VMware AppDefense makes sense and is easy to deploy
It is being used to add another layer of security in our data center. AppDefense so far has given IT the visibility inside the managed …
VMware AppDefense
VMware AppDefense
VMware AppDefense
Overview
What is VMware AppDefense?
VMware AppDefense is a hypervisor-native workload protection platform for enterprise virtualization and security teams that promises to deliver the most secure virtual infrastructure and simplify micro-segmentation planning by providing deep application visibility, reputation scoring, and security.
The vendor says that,...
Recent Reviews
Video Reviews
Leaving a video review helps other professionals like you evaluate products. Be the first one in your network to record a review of VMware AppDefense, and make your voice heard!
Pricing
View all pricingN/A
Unavailable
What is VMware AppDefense?
VMware AppDefense is a hypervisor-native workload protection platform for enterprise virtualization and security teams that promises to deliver the most secure virtual infrastructure and simplify micro-segmentation planning by providing deep application visibility, reputation scoring, and…
Entry-level set up fee?
- Setup fee optional
Offerings
- Free Trial
- Free/Freemium Version
- Premium Consulting / Integration Services
Would you like us to let the vendor know that you want pricing?
6 people want pricing too
Alternatives Pricing
What is GitLab?
GitLab DevSecOps platform enables software innovation by empowering development, security, and operations teams to build better software, faster. With GitLab, teams can create, deliver, and manage code quickly and continuously instead of managing disparate tools and scripts. GitLab helps teams…
What is SonarQube?
SonarQube, a core component of the Sonar solution, is an open source, self-managed tool that systematically helps developers and organizations deliver Clean Code.
Product Details
- About
- Integrations
- Tech Details
- Downloadables
What is VMware AppDefense?
VMware AppDefense is a hypervisor-native workload protection platform for enterprise virtualization and security teams that promises to deliver the most secure virtual infrastructure and simplify micro-segmentation planning by providing deep application visibility, reputation scoring, and security.
The vendor says that, rather than chase the infinite threat landscape, AppDefense reduces the attack surface and implements a least privilege operating model by understanding intended application behavior and monitoring for anomalous behavior. The Application Verification Cloud component combines multiple reputation and threat feeds with machine learning models to enable application control, continuous vulnerability analysis of workloads, and high-fidelity alerts to respond to security incidents more quickly and effectively.
VMware AppDefense Features
- Supported: Application Visibility and Control
- Supported: Increased Security Protection
- Supported: Streamline Security Incident Response
VMware AppDefense Integrations
- VMware Carbon Black Endpoint
- IBM Security QRadar SIEM
- Splunk
- SecureWorks
VMware AppDefense Technical Details
| Deployment Types | On-premise, Software as a Service (SaaS), Cloud, or Web-Based |
|---|---|
| Operating Systems | Windows, Linux |
| Mobile Application | No |
VMware AppDefense Downloadables
Comparisons
View all alternativesCompare with
Reviews and Ratings
(15)
Attribute Ratings
Reviews
(1-7 of 7)- Popular Filters
Companies can't remove reviews or game the system. Here's why
October 12, 2019
VMware AppDefense makes sense and is easy to deploy
It is being used to add another layer of security in our data center. AppDefense so far has given IT the visibility inside the managed Virtual Machines and what processes are running. It gives us the ability to be alerted if new or rogue processes are running and if those processes are communicating to public IP and which port.
- Configuration and deployment were simple.
- Consuming the data from the OS and presenting it to the user with simplicity.
- AppDefense Manager has built in Online Chat Support, so it is easy to reach a representative for assistance.
- PowerShell functionality.
- Sorting results in some areas are not applicable.
- Email alerting through AppDefense Manager does not exist, but support has said it is a feature to come.
August 13, 2019
Thoughts and Insights about VMware AppDefense
VMware AppDefense is installed in our virtual environment on all of our Windows VMs. It protects servers across multiple departments in the whole organization. It provides a layer of protection and visibility against bad server processes.
- Easy to install and maintain.
- Easy to interpret GUI to access status.
- Very good support.
- New product had some growing pains.
- Email notifications need to be added.
- Upgrade process needs to be more automatic.
July 30, 2019
Recently Implemented AppDefense
It is presently being used at our corporate site to provide an additional layer of security.
- Ease of installation
- Integration with carbon black
- Alerting
- Deleting the groups wasn't obvious
July 29, 2019
First year on AppDefense
Our current organization goals revolve around improving security and easing the manageability of our systems, two things that often don't correlate with each other. Some items of that process include building a more robust RBAC model, micro-segmenting our network and gaining 24/7 visibility of what's happening on our VMs. To accomplish those goals, we landed on using the combination of AppDefense, NSX and Carbon Black. NSX with its Active Directory integration greatly limited the East/West exposure to each of our VMs. Once we ironed out the connections needed for each VM we monitored a 30, 60, and 90 day baseline with AppDefense and Carbon Black. It was noisy in the beginning but once established we have better visibility to our VMs when something out of the ordinary is happening.
- Understanding normalized operations and resource usage of VMs at the guest level
- Fine grain control of of guest level operations
- Steep learning and a lot of moving pieces
- Very new product and Carbon Black is the only 3rd party vendor that can integrate
- Limited information and training. We've never been to VMworld but it was barely mentioned at the VMUG UserCons we've attended
VMware AppDefense is being used across the organization to protect internal assets from lateral movement in case of a breach. We have a mixed environment of virtual machines. We have virtual machines dedicated to our clients, in addition to server virtual machines that provide services to all of our employees and clients.
- Provides detailed process and command-line information.
- Provides visibility into what connections are being made to/from a specific server/service.
- Ability to group multiple VMs into service groups for proper correlation.
- No ability to display network owner information in alerts (i.e. AS number/Network owner name of a public IP).
- No ability to resolve IP addresses for display in alerts.
- Setup, classifying, and configuring all of the requisite process rules is tedious.
Currently NAES has been deployed at the corporate headquarters with plans to roll out to remote offices and subsidiaries. Our initial use is to gain visibility into our east-west traffic in preparation for implementing NSX. We also use it to alert us to anomalous behaviors.
- I think that the AppDefense approach is clever and sets it apart from other products. Having a baseline of normal behavior that I can see is something I haven't seen in another product before.
- AppDefense doesn't overload my systems with performance draining agents.
- AppDefense integrates with VMWare products I have or plan to purchase.
- Access to AppDefense support has been better than any other VMWare products.
- The installation and update process is time consuming and requires too many reboots.
- Bare metal support is very badly needed.
- Reporting is weak. I need to pull information out that shows regulatory compliance requirements are being satisfied.
- When I whitelist or blacklist a process there are no fields to track why that decision was made.
- Blacklisting doesn't do what I thought it was doing.
- Some basic AV should be included to satisfy regulatory requirements.
July 24, 2019
knowledge is power
AppDefense is used across the organization. It monitors "normal" application activity in the city and notifies if there is any abnormal activity detected. It gives us further view into the connections to an application or system and the ports that are used.
- More visibility into my VM environment
- Notification: send an email or a text for any alerts