Comprehensive and Detailed Explanation From Exact Extract of Forescout Platform Administration and Deployment:
According to the Forescout Resiliency Solutions User Guide and Failover Clustering configuration documentation, the correct statement is: "Segments should be assigned to appliance folders and NOT to the individual appliances".
Failover Clustering Folder Structure:
According to the Resiliency Solutions User Guide:
"When configuring failover: Identify segments of the CounterACT Internal Network that should participate in failover, and assign these segments to the folder."
Key requirement:
"Clear statically assigned segments from Appliances in the failover cluster folder. Appliances in the failover cluster support only the network segments assigned to the folder. They cannot support individually assigned segments."
Segment Assignment Rules:
According to the documentation:
text
Correct Configuration:
├─ Failover Cluster Folder
│ ├─ Assigned Segments: Segment1, Segment2, Segment3
│ ├─ Appliance A (no individual segments)
│ ├─ Appliance B (no individual segments)
│ └─ Appliance C (no individual segments)
NOT this way:
text
Incorrect Configuration:
├─ Failover Cluster Folder
│ ├─ Appliance A: Segment1
│ ├─ Appliance B: Segment2
│ └─ Appliance C: Segment3
Configuration Steps:
According to the official procedure:
Create or select an appliance folder
Place appliances in the folder
Assign segments to the FOLDER (not individual appliances)
Clear any statically assigned segments from individual appliances
Configure the folder as a failover cluster
Why Other Options Are Incorrect:
A. Once appliances are configured, then press the Apply button - Failover uses "Configure Failover" button, not "Apply"
C. See failover status by selecting IP Assignments and failover tab - It's the "IP Assignment and Failover pane," not a separate tab
D. Configure the second HA on the Secondary node - Incorrect; failover clustering is configured at the folder level, not on individual nodes
E. Place only the EM to participate in failover - Incorrect; member appliances participate; EM has separate HA
Referenced Documentation:
ForeScout CounterACT Resiliency Solutions User Guide - Failover Clustering section
Define a Forescout Platform failover cluster
Forescout Platform Failover Clustering
Work with Appliance Folders
