A free FTE in every box! And a good night's sleep!
What do you like best?
The fact that the User Exchange is loaded with the very experts a company would call if they had an incident and needed help. It truly is like getting a free FTE for being a customer! Having endpoints in high enforcement so that only the files that are approved are allowed to run. The ability to single out the most threatening endpoints. Now a part of VMWare so the wonderful people of Carbon Black will do even more amazing things!
What do you dislike?
I would like to see a Google style search to eliminate redundant rules. I would also like to have the panes freeze on pages so I could see the column names as I scroll down.
Recommendations to others considering the product:
DO NOT fail to account for the value from the User Exchange! Many members are top IR and MSSP professionals. These are the very people you pay to come in and help if you have been breached. They are sharing their findings and helping you configure the product to stop advanced threats.
What problems are you solving with the product? What benefits have you realized?
Protecting endpoints from malware. Knowing what software exists within our organization. Having all of our endpoints in high enforcement gives us a consistent level of protection and helps eliminate lateral movement of any threats that might get in. The console also helps uncover endpoints that have general OS health issues so we can address them quickly.