CrowdStrike 老挝供货与安装
美国的 CrowdStrike 基于 Falcon 平台提供云端交付的 EDR。其优势在于人工威胁狩猎 (OverWatch) 和 Falcon Complete，由 CrowdStrike 自己的团队替您处置安全事件。Falcon Go、Falcon Pro 和 Falcon Enterprise 等现成套餐按级别打包各模块。
- 总部
- United States
- 定位
- 中端企业级
适合谁
Financial institutions and multi-branch companies with nobody watching systems at night that want an outside team handling incidents 24/7.
概述
Who CrowdStrike is
CrowdStrike is headquartered in Austin, Texas, in the United States. It built cloud-native EDR from the start: each device runs one small sensor, and the analysis and console live on the Falcon platform. There is no management server to install in your own room.
The name became known worldwide on 19 July 2024, when a faulty content update crashed about 8.5 million Windows machines with a blue screen. Since then CrowdStrike has moved to staged rollouts and lets customers choose whether content updates reach them early or later. That event does not make the product bad, but it is a lesson that any kernel-level agent needs a recovery plan.
How the products fit together
- Falcon Prevent: next-generation antivirus (NGAV) that does not rely on signatures alone.
- Falcon Insight XDR: full EDR that records processes and connections for investigation and response.
- Falcon OverWatch: CrowdStrike's own people hunting threats in your environment 24/7.
- Falcon Complete: the MDR service, where CrowdStrike's team does not just alert you but isolates machines and removes the threat.
- Falcon Identity Protection for Active Directory and Entra ID, and Falcon Next-Gen SIEM for log collection.
Ready-made bundles, Falcon Go, Falcon Pro and Falcon Enterprise, package these modules by level. Large organizations can buy Falcon Flex, a single committed budget they spread across whichever modules they need.
Who it suits
CrowdStrike fits best where an organization knows it has nobody watching systems at night and wants an outside team to do it, such as financial institutions and companies with many branches.
优势
- Falcon Complete has CrowdStrike's team respond to incidents for you 24/7, something most organizations in Laos cannot build in-house.
- One sensor and a cloud console: no management server to maintain, and laptops outside the office stay protected and keep reporting.
- You can extend from endpoint to identity, cloud and SIEM on the same sensor, without installing extra agents.
- Detailed process recording lets you answer which machine an incident started on, when, and how far it spread.
选型前须知
- Cost per device is far above ordinary antivirus, especially with Falcon Complete. Compare it with staffing your own SOC, not with antivirus.
- The July 2024 incident showed a faulty kernel-level agent can take every machine down at once. Set a staged update policy, keep BitLocker recovery keys somewhere reachable, and have a recovery plan.
- Everything lives in CrowdStrike's cloud. Organizations that require an on-site console and data will not be able to use it.
- There are many module and bundle names. Make the quotation state whether Insight XDR, OverWatch or Complete are included, because that is the real difference between levels.
在老挝的使用
In Laos, CrowdStrike shows up mainly in financial institutions and multinationals whose head office chose it. Licences are bought through Thai distributors; there is no hardware and no spare parts.
What to prepare:
- Internet: the sensor protects offline, but analysis and response by CrowdStrike's team need connectivity. Branches on a single line should have a backup link such as 4G.
- Recovery plan: keep BitLocker recovery keys off the machines, and have a technician who can reach provincial branches if PCs ever need fixing by hand.
- Language and hours: the Falcon Complete team works in English. Decide clearly who in Laos answers the phone at night and has authority to approve isolating a server.
Few engineers in Laos have used Falcon, but the console is easy to read and most of the heavy work is done by CrowdStrike's team.
与其他方案对比
Trend Micro fits better when you have many old servers and need virtual patching. Sophos offers a similar MDR service that works with its own firewalls, usually at a lower budget. If you already have Microsoft 365 E5 or Business Premium, Microsoft Defender may be enough, especially if someone in-house watches the alerts.
产品线
- Falcon Prevent
- Falcon Insight XDR
- Falcon Complete
- Falcon OverWatch
- Falcon Identity Protection
- Falcon Next-Gen SIEM
使用此品牌的解决方案
常见问题
After the 2024 outage, is CrowdStrike safe to use?
The cause was a faulty content file, not an attack, and the company has since moved to staged rollouts with customer control over update timing. What you should do is put a test group on early updates and keep a recovery plan. That advice applies to every EDR brand.
Is CrowdStrike worth it for a 100-PC organization?
It depends on who will watch the alerts. If nobody in IT is watching and your data is valuable, a bundle with Falcon Complete is better value than hiring staff. If you only need good antivirus, there are much cheaper options.
Do we remove the old antivirus before installing Falcon?
Normally yes. Two agents scanning at once slow PCs down or conflict. Our approach is to install Falcon in detect-only mode first, review the results, then remove the old antivirus and switch on full prevention.
所有品牌名称和商标归其各自所有者所有。除非另有明确说明，提及某品牌并不代表与其存在合作关系。产品均通过正规分销渠道采购。
发给我们建筑平面图或几张现场照片
我们会先询问一些细节，再给出初步设计方案。首次咨询免费，可用老挝语、泰语或英语，通过 WhatsApp 或 Facebook 主页联系。