ForeScout
StandardForeScout provides continuous security monitoring and automated risk mitigation. It consists of ForeScoutCEFCompiledNormalizer that normalizes ForeScout events and enables you to analyze ForeScout data using pre-set dashboard views.
Enhancement
KB-23320
Added Syslog Collector based Forescout log source template, simplifying the log source configuration process. To learn more, go to Creating Log Source via a Template .
Bug Fix
KB-1379558171
Some ForeScout logs were not correctly normalized by ForeScoutCEFCompiledNormalizer .
Past Releases
ForeScout v5.1.1 ▾
Enhancement
KB-20646
Renamed the duser field to user for ForeScoutCEFCompiledNormalizer to maintain consistency. The duser field was previously mapped to target_user .
ForeScout v5.1.0 ▾
Enhancement
KB-19229
Added the Authentication label in ForeScoutCEFCompiledNormalizer . If the host_compliancy_status field is yes the status is set as success , but if the host_compliancy_status field is no , the status is set as failure .
Bug Fix
KB-1379558171
Some ForeScout logs were not correctly normalized by ForeScoutCEFCompiledNormalizer .
ForeScout v3.2.0 ▾
Enhancement
A minor update has been done in ForeScout's normalizer for better signature handling.
Support
If you have any questions or require assistance, create a support ticket.
Comments
Article is closed for comments.