STIGQter: STIG Summary: Forescout Network Device Management Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 02 Jul 2025:

Forescout must be running an operating system release that is currently supported by the vendor.

DISA Rule

SV-230953r1113791_rule

Vulnerability Number

V-230953

Group Title

SRG-APP-000516-NDM-000351

Rule Version

FORE-NM-000260

Severity

CAT II

CCI(s)

CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

Check that Forescout is still running supported operating system versions and that all vulnerability patches and updates have been applied.

Establish and document a procedure that requires the auditing of OS versions and any patches and updates have been applied in accordance with Forescout support website lifecycle page.

Check Contents

Check that Forescout is still running supported operating system versions and that all vulnerability patches and updates have been applied.

Verify the installed version is supported by Forescout by checking the Forescout support website lifecycle page. Currently, Version 8 or later is mandatory after October 2021.

If Forescout is running an operating system release that is not supported by the vendor, this is a finding.

Check from the Console:
1. Log into the Forescout management console.
2. Select Help > About Forescout to show the current version.

Check from the CLI:
1. Log into the Forescout CLI.
2. Type "fstool version" to show the current running version.

Forescout must be running an operating system release that is currently supported by the vendor.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key