Carbon Black Pricing for Collective Defense Cloud

Carbon Black’s Cb Response is built for security operations centers and incident response teams. It performs unfiltered data collection and is said to capture more information about endpoint events than any other tool. It is particularly strong in its visibility into active threat hunting and real-time response to ongoing threats. Data gathering, query and analysis capabilities benefit from continuous monitoring of operating system status, network status, system information and binary information. The Cb Collective Defense Cloud pricing provides threat intelligence, reputation and classification capabilities by consolidating natively developed research and third-party OEMs. APIs allow security teams to tie together all defenses.

Carbon Black Agents run on all the monitored machines but for different costs and pricing. Cb Response supports agents for Windows, Mac, and Linux environments. They can be installed using a standalone exe or with a third-party software distribution tool such as Microsoft SCCM or Landesk. Up to 150,000 endpoints per cluster and unlimited clusters. One server sensor collects 1.6 GB per day. Carbon Black Response pricing varies.

Security qualifications: AICPA SSAE No 16 SOC 2

The Cb Collective Defense Cloud analytics engine crunches big data related to attacks, threats, behaviors and change, with the purpose of identifying malicious activity. Cb Response is software-based, available on premises or in the cloud. Agents are installed on MAC, Windows and Linux endpoints for either dedicated hardware or VMs. The Collective Defense Cloud is hosted by Carbon Black in its own cloud. Cb Response is also available as a service from Carbon Black certified MSSPs.

Carbon Black pricing (price, cost) Cb Response uses a tiered yearly subscription model pricing model starting price is $30 per endpoint for a 1-year subscription.

Gigamon 212 Cost and Configuration

How Much Does Gigamon Cost?

Gigamon, whose switches replicate data and distribute it to various network monitoring tools, now offers the Giga VUE-212, with an SME price target. It features both 1Gbps and 10Gbps ports to isolate replicated network traffic. Monitoring tools include performance monitoring, intrusion detection or protocol analysis. While similar to Gigamon’s Giga VUE-2404 and VUE-420, the 212 has a starting cost of $12,995.

Gigamon 212 Configuration

The 212 comes with two 10Gb ports and eight 1Gb ports, versus the 420’s four 10Gb/ 20 1Gb configuration. The 2404’s 24 10Gb/four 1Gb configuration is standard. The 212 is suited for growing data centers that may need 10Gb capacity but still maintain 1Gb monitoring tools. “We’ve seen it many times, People just built out a data center and they just spent $50 million on that. The next thing they know, the operations manager says, ‘Oh my, I only have 1 gig tools and this is a brand new 10 gig network; what do I do?'” Jablonski said.

The 212 is also coupled with Gigamon’s GigaSMART software portfolio. This offers time stamping, network port-labeling, slicing, masking and other tasks that improve the efficiency of data monitoring with minimal increase in latency. Even with as many as 4,000 data filters operating, the Gigamon platform adds only 6.7 microseconds or less of latency. There are limitations to the 212 model versus the 420 and the 2404, but the 212 can be connected to the larger capacity models. “The only thing we’re giving up on the 212 is scalability,” he said. “You can’t expand on it, but of course we’ve overcome that by allowing you to uplink to the bigger switch.”