Description
The [Forescout](https://www.forescout.com/) solution provides the capability to ingest [Forescout events](https://docs.forescout.com/bundle/syslog-3-6-1-h/page/syslog-3-6-1-h.How-to-Work-with-the-Syslog-Plugin.html) into Microsoft Sentinel.
**NOTE:** This is a legacy solution. Microsoft recommends installing the [Forescout eyeExtend](https://azuremarketplace.microsoft.com/en-US/marketplace/apps/forescout.azure-sentinel-solution-forescout) solution instead to get the latest security monitoring content offered by Forescout.
- Version
- 3.0.0
- Declared author / publisher
- Microsoft - support@microsoft.com
- Support tier
- Microsoft
Related content
Links established from declared identifiers and solution manifests.
Source provenance
GitHubDisplayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.
- Commit
629d1d3↗- Source identifier
azure-sentinel-solution-forescout
GSTEP / CATALOG TRACKING
Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 05:49 UTC