Quick Installation Guide
Single Appliance
Version 8.1
9
Port
Service
To or From
Forescout
Platform
Function
10005/TCP SecureConnector
for OS X
To
Allows SecureConnector to create a
secure (encrypted TLS) connection to
the Appliance from OS X machines.
SecureConnector is an agent that
enables management of OS X
endpoints while they are connected to
the network. Refer to the Forescout
Administration Guide for more
information about SecureConnector.
When SecureConnector connects to an
Appliance or to the Enterprise Manager
it is redirected to the Appliance to
which its host is assigned. Ensure this
port is open to all Appliances and to
the Enterprise Manager to allow
transparent mobility within the
organization.
13000/TCP Forescout
platform
From/To
For deployments with only one
Appliance – from the Console to the
Appliance.
For deployments with more than one
Appliance – from the Console to the
Appliance and from one Appliance to
another. Appliance communication
includes communication with the
Enterprise Manager and the Recovery
Enterprise Manager, using TLS.
Monitor Interface
The monitor interface allows the Appliance to monitor and track network traffic. Any
available interface can be used as the monitor interface.
Traffic is mirrored to a port on the switch and monitored by the Appliance. The use of
802.1Q VLAN tagging depends upon the number of VLANs being mirrored.
Single VLAN: When monitored traffic is generated from a single VLAN, the
mirrored traffic does not need to be VLAN tagged.
Multiple VLANs: If monitored traffic is from more than one VLAN, the
mirrored traffic must be 802.1Q VLAN tagged.
When two switches are connected as a redundant pair, the Appliance must monitor
traffic from both switches.
No IP address is required on the monitor interface.
Response Interface
The Appliance responds to traffic using the response interface. Response traffic is
used to protect against malicious activity and to perform policy actions. These
