CrowdStrike: Configuring the Device Management Integration

This article explains how to configure the Device Inventory integration for CrowdStrike

Overview

To enhance device intelligence, you can integrate CrowdStrike device data with Cato's device discovery for the IoT/OT Security service. Data from both platforms is merged, creating unified device profiles that enhance visibility and classification.

The combined view appears on the Home > Devices > Inventory tab and helps improve identification of both managed and unmanaged assets. With more accurate and complete device data, you can make better-informed security decisions across your network. For more information on Device Inventory, see What is Device Inventory?.

To configure the Device Management integration, you need to:

  1. Create the API Client in the Falcon Crowdstrike platform
  2. Create the API connector in the CMA

An IoT/OT Security license is required for this feature.

Configuring the CrowdStrike Connector

In the Falcon CrowdStrike platform, create the API Client and enter it into the CMA.

Prerequisites

  • You must have a CrowdStrike Falcon Discover license
  • To add a connector, you must have editor permission for Integrations (in the Resources section). For more information, see Managing Admin Roles Using RBAC.

Step 1: Create the API Client in the Falcon CrowdStrike Platform

In the Falcon CrowdStrike platform, create the API Client.

To create the API Client:

  1. In your Falcon CrowdStrike platform, navigate to Support and resources > API clients and keys.

    CS_nav.png
  2. Click Create API client.

  3. Add a Client name and Description, and Read access for these scopes:

    Note: You must have a CrowdStrike Falcon Discover license

    • Assets

      CS__1_.png
  4. Save the Client ID, Secret, and Base URL so they can be added in the CMA.

Step 2: Create the API Connector in the CMA

After you have set up an integration, add the details in the CMA.

To create the API connector in the CMA:

  1. From the navigation menu, click Resources > Integrations.
  2. Click the Integrated Apps tab.

  3. Click New.

    The New Integration panel opens.

  4. Select the SaaS Application you want to add.
  5. In the Capability drop down select Device Management.
  6. Add the details created during step one.
  7. Click Save.
  8. The app is visible on the Integrated Apps table with a Connected status.

Was this article helpful?

0 out of 0 found this helpful

4 comments

Date Votes