Innovative Approach to Application Behavior Monitoring
Pros
- I think that the AppDefense approach is clever and sets it apart from other products. Having a baseline of normal behavior that I can see is something I haven't seen in another product before.
- AppDefense doesn't overload my systems with performance draining agents.
- AppDefense integrates with VMWare products I have or plan to purchase.
- Access to AppDefense support has been better than any other VMWare products.
Cons
- The installation and update process is time consuming and requires too many reboots.
- Bare metal support is very badly needed.
- Reporting is weak. I need to pull information out that shows regulatory compliance requirements are being satisfied.
- When I whitelist or blacklist a process there are no fields to track why that decision was made.
- Blacklisting doesn't do what I thought it was doing.
- Some basic AV should be included to satisfy regulatory requirements.
Return on Investment
- Going from no visibility into this area, we have mostly gained positive impacts. So far the only security issues we have seen were on one of the few bare metal systems that we have.
Other Software Used
vCenter Site Recovery Manager
