Carbon Black Next-Generation Antivirus Reviews - Page 11

While most companies just use a typical anti-virus we use the Carbon Black Defense combined with Carbon Black Response. It's good because it gives you a play by play of every action on a particular node. Using the built in alerts or creating your own you'll find that it's easy to go through and work an issue! Review collected by and hosted on G2.com.

The only thing I really dislike about Cb Response is the layout and the lack of documentation displayed as you do things (ie. searching, although documentation does exist you just have to look elsewhere.) Review collected by and hosted on G2.com.

I like that CbD is constantly improving it's threat detection and prevention. Review collected by and hosted on G2.com.

There's not much I dislike about it so far. The few challenges I've faced are not having a static set of IP addresses to permit workstations through the firewall, and configuring the sensor to use a proxy. We ended up using a forward proxy to mitigate the issue with the dynamic range of servers. If you implement a proxy, after you've installed CbD, you'll have to reinstall the agent in order for the endpoint to utilize the proxy, because it currently has to be configured at the time of install. Review collected by and hosted on G2.com.

Very detailed information on the time(s) surrounding a supposed incident. Review collected by and hosted on G2.com.

Seems to really shine only in internet-accessible networks; not very great at isolated networks like mine. Review collected by and hosted on G2.com.

The endpoints are extremely lightweight and easy to deploy and upgrade via the GPO and the console. For the amount of protection you get there is very little network traffic and the footprint on endpoints is minimal. Review collected by and hosted on G2.com.

Documentation after installation could be much improved. The amount of data is overwhelming if you need to research a potential issue. It takes someone who knows what they are looking at/for to diagnose the information efficiently. Review collected by and hosted on G2.com.

Carbon Black seems to be unlike any other endpoint security product that we've seen. While other (more traditional) products focus on their ability to keep your company safe, Carbon Black focuses on *your* ability to keep your company safe and giving you tools to do that. In our situation, we could not realistically remove local admin rights from the majority of our PCs, so Carbon Black gave us a way to control what people are running without fully removing admin rights. The verbosity of control that we have over our endpoints and the reaction time that Carbon Black gives us to threats is surpassed by no other software that we have seen so far. Review collected by and hosted on G2.com.

Part of the territory of having verbose control over a system is that it is more complicated to use and time consuming to manage. This can scare some of our staff away from being trained on it, leaving only a select few who can manage the product. That being said, it is still well worth the effort. Review collected by and hosted on G2.com.

Cb Defense gives administrators the ability to really customize the security experience for users or groups that may require different security standards. Review collected by and hosted on G2.com.

Occasional disagreement on how some software is classified as suspected malware, but the support team is very helpful in investigating further to reclassify. Review collected by and hosted on G2.com.

Insight into processes and the attack vector that makes the workstation vulnerable to 0-day and APT threats. Trusting a known legitimate source throws the end user off their game and could allow these sorts of threats inside the organization. Cb Defense allows us to not worry about these since the activity will be denied or the application terminated. The workstation agent is easy to deploy within the organization. When there is an issue support is very reactive and communicates well. They actively want to solve any issues that take place and make sure that we are happy. Because it's a cloud based solution any devices outside of our internal network can still be protected while in the wild. Review collected by and hosted on G2.com.

Reporting leaves something to be desired; there aren't any nice canned reports for C levels to see why they spent the money where they did without having to send to a SIEM. The interface will be receiving an overhaul soon and looks to be a good upgrade from the current release, but the current release doesn't make it very easy to see where the threat hooked in or to follow the path of ingress. While deploying the agent is good, the management of the enrolled device could use some work. The agent, at least with background scan enabled, does eat a good amount of ram. Review collected by and hosted on G2.com.

Cb Defense is easy to deploy and manage. It detected all of my AV tests.

The reporting features are great for when you need to investigate an alert. Review collected by and hosted on G2.com.

They had some issues with whitelisting at first that have been resolved. This caused a lot of false positives.

They also need to improve the speed of sensor updates. Review collected by and hosted on G2.com.

I like the depth in which CB Defense checks applications and files. Review collected by and hosted on G2.com.

The product is having problems determining what is a real threat. Review collected by and hosted on G2.com.

the ability to search all stated events from the one problem event

how if one thing start it show all that spawned off that one item Review collected by and hosted on G2.com.

we have not come across much yet we do not like Review collected by and hosted on G2.com.