Carbon Black CB Defense Room for Improvement

Darrick Kristich
Founder/CEO at Sedara
Symantec needs more investigative features out-of-the-box. Though, they are using the Advanced Threat Protection add-on to correct some of this. It is also not quite as feature-rich as some of the more advanced MDR platforms out there. Carbon Black needs to do a better job of proving their platform in the industry, and providing a bit more access to do industry testing with real world examples to help prove their platform. In additional, they have been actively porting over a lot of features from some of their other products, and they should continue to expand on that. Going forward, this will be extremely helpful. View full review »
Imad Taha
Group CIO at a construction company with 10,001+ employees
As far as I know, Carbon Defense has nothing that can be installed on mobile devices. It lacks a defense solution for mobile devices, especially mobile tablets. I would like to see support for mobile devices and the pricing should be less than the pricing for a normal workstation. Also, there is not much education for customers about Defense versus its other products. They promote Defense as enough, but then they say if you need more protection you can go for CB Response. I don't know whether it's a technology issue or a marketing issue, but they should teach the customer more. They tell you you are secure with Carbon Defense but then they recommend Carbon Protect. There is not a lot of education on this. I don't want to have an incident in the future and their answer will be, "Sorry, you did not buy Protect." Security is a continuous process. I can accept that it has more features, but don't tell me, "You are not protected because you did not buy the more expensive product." In addition, these other products should be add-ons, not separate products. And the cost for them should be much less for adding on because you are already a customer. Finally, we receive a lot of high alerts. There is no priority system, from one to 10, where 10 is very dangerous and one is something easy. There is no way for us to tell why this alert is similar to that one. View full review »
reviewer1265103
Cyber Security Consultant with 1,001-5,000 employees
I can't think of any feature that needs to be enhanced or reviewed at this time. Some of the features that I see as an end-user, unfortunately, I haven't been able to see from a project management standpoint. I'm not sure if we're actually taking advantage of all the available features. I don't know if it's because we haven't configured it yet, or we are not using it. I'm not sure as to the logic of how we've decided to customize it. We've only really used it since February and therefore there may be more to do on that front. That's why it's hard to say if something is missing or if we just aren't utilizing it. View full review »
Learn what your peers think about Carbon Black CB Defense. Get advice and tips from experienced pros sharing their opinions. Updated: January 2021.
455,536 professionals have used our research since 2012.
Dhrubo Roy
Threat and Vulnerability Engineer at Horizon Blue Cross Blue Shield of New Jersey
The EDR portion could be better. I'm not a big fan, but it works. The End Point Detection Response and the way it lays our processes with our endpoint and its detection engine, in the way that it detects the admin or alerts we based on a threat. I feel that they're a little behind on the market from my perspective. Overall, areas of improvement would be the EDR part, the detection, also the cloud console. If you're trying to write queries or something, it's very slow, just not robust. It's a cloud console so it should be fast. If I run a query and I press enter, if it took two seconds, it wouldn't give me a nice loading interface, because it's stuck. I would see an operating system most of the time. I feel like it should be faster. But as far as the price and everything, I think it's a good product. View full review »
reviewer1439934
Infrastructure and support manager at a healthcare company with 51-200 employees
The whitelisting system, and the concept of it, overall, is pretty decent. The problem with the whitelisting capability is that it's pretty archaic. Based on all the security roles and the release privilege, it could take time for an application to be whitelisted and approved for use. The Mac support needs improvement, as it had next to none. The biggest problem we had was the Mac support. It had very little, and my C-suite is almost exclusively Mac, as is my marketing and development department. View full review »
reviewer1344240
IT Infrastructure - Global Head at a comms service provider with 10,001+ employees
The solution needs better overall compatibility with other products. View full review »
reviewer1236738
Assistant Technical Manager at a tech services company with 11-50 employees
When you view the triage, it will show you everything within a given time frame, and not only the attack that caused the alert, which is what I want to see. It shows you all the events during that time, and that can be quite confusing. If they could focus on the alert and the event that the user wants to see, that would be better. There is also room for improvement on the reporting side, because it doesn't have reports. Many of our customers would prefer some kind of exportable report, like a summary. Carbon Black should have this feature. View full review »
reviewer1300992
Owner at a tech services company with 1-10 employees
Its compatibility can be improved. It did crash a server during deployment, which is not something that I want to happen. Its deployment should also be easier. The whole deployment cycle needs to be simplified. It is an enterprise solution, and to set it up right now, you have to be an expert. View full review »
Kostia Tkachov
IT Security Solutions Engineer at Softprom
To improve the ability to connect also feeds of third resources (communities). View full review »
reviewer1167921
Information Security Consultant at a healthcare company with 10,001+ employees
The feature set for the firewall needs improvement. I am looking forward to learning more about the integration with VMware at the hypervisor layer. View full review »
reviewer1454073
Security Engineer at a tech services company with 11-50 employees
The application control can be improved. It should also have an automatic update of the agents. View full review »
RajaeAl Najjar
Solutions Manager at Samir Group
The endpoint machines need improvement. The solution needs to be more effective for the end-user. It would be helpful to understand how to do some queries, but we’re still testing the solution right now, so everything is very new and we’re still learning the system. View full review »
Mark Adams
Senior Manager, IT Security and Compliance / CISO at Superior Energy Services, Inc.
This solution works well but needs lots of tuning and optimization. View full review »
Learn what your peers think about Carbon Black CB Defense. Get advice and tips from experienced pros sharing their opinions. Updated: January 2021.
455,536 professionals have used our research since 2012.