About the VPN Concentrator Plugin

The VPN Concentrator Plugin is used to track VPN users, disconnect them from the VPN and prevent them from reconnecting.

The plugin is a component of the Forescout Network Discovery Module.

Blocking is carried out by communicating with multiple VPN devices and an authentication server.

Overlapping IP Address Support

The VPN Concentrator Plugin supports working with networks that use overlapping IP addresses. For details about enabling and configuring Forescout eyeSight's support of overlapping IP address use in an enterprise’s network, refer to the Working with Overlapping IPs Guide.

Supported Vendor Products

The VPN Concentrator Plugin supports working with the following VPN device vendors:

  • Cisco
  • Pulse Secure (Juniper)
  • Nortel

For information about the vendor models (hardware/software) and versions (product/OS) that are validated for integration with this Forescout component, refer to the Forescout Compatibility Matrix.

Supported Authentication Methods

The VPN Concentrator Plugin works with any of the following authentication servers:

  • Active Directory
  • RADIUS

Supported Forescout eyeSight Version

This table lists the eyeSight version that works with each plugin version covered by this guide.

Plugin Version Delivered with Network Module Version Works with Forescout eyeSight Version
4.5.3 1.4.8 8.4 and above
4.5.2 1.4.7 8.4 and above
4.5, 4.5.1 1.4 8.4, 8.4.1
4.4 1.3 8.3