External reviews
External reviews are not included in the AWS star rating for the product.
Great AV product replacement
What do you like best about the product?
The ability to stop process elevation and this product has great in memory exploit protection.
What do you dislike about the product?
There is no federated console for the other CB tools. For companies that use multiple CB tools have multiple consoles to log into and manage.
What problems is the product solving and how is that benefiting you?
This is to replace AV and provide next gen AV protections
Recommendations to others considering the product:
I would Recommend CB Protection as this tool will soon be able to replace AV per PCI
- Leave a Comment |
- Mark review as helpful
This is a NGAV that will prevent most of the unknown malware
What do you like best about the product?
It collects information about the behavior of the applications and apply its algorithms to detect bad behavior.
What do you dislike about the product?
It needs lot of effort to tune it properly at the beginning. Most of the detections were based on reputation (therefore signature) and some non signature were false positives, however the products shows a great potential.
What problems is the product solving and how is that benefiting you?
Ransomware, unkown malware
Recommendations to others considering the product:
Measure time required for tuning, false positive, rate between detections base on signature/reputation vs behavior analysis
The first steps into a more security solution
What do you like best about the product?
I like that the product's detection methods are based on indicators that pop up before and during exploitation.
What do you dislike about the product?
Some of the decommissioning mechanisms could be better.
What problems is the product solving and how is that benefiting you?
We have addressed remote users with this solution as well as increased visibility into endpoint use within our environment.
Lightweight endpoints that protect and block from internet toolbars to zero-day exploits.
What do you like best about the product?
The endpoints are extremely lightweight and easy to deploy and upgrade via the GPO and the console. For the amount of protection you get there is very little network traffic and the footprint on endpoints is minimal.
What do you dislike about the product?
Documentation after installation could be much improved. The amount of data is overwhelming if you need to research a potential issue. It takes someone who knows what they are looking at/for to diagnose the information efficiently.
What problems is the product solving and how is that benefiting you?
While managing the system can be daunting to most system administrators, getting the system running with default settings provides greater protection than most anti-virus solutions out there today. I am less worried about potential 0-day and malware file executions with CB Defense in place because it stops these malicious actions before they can even think about executing files or launching other programs.
Cb Defense is great and continues to improve
What do you like best about the product?
Cb Defense is easy to deploy and manage. It detected all of my AV tests.
The reporting features are great for when you need to investigate an alert.
The reporting features are great for when you need to investigate an alert.
What do you dislike about the product?
They had some issues with whitelisting at first that have been resolved. This caused a lot of false positives.
They also need to improve the speed of sensor updates.
They also need to improve the speed of sensor updates.
What problems is the product solving and how is that benefiting you?
It is providing NGAV protection for all endpoints. It was simple to deploy and manage. Reporting is great too.
Simple, Easy, & Sometimes Effective
What do you like best about the product?
Great and highly engaged team during implementation and evaluation. Worked with us to address questions/concerns. Very hands on for usage instruction. Support team is great (very responsive, tries best to get a good resolution), however starting to get more into the point to documentation style rather than providing solid responses.
What do you dislike about the product?
Support is starting to migrate to a point to the documentation style. Platform also has started seeing some operational / stability problems. Slow dashboards, slow notifications, etc. All issues have been reported, but they have been recurring more frequently of late.
What problems is the product solving and how is that benefiting you?
Easy to manage, next gen protection against malware and other security based attacks. It is definitely easy to manage, and protection is decent. Visibility into investigation on alerts could be a bit better, but is better than traditional AV solutions by far.
Recommendations to others considering the product:
Be sure that it provides sufficient visibility. We selected the solution because of the simple deployment and easy operation, but it does lack some of the granular hunting/investigation tooling that other tools are. Be certain on what you are hoping to get out of the solution. It is not a true EDR platform, but is a nice mix between EPP and EDR.
Carbonblack Defense offers fantastic protection.
What do you like best about the product?
Next generation AV protection against todays advanced threats.
What do you dislike about the product?
Console is a little behind but is catching up fast.
What problems is the product solving and how is that benefiting you?
We were trying to solve the amount of time analysts spent on investigating security incidents. We realized that we can reduce the amount of time spent investigating these incidents and spend more time improving our other security controls.
NGAV That Allows You to Sleep Well at Night
What do you like best about the product?
Insight into processes and the attack vector that makes the workstation vulnerable to 0-day and APT threats. Trusting a known legitimate source throws the end user off their game and could allow these sorts of threats inside the organization. Cb Defense allows us to not worry about these since the activity will be denied or the application terminated. The workstation agent is easy to deploy within the organization. When there is an issue support is very reactive and communicates well. They actively want to solve any issues that take place and make sure that we are happy. Because it's a cloud based solution any devices outside of our internal network can still be protected while in the wild.
What do you dislike about the product?
Reporting leaves something to be desired; there aren't any nice canned reports for C levels to see why they spent the money where they did without having to send to a SIEM. The interface will be receiving an overhaul soon and looks to be a good upgrade from the current release, but the current release doesn't make it very easy to see where the threat hooked in or to follow the path of ingress. While deploying the agent is good, the management of the enrolled device could use some work. The agent, at least with background scan enabled, does eat a good amount of ram.
What problems is the product solving and how is that benefiting you?
Our issue, as well as most, are 0-day and APT threats to be neutralized before they have a chance to make any impact on the network or customer information. Having Cb Defense allows us to be in-line with best practices and regulations. Our customers can be safe knowing their information is secure.
Recommendations to others considering the product:
I recommend this product to others, knowing the company behind the product is committed to this security space and the customers they support.
A powerful next gen AV
What do you like best about the product?
It is easy to deploy to hundreds of hosts, little to no compatibility issues with other software. Intelligence feeds which are one of the best in the industry.
What do you dislike about the product?
Issues that arise usually take more then usual to get fixed. I feel that CB should perform more testing in a testing environment before rolling out major updates.
What problems is the product solving and how is that benefiting you?
Provides proper AV and macro protection on endpoints which are the point of entry for attackers. The ability to see trends, reports and analyze threats that might have been hidden before CB defense.
showing 31 - 39