Due to false alarms in existing endpoint security solutions, security managers may unnecessarily lose time when trying to manually analyse a non-existent threat or may miss a more important threat.
VMware AppDefense is a data centre endpoint security product aimed at eliminating these issues. AppDefense determines how data centre endpoints should behave and when the first change is made. It understands normal changes and changes caused by real threats, and responds to threats automatically, accurately and with precision.
AppDefense can trigger vSphere and VMware NSX if a threat is detected or on demand. Thus;
- Blocks process communication.
- Takes snapshots at the endpoint for instant forensic analysis.
- Suspends access to the endpoint.
- Turns off access to the endpoint.