Allow and Block Request List Entries

---
title: Allow and Block Request List Entries
description: Field descriptions for Allow and Block List properties outline how each field controls the behavior of observables when they are added to Allow or Block lists within the CrowdStrike Falcon Insight integration.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/allow-and-block-list-properties.html
release: australia
product: Security Incident Response
classification: security-incident-response
topic_type: reference
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [SIR Integration References, Security Incident Response integrations, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# Allow and Block Request List Entries

Field descriptions for Allow and Block List properties outline how each field controls the behavior of observables when they are added to Allow or Block lists within the CrowdStrike Falcon Insight integration.

<table id="table_ev4_dyb_k3c"><thead><tr><th>

Field

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Category List

</td><td>

CrowdStrike category list to which this entry belongs.

</td></tr><tr><td>

Source

</td><td>

Integration source from which this block request originated.

</td></tr><tr><td>

Entry Value

</td><td>

Value of the indicator to be blocked or allowed.

</td></tr><tr><td>

Observable

</td><td>

Record associated with this block request

</td></tr><tr><td>

Observable Type

</td><td>

Type of observable. Options include: -   SHA256
-   MD5

</td></tr><tr><td>

Date Added On

</td><td>

TimeStamp when the indicator action was updated in CrowdStrike.

</td></tr><tr><td>

Active

</td><td>

Option to Indicate whether this block request entry is currently active.

</td></tr><tr><td>

Status

</td><td>

Current status of the block request life-cycle.

</td></tr><tr><td>

Requested By User

</td><td>

User who requested the block or allow operation

</td></tr><tr><td>

Additional Information

</td><td>

Additional context or details related to the block request

</td></tr></tbody>
</table>