Carbon Black Endpoint

Carbon Black Endpoint is an excellent endpoint security solution that provides comprehensive protection against a wide range of threats. Its advanced threat detection capabilities and real-time response capabilities make it an ideal choice for organizations that require robust and reliable security. The platform is easy to deploy and manage, and its intuitive interface makes it easy for IT teams to monitor and respond to security incidents.

While Carbon Black Endpoint is a powerful security solution, it can be quite resource-intensive and may cause performance issues on older systems. Additionally, the platform's advanced features can be difficult for less experienced IT teams to configure and manage, which may result in misconfigured settings and potential security vulnerabilities. Finally, the platform's pricing can be quite high, making it less accessible for smaller organizations with limited budgets.

While not involved in the setup of the software, I do handle white-listing and installing the AV on new workstations. These tasks are easily accomplished through the online portal. I can also easily place a workstation or server in bypass mode to troubleshoot issues and determine if Carbon Black is the root cause.

The predictive nature of Carbon Black lends itself well to zero-day threats, however it also results in many legitimate processes being blocked. Especially when CB is first setup and is learning your environment.

High Detection Rate
Stable and Secure
One of the best engines in the market

Commands a premium pricing
Expensive professional services
Requires specialists to operate

What I like most about this software is its ease of use and real-time scanning. It has routinely identified potential threats in a fraction of the time our previous security software did.

What I liked least about the software is that it sometimes provides false positives with items as small as the installation of a piece of software like DropBox. That being said, I much prefer being over-informed than under.

Uses less than 1% of your resources when installed and active. It's the future of antivirus that can basically draw out a recent malware on virus attack on a network and give you the opportunity to shut down it's movement immediately. It easily maps out on how the infection gradly infected other systems.

No telling how effective this system will be unless you have a real world situation occur in your organization. And then you will see if it was worth the expense.