--- title: Allow and Block Request List Entries description: Field descriptions for Allow and Block List properties outline how each field controls the behavior of observables when they are added to Allow or Block lists within the CrowdStrike Falcon Insight integration. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/allow-and-block-list-properties.html release: australia product: Security Incident Response classification: security-incident-response topic_type: reference last_updated: "2026-03-12" reading_time_minutes: 1 breadcrumb: [SIR Integration References, Security Incident Response integrations, Security Incident Response, Enterprise security case management applications, Security Operations] --- # Allow and Block Request List Entries Field descriptions for Allow and Block List properties outline how each field controls the behavior of observables when they are added to Allow or Block lists within the CrowdStrike Falcon Insight integration.
Field Description
Category List CrowdStrike category list to which this entry belongs.
Source Integration source from which this block request originated.
Entry Value Value of the indicator to be blocked or allowed.
Observable Record associated with this block request
Observable Type Type of observable. Options include: - SHA256 - MD5
Date Added On TimeStamp when the indicator action was updated in CrowdStrike.
Active Option to Indicate whether this block request entry is currently active.
Status Current status of the block request life-cycle.
Requested By User User who requested the block or allow operation
Additional Information Additional context or details related to the block request