Edit

Connect the Forescout OT data connector

The Forescout operational technology (OT) data connector lets you bring OT asset and vulnerability data from Forescout into Microsoft Security Exposure Management.

Prerequisites

Before you configure the Forescout OT data connector, make sure you have:

Data retrieved by the connector

The Forescout OT data connector retrieves the following asset and device properties:

  • Device name (hostname)
  • MAC addresses
  • IP addresses
  • Operating system details
  • Vendor
  • Model
  • Firmware version
  • Device category or type
  • Serial number
  • Device criticality
  • Associated edge collectors
  • Last seen

Connect the Forescout OT data connector

  1. Sign in to the Microsoft Defender portal.

  2. Go to System > Data management > Data connectors.

  3. In Unified connectors, select Catalog.

  4. Select Forescout.

  5. Select Add new instance.

  6. In Connector name, enter a name for the connector instance.

  7. In Endpoint, enter your Forescout endpoint without the http:// or https:// prefix.

  8. In API Key, enter the API key from Forescout.

  9. Select Next.

  10. Confirm that MSEM (Microsoft Security Exposure Management) is selected.

  11. Select Next.

  12. Review the connector details.

  13. Select Connect.

Verify the connection

  1. Sign in to the Microsoft Defender portal.

  2. Go to System > Data management > Data connectors.

  3. In Unified connectors, select My connectors.

  4. Confirm that the Forescout connector instance appears with a connected status.

Related content

  • Last updated on