What is CrowdStrike Falcon?
CrowdStrike Falcon is a cloud-based security tool that runs on Windows, Mac, and Linux systems and is the default Berkeley Lab antivirus software.
CrowdStrike Falcon is different from legacy antivirus because the CrowdStrike Falcon platform:
- Delivers its features through a single, lightweight agent that is managed from the cloud, protecting your system
- Does not scan files but uses real-time process control to monitor executable files, scripts, and network activity allowing it to stop threats more efficiently
Why did Berkeley Lab pick CrowdStrike Falcon?
CrowdStrike Falcon provides advanced protection against viruses, malware, ransomware, cyber-attacks, and other malicious activity for Berkeley Lab systems. CrowdStrike Falcon greatly protects your computer from attack.
CrowdStrike Falcon will replace Sophos Antivirus, which will be discontinued in July 2023.
Where to download CrowdStrike Falcon?
Download CrowdStrike Falcon from https://software.lbl.gov/.
How to install or uninstall CrowdStrike Falcon?
See Install/Uninstall CrowdStrike Falcon
How to uninstall Sophos Antivirus?
You do not need to uninstall Sophos Antivirus, the CrowdStirke Falcon installer will uninstall Sophos Antivirus.
I received a notification saying I do not have virus protection during the CrowdStrike Falcon installation, do I need to worry?
No, Crowdstrike Falcon is a cloud-based product while Sophos is locally installed, there may be a brief lag time where the Windows system thinks that there is no antivirus installed, prompting the Windows Security Center notification. Once CrowdStrike Flacon is fully installed and configured, those will go away.
How do I know if Crowdsrike finds something?
A notification will pop up on your system just like any other notification from other software. Windows notifications will be on the bottom right and Macs will be on the upper right by default.
How will the transition to CrowdStrike Falcon impact me?
Sophos Anti-virus will be uninstalled and CrowdStrike Falcon will be installed.
Who do I talk to if CrowdStrike Falcon is potentially interfering with my work? (Generates a false positive notification.)
Interference with your work is unlikely, we’ve talked with other organizations that use CrowdStrike Falcon and they reported false positives are very low. However, there may be a few as we start rolling out CrowdStrike.
If you need assistance, please email [email protected] and include the following:
- Computer name
- DOE number of the computer
- Time and date of the notification
- Berkeley Lab username and employee ID number
Does CrowdStrike Falcon run in the background and is there any way the user can manage it?
CrowdStrike Falcon runs in the background automatically and there is no user-accessible interface. This is to improve security. If someone compromises your computer, they can not disable CrowdStrike Falcon.
With CrowdStrike Falcon, will BigFix still be needed?
Yes, BigFix is an endpoint management tool used to help automate workstation support processes. CrowdStrike Falcon is an endpoint protection tool.
Does CrowdStrike Falcon run on iOS and Android?
CrowdStrike Falcon works on iOS 13 or higher and Android version 8 or higher. The use of CrowdStrike Falcon on mobile devices is not provided by Berkeley Lab IT.
Can I use CrowdStrike Falcon on my personal computer? What should I do for personal antivirus with Sophos retiring?
No, you cannot, as CrowdStrike Falcon is for Berkeley Lab systems only. If you have been using the Lab's Sophos Antivirus on your personal computer, you will need to replace it with another trusted Anti-virus on the market, such as Windows Defender or Avast.
How to check if CrowdStrike Falcon is working on a system?
See Is CrowdStrike Falcon Running?
Will CrowdStrike Falcon slow down my computer?
Unlike traditional antivirus, the software doesn't scan your hard drive so there is less impact just by the architecture differences. There is no perceptible performance impact on your computer. The sensor’s design makes it extremely lightweight (consuming 1% or less of CPU) and unobtrusive: there’s no UI, fewer reboots, and all updates are performed silently and automatically when possible.
What are some of the requirements to install CrowdStrike Falcon?
- Windows 10 and higher
- macOS 11 Big Sur and higher (Intel, M1, and M2 chipsets)
- Linux: To be determined
- Connection to the internet
Note: If you would like assistance because your system does not meet the listed requirements, please email [email protected] and include:
- Project-Activity ID number
- DOE number of the computer
Does the CrowdStrike Falcon macOS installer work for Intel, M1, and M2 chipsets?
Yes, the CrowdStrike Falcon macOS installer is a universal binary and will work on Intel and Apple Silicon (M1, and M2) chipsets.
Concerns about CrowdStrike Falcon and Privacy?
See CrowdStrike Falcon and Privacy
