Try our new research platform with insights from 80,000+ expert users

SonicWall Capture Client vs VMware Carbon Black Cloud comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
1.0
SonicWall Capture Client offers cost savings, improved security, reduced manual work, lower infection rates, and easy deployment for better productivity.
Sentiment score
7.3
VMware Carbon Black Cloud offers cost savings, improved security, centralized protection, better efficiency, and quick ROI with automation features.
 

Customer Service

Sentiment score
4.9
SonicWall Capture Client support receives mixed reviews for its knowledgeability, with praised availability but criticized for slow response times.
Sentiment score
6.6
Users typically find VMware Carbon Black Cloud support efficient, with no negative feedback reported and alternative contacts available for assistance.
Partners can purchase single endpoints at prices equivalent to 1,000-endpoint deals, providing an advantage for managed security service provider partners.
While their escalation process is understandable, it can be time-consuming as all logs need to be provided multiple times across different service levels.
 

Scalability Issues

Sentiment score
8.5
SonicWall Capture Client offers scalable, flexible licensing and an easy interface, benefiting Latin American businesses expanding their user base.
Sentiment score
7.6
VMware Carbon Black Cloud is highly rated for scalability, performing well in diverse environments from small to enterprise businesses.
There are no restrictions on the scalability of SonicWall Capture Client.
The installation process is straightforward, requiring only five pilot installations to enable customers to complete the remaining installations independently.
SonicWall Capture Client is accessed via cloud-based management console.
 

Stability Issues

Sentiment score
8.6
SonicWall Capture Client is stable and reliable for threat protection, but may slow systems due to high resource use.
Sentiment score
7.0
VMware Carbon Black Cloud became reliable after initial instability, with high user satisfaction despite minor performance issues on large deployments.
 

Room For Improvement

SonicWall Capture Client requires performance improvements, a modern UI, and better integration to address resource impact, undetected vulnerabilities, and licensing issues.
VMware Carbon Black Cloud needs better false positive handling, agent efficiency, support improvement, and enhanced features, training, and global support.
One of the drawbacks is that I cannot use Advanced and Premier licenses within a single tenant, which can be problematic when users need to deploy different licenses.
XDR cannot be used unless MDR services are purchased with SonicWall.
The RAM usage is higher compared to SentinelOne, utilizing approximately 150 megabytes of memory.
 

Setup Cost

SonicWall Capture Client offers cost-effective yearly licensing, but perceived value varies, with pricing challenges for small and medium businesses.
SonicWall Capture Client offers a cost-effective solution that's cheaper compared to other vendors like CrowdStrike.
 

Valuable Features

SonicWall Capture Client offers rollback, SentinelOne integration, cross-OS support, robust protection, ease of use, and cost-effective scalability.
VMware Carbon Black Cloud offers cost-effective, real-time security with intrusion alerts, quarantine, host isolation, data search, and threat hunting.
Machine learning is particularly effective due to SonicWall sandboxing's threat intelligence database of approximately 7.1 billion entries.
One is that users can use the sandbox of SonicWall, which is called Capture ATP for free.
 

Categories and Ranking

SonicWall Capture Client
Ranking in Endpoint Detection and Response (EDR)
43rd
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
11
Ranking in other categories
Endpoint Protection Platform (EPP) (45th)
VMware Carbon Black Cloud
Ranking in Endpoint Detection and Response (EDR)
42nd
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
18
Ranking in other categories
Security Incident Response (10th)
 

Mindshare comparison

As of October 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of SonicWall Capture Client is 0.6%, up from 0.6% compared to the previous year. The mindshare of VMware Carbon Black Cloud is 0.2%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Market Share Distribution
ProductMarket Share (%)
VMware Carbon Black Cloud0.2%
SonicWall Capture Client0.6%
Other99.2%
Endpoint Detection and Response (EDR)
 

Featured Reviews

Hesdi Triantono - PeerSpot reviewer
Has consistently delivered double-layer protection and simplified policy application while needing mobile compatibility and better MacOS support
A significant limitation is that SonicWall Capture Client cannot be installed on smartphones, as there is no mobile version available.Occasionally, the Sentinel engine becomes unresponsive, particularly when customers do not properly restart or shutdown their systems. This requires a hard restart after installation to resolve the issue. Installation on Mac OS can be challenging, requiring multiple attempts due to version compatibility requirements. We must ensure the SonicWall Capture Client version is stable for Mac OS. The RAM usage is higher compared to SentinelOne, utilizing approximately 150 megabytes of memory. This is a common concern from customers, and reducing RAM consumption would be beneficial.
Tom Kar - PeerSpot reviewer
Shows promise for endpoint detection and response, with room for improvement in complexity and pricing
VMware Carbon Black Cloud is a user-friendly solution that can isolate machines from the rest of the network. When a machine is quarantined, it cannot communicate with any other machines on the network except for the Carbon Black Cloud server. This allows you to investigate the machine without the risk of malware escaping to the network. Carbon Black Cloud's server can communicate with the quarantined machine through DNS and VSCP. This allows you to collect data from the machine, such as system logs, process activity, and registry changes. This data can be used to investigate the infection and determine the next steps. CrowdStrike and Cybereason are also popular EDR solutions. They offer similar features to VMware Carbon Black Cloud but may have different strengths and weaknesses. It is important to evaluate all of your options before choosing an EDR solution. Additionally, it is complex to use, and the pricing should be improved.
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
869,760 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Government
12%
Educational Organization
9%
Comms Service Provider
9%
Computer Software Company
9%
Healthcare Company
9%
Financial Services Firm
9%
Computer Software Company
9%
Real Estate/Law Firm
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise1
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise4
Large Enterprise7
 

Questions from the Community

What is your experience regarding pricing and costs for SonicWall Capture Client?
SonicWall Capture Client offers a cost-effective solution that's cheaper compared to other vendors like CrowdStrike.
What needs improvement with SonicWall Capture Client?
It is not similar to other products. For XDR, users have to use another product. XDR cannot be used unless MDR services are purchased with SonicWall. If a user has SonicWall MDR services, then they...
What is your primary use case for SonicWall Capture Client?
I am a distributor, but I can be counted as a reseller. It does not differ anyway. Most of my clients are SMBs, and I inform them that they should protect their servers with this kind of product, n...
What to choose: an endpoint antivirus, an EDR solution or both?
I can recommend Carbon Black, an award-winning next-gen anti-virus (NGAV) and endpoint detection and response (EDR) security solution. The CB Predictive Security Cloud platform combines multiple hi...
What's the difference between Carbon Black CB Response and Carbon Black CB Defense?
Carbon Black offers two different levels of Endpoint Detection and Response. One is the VM Carbon Black Cloud Endpoint Standard (CB Defense), and the other is the Carbon Black Endpoint Detection an...
What do you like most about Carbon Black CB Response?
Threat hunting is the most valuable feature of VMware Carbon Black Cloud.
 

Also Known As

No data available
Carbon Black CB Response
 

Overview

 

Sample Customers

Luton College
ALLETE belk
Find out what your peers are saying about SonicWall Capture Client vs. VMware Carbon Black Cloud and other solutions. Updated: September 2025.
869,760 professionals have used our research since 2012.