin Configuration Guide.
  1. ForeScout CounterACT Domain (required) – The URL for the ForeScout CounterAct domain.
  2. User Name and Password (required) - The credentials for a user account that has the Required Permissions to fetch assets.
  3. Admin API User Name (optional) - The ForeScout Admin API user name.
  4. Admin API Password (optional) - The Forescout Admin API password.
  5. Admin API Client ID (optional) - The Forescout Admin API Client ID.
Note:

Filling in all of the above Admin API configuration settings is necessary in order to Fetch device segments from Admin API.

  1. Verify SSL (required, default: False) - Verify the SSL certificate offered by the value supplied in ForeScout CounterACT Domain. For more details, see SSL Trust & CA Settings.
    • If enabled, the SSL certificate offered by the value supplied in ForeScout CounterACT Domain will be verified against the CA database inside of Axonius. If the SSL certificate can not be validated against the CA database inside of Axonius, the connection will fail with an error.
    • If disabled, the SSL certificate offered by the value supplied in ForeScout CounterACT Domain will not be verified against the CA database inside of Axonius.
  2. HTTPS Proxy (optional, default: empty) - A proxy to use when connecting to the value supplied in ForeScout CounterACT Domain.
    • If supplied, Axonius will utilize the proxy when connecting to the value supplied in ForeScout CounterACT Domain.
    • If not supplied, Axonius will connect directly to the value supplied in ForeScout CounterACT Domain.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

ForeScout%20CounterACT

Advanced Settings

Note:

Advanced settings can either apply for all connections for this adapter, or you can set different advanced settings and/or different scheduling for a specific connection, refer to ​Advanced Configuration for Adapters

  1. Do not fetch devices with no MAC address and no hostname (required, default: False) - Select whether to exclude fetching devices without MAC address and without hostname.
  2. Do not fetch devices with no IP (required, default: False) - Select whether to exclude fetching devices without an IP address.
  3. Ignore irrelevant device manufacturers - Select this option to ignore the device manufacturer field.
  4. Number of parallel requests (required, default: 10) - Set the number of parallel requests that the ForeScout CounterAct server will get data from devices.
  5. Re-authenticate after every X requests (required, default 100) - Set the number of requests to allow before attempting to re-authenticate to get a new session token.
  6. Do not fetch rule information for devices (fast mode) - Deprecated from version 6.0.14.
  7. Use Azure Instance ID for Cloud ID - Select to set the device's Cloud ID field with the value of the Azure Instance ID field.
  8. Fetch device segments from Admin API - Select this option to fetch device segments using Forescout Admin API. Make sure to fill in the Forescout Admin API User Name, Password, and Client ID parameters in order to use this setting.
NOTE

For details on general advanced settings under the Adapter Configuration tab, see Adapter Advanced Settings.

APIs

Axonius uses the following APIs:

Required Permissions

The value supplied in User Name must have permissions to use the API, see Configure the Web API section in the ForeScout eyeExtend Connect Module for Web API Plugin Configuration Guide.



Was this article helpful?

Changing your password will log you out immediately. Use the new password to log back in.
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.