ForeScout: ActiveScout

ForeScout delivers an entirely unique approach to preventing network attacks from "zero-day" threats such as self-propagating malware and hackers/espionage without using signatures, anomaly detection or any form of pattern matching technology. ForeScout's solution has proven its accuracy by detecting in real-time every self-propagating threat to date and has gained the trust of 100% of their customers who use the appliances in automatic blocking mode.

How It Works

Network reconnaissance is the primary means by which human or network worms obtain the knowledge they need to attempt entry. When an individual accesses private, non-public resources without permission, their pre-attack activity is showing their intent. Thus, any unsanctioned reconnaissance presents a high potential for malicious activity and can be used to identify attackers with 100% accuracy.

ForeScout's patented Active Response™ methodology uses a 3-phase approach to accurately identify attacking sources and block them in real time:

• Step 1: Monitors for all reconnaissance activity on the network. Malicious source has no network knowledge, must do reconnaissance to find entry points and look for open vulnerabilities.
• Step 2: Interacts with reconnaisance activity. Appliances provide marked information to the inquiring source.
• Step 3: Proves the intention of the attacker to attack. Monitors traffic for use of marked information proving malicious intent, and blocks connection at the source before a connection is made once the marked information is used to launch an attack.

• Download: ActiveScout Product Datasheet
• Download: Intelligent Intrusion Prevention™ Solution Datasheet