Cisco, Elisity, Forescout and Ordr

About Elisity

Elisity sells identity-based microsegmentation for the network a customer already runs. Elisity connects identity and risk context across users, devices, workloads and AI agents. Elisity enforces least-privilege policy through a customer's existing network infrastructure. Elisity has an agreement to join IonQ.^[1][3]

Elisity Cloud Control Center is the cloud-delivered console for visibility, policy and reporting. Elisity uses AWS to host Cloud Control Center. Elisity IdentityGraph combines network observations with context from identity, endpoint, CMDB, IoT and cloud tools to build one record per asset. Elisity Intelligence proposes device classifications, Policy Groups and policies with the evidence behind each suggestion. The Elisity Assistant answers plain-language questions about devices, traffic and policies inside Cloud Control Center.^[1][4]

Elisity Virtual Edge connects a customer's network infrastructure to Cloud Control Center. Elisity Virtual Edge sits outside the data path and programs policy into the data plane. Elisity enforces identity-based policy through supported wired network infrastructure from Cisco, Arista, Juniper, HPE Aruba and Hirschmann. Elisity enforces identity-based policy through Cisco Catalyst 9800 wireless controllers. Elisity shares Policy Group membership with Palo Alto Networks firewalls as Dynamic Address Groups. Protected devices do not need an Elisity endpoint agent. On supported network infrastructure, the last configuration stays in place if a plant loses its connection to the cloud.^[1][5][6]

Elisity lets administrators simulate policy against observed traffic before enforcing it. Suggested policies from Elisity Intelligence start in simulation, and administrators decide what moves to enforcement. Elisity flags Allow policies that have carried no traffic over a review window. Elisity IdentityGraph brings AWS and Azure workloads in alongside users and devices, with cloud tags and instance details available as policy context. Elisity applies access policy to the device or workload running an AI agent. Elisity enforces through the network, outside the agent's runtime. Elisity is extending IdentityGraph to additional non-human identities, including service accounts and machine credentials.^[1][3]

Elisity Open Connector is for custom API sources, and Custom Connector is for a customer's own asset inventory. The Zero Trust Posture Score rates segmentation posture from 0 to 100, refreshed daily. Scheduled Snapshot reports map Elisity segmentation and policy evidence to selected IEC 62443, HIPAA Security Rule and PCI DSS requirements.^[1]

Elisity helps healthcare teams contain lateral movement across clinical networks and medical devices. Elisity helps manufacturers contain lateral movement across connected IT and OT networks. Elisity helps enterprises contain lateral movement across users, devices and workloads, including those running AI agents. Elisity describes financial institutions as needing to connect branch services, corporate systems and acquired environments while limiting what a compromised asset can reach. Main Line Health deploys Elisity microsegmentation enterprise-wide across its Cisco infrastructure with Armis integration.^{[1][3][5][6][7][9]}

About Forescout

Forescout sells the Vistaro platform, which delivers Universal Zero Trust Network Access, OT security, and continuous exposure management. Forescout Vistaro continuously discovers, assesses, controls, and governs every connected asset across IT, IoT, IoMT, and OT. Forescout's platform includes skills-based agentic AI, generative AI, and ML, with human-in-the-loop control across discovery, analysis, and response. VistaroAI continuously analyzes asset intelligence, exposure changes, threat context, and policy posture, then puts the right work in front of the right people, automatically. Forescout integrates with hundreds of security and IT products.^{[1][4][6][7][10][13]}

Forescout assigns devices to appropriate VLANs or applies access control lists based on predefined policies. Forescout's agentless controls enforce access policies without requiring software installations on devices. The Forescout Device Cloud has over 12 million device fingerprints and provides device classification.^[6]

Forescout delivers adaptive Universal Zero Trust Network Access for IT, IoT, IoMT, and OT, on-premises and remote. Forescout Vistaro analyzes 800+ data points from activity logs, threat intelligence, compliance, identity management, SIEMs and more to orchestrate policy enforcement among PEPs. Forescout Vistaro lets users simulate segmentation designs using actual traffic flows and risk overlays to validate controls, fine-tune policies, and flag violations before enforcement. Forescout has contributed to NIST SP 1800-35 Zero Trust Architecture reference implementations.^[7]

Forescout's exposure management continuously discovers, assesses, and prioritizes cyber risk across the entire connected asset estate, with automated compliance to NIST CSF, IEC 62443, and HIPAA. Forescout exposure management uses multi-factor scoring based on configuration, behavior, and threat intel, including KEVs, EPSS, and IoCs. Forescout eyeFocus is an asset intelligence solution that provides the foundation for understanding the security posture of an attack surface, through Agentic AI, risk-based prioritization, and persistent asset intelligence. Forescout eyeFocus keeps contextualized asset data in a searchable 90-day persistent asset inventory to track changes in configuration and risk posture over time. Forescout eyeFocus calculates a multifactor risk score based on configuration, function and behavior. Forescout eyeSentry is a cloud-native platform for Continuous Threat and Exposure Management.^[8][9]

Forescout provides in-depth OT/ICS network visibility, real-time threat detection and cyber risk mitigation. Forescout supports passive discovery, active queries, direct infrastructure integration or APIs across IT, OT, IoT, IoMT, and BAS systems. Forescout detects and manages unpatched systems using a curated vulnerability database enriched with EPSS, CISA KEVs, and Vedere Labs threat intelligence. Forescout integrates over 180 data sources to bridge the divide between IT and OT. LAN CP maps network communication flows and detects anomalies such as undesired hosts, irregular communication patterns, and unexpected process commands. Vedere Labs uncovers emerging threats and feeds purpose-built intelligence directly into the Forescout platform.^[6][10][11]

Forescout SRA is a controlled access layer that governs how users connect to critical systems, what they can reach, and what can happen during the session. Forescout SRA supports on-prem, cloud, and hybrid deployments with options for appliances, virtual machines, and containers on existing hardware. Forescout Vistaro combines a wide range of discovery techniques with cloud-powered intelligence for every medical device connected to a clinical network. Forescout Vistaro automates the discovery, assessment and control of every connected device, including vulnerable IoT assets that are increasingly exploited to gain network access. Forescout discovers and tracks which devices are not PQC compliant.^{[4][6][7][10][12]}

Forescout Vistaro offers options for on-premises installations, virtual machines and Docker-based containerized deployments. Forescout sensors can be configured as active sensors that query network infrastructure. Global manufacturers, energy providers, MoDs, and critical infrastructure operators use the Forescout platform. Forescout states that its customer data includes more than 300 healthcare providers. Forescout's detection system is built on over 20 years of field experience and operates across IT, IoT, OT, BAS and IoMT environments.^{[6][7][8][10][11][12]}

About Ordr

ORDR sells a device security platform that turns device intelligence into enforcement across IT, IoT, OT, and IoMT. ORDR continuously discovers and classifies IT, IoT, OT, and medical devices using passive monitoring and integrations. ORDR passively discovers and profiles every connected device using AI trained on 100M+ real-world devices, with no agents or active scanning required. ORDR integrates with existing infrastructure and does not require rip-and-replace.^[1][4][5]

ORDR's platform has used AI since its inception, with over 8 years of patented technology that has learned from 100+ million connected devices. ORDR automatically discovers and profiles every connected device the moment it joins the network, and ORDR classifies devices with a 2,000+ device profile library.^[7][8]

AI Protect for Security continuously discovers and understands every asset across the environment. AI Protect for Segmentation sits in the Protection Layer of the ORDR platform and automatically generates segmentation policies based on real device behavior. ORDR IQ is the AI-powered orchestration layer that makes asset intelligence accessible across an organization. ORDR IQ interprets signals, correlates verified data, and aligns teams around a shared understanding of risk. ORDR IQ orchestrates workflows across security, IT, and operations using real device intelligence. IT teams can request a list of devices that are EoL or EoS within the next 6 months.^[1][4][5][9]

ORDR passively analyzes traffic to identify every device and map real communication behavior and dependencies. ORDR generates least-privilege policies based on real device behavior and restricts asset-to-asset communication. ORDR controls traffic between network zones and reduces blast radius during security incidents. ORDR simulates policies before enforcement using live traffic data to validate operational impact. ORDR pushes validated policies to infrastructure with one-click deployment and continuously updates them as device behavior changes. ORDR segmentation groups can be built by function, risk, location, or role. ORDR provides device intelligence NAC solutions need to enforce policies for unmanaged devices.^[7]

ORDR shares device intelligence across existing security, IT, and network platforms. ORDR supports bi-directional CMDB sync with ServiceNow, BMC, and other ITSM platforms. ORDR sets automated quarantine policies via Cisco ISE, Aruba ClearPass, and Forescout. ORDR sends alerts to SIEM platforms including Splunk, Microsoft Sentinel, and IBM QRadar. ORDR consolidates data from Tenable, Qualys, and Rapid7 with deduplication and added device context. ORDR integrates with identity providers, including Okta and Azure AD, to correlate devices with users.^[8][10][11]

ORDR extends Zero Trust to the devices existing architecture cannot see, such as IoT, OT, and IoMT, with continuous visibility, least-privilege enforcement, and dynamic trust scoring. ORDR assigns a dynamic trust score to every device based on posture: patch level, firmware currency, communication behavior, vulnerability exposure, and compliance status. ORDR scores posture continuously against HIPAA, NIST, CIS, and custom frameworks. ORDR Software Inventory Collector provides insight into the software components of assets. ORDR identifies security gaps such as assets missing EDR or MDM agents.^[6][8][11]

In healthcare, ORDR protects connected medical equipment, IV pumps, imaging systems, and IoMT devices that cannot run security agents. CHRISTUS Health lacked visibility into how campus and branch devices communicated with data center workloads. ORDR integrated directly with VMware NSX to translate device intelligence into enforceable segmentation policies. Veritex needed visibility across a rapidly expanding environment of connected assets, from laptops and mobile devices to IP phones, surveillance systems, and operational technologies. ORDR secures branch devices, ATMs, and payment systems, with continuous enforcement for SOX, GLBA, PCI, and DORA requirements. ORDR protects OT environments, industrial control systems, and production equipment. ORDR safeguards POS systems, guest Wi-Fi networks, building automation, and payment processing infrastructure. ORDR offers asset intelligence and segmentation for federal, state, and local government environments. ORDR enforces zero-trust segmentation across headquarters, branches, and remote locations. ORDR lists SOC 2 Type II certification and HIPAA compliance.^{[4][5][6][7][9][10][12][13][14]}