The VMware Carbon Black Endpoint solution (formerly Cb Defense) is an endpoint security and "next-gen antivirus (NGAV)" that uses machine learning and behavioral models to analyze endpoint data and uncover malicious activity to stop all types of attacks before they reach critical systems. Endpoint Standard captures and stores endpoint activity, enabling a comprehensive view of any suspicious activity on endpoints, including visibility into the entire attack chain, so users can understand the…
N/A
Webroot Antivirus + Internet Security Complete (SecureAnywhere)
Score 8.0 out of 10
N/A
Webroot Security Complete (formerly under the brand name SecureAnywhere) is a suite of antivirus, multi-endpoint security and Internet security solutions available for home offices, and possibly small businesses with limited security needs.
$30
per seat/per year
Pricing
VMware Carbon Black Endpoint
Webroot Antivirus + Internet Security Complete (SecureAnywhere)
Editions & Modules
No answers on this topic
Webroot Business Endpoint Protection
$30
per seat/per year
Offerings
Pricing Offerings
Carbon Black Endpoint
Webroot Antivirus + Internet Security Complete (SecureAnywhere)
Free Trial
No
No
Free/Freemium Version
No
No
Premium Consulting/Integration Services
No
No
Entry-level Setup Fee
No setup fee
No setup fee
Additional Details
—
—
More Pricing Information
Community Pulse
VMware Carbon Black Endpoint
Webroot Antivirus + Internet Security Complete (SecureAnywhere)
Some of the other products did not allow you to whitelist items on a Mac. We are a heavy Mac shop so this was a requirement. Cb Defense had superior reporting, making it easy to track what was happening on a machine and how to respond. We ran known malware and zero days …
Webroot Antivirus + Internet Security Complete (SecureAnywhere)
Likelihood to Recommend
VMware by Broadcom
Cb Defense has been working very well in our organization. It is giving us much better insight into the applications that people are running on their systems (without authorization). This software is also great because it provides visibility into systems that are remote (off the network but still have Internet access). The out of band feature is great to help ensure that the systems are protected even when a user is traveling.
Webroot can be great if you have many employees using computers. Sensitive business information can be accessed by malicious threats online if your employees are not trained to avoid these problems. In this case, I think it's important to have software to protect you. If working with a smaller team (and not doing any sort of video production or other intensive software/applications) I can't see a need for anything like Webroot. Learning how to use the internet safely and protecting your file storage are things to be done on the cheap and with smarts.
History of Process Execution, really anything that happens in the system is easily seen within the Dashboard. I can determine if a bad actor has infected the system, be it malware, backdoor, rootkit, Trojan, then from that point, I can put the system into Quarantine.
Being able to quarantine the system from the Dashboard. With these type of tools, pulling the power and running a hard drive image is not needed. Put the system in quarantine, start the analysis. A year ago, the network engineer might move the system into a VLAN that has no access to anything, except the system performing the remote analysis... Now I do not have to rely on anyone to move a system, power it down, pull the drive, or image the drive. I can just start the analysis right from my workstation.
The Live Response, again goes hand in hand with the quarantine feature.
By now, I am sure you see a process. Its simple, and easy and all done from a cloud-based console, called the dashboard. .. deploy the agent, create the policy, and active live response, set up email alerts, and monitor your endpoints... you are now ready to perform a triage in the event of an infection. We have step 1, step 2, step 3... but, just remember, things do happen, nothing is perfect, but this product has its advantages.
Webroot provides a very easy to use web interface with GSM. From a single dashboard we can control all of our endpoints that are currently using Webroot services. This is extremely helpful for central management for my engineers.
Webroot's new (2.0) plugin for Automate (formerly LabTech) provides us with integration into our RMM platform that allows for a large majority of the daily operational tasks to be completed without ever having to move to a different application and/or the web dashboard. The integration is key for engineers to make changes on the fly and quickly. They have done a good job with the 2.0 plugin after coming from the 1st iteration.
Webroot interface on the machines is a simple and easy UI to follow and understand. Seeing what the product is doing and how it is configured is very straightforward and doesn't require much hunting with the local interface on machines.
Policy management can be cumbersome. It is simple to set up a single policy but you have no way to apply the rules to multiple groups. If you need to set up the same rule to multiple policies, you need to type it over again.
Agent updates can be very slow to deploy. We use a mix of rolling out updates via the web console and our management appliance. It can take several weeks to update all agents.
We can be confused on why a rule will apply to a file. Sometimes something is blocked but we don't understand why.
It would be nice if there was a notification when Webroot blocked something. Power users may need to legitimately edit things like their hosts file, but they dont know Webroot is preventing them from doing so. They could easily temporarily disable it to do what they need to do if they were aware. Same thing goes for files that get quarantined without notice, it leaves the user wondering why their legitimate file keeps disappearing.
While the web based console is nice and easy to use, it could use a little better reporting.
If an administrator disabled a feature (like the firewall, for example) then the Webroot GUI should not alert the end user about whenever they open it. The software should be aware it is being administratively controlled.
It's easy to renew with Webroot, their support is very attentive and highly available. However if you do choose to change products, they even provide means of removing the software from your endpoints via the admin portal which is very convenient.
The console of the product is very easy to use. It provides great detailed information about all aspects of things occurring on the endpoint. It was easy to deploy and set up. The centralized cloud-based interface has made it easy to add two domains and manage them under a single pane with multiple admins. The only reason I wouldn't give it a higher score is a little bit of lag between updated info from the clients and also the lack of accountability in the deployment process. You set the deployment up for multiple machines and can't easily see if it was successful and/or it takes a while to see if it succeeded or failed.
First, I need to disclose that our support is provided by SecureWorks. We purchased CB Defense from them, and they provide 24x7 monitoring and notification services for the solution and its deployment on our endpoints. To date, we are very pleased with this arrangement
We have not had to use Webroot support much over the years. The one or two times we did we were referred to online documentation and in a somewhat condescending manner in one case and in another case, the support person did not demonstrate much knowledge of their product and referred us to the user community for support.
Cb is cloud-based and has a more advanced policy management. It also has better forensics information. Cost was similar, but Cb added cost savings in terms of IT management resources. We also have the ability to talk directly with engineers and have input on feature updates.
As previously mentioned, Webroot is struggling to compete. Specifically, it is struggling to show value when similar products are catching more and offer more complete packages for remediation as well. We have discontinued the use of Webroot in favor of offering more advanced protection tools by default to our contracted clients.
Ease of implementation across various devices is easy and efficient regardless of scale. Whether it is 5 devices or 500 the product continually proves its the best in its class.
It has had a mostly positive impact as we have not had any breaches.
The only negative impact has been when Webroot Antivirus + Internet Security Complete (SecureAnywhere) changed something on their end that caused one of our business applications to not be usable by end-users. That cost our business a fair amount as it took 4 days before it could be used again.
