CrowdStrike ZTA
Device Posture Check using Falcon ZTA score
Integration overview
CrowdStrike Falcon Zero Trust Assessment (ZTA) scores each managed endpoint from 1 to 100 based on its security configuration, OS state and Falcon sensor health. Cato uses that score as a device posture check, so access policy reflects how healthy the device is right now, not just who the user is. Policies can allow, restrict or block access to applications and resources. The result is zero trust access driven by live endpoint risk, enforced across every user and location from one Cato policy.
How Cato Helps
Risk-Based Access: Devices below a set ZTA score are blocked or limited before they reach sensitive apps.
Tiered Policies: Different score thresholds apply to different resources, so critical systems demand healthier devices.
Continuous Enforcement: Posture is re-evaluated during the session, so a device that degrades loses access.
Single Policy Plane: Falcon device risk and Cato identity and access rules are managed together in Cato.
Try Cato
Get Ready to see Cato in action
