Crowdstrike’s Firewall Management platform is a host firewall tool that centralizes defense against malware threats. It’s a module within the broader Falcon endpoint protection suite, which includes antivirus protection as well as optional features like EDR, threat intelligence, and threat hunting. Crowdstrike Falcon uses next-generation technology like machine learning and artificial intelligence to detect and mitigate sophisticated threats before they can cause significant harm.
About Crowdstrike Falcon
Crowdstrike Falcon is a comprehensive endpoint protection suite that can be customized to meet a customer’s specific needs. A number of à la carte features like firewall management, EDR, and IT hygiene can be bundled as a scalable Pro, Enterprise, or Premium package. All packages come with next-generation antivirus protection at the foundation, so adopting the right one is a matter of determining which additional features you require.
Recommended: CrowdStrike Falcon Insight: EDR Product Overview and Features
Falcon Firewall Management advantages
The Falcon Firewall Management product is one of the add-on modules that works to prevent malware attacks from impacting each of your endpoint devices, as well as your broader network. As remote work becomes a more widely adopted business practice, this host-level firewall protection is especially important. It’s delivered via the lightweight Falcon agent, so it causes minimal performance degradation to the host devices while also centralizing firewall management for administrators.
Falcon Firewall Management also reduces the complexity that often comes with implementing and enforcing firewall policies on host devices. It doesn’t require any on-premises installation, so the firewall becomes operational and your devices are protected immediately. Crowdstrike also offers firewall policy templates you can use to get started, or you can write a custom policy from scratch. In addition to enforcing policies and preventing attacks, the Firewall Management module will help with activity logging, granular troubleshooting, and compliance reporting as well.
Falcon Firewall Management disadvantages
The biggest disadvantage of the Falcon Firewall Management solution is that it can only be adopted in conjunction with the broader Falcon platform. Its add-on nature also means Firewall Management is not included with the base price of any Falcon packages. This may be a nice customization option for larger enterprises, but smaller businesses may find a better pricing structure with an alternative firewall vendor. Crowdstrike also does not offer any straightforward pricing information for individual modules, so the only way to truly compare costs with other firewall solutions is by contacting the Crowdstrike sales team.
Crowdstrike Falcon package comparison
Below is a comparison of features according to the different Crowdstrike Falcon packages. For more customized needs, Crowdstrike also offers a fully managed “Complete” package that requires a conversation with their sales team.
| Pro | Enterprise | Premium | |
|---|---|---|---|
| Antivirus? | Included | Included | Included |
| EDR? | N/A | Included | Included |
| IT hygiene? | N/A | N/A | Included |
| Threat intelligence? | Optional | Optional | Optional |
| USB device control? | Optional | Optional | Optional |
| Host firewall management? | Optional | Optional | Optional |
| Threat hunting? | N/A | Optional | Optional |
