Avira Prime, now from NortonLifeLock since the December 2020 acquisition, is an antivirus solution used to protect small businesses, a cross-platform and multi-device solution replacing Avira's legacy antivirus solutions (e.g. Avira Business, etc.) that will be phased out by December 2021.
N/A
Carbon Black Endpoint
Score 8.8 out of 10
N/A
The VMware Carbon Black Endpoint solution (formerly Cb Defense) is an endpoint security and "next-gen antivirus (NGAV)" that uses machine learning and behavioral models to analyze endpoint data and uncover malicious activity to stop all types of attacks before they reach critical systems. Endpoint Standard captures and stores endpoint activity, enabling a comprehensive view of any suspicious activity on endpoints, including visibility into the entire attack chain, so users can understand the…
It is good for organizations that need an AV solution that does really well in AV detection/performance tests, and also has a good track record for using little system resources on the client machine. It is less suited for organizations that want an AV product that is historically used by the industry or is known as an industry standard (e.g. Microsoft products, etc).
Cb Defense has been working very well in our organization. It is giving us much better insight into the applications that people are running on their systems (without authorization). This software is also great because it provides visibility into systems that are remote (off the network but still have Internet access). The out of band feature is great to help ensure that the systems are protected even when a user is traveling.
History of Process Execution, really anything that happens in the system is easily seen within the Dashboard. I can determine if a bad actor has infected the system, be it malware, backdoor, rootkit, Trojan, then from that point, I can put the system into Quarantine.
Being able to quarantine the system from the Dashboard. With these type of tools, pulling the power and running a hard drive image is not needed. Put the system in quarantine, start the analysis. A year ago, the network engineer might move the system into a VLAN that has no access to anything, except the system performing the remote analysis... Now I do not have to rely on anyone to move a system, power it down, pull the drive, or image the drive. I can just start the analysis right from my workstation.
The Live Response, again goes hand in hand with the quarantine feature.
By now, I am sure you see a process. Its simple, and easy and all done from a cloud-based console, called the dashboard. .. deploy the agent, create the policy, and active live response, set up email alerts, and monitor your endpoints... you are now ready to perform a triage in the event of an infection. We have step 1, step 2, step 3... but, just remember, things do happen, nothing is perfect, but this product has its advantages.
For the use that I currently give to my laptop it works very well, but it can fail if your way of surfing the web is careful and you dedicate yourself to visit infected forums, download files from any part, or use bad programs.
Policy management can be cumbersome. It is simple to set up a single policy but you have no way to apply the rules to multiple groups. If you need to set up the same rule to multiple policies, you need to type it over again.
Agent updates can be very slow to deploy. We use a mix of rolling out updates via the web console and our management appliance. It can take several weeks to update all agents.
We can be confused on why a rule will apply to a file. Sometimes something is blocked but we don't understand why.
The console of the product is very easy to use. It provides great detailed information about all aspects of things occurring on the endpoint. It was easy to deploy and set up. The centralized cloud-based interface has made it easy to add two domains and manage them under a single pane with multiple admins. The only reason I wouldn't give it a higher score is a little bit of lag between updated info from the clients and also the lack of accountability in the deployment process. You set the deployment up for multiple machines and can't easily see if it was successful and/or it takes a while to see if it succeeded or failed.
Since the product runs really well overall, and I haven't really run into any major issues, I have not had a need to contact the vendor directly for support. I have perused the vendor's site for other support channels, and they do have a number of good support options, such as submitting a request, KB articles, and Community forums. One support option that does not seem to be available (or might be really hard to find) is a direct line to call for phone support. As an individual or business member you can submit a request via a web form, which then will be sent to the tech support team, at which point they will call you.
First, I need to disclose that our support is provided by SecureWorks. We purchased CB Defense from them, and they provide 24x7 monitoring and notification services for the solution and its deployment on our endpoints. To date, we are very pleased with this arrangement
F-Secure despite being a good antivirus when it comes to protecting home equipment does not act the same for business protection because its performance is much lower as well as its ease of use while Avira meets these requirements and its protection is much more complete and efficient, since not only acts against common threats but it is also optimal to protect against advanced threats and the one that works in real time makes the virus detection rate much more efficient before any other antivirus, that is why It is ideal for the protection of business teams
Cb is cloud-based and has a more advanced policy management. It also has better forensics information. Cost was similar, but Cb added cost savings in terms of IT management resources. We also have the ability to talk directly with engineers and have input on feature updates.
I have not had serious infections due to viruses or Trojans. In addition, every time a malicious code is downloaded, Avira detects it and blocks it fast enough. So, I have not had to re-format my PC, I have not lost documents that I had stored on disk C, and of course, I have not lost time trying to recover the data from my PC.
I've also been able to install it on not-so-powerful PCs, so its users have been able to continue using their computers without any problem and also avoid serious infections.
