ForeScout Network Access Control- Admin training

Name: ForeScout Network Access Control- Admin training
Rating: 4.5 (645 reviews)

Leading NAC solution -ForeScout NAC #CounterACT, #cACT #Endpoint Visibility #Compliance#Control#Integration

Created byYour Technical Academy

Last updated 8/2023

English

What you'll learn

Corporate Challenges which acted as founding stone for NAC
What is NAC and Introduction to ForeScout
ForeScout NAC Solution -Key Features
ForeScout Context Based Visibility for Endpoints
ForeScout Offerings- Appliance Roles, Modules and Appliance Options
ForeScout NAC Solution Architecture- Enterprise Manager, CounterACT, SecureConnector, Recovery Manager
ForeScout Modules - Basic and Extended
Different ForeScout licenses for different features
ForeScout NAC Solution Deployment Options
ForeScout Installation in Lab
ForeScout Initial Setup Wizard
ForeScout Channels and Interfaces
How ForeScout NAC solution works?
ForeScout Policy Lifecycle - For Endpoints
ForeScout NAC - Switch Management and logic
ForeScout NAC - Switch AutoDiscovery
ForeScout NAC configuration to communicate with User Directory Services, Domain Servers
ForeScout Policy Elements - Main Rules, Sub Rules, Conditions, Actions, Criteria for Condition evaluation, Scope, Segments, Scope
High Level Design for ForeScout policies
ForeScout NAC - Policy Configuration for Classification
ForeScout NAC - Policy Configuration for Windows Devices Detailed Classification
ForeScout NAC - Assessment Policy Configuration for Windows Devices
ForeScout NAC - Control Policy Configuration for Windows and Unknown Devices
ForeScout NAC - Installation and configuration of Palo Alto extended module
ForeScout NAC - Policy configuration for Integration of ForeScout and Palo Alto Next Generation Firewalls
ForeScout NAC - Backups
ForeScout Compliance portal, Asset Inventory and Reports
Download ForeScout Console Application and SecureConnector Agent
TCP/UDP ports required for enabling communication between ForeScout and network components
ForeScout Network Access Control # ForeScout Network Access Prevention #ForeScout NAC # ForeScout CounterACT #ForeScout cACT
ForeScout Actions and Categories- Remediate, Restrict, Audit, Authenticate, Notify etc.
ForeScout Policy Templates, Folders, Export or Import Policies

Course content

14 sections • 38 lectures • 8h 58m total length

Introduction3:23

Corporate Challenges which acted as Founding stone for NAC21:03
Examine corporate challenges that formed the foundation for network access control, including non intelligent entry points, diverse endpoints, and the need for inter-technology information exchange and compliance.
What is NAC and Introduction to ForeScout22:52
ForeScout NAC key features12:58
ForeScout NAC enables a zero-trust environment through visibility, control, and integration, delivering detection, correct device classification, and compliance checks, plus real-time policy enforcement and third-party integrations.
Context Based Visibility4:11
ForeScout contextually reveals endpoint details, including vendor, OS, device function, and where the device connects, plus user identity, ownership, and compliance posture.
Question earlier asked0:18

ForeScout Offering19:42
Explore ForeScout offerings: four appliance roles (cACT, enterprise manager, recovery manager, focal), deployment options (physical, virtual, cloud), and modules (EyeSight, EyeControl, EyeSegment, EyeExtend) for visibility, control, and integration.
ForeScout Architecture -part110:48
Explore the ForeScout NAC architecture, including the CounterACT appliance, ForeScout console, enterprise manager, and secure connector agent, plus licensing modules and endpoint enforcement workflows.
ForeScout Architecture - part 2 - Modules8:49
Explore ForeScout architecture modules, including base and extended options, their sub plugins, and how they support endpoint, network, and authentication functions, plus content modules for endpoint profiling.
ForeScout Policy Lifecycle for Endpoint Management26:15
ForeScout Licenses for different features11:18
Explore ForeScout licenses, including central or flex licenses and per appliance licenses, plus iSight, eye control, extend, eye segment, and recovery, with endpoint counting and deployment options.

High Level Policy Design5:31
ForeScout Policy Elements14:44
Primary classification policy and LAB30:15
Detailed Windows classification policies and LAB26:46
Summary So Far17:13
Windows Assessment policies and LAB32:59
Configure ForeScout Windows assessment policies in admin training to evaluate antivirus, instant messaging, and disk encryption on corporate devices, assign groups, and enforce compliance in a lab.
Control actions and Policies for Windows and Unknown devices plus LAB58:32
ForeScout- Palo Alto NGFW Integration and LAB -part 124:08
Install the Palo Alto extended module on ForeScout and enable one-way ForeScout-to-Palo Alto integration, sharing host information profiles and IP-to-user mappings via API keys in phase one.
ForeScout- Palo Alto NGFW Integration and LAB -part 242:24

Requirements

Basic understanding of IP addressing
Basic understanding of SSH, SNMP, PING
Cisco IOS Switch configuration - not mandatory, but an added advantage
Palo Alto Firewalls - not mandatory, but an added advantage

Description

ForeScout has been a leading NAC solution for years. It is so easy to design, deploy and manage the ForeScout platform. We bring you this course on ForeScout Network Access Control Admin training for beginner and intermediate levels, prepared by Industry experts. This course is only for knowledge sharing and educational purposes. It comprises of theory and lab exercises. In this course, you will learn the various aspects for the Network Access Control solution provided by ForeScout including the ForeScout NAC Key features like Detection, Classification, Assessment, Control and 3rd party integration. We will cover the Architecture for ForeScout NAC including the different components like Enterprise Manager, CounterACT, SecureConnector Agent, Recovery Manager. Then we will cover the ForeScout Modules( Basic and Extended) which control the different functionalities of ForeScout, followed by the different ForeScout feature licenses and the various products offered by ForeScout. We will see how Architects can deploy ForeScout using Central, Distributed and Mixed options. The course contains the information about Endpoint Policy life cycle management using ForeScout. The course includes installation of ForeScout OS in virtual environment along with the initial setup wizard to setup communication with switches, domain servers and other required settings. We will cover labs for different ForeScout configurations like segments, policies for Classification, Assessment, Control. We will also see how ForeScout can be integrated with Palo Alto NGFW using the eye Extend module to enhance the security posture using dynamic object based policies instead of static IP based policies.

Who this course is for:

Entry level for ForeScout NAC Administration
Network & Security Analysts
Network & Security Architects
IT Security, Risk, Compliance professionals who want to know ForeScout features
ForeScout Basic Troubleshooting and checking logs
Anyone looking to learn ForeScout
Endpoint Management team
Inventory Management team

ForeScout Network Access Control- Admin training

What you'll learn

Explore related topics

Course content

Trainer's Profile and High Level Course Content1 lecture • 3min

NAC and ForeScout5 lectures • 1hr 1min

ForeScout Products and Architecture5 lectures • 1hr 17min

ForeScout Deployment Options and Ports Used2 lectures • 14min

ForeScout Installation in LAB and initial setup3 lectures • 28min

Overview of ForeScout Console Application, Tabs and Interfaces2 lectures • 16min

Understand & setup communication ForeScout and other network resources plus LABs5 lectures • 44min

ForeScout Policy Design and Configurations9 lectures • 4hr 13min

ForeScout Administration and Backups2 lectures • 10min

Dashboard, Asset Inventory and Reports1 lecture • 7min

Requirements

Description

Who this course is for: