Integrating with Crowdstrike

๐Ÿ“˜

Note

This is a limited release feature. For more information contact Axis Security Support: [email protected]

Axis Security allows you to integrate various platforms such as Crowdstrike.

To integrate with Crowdstrike:

  1. In the Crowdstrike console, click the Falcon on the top left bar.
  2. Under Support, click API Clients and Keys.
  3. Click Add new API client.
31363136
  1. In the new API window, enter the client name and description.
  2. API Scopes asserts the specific actions Crowdstrike can be allowed to do on your behalf. Select the relevant scopes and click Add.
    Be sure to set the permissions for the host to "read".
  3. From the summary dialog, copy the Client ID, Secret, and Base URL.
  4. Click Done.

Creating an Integration in Axis Security

  1. Go to Settings -> Integrations -> New Integration.
  2. Add a name.
  3. (Optional) add a description.
  4. Under Integration Type, enter Crowdstrike.

API Client

Enter the API integration information generated from Crowdstrike (step 6 in the Crowdstrike section). Click here to learn more about API integration.

  1. Enter the Client ID.
  2. Enter the API Secret Key.
  3. Click Submit.
35043504

Creating a Device Posture Object in Axis Security

  1. In the Management Console, go to Policy -> Device Posture -> New Device Posture.
  2. Select Atmos Agent.
  3. Under Device Posture Criteria, check Crowdstrike Integration.
984984

Use the Device Posture Object in a Policy

  1. In the Management Console, go to Policy -> Add Rule.
  2. Continue adding the rule (click here to learn more).
  3. Under Device Posture, select the device posture object created in the previous steps.
  4. Click Submit.
34863486

๐Ÿ“˜

Note

To commit your changes, navigate to the top-right menu, click Apply Changes, then select Commit Changes.

Troubleshooting Sync Issues

The Partner Integrations table provides the following sync status information:

SyncedIntegration has synced successfully
Sync in progressIntegration is currently syncing
Pending initial syncIntegration has not synced yet

Note: After you' ve submitted the form and committed your changes, the integration can take up 20 minutes for the status to change to Sync. However, the sync happens immediately.
Not synced Integration has not synced recently, there may be a temporary sync issue. Indicates the time since the last successful sync.

If the integration sync indicator is red, contact Axis Support: [email protected]

23202320 13461346