Carbon Black App Control is an application control product, used to lock down servers and critical systems, prevent unwanted changes and ensure continuous compliance with regulatory mandates.
N/A
Trend Micro ServerProtect
Score 8.2 out of 10
N/A
Trend Micro's ServerProtect is a malware and virus protection available for NAS storage devices, and other server systems.
N/A
Pricing
Carbon Black App Control
Trend Micro ServerProtect
Editions & Modules
No answers on this topic
No answers on this topic
Offerings
Pricing Offerings
Carbon Black App Control
Trend Micro ServerProtect
Free Trial
No
No
Free/Freemium Version
No
No
Premium Consulting/Integration Services
No
No
Entry-level Setup Fee
No setup fee
No setup fee
Additional Details
—
—
More Pricing Information
Community Pulse
Carbon Black App Control
Trend Micro ServerProtect
Considered Both Products
Carbon Black App Control
Verified User
Anonymous
Chose Carbon Black App Control
VMware Carbon Black EDR and VMware Carbon Black Endpoint
VMware Carbon Black App Control [(formerly Cb Protection)] is just much more advanced and gives administrators much more insight into the security framework. The cost is higher but at the same time the features are much more advanced. It is also easy to move throughout the …
The big difference between Protect and Barkly/AMP is how exactly it goes about what it's doing. Protect is application whitelisting and program reputation. So the way it's protecting you is using a proprietary reputation service, and hash values to identify applications, and …
Trend Micro ServerProtect is one of best solution to ensuring their customers are successful with their security needs & provide trusted, Proven support services & training tailored for all of customers .
I feel that Trend Micro's product has a much smaller foot print, especially compared to Symantec, and it has a more robust software protection than Microsoft. It seems to have more features and is well maintained as far as frequency of updates. Trend Micro ServerProtect gives …
It is more suited to lock down critical systems and servers to prevent unwanted changes, although you can use it on daily basis on laptops and desktops, it needs constant attention and events analysis. For some scenarios i.e. financial institutions it is a must-have solution, as App Control now is a requirement 5 of PCI DSS.
I have found that most AV/Malware protection servers have quite a bit in common. I bought this specifically to reduce issues that can happen with agent based AV on virtual servers. The host based setup was very difficult and even once implemented it was difficult to keep it running well. Support was not great. They really expected a high level of competency in the advanced features. In the end, using it as a standard agent based install was much easier to install and manage. It's very effective and the performance hit from running all the agents and during the updates is really minimal.
Device Control - you can view and allow/disallow the ability for certain devices to be used in your environment. Specifically we used this with USB drives. If you have one you want to use - whitelist the serial number. The rest can't be used. Simple and easy.
Software blocking. If you have an extremely dynamic software base (I doubt this is likely) this could get a bit annoying, but for most organizations like ours where we have specific applications that are required, and then the rest are a bit of an afterthought, it's easy to whitelist the correct applications that you want to be able to run in your environment. The rest can't run (in high enforcement). Users are able to easily request new applications, and you can set certain groups to be able to approve it on their own.
Solid platform - with few exceptions setting up new software was very easy (Dragon Medical was a bit tricky, but worked through it with support). Once you have your rules set up and the initial setup done, you tend not to have to do much of anything except to update on occasion and deal with a few requests for applications to be unblocked, or publishes approved.
Trend Miro ServerProtect required to improve to mange the logs collected from storage devices as some time false positives comes in picture .
Pricing is based on per user Or Terabytes Storage, but in-case client wants users based say 50 users that should be competitive rather than multiply by per users ,their should be Slab pricing .
My experience with support has not been great. They really had lots of prerequisite work and information gathering requirements before really getting involved. I have no problem doing needed work but I just felt a support person could do things more quickly and spare me so much challenge that was unnecessary. The website has good access to updates and knowledge base information but it was a bit limited in scope.
The big difference between Protect and Barkly/AMP is how exactly it goes about what it's doing. Protect is application whitelisting and program reputation. So the way it's protecting you is using a proprietary reputation service, and hash values to identify applications, and then hitting a list of whitelisted programs to decide if you are able to run that or not, based on the policy you are in. There is a LOT of value in that. We actually are working on transitioning to Cisco Advanced Malware Protection (AMP). The main reason is cost (about the same cost as Cb Protect, but with (most of) the featureset of all 3 Carbon Black products for less than 1/3 of the total spend. AMP works differently, looking at a reputation service powered by Cisco's Talos cloud. You don't really have application whitelisting, but that also reduces how many "requests" you get for applications. So I'll have to find a different way to do whitelisting and USB blocking and the like, but I'm getting more visibility across my network and also built in antivirus (TETRA engine - ClamAV with some work). Barkly is an add that we are looking to put in as it looks at behavior of programs. So specifically it watches for privilege elevation and the like. Thus far all the big name problem children (WannaCry, other ransomware problems) have been caught natively in Barkly day 0.
Trend Micro ServerProtect is one of best solution to ensuring their customers are successful with their security needs & provide trusted, Proven support services & training tailored for all of customers .
