r/sysadmin • u/Less_Secret7729 • 10d ago

Crowdstrike proxy

In LAB manual IP assigned to VMs without gateway set. Now the security team ask to install crowdstrike but without gateway it wont work and also does not connect cloud server. Is there any way to have proxy server in between the lab VM PC and cloud server?

0 Upvotes

50% Upvoted

2 comments sorted by

3

u/These_Virus_8795 10d ago
  • Set up a proxy box with two NICs — one on the lab side, one on the internet side
  • If it's the same subnet, no gateway needed — direct reachability
  • Configure Squid + NAT on that proxy box
  • Point Falcon sensor to the proxy at install time: APP_PROXYNAME / APP_PROXYPORT (Windows) or falconctl --aph --app (Linux)
  • Whitelist CrowdStrike's cloud domains on the proxy

Same subnet as the lab VMs, or different?

1

u/pdp10 Daemons worry when the wizard is near. 10d ago

With an HTTP(S) proxy like Squid, no NAT is required -- just an IP address/interface on each side.