ForeScout, Splunk Partner on Big Data, Security Intelligence

ForeScout Technologies has partnered with Splunk (otherwise known as Those Guys with the Cool T-Shirts at tech conferences) to provide bi-directional interoperability between ForeScout CounterACT and Splunk Enterprise, as well as the new ForeScout App for Splunk Enterprise.

According to the two companies, the partnership combines ForeScout's dynamic endpoint visibility, access and security capabilities with Splunk Enterprise's advanced machine data analytics capabilities to provide enterprises with better threat insight and more automated control.

What it comes down to is the two solutions providing end customers with more visibility into devices, users, systems and applications that attempt to connect to or are on an enterprise network. This includes wired, wireless, managed, unmanaged, PC or mobile. Devices are dynamically discovered, classified, profiled and assessed without the use of agents.

"IT organizations are challenged with enormous visibility and control gaps given increased network complexity, BYOD proliferation and the velocity of sophisticated threats. Users not only want greater operational intelligence, but they also want the means to efficiently analyze data and effectuate policy," said Scott Gordon, CMO at ForeScout, in a prepared statement. "A combined approach with ForeScout and Splunk gives the best of both worlds to solve a broad range of security issues."

Although ForeScout and Splunk don't specifically talk about cloud computing in the announcement, it seems to reason that cloud could be one of the elements being monitored. Cloud apps are rather pervasive on mobile devices today, and visibility is key to ensuring the security and performance of cloud. Add in the various threats to data and apps stored in the cloud, and it seems like a good opportunity for ForeScout and Splunk.

"In today's threat landscape, all data is security relevant and requires a solution that delivers real-time insights. ForeScout CounterACT provides visibility to network and endpoint activity that our customers can use to augment their Splunk analytics in order to monitor for critical security issues and expedite investigations," said Bill Gaylord, senior vice president of Business Development at Splunk, in a prepared statement. "Leveraging the interoperability of Splunk Enterprise and ForeScout not only helps expand the surface area for customers to more rapidly and confidently identify problems but also automates controls to directly mitigate threats."