Jump to main content
Email Security Administration Guide
Index
Email Security Administration Guide
Check Point Support
  1. Home
  2. Managing Security Events
  3. CrowdStrike Integration
  • Important Information
  • Introduction to Email Security
  • Getting Started
  • Configuring Security Engines
  • Email Protection
  • Messaging Apps Protection
  • File Storage Protection
  • Compromised Account (Anomaly) Detection
  • Partner Risk Assessment (Compromised Partners)
  • Cloud SMTP Relay
  • Managing Security Exceptions
  • Managing Security Events
    • Dashboards, Reports and Charts
    • Reviewing Security Events
    • Searching for Emails
    • Remediating Compromised Accounts
    • System Settings
    • SIEM / SOAR Integration
    • CrowdStrike Integration
      • Step 1 - Create a CrowdStrike Data Connection
      • Step 2 - Configure CrowdStrike SIEM Integration
  • Managing Quarantine
  • Customization
  • SmartConfig Recommendations
  • Incident Response as a Service (IRaaS)
  • DMARC Management
  • Security Posture Management (SSPM)
  • Leaked Credentials
  • Security Awareness Training
  • Video Tutorials
  • Appendix

CrowdStrike Integration

This document describes the steps to integrate Email Security with CrowdStrike Falcon Next‐Gen SIEM.

High-Level Procedure

  • Step 1 - Create a CrowdStrike Data Connection

  • Step 2 - Configure CrowdStrike SIEM Integration

Generated by <oXygen/> XML WebHelp - Evaluation Version
21 July 2026
© 2022 - 2026 Check Point Software Technologies Ltd.