The module is designed to deploy and manage CrowdStrike's Falcon Sensor antivirus agent.
- Description
- Setup - The basics of getting started with crowdstrike
- Usage - Configuration options and additional functionality
- Limitations - OS compatibility, etc.
The modules installs and manages or removes the Falcon Sensor anti-virus agent by CrowdStrike. Proxy settings and tags can be confiugred additionaly.
The module installs a package falcon-sensor
, which it assumes to be
available in a repo configured on the system. The vendor does not maintain
a Linux repository.
The most basic usage of the module:
class { 'crowdstrike': cid => 'AAAAAAAAAAAAA-BB' }
Parameter cid
is mandatory.
In most cases just specifying cid
(customer id) is sufficient, but adding
tags is desirable for easy grouping and searching of the hosts in the
CrowdStrike console:
class { 'crowdstrike':
cid => 'AAAAAAAAAAAA-BB',
tags => [ 'My Organization', 'My Department' ]
}
If the computer does not have direct access to the CrowdStrike cloud service, connection can be routed through a proxy server:
class { 'crowdstrike':
cid => 'AAAAAAAAAAAA-BB',
proxy_host => 'proxy-server.my-organization.com',
proxy_port => 3128
}
Both proxy_host
and proxy_port
are mandatory if either specified.
If proxy has been used and later disabled, the host and port configuration is not removed entirely, only disabled. This does not affect the functionality in any way.