ForeScout Partners with Palo Alto Networks to Enhance Next Generation Firewall Security

ForeScout, a provider of Next Generation Network Access Control (NAC) and BYOD solutions, has partnered with Palo Alto Networks, a global leader in Next Generation Firewall technology, to deliver a Next Generation Security solution. This integration enables dynamic firewall policy updates based on real-time endpoint detection and compliance status. As a result, organizations can build a security-aware network that adapts access control based on the trust level of each endpoint. This collaboration focuses on addressing two major challenges:

1. Network Visibility Effective network security begins with having a complete inventory of all endpoints and network devices within the environment. In addition, organizations must be able to determine whether each device complies with defined security policies. Traditional agent-based approaches cannot be deployed on every device and are not suitable for BYOD environments. Security experts estimate that organizations typically lack visibility into 20–30% of connected devices. These unmanaged endpoints can become entry points for cyberattacks or data breaches.

2. Real-time User Identity Awareness Relying solely on IP address-based security policies is no longer sufficient. Modern security must consider multiple variables, including user identity, device type, operating system, compliance status, connection method, and access location. Traditional identity systems such as Microsoft Active Directory or LDAP provide only limited user information and are often restricted to corporate-managed devices. Captive portals typically offer only browser-level visibility, which is insufficient for building robust security policies.

<>

To address these challenges, ForeScout and Palo Alto Networks have integrated their solutions. ForeScout CounterACT collects real-time endpoint data across the network and shares it with Palo Alto Networks to dynamically generate firewall policies based on comprehensive user context—including username, user group, connection method, device type, operating system, applications in use, compliance status, and behavioral indicators. This enables Palo Alto Networks’ Next Generation Firewall to automatically adjust policies and deliver the highest level of security tailored to each individual user.

For more information, please contact Throughwave (Thailand) Co., Ltd. at 02-210-0969.

Additional information: ForeScout CounterACT Integration with Palo Alto Networks Next-Generation Firewall Solution Brief https://www.forescout.com/wp-content/media/FS_PANNextGenFW-Solution-Brief.pdf