Skip to main content

Access Condition for CrowdStrike

Introduction​

If you have an existing CrowdStrike integration and would like to create an Access Condition for this integration, you may create this Access Condition using your Aembit tenant.

The section below describes the required steps to setup and configure a Access Condition for a CrowdStrike integration.

Creating an Access Condition for a CrowdStrike Integration​

To create an Access Condition for a CrowdStrike integration, perform the steps listed below.

  1. Log into your Aembit tenant using your login credentials.

  2. When your credentials have been authenticated and you are logged into your tenant, you are directed to the main dashboard page. Click on Access Conditions in the left navigation pane. You will see a list of existing Access Conditions (in this example, no Access Conditions have been created)

Access Conditions List - Blank

  1. Click on the New Access Condition button. An Access Condition dialog window appears.

Access Condition Dialog Window - Empty

  1. In the Access Condition dialog window, enter information in the following fields:
  • Name - Name of the Access Condition.
  • Description - An optional text description of the Access Condition.
  • Integration - A drop-down menu that enables you to select the type of integration you would like to create. Select your CrowdStrike integration from the drop-down menu. In this example, Test CrowdStrike Condition is selected.

Access Condition Dialog Window - CrowdStrike Selected

  1. In the Conditions section, click on the desired toggle buttons you would like to set for the Access Condition. There are three different toggle buttons you may select:
  • Restrict Reduced Functionality Mode - This toggle ensures the CrowdStrike Agent reports if the Crowdstrike Agent on the Host is not in Reduced Functionality Mode.
  • Match Hostname - This toggle ensures the CrowdStrike Agent reported HostName matches the Aembit Agent Proxy retrieved HostName.
  • Match Serial Number - This toggle ensures the CrowdStrike Agent Host Serial Number matches the Aembit Agent Proxy retrieved Host Serial Number.

  1. In the Conditions - Time section, enter the time period you would like to use to restrict Client Workloads that were last seen prior specified to the time span.

  2. When you are finished, Click Save. Your new Access Condition for the CrowdStrike integration appears on the main Access Conditions page.

Access Conditions Main Page - CrowdStrike Listed