Working with properties
Forescout Appliances must regularly query endpoints to keep property values up to date. This can generate significant network traffic. Forescout provides several methods for minimizing traffic:
- In general, endpoints are polled for property values only when a policy that includes the property is evaluated. Defining the time interval at which policies are evaluated and rechecked influences the frequency at which endpoints are queried.
- When SecureConnector is used on endpoints, event driven monitoring can be enabled. SecureConnector proactively sends updates to the HPS Inspection Engine only when it detects a change in an endpoint property. This eliminates blind polling by Forescout Appliances, and significantly reduces redundant network traffic.
minute read