--- title: Allow and Block Request List Entries description: Field descriptions for Allow and Block List properties outline how each field controls the behavior of observables when they are added to Allow or Block lists within the CrowdStrike Falcon Insight integration. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/allow-and-block-list-properties.html release: australia product: Security Incident Response classification: security-incident-response topic_type: reference last_updated: "2026-03-12" reading_time_minutes: 1 breadcrumb: [SIR Integration References, Security Incident Response integrations, Security Incident Response, Enterprise security case management applications, Security Operations] --- # Allow and Block Request List Entries Field descriptions for Allow and Block List properties outline how each field controls the behavior of observables when they are added to Allow or Block lists within the CrowdStrike Falcon Insight integration.
| Field | Description |
|---|---|
| Category List | CrowdStrike category list to which this entry belongs. |
| Source | Integration source from which this block request originated. |
| Entry Value | Value of the indicator to be blocked or allowed. |
| Observable | Record associated with this block request |
| Observable Type | Type of observable. Options include: - SHA256 - MD5 |
| Date Added On | TimeStamp when the indicator action was updated in CrowdStrike. |
| Active | Option to Indicate whether this block request entry is currently active. |
| Status | Current status of the block request life-cycle. |
| Requested By User | User who requested the block or allow operation |
| Additional Information | Additional context or details related to the block request |