Case Study
Miami Children’s Hospital
Highlights
Objective
Find a more efficient and effective way
to control network access and ensure
endpoint compliance.
Solution
CounterACT was able to segregate the
hospital’s networks to control data transfer
and security, and provided accurate, realtime inspection for endpoint compliance.
Results
•• Saved time using automated tools.
Miami Children’s Hospital Protects
Network and Achieves Compliance with
CounterACT
Customer Overview
Miami Children’s Hospital is a world leader in pediatric healthcare with a medical staff of more than
650 physicians and over 2,000 employees. The hospital has more than 5,000 devices accessing its
network at any given time including computers, phones using wireless VoIP, and clinical devices
including MRI machines and CT scan devices.
Miami Children’s Hospital Information Technology Security Officer, Alex Naveira, needed to find a
more efficient and effective way to control network access and ensure endpoint compliance.
One of his main priorities was to enforce security policies to allow only corporate-owned devices
on the main network that have: up-to-date antivirus, OS, and application patches, and users
were unable to store data to unencrypted hard drives or removable media — helping control
confidential patient data as required by HIPAA.
•• Better network visibility.
..................................................................................................
•• Stronger threat control by being able to
quickly spot and fix viruses.
Why ForeScout?
•• Improved endpoint compliance by
having the ability to generate accurate
inspections of all devices on the network,
and assuring all antivirus, OS, patches, etc.
were all up to date.
Miami’s Children’s Hospital conducted extensive research and found CounterACT™ to be the
only solution that could meet all of its requirements for network access control and endpoint
compliance.
“CounterACT segregates the hospital’s networks to control what transfers from one network to
another, optimize performance, and maintain data security,” and for endpoint compliance because
“CounterACT is highly accurate, and does its inspection in real-time.”
How ForeScout Helped
Time Savings
“ForeScout CounterACT is a huge improvement from the previous NAC system that we had in
place. CounterACT is more highly automated and far easier to maintain.”
Better Visibility
“Once the CounterACT appliance was in place, it was very enlightening! We thought we had 3,000
devices on our network, but when we plugged in the CounterACT appliance, we found 5,600
devices! That alone was a huge benefit. Now we have eyes into what is out there, and we can
develop rules to segregate the devices and their access privileges.”
Stronger Threat Control
“CounterACT found a virus on a corporate-owned laptop. The device had out-of- date antivirus
and out-of-date patches, and it got infected at an Internet café. When the device connected to
the hospital network, CounterACT identified the virus quickly and moved the device to quarantine
VLAN to protect our network. Day to day, in an environment like ours, we need this kind of threat
prevention.”
Improved Endpoint Compliance
“One afternoon, CounterACT alerted us that many of our virtualized servers were non-compliant
with our security policies. This was due to a simple mistake made by our datacenter team — they
forgot to include antivirus in the new virtual machine configuration that they had rolled out that
afternoon. The virtualization team were able to quickly fix the problem, and they thanked us for
discovering the gap.”
1
Case Study
Miami Children’s Hospital
“ForeScout was the only company
that could meet all of the hospital’s
requirements. In any regulated
environment like ours that requires
control over threats, ForeScout
CounterACT provides tremendous
value.”
Alex Naveira,
Information Technology Security Officer,
Miami Children’s Hospitals
The ForeScout Difference
ForeScout CounterACT is different from most threat prevention and network access control (NAC)
solutions because it is so easy to deploy. Everything is contained in a simple appliance and works
with your existing IT infrastructure. No software to install, no hardware to upgrade. Once deployed,
ForeScout CounterACT can enforce security policies for any user and any device, anywhere in the
world, regardless of how they are connecting to your enterprise network.
For more information about the ForeScout’s CounterACT appliance,
visit www.forescout.com/counteract.
Take the ForeScout Challenge
Let us know which ForeScout solution is right for you, and we’ll arrange a free on-site evaluation.
..................................................................................................
About ForeScout
ForeScout delivers pervasive network security by allowing organizations to continuously monitor
and mitigate security exposures and cyber attacks. The company’s CounterACT appliance
dynamically identifies and assesses all network users, endpoints and applications to provide
complete visibility, intelligence and policy-based mitigation of security issues. ForeScout’s open
ControlFabric™ technology allows a broad range of IT security products and management systems
to share information and automate remediation actions. Because ForeScout’s solutions are easy to
deploy, unobtrusive, flexible and scalable, they have been chosen by more than 1,500 enterprises
and government agencies. Headquartered in Campbell, California, ForeScout offers its solutions
through its network of authorized partners worldwide. Learn more at www.forescout.com.
.....................................................................................................................................................
ForeScout Technologies, Inc.
900 E. Hamilton Ave.,
Suite 300
Campbell, CA 95008
U.S.A.
Contact Us
T 1-866-377-8771 (US)
T 1-408-213-3191 (Intl.)
F 1-408-371-2284 (Intl.)
www.forescout.com
©2013 ForeScout Technologies, Inc. Products protected by US Patent #6,363,489, March 2002. All rights reserved. ForeScout Technologies, the ForeScout logo, CounterACT, and ControlFabric are trademarks
of ForeScout Technologies, Inc. All other trademarks are the property of their respective owners.
Doc: 2013.0095
2