Kolide
Cloudflare Zero Trust can integrate with Kolide to require that users connect to certain applications from managed devices. This service-to-service posture check uses the WARP client to read endpoint data from Kolide. Devices are identified by their serial numbers.
- Kolide agent is deployed on the device.
-
Cloudflare WARP client is deployed on the device. For a list of supported modes and operating systems, refer to Service providers.
- Log in to your Kolide dashboard.
- Select your profile and go to Settings > Developers.
- Select Create New Key.
- Enter a Key Name and select Save.
- Copy the Secret token to a safe place. This will be your Client Secret.
- In Zero Trust ↗, go to Settings > WARP Client.
- Scroll down to Device posture providers and select Add new.
- Select Kolide.
- Enter any name for the provider. This name will be used throughout the dashboard to reference this connection.
- Enter the Client secret you noted down above.
- Choose a Polling frequency for how often Cloudflare Zero Trust should query Kolide for information.
- Select Save.
You will see the new provider listed under Settings > WARP Client > Device posture providers. To ensure the values have been entered correctly, select Test.
- In Zero Trust ↗, go to Settings > WARP Client > Service provider checks.
- Select Add new.
- Select the Kolide provider.
- Configure a device posture check and enter any name.
- Select Save.
Next, go to Logs > Posture and verify that the service provider posture check is returning the expected results.
Device posture data is gathered from the Kolide K2 API ↗.
Selector | Description |
---|---|
Issue count | Total number of issues detected on the device |