Netskope, Forescout expand zero trust to all devices

Netskope and Forescout have agreed a global integration that links their security products and extends zero trust controls to managed and unmanaged devices across corporate networks and remote locations.

The integration covers traditional IT endpoints as well as operational technology, internet-connected devices, and internet-connected medical devices. It also targets environments where devices connect behind routers and firewalls, which can limit the reach of agent-based security tools.

Integration Focus

The combined approach links Forescout's device discovery and assessment with Netskope's private access controls. It uses device posture and risk signals to adjust access decisions and policy enforcement over time.

The aim is to reduce security blind spots created by unmanaged assets. These can include specialist equipment, building management systems, industrial devices, and medical devices that do not run standard security agents or sit on segmented networks.

Netskope and Forescout position the integration as a way to apply policy consistently across device types and locations. It also addresses internal network traffic as well as traffic into and out of cloud services.

Network Movement

The integration emphasises lateral movement inside the network, where an attacker moves from one system to another after gaining an initial foothold. The controls are designed to limit east-west communication at the local network level.

Many zero trust network access deployments focus on north-south traffic, such as user access into applications hosted in the cloud or in private data centres. The companies highlighted that local network communication can still create exposure, particularly when unmanaged devices fall outside standard endpoint controls.

The joint configuration uses continuous assessment to inform enforcement decisions, which can change based on device posture and observed risk. Policies can also reflect factors such as user behaviour and application sensitivity.

Customer Use

A Fortune 500 financial services organisation has been using the integration in production, according to the companies. They said it identified hundreds of thousands of devices and improved visibility across remote and on-premises environments.

The deployment also addressed gaps linked to the mix of device types across large enterprises. The companies described the integration as a tool for compliance and risk control in that customer's environment.

Operational Drivers

The announcement comes as many organisations manage security through multiple point products owned by different teams. Netskope and Forescout argued that fragmented tools can lead to inconsistent policy enforcement and incomplete device visibility.

IT and security teams have also had to accommodate growth in connected devices and the rise of remote work. Industrial environments and healthcare settings add complexity, since equipment lifecycles can be long and patching windows limited.

The integration is presented as an effort to create a more uniform model for secure access, applying policy both in cloud environments and closer to where devices connect.

Statements

Forescout Chief Executive Barry Mainz linked the partnership to device growth and what he described as a broader expansion in applications and access points.

"As digital environments expand and grow more complex, we are helping organisations shrink their attack surface," said Barry Mainz, CEO of Forescout. "The volume and variety of device types are exploding, along with the number of applications, users and access points. By joining forces with Netskope, we are bringing together two best-of-breed solutions, granting customers complete visibility and control over their environments, with policies that automatically adjust as conditions change, and enabling north-south and east-west security policy enforcement. This is a gold standard of how 'Universal' Zero Trust Network Access is employed in practice, not just as a model."

Netskope Chief Executive Sanjay Beri said the companies aligned the product work with enterprise requirements for scale and device diversity.

"Modern security and performance for the cloud and AI era must include a zero trust approach to secure data and keep business resilient," said Sanjay Beri, CEO of Netskope. "Our integrated solution with Forescout was designed for the scale, speed, and diversity of today's modern enterprises, and provides the cohesive, centralised secure access organisations need."

The integration is available globally and is intended for organisations that need policy enforcement across cloud services, private applications, and local networks, including environments with large numbers of unmanaged devices.