Powerful Identity Protection for Modern IT Environments
August 14, 2025

Powerful Identity Protection for Modern IT Environments

Chris Conlan | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
Verified User

Overall Satisfaction with CrowdStrike Falcon Identity Protection

ITDR was originally put in because of insurance reasons. We needed to have MFA on RDP sessions, but it is utilized for more than that now. We have multiple policies that block lateral movement with privileged accounts, alert on unauthorized access, monitor for compromised passwords, and the list goes on.

Pros

  • The MFA component has worked great when it comes to privileged accounts accessing RDP.
  • We wanted to stop lateral movement between endpoints and with CrowdStrike Falcon Identity Protection we were able to do that.
  • Identity has done a great job at supplementing our MDR service with telemetry.

Cons

  • It's not really a fault of the product, but unless you have Falcon installed on all your endpoints your visibility is limited.
  • I've yet to get MFA working on CIFS and Powershell traffic.
  • The interface could be streamlined a little. CrowdStrike Falcon Identity Protection keeps changing where things are.
  • Being able to see right away during a Penetration Test that the product detected anomalies, but our MDR service didn't. It allowed us to go back to the MDR service to show them the results and fix the issue from slipping through the cracks.
  • By satisfying the requirements from our insurance provider, our premiums didn't go up (MFA on RDP).
While the product is solid, I do find there are an excessive number of sections you can navigate to. It takes some time getting used to, but it is a very powerful product. It's not something you'll master right off the bat.
When comparing to Cisco Duo, I felt like the product offered more than just MFA on RDP.

When comparing to Silverfort, it came down to pricing. Silverfort was double the cost and I didn't like how Silverfort had separate SKUs. If you wanted MFA on everything the cost increased dramatically.

Do you think CrowdStrike Falcon Identity Protection delivers good value for the price?

Yes

Are you happy with CrowdStrike Falcon Identity Protection's feature set?

Yes

Did CrowdStrike Falcon Identity Protection live up to sales and marketing promises?

Yes

Did implementation of CrowdStrike Falcon Identity Protection go as expected?

No

Would you buy CrowdStrike Falcon Identity Protection again?

Yes

Identity Protection is well suited for organizations that need to be monitor AD/Entra for suspicious activity. During a Penetration Test our MDR didn't alert on some odd protocol implementations, but ITDR did.

It is also simple to setup for MFA on RDP as well. There are other solutions for it, but found I got more out of ITDR than I did from Duo.

ITDR is less suited for smaller organizations since it has a 250-seat minimum. They should lower it to at least 100.

Comments

More Reviews of CrowdStrike Falcon Identity Protection