ForeScout CounterACT - Page 7

Quick Installation Guide Single Appliance
Version 8.1 7
Network Access Requirements
Port Service To or From
Forescout
Platform
Function
22/TCP
SSH
From Allows remote inspection of OS X and
Linux endpoints.
Allows the Forescout platform to
communicate with network switches
and routers.
To
Allows access to the Forescout
platform command line interface.
2222/TCP SSH To (High Availability) Allows access to the
physical Appliances that are part of the
High Availability pair.
Use 22/TCP to access the shared
(virtual) IP address of the pair.
25/TCP SMTP From Allows the Forescout platform access
to the enterprise mail relay.
53/UDP DNS From Allows the Forescout platform to
resolve internal IP addresses.
80/TCP HTTP To Allows HTTP redirection.
123/UDP NTP From Allows the Forescout platform access
to a local time server or
ntp.forescout.net.
By default the Forescout platform
accesses ntp.foreScout.net
135/TCP MS-WMI From Allows remote inspection of Windows
endpoints.
139/TCP
SMB, MS-RPC From
Allows remote inspection of Windows
endpoints (For endpoints running
Windows 7 and earlier).
445/TCP Allows remote inspection of Windows
endpoints.