VMware Carbon Black CB Protection
Application Control and Critical Infrastructure Protection

Overview:

Highly targeted assets demand perfect security, but can’t afford loss in performance. Critical systems are increasingly targeted because they contain the most valuable information. These systems cannot afford a moment of unscheduled downtime or performance degradation as they are the lifeblood of the organization. They often run on out-of-date or unsupported operating systems, which are costly to secure and support. The most common approach to defending these systems typically relies on layering multiple, ineffective security products, which is costly, creates risk and jeopardizes performance.

CB Protection is an industry-leading application control product, used to lock down servers and critical systems, prevent unwanted changes and ensure continuous compliance with regulatory mandates. Leveraging cloud reputation services, IT-based trust policies and multiple sources of threat intelligence from the CB Predictive Security Cloud, CB Protection ensures that only trusted and approved software is allowed to execute on an organization’s critical systems and endpoints.

CB Protection combines application whitelisting, file integrity monitoring, full-featured device control and memory/tamper protection into a single agent. CB Protection watches for behavioral indicators of malicious activity and conducts continuous recording of attack details to provide rich visibility into everything suspicious that attackers attempt to do. With the addition of the File Delete feature, CB Protection is now a direct control for requirement 5 of PCI DSS, enabling customers to remove traditional antivirus without the need for undergoing the compensating control process.

Security teams can harden their new and legacy systems against all unwanted change, simplify the compliance process, and provide the best possible protection for corporate systems at enterprise scale. CB Protection is available through MSSPs or directly through on-premise.

The CB Predictive Security Cloud supports a variety of powerful next-generation endpoint security services, all of which are powered by the collective intelligence generated in the PSC. This collective intelligence is generated from data collected across millions of endpoints under management and enriched with threat intelligence from around the world in real-time.

Lock down servers, critical systems and fixed-function devices in highly regulated environments

Extreme Protection

CB Protection was the only solution to stop 100% of attacks in NSS Labs' 2017 Advanced Endpoint Protection (AEP) test.

1. Lock down systems to stop malware, ransomware, zero-day, and non-malware attacks
2. Built-in file-integrity monitoring, device control, and memory protection to block unauthorised change
3. Harden new and legacy systems, with broad support for embedded, virtual, and physical operating systems

---

Continuous Compliance

The cost of compliance is outpacing any other spend in IT. Make regulatory and policy compliance easier and less costly with CB Protection.

1. Maintain continuous compliance for key frameworks including PCI-DSS, HIPAA, GDPR, SOX, FISMA, and NERC
2. Monitor critical activity and enforce configurations to assess risk and maintain system integrity
3. Secure end-of-life systems with powerful change-control and whitelisting policies

---

High Performance, Low Touch

CB Protection is one of the most proven and scalable application control solutions on the market. A single admin could manage over 10,000 systems, giving security teams control with little ongoing effort.

1. Out-of-the-box templates based on industry best practices keep management overhead low
2. Cloud-based reputation and detonation helps you make fast decisions about which software to trust
3. Automatically trust software deployed by IT to keep administration easy and achieve fast time-to-value