Integrating Forescout Cloud with SentinelOne (SOAR)

Forescout Cloud integrates with SentinelOne to support security orchestration, automation, and response (SOAR) workflows by automating your IT tasks to reduce strain on your team.

Before integrating, note the API token from the SentinelOne platform. While SentinelOne doesn't provide publicly available documentation for this use case, see the SentinelOne Resource Center for more information.

To integrate Forescout Cloud with SentinelOne to support SOAR:

1. In the Forescout Cloud Console, select Administration > Integrations.
2. Click the Add Application button.
3. In the Category dropdown, select SOAR.
4. In the Application dropdown, select Sentinel One.
5. In the Application Name field, enter a unique name for the integration.
6. In the Configurations panel, enter the API Token and the Base API URL for SentinelOne.
7. Click the Add Application button.

After you integrate Forescout Cloud with SentinelOne, you can configure actions. For details on configuring SOAR actions, see Configuring SOAR actions.