VMware AppDefense is a data center endpoint security product that protects applications running in virtualized environments. Rather than chasing after threats, AppDefense understands an application’s intended state and behavior, then monitors for changes to that intended state that indicate a threat. When a threat is detected, AppDefense automatically responds.
Customer Reviews
Industry Analyst / Tech Writer in Writing and Editing
Advanced user of AppDefenseThe product allows you to get process level view of your services . You define a least privileged model and everything outside your allowed processes raises alert. Moreover it learns the behaviours from the set of VMs under the service and builds its own set of processes to be allowed. It also gives the visualisation for your services how they are interacting with each other. Also for each process it learns it gives you a reputation and threat score indicating the risk associated with the process.
It needs to improvise more over its learning phase, rather than raising alarm for each and every deviation. It needs to work upon its detecting whether this behavior of the process is suspicious or not.
Appdefense can be definitely considered for securing your VMs if you are already using the VMware Vsphere suite. This gives you an add-on in the security at process level , and allows you to take actions on the process and VM. But if you want your data to be in your premises, then Appdefense might not be able to do that for you now, as they are a cloud based data users and store data in cloud.
From my point of view, Appdefense is one of the key players currently in the endpoint security, which helps users to work on application level by giving you information about the processes on your machine. Allows your to define a least good model. It doesnt run after chasing bad, which is one of the differentiators as compared to other products in the space.
