About the eyeInspect Content Distributor v1.0.0

 

The eyeInspect Content Distributor is a command-line tool developed by Forescout that lets users distribute CVE/IoC files and SD scripts to a large number of Command Centers and sensors respectively, eliminating the need to upload these files to each target individually.

The eyeInspect Content Distributor automates this process, significantly reducing operational overhead, ensuring consistency across distributed environments, and accelerating the distribution of critical security updates.

User Flow

The eyeInspect Content Distributor follows the below flow:

Using the eyeInspect Content Distributor involves the following (select each link to learn more):

  • One-time setup (describes how to install and set-up the eyeInspect Content Distributor, and add Command Centers)
  • Use the tool (describes how to copy and distribute the various files supported by the eyeInspect Content Distributor)

Deployment Options

Depending on your architecture, the eyeInspect Content Distributor can be deployed using one of the following three approaches:

  1. Standalone Ubuntu 20/22 Machine:

    This is a dedicated Linux system where the eyeInspect Content Distributor runs independently, allowing organizations to separate content distribution from other eyeInspect components. This option provides flexibility in deployment and resource allocation. The system design is illustrated below:

  2. Command Center (CC) Machine:

    Deploying the eyeInspect Content Distributor on a CC allows direct content distribution to sensors and local devices, making it an efficient choice for organizations with smaller or segmented environments. The system design is illustrated below:

  3. Enterprise Command Center (ECC):

    Running the eyeInspect Content Distributor on an ECC enables centralized distribution for organizations managing multiple CCs, streamlining security content deployment across a large-scale infrastructure. The system design is illustrated below: