Technical Reference Guide, Integrating Juniper Sky Advanced Threat Prevention (ATP) and ForeScout CounterACT® for Infected Host Remediation https://www.juniper.net/documentation/en_US/release-independent/solutions/information-products/pathway-pages/juniper_skyatp-forescout_counteract-configuring.pdf provided by ForeScout, with help from Fabien Guillot and guidance from Harbans Kaur.
Abstract: CounterACT agentless technology interworks with existing network devices to discover, classify, and assess endpoints joining a network. On discovering a new endpoint, CounterACT uses a combination of passive and active methods to classify it according to its type and ownership. Based on the endpoint’s classification, CounterACT then assesses its security posture and allows organizations to set policies that establish the specific behavior the endpoint is allowed to have while connected to a network.
This guide illustrates how to integrate ForeScout CounterACT with Juniper Sky ATP to reduce the attack surface, detect advanced threats and automate threat response. It includes an example with step-by-step instructions for configuring Sky ATP, SRX Series devices, and CounterACT to collaborate in environments where they are deployed together.