The CounterACT product from ForeScout is unique in a few ways. First, the product appliance is based on, and the policy is enforced through, a network tap configuration. The product is designed to be reading network traffic from a switch span port.