VMware Carbon Black Cloud Reviews

I use the solution for any endpoint in a system, such as a host. The EDR can detect any malicious activity, such as malware, anomalous behavior, or any other possibility of a threat.

VMware Carbon Black Cloud is a user-friendly solution that can isolate machines from the rest of the network. When a machine is quarantined, it cannot communicate with any other machines on the network except for the Carbon Black Cloud server. This allows you to investigate the machine without the risk of malware escaping to the network.

Carbon Black Cloud's server can communicate with the quarantined machine through DNS and VSCP. This allows you to collect data from the machine, such as system logs, process activity, and registry changes. This data can be used to investigate the infection and determine the next steps.

CrowdStrike and Cybereason are also popular EDR solutions. They offer similar features to VMware Carbon Black Cloud but may have different strengths and weaknesses. It is important to evaluate all of your options before choosing an EDR solution.

Additionally, it is complex to use, and the pricing should be improved. 

I use VMware Carbon Black Cloud for endpoint protection, serving as a defense against malware and viruses on client devices.

The most valuable features of VMware Carbon Black Cloud are its lightweight design, ensuring minimal impact on end-users, and its real-time protection.

We use VMware Carbon Black Cloud for endpoint detection and response.

Threat hunting is the most valuable feature of VMware Carbon Black Cloud.

I use the solution to do back-end architecture and management for a response. 

The solution is very inexpensive but still provides good process-level management. 

The solution does very well as a baseline EDR, especially between the endpoint and launching scripts or pulling data back. 

There is a back-end Python library for reporting.

Firstly, we use it as part of our Zero Trust networking solution as it acts as a mitigating response for any vulnerabilities with applications or the operating system. Secondly, we use it to track device compliance to check whether things are updated because it collects so much information about devices. Most importantly, we use it for peace of mind knowing that we have a flexible and robust solution for endpoint security.

The best feature is that it collects so much information. Its search functionality on the console works well as far as being able to drill down and find compliance issues. Also, something was executed on a machine or across a bunch of machines and how it relates to those bits of data. In that case, you can look at the whole picture in your environment.

The education and awareness of customers here in Vietnam for Carbon Black CB Response is not good at the moment. Not a lot of customers know about this solution.

Here in Vietnam, we mostly use Symantec and Trend Micro. I know Carbon Black CB Response is a very good product, but educating customers on why and how to use it, and how to market it, VMware Vietnam has not been doing a very good job, so that area could be improved. Areas for improvement would be training and education for both partner and customer, plus the marketing, particularly how to reach out to the customers.

The customers are not well educated on the product, so once they use it, they don't know what more they can do with it. They don't know that they can integrate Carbon Black CB Response with other VMware solutions or other products.

We've been using Carbon Black CB Response for a very long time, because we have a team handling a product called FPT EagleEye which is big on Carbon Black CB Response here in Asia.

Our primary usage for this solution is as an endpoint response. We use Carbon Black as a threat line of defense for the endpoints.

Carbon Black ensures the probability that any ransomware will be stopped before spreading. This is very important. The solution provides this for our business.

My clients are in a range of verticals, so we have clients in healthcare, education, manufacturing, etc. We provide solutions to anybody who's insightful enough and forethinking enough to understand that cybersecurity is not like insurance. So my use cases are all across the board. But, essentially, my customer base boils down to anyone who doesn't want to get owned by a ransomware attack. My company chooses the best-in-breed technology for tools, then adds cybersecurity management services on top of that.

Probably the most valuable feature of CB Response is its ability to isolate a host and take it off the network, so it's not spreading anything. We have two security operations centers around the globe. When an SOC analyst sees something on an endpoint, they can use Carbon Black Response to isolate that host from the customer's environment and prevent any kind of lateral spread.