CrowdStrike Falcon Pros and Cons

The UI is simple and self-explanatory. Everything is easy to understand.

There's almost no maintenance required. It's very low if there's any at all.

Their endpoint is pretty flawless. There is no lag on the machines at all. Even though I have a good overview of all the machines, that's pretty much the most valuable feature of CrowdStrike Falcon.

The feature that I find to be the most valuable, is being able to look at the system analysis and being able to baseline what is installed on the system.

The initial setup is very simple.

The most valuable feature is the indicator of compromise, which show you what file was either quarantined or removed.

It's given me a level of confidence that my network is secure.

The stability is good; we haven't experienced any glitches or bugs.

The most valuable feature is that we don't need to re-image machines as much as we had to.

The solution can scale easily.

Basically, they don't cover legacy OS or applications. That's the only issue we're concerned about

The solution needs to have integration with on-premises security devices and security facilities. That means all the security products, including the perimeter firewall, the DMZ.

It does take more time to scan than other solutions.

I think there's an opportunity to enhance the AI or at least the traps to say, if something changes from this baseline, let us know and flag it.

They don't really have anything when it comes to scanning attachments.

Any kind of integration that you want to do, such as using the API to connect to a SIEM, is complex and it will be expensive to do.

CrowdStrike Falcon by itself does not supply in-depth reporting.

The biggest issue with Falcon as a standalone product is it doesn't have very much reporting.

They need to strengthen the forensic capabilities of this product, for e-discovery.

Support, particularly related to after-sales and after deployment, could be improved a bit. If you need to connect to support, it takes at least a day to reach the support team and get a proper reply.