What is CrowdStrike Falcon?
CrowdStrike Falcon is a cloud-based security tool that runs on Windows, Mac, and Linux systems and is the default Berkeley Lab antivirus software.
CrowdStrike Falcon is different from legacy anti-virus because the CrowdStrike Falcon platform:
- Delivers its features through a single, lightweight agent that is managed from the cloud, protecting your system
- Does not scan and quarantine files but uses real-time process control to monitor executable files, scripts, and network activity allowing it to stop threats more efficiently
Why did Berkeley Lab pick CrowdStrike Falcon?
CrowdStrike Falcon provides advanced protection against viruses, malware, ransomware, cyber-attacks, and other malicious activity for LBNL systems. CrowdStrike Falcon greatly protects your computer from attack.
CrowdStrike Falcon will replace Sophos Antivirus, which will be discontinued in July 2023.
Where to download CrowdStrike Falcon?
Download CrowdStrike Falcon from https://software.lbl.gov/.
How to install or uninstall CrowdStrike Falcon?
See Install/Uninstall CrowdStrike Falcon
How do I know if Crowdsrike finds something?
A notification will pop up on your system just like any other notification from other software. Windows notifications will be on the bottom right and Macs will be on the upper right by default.
How will transition to CrowdStrike Falcon impact me?
Sophos Anti-virus will be uninstalled and CrowdStrike Falcon will be installed.
Who do I talk to if CrowdStrike Falcon is potentially interfering with my work?
Interference with your work is unlikely, we’ve talked with other organizations that use CrowdStrike Falcon and they reported false positives are very low. However, there may be a few as we start rolling out CrowdStrike.
If you need assistance, click on the chat icon on the bottom right of this page, or email [email protected].
With CrowdStrike Falcon, will BigFix still be needed?
Yes, BigFix is an endpoint management tool used to help automate workstation support processes. CrowdStrike Falcon is an endpoint protection tool.
Does CrowdStrike Falcon run on iOS and Android?
CrowdStrike Falcon works on iOS 13 or higher and Android version 8 or higher. The use of CrowdStrike Falcon on mobile devices is not provided by LBNL IT.
Can I use CrowdStrike Falcon on my personal computer? What should I do for personal AV with Sophos retiring?
CrowdStrike Falcon is for LBNL systems only. If you are using Sophos Anti-virus on your personal computer, you will want to replace it with another trusted Anti-virus on the market.
How to check if CrowdStrike Falcon is working on a system?
See Is CrowdStrike Falcon Running?
Will it slow down the computer?
We don't think so. We talked with many peers running Crowstrike. Unlike traditional AV, the software doesn't scan your hard drive so there is less impact just by the architecture differences. There is no perceptible performance impact on your computer. The sensor’s design makes it extremely lightweight (consuming 1% or less of CPU) and unobtrusive: there’s no UI, no pop-ups, no reboots, and all updates are performed silently and automatically.
What are some of the requirements to install CrowdStrike Falcon?
- Windows 10 and higher
- macOS 10.15 and higher
- Linux: Alma Linux, Amazon Linux 2, Amazon Linux AMI, CentOS, Debian, Oracle Linux, Red Hat Enterprise CoreOS (RHCOS), Red Hat Enterprise Linux (RHEL), ROcky Linux, SUSE Linux Enterprise (SLES), OpenSuse LEAP, Ubuntu, and Graviton
- Connection to the internet
Concerns about CrowdStrike Falcon and Privacy?
See CrowdStrike Falcon and Privacy
