Try our new research platform with insights from 80,000+ expert users

NetWitness NDR vs VMware Carbon Black Endpoint comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 9, 2024
 

Categories and Ranking

NetWitness NDR
Ranking in Endpoint Protection Platform (EPP)
53rd
Ranking in Endpoint Detection and Response (EDR)
50th
Average Rating
8.0
Number of Reviews
15
Ranking in other categories
Threat Intelligence Platforms (24th), Security Orchestration Automation and Response (SOAR) (22nd), Network Detection and Response (NDR) (15th), Extended Detection and Response (XDR) (28th)
VMware Carbon Black Endpoint
Ranking in Endpoint Protection Platform (EPP)
19th
Ranking in Endpoint Detection and Response (EDR)
15th
Average Rating
7.8
Number of Reviews
63
Ranking in other categories
Security Incident Response (1st), Ransomware Protection (4th)
 

Mindshare comparison

As of September 2024, in the Endpoint Protection Platform (EPP) category, the mindshare of NetWitness NDR is 0.2%, down from 0.2% compared to the previous year. The mindshare of VMware Carbon Black Endpoint is 2.3%, down from 2.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP)
 

Featured Reviews

SupravatMaji - PeerSpot reviewer
Jun 23, 2022
Beneficial single unified dashboard, good native application integration, and high availability
The most valuable feature of RSA NetWitness Network is the single unified dashboard from which you can manage all the different products of RSA. Additionally, the integration with native applications is good RSA NetWitness Network could improve on integration with non-native application…
Luciano Batalha - PeerSpot reviewer
Jan 12, 2024
A simple tool that offers good performance and stability
I use VMware Carbon Black Endpoint for its capabilities related to EDR and antivirus support. The tool offers protection to me with its advanced antivirus technology. The tool also protects me from threats My company does benefit from the use of the solution since it detects live threats, malware…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Ability to isolate the machine when there are malicious files."
"Technical support is knowledgeable."
"NetWitness Endpoint's most valuable features are its interoperability across many different operating systems and the ease of pivoting from network to endpoint via a single console."
"The most valuable feature is the way it captures the traffic, and it contains every detail of the communication."
"It is stable. We have been using it for some time, without any issues."
"The interface of this solution is very flexible and easy to use."
"It's a scalable solution. We have around five to eight customers using RSA NetWitness Endpoint, and we hope to increase the number of users."
"The most valuable feature of RSA NetWitness Network is the single unified dashboard from which you can manage all the different products of RSA. Additionally, the integration with native applications is good."
"It significantly speeds up incident response times by alerting analysts immediately upon detecting potential issues."
"You can deploy it through the cloud so that even if your stuff is outside of your controlled environment, you are still under control, based on the policies you create. The policies are controlled through the cloud. For example, if I don't allow anyone to do a certain activity or to install a particular app, and a consultant or a partner who is not part of our environment is doing so, it will stop them as well."
"The EDR and reports were helpful in improving our organization."
"I found it very valuable as a whole. It is good at detecting anything and has kept us very safe. It is also very easy to use."
"I feel that the initial setup was straightforward and not complex."
"It has intelligent learning behind it and we have been very successful in preventing attacks."
"Carbon Black has very good market strategies."
"The most valuable feature is that it detects and stops malicious executables."
 

Cons

"RSA NetWitness Network could improve on integration with non-native application integration."
"Threat detection could be better."
"The contamination feature could be improved."
"NetWitness Endpoint's blocking feature does not work properly - if there's a malicious process, it's not possible to kill it via a custom rule unless and until it's flagged as malicious."
"The threat intelligence could improve in RSA NetWitness Endpoint."
"We would like to see the hunting and investigation features of this solution improved, in order to provide better visibility of issues."
"This solution needs an upgrade in reporting. I have heard from RSA that they are working on this, but as of yet it is not available."
"I would like to see Security Orchestration and Response Automation (SOAR) integration."
"The support is poor."
"There are many different controls that are needed to be put into place for upgrading that makes it difficult. Having to re-engineer your IT infrastructure to match their software, as opposed to having it integrate and work independently causes difficulties. When there is an update to any software everyone has to be involved."
"Sensor deployment requires extensive fine-tuning, and creating deployment packages is time-consuming."
"The product's stability could be improved."
"CB Defense could be more compatible with Linux, and its cloud provision could be improved."
"The application control can be improved. It should also have an automatic update of the agents."
"This solution could have greater granular control on how certain applications work."
"Occasionally, we'll have issues with the latest version and they'll basically tell us that they will improve it in the next iteration. They need to work on their version release quality."
 

Pricing and Cost Advice

"With RSA, there is flexibility in choosing the service, products, and the range that meets your requirement, as well as they are flexible in terms of pricing."
"The price of the solution depends on the environment. If the environment is large then it will cost more. However, the larger the environment with more endpoints, you will receive an increased discount. If the environment is very small, then you might think it is expensive. It is always better to buy in bulk to receive a discount. The minimum number of assets is usually 500, with discounts on 1000 and 2000."
"It is an expensive product."
"We are on a three-year contract to use RSA NetWitness Network."
"I do not have any opinion on the pricing or licensing of the product."
"It is highly scalable. It can be bought based on your requirements."
"NetWitness Endpoint is less costly than its competitors, but it offers fewer features."
"The cost depends on the number of endpoints that you want to monitor, but it is not expensive."
"​The cost/benefit factor has great relevance in Cb Defense implementations​."
"The solution has almost the same price as other different kinds of infrastructures, but it offers a lot of different features."
"The license is annual. It's a standard license."
"It is more expensive, but it's worth it. There are no additional costs beyond the standard licensing fee."
"The product is expensive. There are some additional costs apart from the standard licensing charges attached to the solution."
"I am not really involved in the pricing of this product. But, from my understanding, it is OK for us."
"Its pricing was very good, which is one of the reasons I went to it as an alternative. It is on a yearly basis. There are no additional fees."
"CB Defense is available on a yearly subscription and is priced by the number of endpoints."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
801,634 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
14%
Government
9%
Manufacturing Company
7%
Computer Software Company
15%
Financial Services Firm
10%
Government
9%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What is your experience regarding pricing and costs for NetWitness XDR?
The solution is expensive. I'd rate it at a one or two out of five. They need to adjust it to keep up with the competition. I cannot speak to the exact pricing of the product.
What needs improvement with NetWitness XDR?
I have no real complaints about the solution. Threat detection could be better. They need to enhance their threat intelligence feeds. We would like to have more IOCs or more trade intelligence to n...
What to choose: an endpoint antivirus, an EDR solution or both?
I can recommend Carbon Black, an award-winning next-gen anti-virus (NGAV) and endpoint detection and response (EDR) security solution. The CB Predictive Security Cloud platform combines multiple hi...
What's the difference between Carbon Black CB Response and Carbon Black CB Defense?
Carbon Black offers two different levels of Endpoint Detection and Response. One is the VM Carbon Black Cloud Endpoint Standard (CB Defense), and the other is the Carbon Black Endpoint Detection an...
What do you like most about Carbon Black CB Defense?
VMware Carbon Black Endpoint is a highly stable solution.
 

Also Known As

RSA ECAT, NetWitness Network
Carbon Black CB Defense, Bit9, Confer
 

Learn More

Video not available
 

Overview

 

Sample Customers

ADP, Ameritas, Partners Healthcare
Netflix, Progress Residential, Indeed, Hologic, Gentle Giant, Samsung Research America
Find out what your peers are saying about NetWitness NDR vs. VMware Carbon Black Endpoint and other solutions. Updated: August 2024.
801,634 professionals have used our research since 2012.