VMware Carbon Black Endpoint vs WatchGuard Threat Detection and Response comparison

VMware and WatchGuard are both solutions in the Endpoint Detection and Response (EDR) category. VMware is ranked #15 with an average rating of 7.7, while WatchGuard is ranked #27 with an average rating of 8.2. VMware holds a 2.5% mindshare in EDR, compared to WatchGuard’s 0.5% mindshare. Additionally, 88% of VMware users are willing to recommend the solution, compared to 100% of WatchGuard users who would recommend it.

VMware Carbon Black Endpoint

Read 63 VMware Carbon Black Endpoint reviews

6,743 Views
4,546 Comparison Views

88% willing to recommend

WatchGuard Threat Detection...

Read 13 WatchGuard Threat Detection and Response reviews

1,215 Views
953 Comparison Views

100% willing to recommend

VMware Carbon Black Endpoint

WatchGuard Threat Detection...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

VMware Carbon Black Endpoint and WatchGuard Threat Detection and Response compete in the endpoint protection category. Users find WatchGuard Threat Detection and Response's features provide a competitive edge over VMware Carbon Black Endpoint owing to better integration and threat intelligence.

Features: VMware Carbon Black Endpoint offers advanced threat detection, real-time monitoring, and comprehensive reporting capabilities. WatchGuard Threat Detection and Response features seamless integration with other systems, robust threat intelligence, and ease of use.

Room for Improvement: VMware Carbon Black Endpoint needs improvements in system performance, reducing false positives, and better scalability. WatchGuard Threat Detection and Response requires enhanced reporting features, more granular control settings, and improved alert accuracy.

Ease of Deployment and Customer Service: VMware Carbon Black Endpoint has a straightforward deployment process with reliable but somewhat slow customer service. WatchGuard Threat Detection and Response is noted for quick deployment and responsive customer support.

Pricing and ROI: VMware Carbon Black Endpoint's setup costs are reasonable, with solid ROI due to robust threat detection. WatchGuard Threat Detection and Response has higher initial costs but justifies the ROI through its strong feature set and efficient performance.

To learn more, read our detailed VMware Carbon Black Endpoint vs. WatchGuard Threat Detection and Response Report (Updated: December 2024).

Buyer's Guide

VMware Carbon Black Endpoint vs. WatchGuard Threat Detection and Response

December 2024

Download the complete report

Helped 824,053 peers since 2012

Categories and Ranking

VMware Carbon Black Endpoint

Ranking in Endpoint Detection and Response (EDR)

15th

Average Rating

7.8

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Endpoint Protection Platform (EPP) (18th), Security Incident Response (1st), Ransomware Protection (4th)

WatchGuard Threat Detection...

Ranking in Endpoint Detection and Response (EDR)

27th

Average Rating

8.0

Reviews Sentiment

7.9

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of December 2024, in the Endpoint Detection and Response (EDR) category, the mindshare of VMware Carbon Black Endpoint is 2.5%, down from 3.7% compared to the previous year. The mindshare of WatchGuard Threat Detection and Response is 0.5%, down from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR)

Featured Reviews

Matthew Weisler

Sole Proprietor at Core-Infosec

Great granularity for policies or applications without needing hash values

The solution is cloud based which makes it easy to use for remote devices or work-at-home situations. The solution supports full trust or signature-based approvals. You can get very granular and band out policies or applications without having to do hash values. You can band through the entire environment by execution of the name or desk IDXE. This can be achieved on the policy side because of the signature, IOC, or naming convention itself. This is very effective for pushing more blockage or removing threats across the board. The solution has a very nice API on the back end for remoting into a system and executing scripts or utilizing self automation. This is useful for monitoring several different companies in a workspace or workbook-type format. For example, I report and send out mass emails from a clickable button in an Excel workbook. The APIs all exist for each client. I push out automatic endpoint monitoring and reports every single day at a particular time, with a simple clickable button that serves as a scheduled task for fifty clients.

Read full review

Jose Fos

Information Technology Services Manager at BRAVO CAPITAL

The solution provides automated responses and helps protect our systems

We use the solution to protect our systems. We also use it for real-time detection The tool provides automated responses. It has a lot of features. The interface is not the best. I do not like it. The reports must also be improved. I am currently using the solution. I have contacted the…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The new feature that we're deploying, the new offering from Carbon Black, is MDR, which stands for manage, detect, and response. It's the most valuable feature because Carbon Black will be continuously checking the logs, and they will be advising us on how to improve some of the policies as well as review the logs. If there are any nefarious agents or things happening on the end points, they will know."

"The product is pretty strong in terms of security and their features are very good in that respect."

"Some of the valuable features I have found are the online documentation of the solution is well organized and thorough. I like the simplicity of bypass and the visualization of the active components."

"It gives you all of the information in a short and sweet fashion."

"I feel that the initial setup was straightforward and not complex."

"The threat analysis functionality is good."

"The visibility provided has been great."

"The initial setup was fairly easy."

More VMware Carbon Black Endpoint pros

"The analytics are important because if there is an abnormality then it provides that information to us."

"I like WatchGuard's network segmentation features. It's easy to configure user policies."

"When you download the executable file from the internet, it automatically sandboxes to make sure it's not doing anything incorrectly."

"The most valuable features include the ability to raise alarms when there are issues, easier configuration compared to other vendors, centralized update management, and keeping the product updated efficiently."

"The most valuable feature, in my opinion, is the dimension logging platform and the network traffic filtering."

"The tool provides automated responses."

"WatchGuard is very user-friendly. It provides us with all of the security services we need."

"The solution is very easy to use."

More WatchGuard Threat Detection and Response pros

Cons

"Certain settings have limitations. For example, I cannot manually block some malware activities."

"I would like to see the user credentials feature improved. I would also like to see more reporting features and better ways to roll the reports out."

"It could be a bit complicated. You have to be very familiar with Carbon Black to understand what it is doing and why it is doing. I would like to have more explanations and simplification in the user interface. It would be good to get help and see more explanations. It should tell us that a software is blocked and the reason for it. It would be good to be able to build chains in terms of what caused what, what worked, and what caused an issue. We are now moving from Carbon Black to Cortex XDR. While choosing antivirus software, we were also looking at Carbon Black because it also has an antivirus package, and it is next-generation, but we were told that Carbon Black doesn't support firewalls. We have Palo Alto firewalls. We would have chosen this solution if it supported firewalls, in particular next-generation firewalls, but unfortunately, it doesn't. Therefore, we decided on Cortex XDR because it integrates with Palo Alto firewalls."

"In our company, we also wanted to have network detection, like a host-based IDS on VMware Carbon Black Endpoint, but we did not get it."

"The directions for Splunk are spot on, but it is difficult to find anything on integration with AlienVault,"

"At this point, we're test-bedding several other providers right now to see if there's anything that does equally or better and that comes at a better price point."

"Adding an application and a device control feature would be a great help for this solution."

"This solution works well but needs lots of tuning and optimization."

More VMware Carbon Black Endpoint cons

"I'd like a few extra features, especially around threat severity assessment."

"When it comes to live-monitoring, the user-interface could be improved to make things easier."

"The administrative UI/UX could be significantly improved."

"This product needs to be fully integrated with the firewall. Currently, it only sends logs to the cloud and asks the firewall to correlate them."

"It can have a couple of false positives, but after you add them to your allow list, it works fine. It could have better Mac support. I am pretty sure it doesn't have much support for Mac. It can be installed on a Mac, but it is not that good."

"The interface is not the best."

"The ease of detecting where an issue is should be improved."

"The solution is a bit confusing and there are unusual complications with setup."

More WatchGuard Threat Detection and Response cons

Pricing and Cost Advice

"I am not really involved in the pricing of this product. But, from my understanding, it is OK for us."

"The pricing is annually based and operates through another department than mine."

"It's reasonable in price"

"The platform is expensive."

"Its pricing was very good, which is one of the reasons I went to it as an alternative. It is on a yearly basis. There are no additional fees."

"This is a really expensive product and we pay licensing fees on a yearly basis."

"The cost is a considerable factor, but the benefit factor is the most important. When you compare it with other products, the price is high. Carbon Black will negotiate the price."

"The solution has almost the same price as other different kinds of infrastructures, but it offers a lot of different features."

More VMware Carbon Black Endpoint pricing and cost advice

"The price is very good."

"The pricing is competitive."

"There is a license required to use the solution and we pay annually. The price could be reduced because it is a bit expensive."

"The price of WatchGuard is very good."

"The solution is a bit more expensive than other options."

"The price is comparable."

"The solution is cheap."

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

824,053 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Financial Services Firm

10%

Government

10%

Manufacturing Company

Computer Software Company

20%

Retailer

10%

Comms Service Provider

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What to choose: an endpoint antivirus, an EDR solution or both?

I can recommend Carbon Black, an award-winning next-gen anti-virus (NGAV) and endpoint detection and response (EDR) security solution. The CB Predictive Security Cloud platform combines multiple hi...

See all answers

What's the difference between Carbon Black CB Response and Carbon Black CB Defense?

Carbon Black offers two different levels of Endpoint Detection and Response. One is the VM Carbon Black Cloud Endpoint Standard (CB Defense), and the other is the Carbon Black Endpoint Detection an...

See all answers

What do you like most about Carbon Black CB Defense?

VMware Carbon Black Endpoint is a highly stable solution.

See all answers

What do you like most about WatchGuard Threat Detection and Response?

The tool provides automated responses.

See all answers

What needs improvement with WatchGuard Threat Detection and Response?

The pricing of WatchGuard Threat Detection and Response could be improved. It's not the cheapest option available. That said, it often meets our needs effectively. There are areas for improvement i...

See all answers

What is your primary use case for WatchGuard Threat Detection and Response?

WatchGuard Threat Detection and Response is used to monitor traffic and give alarms to the administration if something goes wrong. It reacts when services protected by it are attacked and sends not...

See all answers

Comparisons

CrowdStrike Falcon vs VMware Carbon Black Endpoint

Compared 16% of the time

Microsoft Defender for Endpoint vs VMware Carbon Black Endpoint

Compared 14% of the time

SentinelOne Singularity Complete vs VMware Carbon Black Endpoint

Compared 8% of the time

Trellix Endpoint Security vs VMware Carbon Black Endpoint

Compared 8% of the time

Trend Micro Deep Security vs VMware Carbon Black Endpoint

Compared 7% of the time

More VMware Carbon Black Endpoint Competitors

CrowdStrike Falcon vs WatchGuard Threat Detection and Response

Compared 40% of the time

Darktrace vs WatchGuard Threat Detection and Response

Compared 12% of the time

Microsoft Defender for Endpoint vs WatchGuard Threat Detection and Response

Compared 7% of the time

Huntress Managed EDR vs WatchGuard Threat Detection and Response

Compared 7% of the time

ESET Inspect vs WatchGuard Threat Detection and Response

Compared 5% of the time

More WatchGuard Threat Detection and Response Competitors

Product Reports

Buyer's Guide

VMware Carbon Black Endpoint

November 2024

Download VMware Carbon Black Endpoint product report

Buyer's Guide

WatchGuard Threat Detection and Response

November 2024

WatchGuard Threat Detection and Response report

Download WatchGuard Threat Detection and Response product report

Also Known As

Carbon Black CB Defense, Bit9, Confer

WatchGuard TDR

Learn More

VMware

Video not available

WatchGuard

Overview

VMware Carbon Black Endpoint provides comprehensive endpoint security against ransomware, spyware, malware, and viruses, catering to both cloud and on-premise environments.

VMware Carbon Black Endpoint facilitates endpoint detection and response, threat hunting, application control, antivirus support, and protection for virtual and physical machines. Features include intelligent learning, whitelisting, and integration with other security tools, making it suitable for distributors, MSPs, and enterprises seeking advanced threat defense and real-time monitoring. With its capability to detect and stop malicious executables, it supports both offline and online environments and offers tools like command shell access for deeper investigation.

What are the key features of VMware Carbon Black Endpoint?

Intelligent learning: Improves detection capabilities over time.
Whitelisting: Allows only approved applications to run.
Integration with other security tools: Enhances overall security posture.
Centralized cloud control: Manages endpoints from a single interface.
Command shell access: Offers deeper investigation capabilities.
Dynamic grouping: Facilitates organized endpoint management.
Simplified policy management: Streamlines security policy implementation.
API for system remoting: Allows remote system access and management.
Twenty-four-seven support: Provides continuous assistance and response.

What are the benefits of VMware Carbon Black Endpoint?

Real-time monitoring: Offers constant vigilance against threats.
Threat hunting: Identifies and mitigates threats proactively.
Historical data analysis: Assists in understanding past incidents and patterns.
Improved endpoint protection: Enhances overall endpoint security.
Enhanced threat detection: Reduces exposure to advanced threats.

VMware Carbon Black Endpoint is implemented across various industries including technology, healthcare, and finance. Organizations utilize it in cloud and hybrid environments, enhancing their security frameworks with real-time monitoring, intelligent learning, and robust threat detection capabilities tailored to their specific industry needs.

Hackers are designing malware to be more sophisticated than ever. Through packing, encryption, and polymorphism, cyber criminals are able to disguise their attacks to avoid detection. Zero day threats and advanced malware easily slip by antivirus solutions that are simply too slow to respond to the constant stream of emerging threats. Organizations of all sizes need a solution that leverages a holistic approach to security from the network to the endpoint. WatchGuard Threat Detection and Response (TDR) is a powerful collection of advanced malware defense tools that correlate threat indicators from Firebox appliances and Host Sensors to stop known, unknown and evasive malware threats.

Sample Customers

Netflix, Progress Residential, Indeed, Hologic, Gentle Giant, Samsung Research America

Goodwill New York / New Jersey, F4 IT, Café Comunicação Integrada

Buyer's Guide

VMware Carbon Black Endpoint vs. WatchGuard Threat Detection and Response

December 2024

Free Report: VMware Carbon Black Endpoint vs. WatchGuard Threat Detection and Response

Find out what your peers are saying about VMware Carbon Black Endpoint vs. WatchGuard Threat Detection and Response and other solutions. Updated: December 2024.

DOWNLOAD NOW

824,053 professionals have used our research since 2012.

See our VMware Carbon Black Endpoint vs. WatchGuard Threat Detection and Response report.

See our list of best Endpoint Detection and Response (EDR) vendors.

We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.