Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
Microsoft Introduced CrowdStrike Falcon as a Mobile Threat Defense Partner with Intune

Microsoft Introduced CrowdStrike Falcon as a Mobile Threat Defense Partner with Intune

Written By Krishna R
Last Updated April 25, 2024
Posted In Intune
SHARE

Exciting News! Microsoft Introduced CrowdStrike Falcon as a Mobile Threat Defense partner with Intune. Mobile phones are crucial in our personal and professional lives in this technological world. Do you feel this exposes our growing number of mobile users to various security risks? Of course, nowadays, cyber threats are growing and targeting mobile devices.

Recently, Microsoft has taken a significant step regarding mobile threats by introducing CrowdStrike Falcon as a Mobile Threat Defense partner with Intune.CrowdStrike Falcon is a powerful solution for defending against threats from mobile devices such as tablets and smartphones.

Microsoft Intune always focuses on Mobile device management( MDM) and Mobile application management( MAM). It allows organizations to control and secure their devices, including mobile phones and laptops. CrowdStrike Falcon, as a Mobile Threat Defense partner with Intune, will enhance the security of the results, providing a more robust defence against attacks.

CrowdStrike Falcon is a mobile threat defence solution that integrates with Microsoft Intune. Intune and Falcon team up; they make your phone super safe. In this post, we share an overview of CrowdStrike Falcon as a Mobile Threat Defense partner with Intune.

Patch My PC
Microsoft Introduced CrowdStrike Falcon as a Mobile Threat Defense Partner with Intune - Fig.1
Microsoft Introduced CrowdStrike Falcon as a Mobile Threat Defense Partner with Intune – Fig.1

Microsoft Introduced CrowdStrike Falcon as a Mobile Threat Defense Partner with Intune

The CrowdStrike Falcon app for mobile devices (Android and iOS/iPad) gathers data about your device’s files, network, and apps through its cloud service to assess security risks. It will analyse and determine whether your device is at risk from mobile threats.

Organizations can use Intune’s Conditional Access policies to make decisions based on CrowdStrike Falcon for Mobile’s risk assessment. These policies allow or block access to corporate resources for devices depending on the threat level detected by CrowdStrike.

  • With the Intune 2404 service release, the CrowdStrike connector is now available in the Intune admin center.
  • However, it will not be operational until CrowdStrike publishes the required App Configuration profile details to support iOS and Android devices.
  • This publication is expected sometime after the second week of May.
  • Once available, you can configure and utilize the CrowdStrike connector to strengthen your mobile device security posture.

Read More – 2404 Microsoft Intune New Features April Update

Supported Platforms
Android 9.0 and later
iOS 15.0 and later
Microsoft Introduced CrowdStrike Falcon as a Mobile Threat Defense Partner with Intune – Table 1

Control Access Based on Threats from Malicious Apps

You can control access based on threats from malicious apps. When malware is detected on your device, you can block devices from some actions like Connecting to corporate e-mail, Syncing corporate files with the OneDrive for Work app and Accessing company apps until the threat is resolved.

  • The screenshot below shows the structure of how it blocks when malicious apps are detected.
Microsoft Introduced CrowdStrike Falcon as a Mobile Threat Defense Partner with Intune- Fig.2 Cred to MS
Microsoft Introduced CrowdStrike Falcon as a Mobile Threat Defense Partner with Intune- Fig.2 Cred to MS

I mentioned above that some actions will be blocked when malware is detected on your device. The screenshot below shows Access granted on the remediation structure, which means that access to corporate resources is initially blocked for a non-compliant device but later granted once the device is brought back into compliance.

Microsoft Introduced CrowdStrike Falcon as a Mobile Threat Defense Partner with Intune- Fig.3 Cred to MS
Microsoft Introduced CrowdStrike Falcon as a Mobile Threat Defense Partner with Intune- Fig.3 Cred to MS

Control Access Based on Threat to Network

You can control access based on threats to the network. In this case, network threats such as Man-in-the-Middle attacks safeguard Wi-Fi network access by evaluating the risk level of devices. When a threat alert is sent to Intune, it will block access to the corporate network.

Microsoft Introduced CrowdStrike Falcon as a Mobile Threat Defense Partner with Intune- Fig.4 Cred to MS
Microsoft Introduced CrowdStrike Falcon as a Mobile Threat Defense Partner with Intune- Fig.4 Cred to MS

The screenshot below shows the access granted to the remediation structure for the threat to the network. Here, you can see when the alert remediation is sent to Intune, and they check if a device is safe by looking at security information from CrowdStrike Falcon. As a result, access to a resource or system is allowed once the issues identified during threat assessment have been resolved.

  • Corporate Network access is resolved.
Microsoft Introduced CrowdStrike Falcon as a Mobile Threat Defense Partner with Intune- Fig.4 Cred to MS
Microsoft Introduced CrowdStrike Falcon as a Mobile Threat Defense Partner with Intune- Fig.4 Cred to MS

Control Access to SharePoint Online Based on Threat to Network

You can control access to SharePoint online based on Threats to the network. When malware is detected, such as Man-in-the-middle attacks, it blocks the synchronization of corporate files based on the device’s assessed risk.

  • It prevents access to sensitive documents in SharePoint
Microsoft Introduced CrowdStrike Falcon as a Mobile Threat Defense Partner with Intune- Fig.5 Cred to MS
Microsoft Introduced CrowdStrike Falcon as a Mobile Threat Defense Partner with Intune- Fig.5 Cred to MS

In Access granted on remediation structure, you can see when the remediation alert through the Wifi network is sent to Intune, and they check if a device is safe by looking at security information from CrowdStrike Falcon. If the issue is resolved, allow access to the system.

  • Access granted on remediation
Microsoft Introduced CrowdStrike Falcon as a Mobile Threat Defense Partner with Intune- Fig.6 Cred to MS
Microsoft Introduced CrowdStrike Falcon as a Mobile Threat Defense Partner with Intune- Fig.6 Cred to MS

Reference

CrowdStrike Falcon Mobile Threat Defense connector with Microsoft Intune

We are on WhatsApp. To get the latest step-by-step guides and news updates, Join our Channel. Click here –HTMD WhatsApp.

Author

Krishna. R is a computer enthusiast. She loves writing about Windows 11 and Intune-related technologies and sharing her knowledge, quick tips, and tricks about Windows 11 or 10 with the community.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Intune

Simplify Windows Devices to Run Only the Required Applications using Intune

Key Takeaways Hey, let’s learn about Simplify Windows Devices to Run Only the Required Applications using Intune. This policy lets administrators replace the default windows shell with a custom or lightweight shell. it improves performance by using system resources and is useful for devices that run a dedicated application. If the policy is disabled or […]

AC Anoop C Nair 8 min read
Intune

Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune

Key Takeaways In this post we are discussing about Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune. Microsoft has announced the general availability of Custom Compliance Settings for macOS in Microsoft Intune. The feature helps organizations strengthen security controls while supporting many types of macOS management scenarios. […]

AC Anoop C Nair 4 min read
Intune

Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune

Key Takeaways In this post we are discussing Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune. Microsoft Intune has received a new update that expands firmware management capabilities for Samsung Galaxy devices through Firmware Versionsintegration. This enhancement gives IT administrators more control over firmware and operating system updates, helping them […]

AC Anoop C Nair 4 min read
Intune

MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys

Key Takeaways Microsoft Intune 2607 introduces Windows Registry Data collection in Device Inventory, allowing IT admins to verify actual device configurations without relying on custom discovery or remediation scripts. Using the Properties Catalog, admins can collect registry information through Single Value, All Values Under a Key (Non-Recursive), or Same Value Across Subkeys. MS Intune Adds […]

AC Anoop C Nair 5 min read