Carbon Black App Control

The positive aspect is its device control, allowing me to allow or disallow certain devices in my environment, and it's also a software blocking tool that can be annoying for some organizations but beneficial for ones like mine that use only specific applications. The granular policy settings can detect and block unknown malware and viruses. The intuitive interface helps in understanding the application better than reading the manual, and its live response feature is quite valuable. So far, I haven't seen any cons due to its user-friendly nature, but occasionally it blocks corrupted files that are hard to recover, though no negative effects have been observed. You should have a phased approach and understand your environment first, but otherwise, it's highly recommended as it's a complete package for securing files and documents at both organizational and personal levels. Carbon Black offers CB Protection as an application control solution for enterprise and critical systems, used as a replacement for antivirus and other malware software to provide full protection. With CB, you can see what files have appeared, not just what is suspected. Blocking certain files, getting notifications, and preventing other users from installing specific programs are key features. You get actionable information to prevent malware and viruses instead of a clunky engine.

CB Protection is a strong platform that repels most modern threats. As the leading whitelisting solution, it offers granular controls to tailor each environment to your needs. However, it's a double-edged sword: the platform's strength depends on how you configure it. The risk of low enforcement and the potential information overload mean significant setup time. Users might face discomfort when moving to high enforcement, but it's achievable. If you want solid application control and whitelisting, this is the best product. It takes time and careful configuration to avoid being too permissive, but this product is best suited to find that balance. The platform's effectiveness is up to you. Whether you need visibility into unknown threats or want to stop them at the door, it gives you the power to see and act. Custom rules are key for battling advanced threats, with an easy-to-use interface for beginners. Automation improves integration and user experience, plus a dedicated support team is always available.

It stops malware and ransomware before they execute. It's fairly easy to manage given the protection level. We've seen some delay in Windows patch installation, but it's manageable. Always do a thorough proof of concept before purchasing, but from my experience, this product is excellent. The hardest part was overcoming the fear of implementation. Take the leap and stay protected! Companies that skip whitelisting are asking for trouble. No more worrying about someone clicking a phishing email and running malicious software. If it's not approved, it won't run. Ransomware is no longer a concern—it's gone.

It provides granular control over installations and helps with compliance to prevent unauthorized software that might cause legal or security issues. Not all software is given a Cb Collective Defense Cloud Information score, and you can allow clean software if desired. I don't have any cons. It protects users from making foolish decisions. It mainly solves security concerns; don't assume that having it installed makes you invincible, as security should be layered.

Creating and maintaining policies is straightforward, fast, and granular, and you can choose which systems and users to authorize. If the solution were cloud-based, it would be easier, but having an on-prem solution today isn't ideal. Whitelisting is complex, but it's the best way to keep systems secure. Any business faces challenges implementing whitelisting, such as managing profiles and reviews. Carbon Black Security offers a powerful, integrated solution to enhance compliance processes. It's easy to identify an application's activity and decide to allow or block it.

A standout feature is its ability to hash and quickly locate executables across all workstations and servers, which helps in finding and removing known-bad or suspected-bad files. Its main role as an application whitelist is very effective, preventing many infection attempts from malicious apps and careless users. In our current v8, the admin interface feels a bit dated and clunky, and we've had some unintentional process blocks. However, support is top-notch and always resolves our issues. We had a great pre-launch discussion with their sales and engineering teams to understand the product thoroughly. The biggest win has been preventing ransomware attacks since we had several in a row. The product has delivered and prevented countless other malware and unwanted app infections.

The User Exchange is filled with the top experts you'd call in an emergency—it's like getting a free additional employee just for being a customer. Having endpoints in high enforcement ensures only approved files run. The ability to isolate the most dangerous endpoints is great. Since it's now part of VMWare, the team will achieve even more. I'd like a Google-style search to remove redundant rules and frozen panes to keep column headers visible while scrolling. Don't overlook the value of the User Exchange—many members are top IR and MSSP professionals, the very people you'd hire after a breach. They share findings and help configure the product to stop advanced threats. Protecting endpoints from malware, knowing what software exists, and having all endpoints in high enforcement provides consistent protection and reduces lateral movement. The console also helps identify endpoints with OS health issues for quick resolution.

CB Protection is like a versatile tool that combines antivirus, anti-malware, and threat detection in one. It uses an application whitelist to permit or deny beneficial or harmful programs across all network-connected workstations and servers. I appreciate the ability to set different policies for users in various departments, such as developers who need more access and fewer restrictions for testing. The downside is that it constantly blocks unknown processes or executables, leading to false positives. Users can get bombarded with pop-ups as it blocks executables, even for common software like Outlook, and it can block critical system services like WSUS. In today's world, protecting data is crucial, and CB Protection is essential in neutralizing malware, viruses, trojans, and zero-day threats on every network device.

Carbon Black is a solid application for guarding your computer and infrastructure against malicious actions such as unapproved external devices. One downside is that it occasionally consumes more CPU and memory and triggers false alarms. It does shield your endpoint from unauthorized external devices, like USB drives.

We've gained confidence in protecting essential systems by stopping unapproved programs, which has cut down our exposure. The top benefit is its simplicity and smooth integration. The support team is excellent, and daily use has strengthened our security and compliance. Occasionally, we see false positives like with other tools, but manual whitelisting resolves them. It's a great fit for organizations with strict security, though smaller ones might find it pricey. It has dramatically reduced unauthorized software on our endpoints, lowering malware risk. It also aids in meeting compliance by ensuring only approved apps run. Plus, we can impose strict controls on critical servers where security is paramount.