Symantec Endpoint Security vs VMware Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

• The virus and spyware protection has worked well for us, catching several things and quarantining the items or cleaning them.
• The virus definitions very rarely fail to update for the users, so I feel confident that my client machines are kept up to date.
• I like the report I get daily telling me about threats found and action taken without having to login to the console to look it up myself.

Read full review

• History of Process Execution, really anything that happens in the system is easily seen within the Dashboard. I can determine if a bad actor has infected the system, be it malware, backdoor, rootkit, Trojan, then from that point, I can put the system into Quarantine.
• Being able to quarantine the system from the Dashboard. With these type of tools, pulling the power and running a hard drive image is not needed. Put the system in quarantine, start the analysis. A year ago, the network engineer might move the system into a VLAN that has no access to anything, except the system performing the remote analysis... Now I do not have to rely on anyone to move a system, power it down, pull the drive, or image the drive. I can just start the analysis right from my workstation.
• The Live Response, again goes hand in hand with the quarantine feature.
• By now, I am sure you see a process. Its simple, and easy and all done from a cloud-based console, called the dashboard. .. deploy the agent, create the policy, and active live response, set up email alerts, and monitor your endpoints... you are now ready to perform a triage in the event of an infection. We have step 1, step 2, step 3... but, just remember, things do happen, nothing is perfect, but this product has its advantages.

Read full review

• Removing dead clients from the console. This is nearly impossible to do, and makes keeping the console clean a very difficult task.
• Poorly tested versions are sometimes released that cause serious issues for users. This ranges from browsers malfunctioning to BSOD errors.
• Malware detection is good but not great. We are not confident in SEP by itself to neutralize malware threats. It's detection rate just isn't high enough for next generation and zero day threats.

Read full review

• Policy management can be cumbersome. It is simple to set up a single policy but you have no way to apply the rules to multiple groups. If you need to set up the same rule to multiple policies, you need to type it over again.
• Agent updates can be very slow to deploy. We use a mix of rolling out updates via the web console and our management appliance. It can take several weeks to update all agents.
• We can be confused on why a rule will apply to a file. Sometimes something is blocked but we don't understand why.

Read full review

• SEP has had a very nice ROI in the form of keeping our network safe and clients' machines clean and free from spyware and viruses.
• The negative downside is that reinstalling the client isn't always an easy method. A lot of times we just have the user reimage their whole machine, which is usually the last resort.
• Another positive aspect of SEP is that it allows us to identify any problematic machines which might be allowing any malware, spyware or viruses in through any network ports or connections.

Read full review

• Cb Defense has had a positive impact on the business objectives since we've been able to check off "advanced threat prevention".

Read full review