Integrating with Crowdstrike

📘

Note

This is a limited release feature. For more information contact Axis Security Support: [email protected]

Axis Security offers integration with various platforms, including Crowdstrike. This integration utilizes the Crowdstrike API to ensure that the user's endpoint is connected to a specific corporate instance of Crowdstrike. From an Atmos Agent security posture perspective, it verifies that Falcon is running and properly connected to the designated tenant.

To integrate with Crowdstrike:

1. In the Crowdstrike console, click the Falcon on the top left bar.
2. Under Support, click API Clients and Keys.
3. Click Add new API client.

4. In the new API window, enter the client name and description.
5. API Scopes asserts the specific actions Crowdstrike can be allowed to do on your behalf. Select the relevant scopes and click Add.
   Be sure to set the permissions for the host to "read".
6. From the summary dialog, copy the Client ID, Secret, and Base URL.
7. Click Done.

Creating an Integration in Axis Security

1. Go to Settings -> Integrations -> New Integration.
2. Add a name.
3. (Optional) add a description.
4. Under Integration Type, enter Crowdstrike.

API Client

Enter the API integration information generated from Crowdstrike (step 6 in the Crowdstrike section). Click here to learn more about API integration.

1. Enter the Client ID.
2. Enter the API Secret Key.
3. Click Submit.

Creating a Device Posture Object in Axis Security

1. In the Management Console, go to Policy -> Device Posture -> New Device Posture.
2. Select Atmos Agent.
3. Under Device Posture Criteria, check Crowdstrike Integration.

Use the Device Posture Object in a Policy

1. In the Management Console, go to Policy -> Add Rule.
2. Continue adding the rule (click here to learn more).
3. Under Device Posture, select the device posture object created in the previous steps.
4. Click Submit.

📘

Note

To commit your changes, navigate to the top-right menu, click Apply Changes, then select Commit Changes.

Troubleshooting Sync Issues

The Partner Integrations table provides the following sync status information:

If the integration sync indicator is red, contact Axis Support: [email protected].