Carbon Black, a leader in next-generation endpoint security, has integrated its endpoint detection and response solution with Blue Coat’s next-generation malware analysis and security analytics network solutions. 

 

The company, which is a founding member of the Blue Coat Alliance Ecosystem of Endpoint Detection and Response (EDR) partner programme, has announced that the integration is now available free of charge to joint customers using Carbon Black version 5.0 and above and Blue Coat Malware Analysis Appliance.

 

The integration will now allow Carbon Black and Blue Coat customers with several powerful new use cases, which includes remote file analysis via Blue Coat’s Malware Analysis Appliance and empowered incident response via Blue Coat Security Analytics, according to the company’s senior executives.

 

The first example of integration enables Carbon Black to automatically send unknown files to Blue Coat’s Malware Analysis Appliance for detonation and analysis, they said.

 

Based on the results, file scores and alerts are immediately sent to Carbon Black, where further investigation can take place. This extends Blue Coat Malware Analysis capabilities to Carbon Black to protect devices from activities that would traditionally evade network security protections, such as off-network downloads or USB devices.

 

Peter Doggart, vice president - Business Development, Blue Coat, said: “Uniting network security and endpoint detection and response is crucial. By integrating our network analysis and analytics platforms with Carbon Black, the leader in endpoint detection and response, Blue Coat is providing customers with a truly comprehensive end-to-end solution—from complete network to endpoint visibility and detection, to swift and effective incident response and remediation.”

 

Meanwhile, the second example of integration will provide a quick pivot integration into Carbon Black. It will enable administrators to quickly see if a file executed on an endpoint and, if so, take necessary incident response actions such as endpoint isolation, live response, or attack banning.

 

Tom Barsi, vice president - Business Development, Carbon Black, said: “Thousands of companies depend upon Blue Coat technology to defend their networks. This integration will enable organizations to extend those protections down to the endpoint with Carbon Black. 

 

"By uniting endpoint detection and response, and network detonation and analytics, organizations can leverage both endpoint and network investments to achieve better security.” - TradeArabia News Service