CrowdStrike Falcon Endpoint Protection Pro
Provides True Next-Gen AV with Integrated Threat Intelligence Response

Falcon Prevent

Next-gen AV
Protects against both malware and malware-free attacks; third-party tested and certified, allowing organizations to confidently replace their existing legacy AV

Falcon X

Integrated Threat Intelligence
Integrates threat intelligence into endpoint protection, automating incident investigations and speeding breach response

Falcon Device Control

USB Device Protection
Enable safe and accountable USB device usage with effortless visibility and precise and granular control of USB device utilization

Falcon Firewall Management

Host Firewall Control
Provides simple, centralized firewall management, making it easy to manage and enforce host firewall policies

Upgrade from legacy AV to cutting edge defenses

Process tree unravels attacks at a glance while providing all the context and details

• Unmatched prevention capabilities protect against known, unknown malware and ransomware, and fileless and malware-free attacks
• Full attack visibility provides details, context and history for every alert
• Automated, scripted and analyst-driven intervention capabilities enable efficient and powerful remediation
• Threat Intelligence integration immediately assesses the origin, impact and severity of threats in the environment and provides recovery guidance for decisive incident response and remediation

State-Of-The-Art Prevention

Uses a powerful array of technologies to prevent attacks

Falcon Endpoint Protection Pro uses a complementary array of technologies to prevent threats:

• Machine learning and artificial intelligence for detection of known and zero-day malware, and ransomware
• Behavior-based indicators of attack (IOAs) prevent sophisticated attacks, including fileless and malware-free attacks
• Exploit blocking to stop the execution and spread of threats via unpatched vulnerabilities
• Threat intelligence prevention to block activities known to be malicious

The Easiest AV Replacement Solution

Tens of thousands of endpoints operational in hours

• Simplifies operations with signatureless protection
• Deploys in minutes and is immediately operational with cloud-delivered architecture
• Automatically kept up to date with native cloud architecture
• Extends effective control and prevention to USB devices
• Simplifies operations by using the same lightweight Falcon agent and console to manage firewall capabilities native to the operating system

Restore Performance and Productivity

Restores endpoint performance

• Virtually zero impact on the endpoint - from initial installation to ongoing day-to-day use
• Operates with only a tiny footprint on the endpoint
• Simplifies operations with signatureless protection

AI Powered NGAV

AI powered Machine Learning and IOAs protect against attacks

• Protects against known and unknown malware, and malware-free or fileless attacks
• Combines the best and latest NGAV prevention technologies such as machine learning, AI, indicators of attack (IOAs) and more
• Eliminates ransomware
• Covers the gaps left by legacy AV
• Fully protects endpoints online and offline
• Cleans up known artifacts left behind from blocked malicious activity

Full Attack Visibility at a Glance

Process tree unravels attacks at a glance, providing all the context and details

• Provides unparalleled alert context and visibility
• Keeps detection details for 90 days
• Unravels an entire attack in one easy-to-grasp process tree enriched with contextual and threat intelligence data

Device Control

Detailed visibility on USB devices utilization

• Granular policy enforcement to ensure control over USB devices used in the environment
• Effortless visibility across USB device usage, including what files are being copied to USB storage
• Insightful dashboards automatically provide detailed information such as class, vendor, product, serial number

Firewall Management

Host firewall management made easy

• Easily create, enforce and maintain firewall rules and policies
• Simplify operations by using the same lightweight Falcon agent, management console and cloud-native architecture
• Automatically identify and view specific activities, potential threats and network anomalies

Control and Respond

Immediately respond with surgical precision

• Real-Time Response
  Provides powerful response action to investigate compromised systems, including on-the-fly remote access to endpoints to take immediate action
• Network Containment
  Responds decisively by containing endpoints under investigation
• Fast and Easy Remediation
  Allows you to remotely and safely access compromised systems to start remediation without delay

Integrated Threat Intelligence

Fully understand the threats in your environment and what to do about them

Malware research and analysis at your fingertips

• Eliminate guesswork and uncertainty to respond to threats decisively
• Automatically determine the scope and impact of threats found in your environment
• Easily prioritize responses with threat severity assessment
• Immediately get recovery steps and resolve incidents with in-depth threat analysis
• Find out if you are targeted, who is targeting you and how to prepare and get ahead

The Power of the Cloud

Tens of thousands of endpoints operational in hours

CrowdStrike's cloud-native platform eliminates complexity and simplifies endpoint security operations to drive down operational cost

• Reduced cost and complexity: Operates without the need for constant signature updates, on-premises management infrastructure or complex integrations.
• Protection of the crowd: Allows everyone to be protected against a threat encountered in just one environment. Automatically scales to adapt to growth and changing needs.
• Restores endpoint performance: Installation and day-to-day operations bear zero impact on endpoints - even when analyzing, searching and investigating.
• Works on day one: Deploys and is operational in minutes.

Standard Support

Standard Support is bundled free with all Falcon subscriptions, providing basic support services, with a next-business-day response service level agreement (SLA).

Express Support

Express Support is designed for customers in small to medium-sized enterprise environments where deployment and operational issues must be addressed as quickly as possible.

Express Support provides everything included in Standard Support, plus:

• Prioritized case handling
• Quarterly health checks and reports
• Knowledge transfer opportunities
• Access to CrowdStrike’s team of technical account managers (TAMs) for product advice and issue escalation
• Enhanced knowledge base
• Premium video and webinar content

Essential Support

Essential Support is designed for mid-sized enterprise environments. From planning your deployment to ongoing operations, CrowdStrike’s team of support professionals understands the importance of your mission and are committed to working with you to avoid problems and resolve issues as quickly as possible.

Companies that value proactive engagement to avoid issues and fast and predictable access to support will benefit from this service.

Essential Support provides everything included in Express Support, plus:

• 30 days of personalized onboarding support
• Invitations to Beta Programs
• Periodic proactive calls from a TAM
• Reports covering the overall health of your CrowdStrike deployment, best practices, tuning, case status and reviews of new product features and capabilities

Elite Support

Elite Support is the highest level of support provided by CrowdStrike. A named TAM works closely with you as an extension of your team.

Elite Support builds on CrowdStrike Essential Support and adds the following:

• Custom reporting
• Weekly scheduled meetings
• On-site visits (up to quarterly)
• Product management team access
• Named TAM