Strategic partnership between Carbon Black and Blue Coat to help integrate Next-Gen endpoint security

February 23, 2016: Carbon Black, the leader in Next-Generation Endpoint Security, has revealed the successful integration of its Carbon Black endpoint detection and response solution with Blue Coat's next-generation malware analysis and security analytics network solutions. The company, which is a founding member of the Blue Coat Alliance Ecosystem of Endpoint Detection and Response (EDR) partner program, has announced that the integration is now available free of charge to joint customers using Carbon Black version 5.0 and above and Blue Coat Malware Analysis Appliance.

According to the company's senior executives, the integration will now allow Carbon Black and Blue Coat customers with several powerful new use cases, which includes remote file analysis via Blue Coat's Malware Analysis Appliance and empowered incident response via Blue Coat Security Analytics. The first example of integration enables Carbon Black to automatically send unknown files to Blue Coat's Malware Analysis Appliance for detonation and analysis. Based on the results, file scores and alerts are immediately sent to Carbon Black, where further investigation can take place. This extends Blue Coat Malware Analysis capabilities to Carbon Black to protect devices from activities that would traditionally evade network security protections, such as off-network downloads or USB devices. 

Peter Doggart, Vice President - Business Development, Blue Coat, said, “Uniting network security and endpoint detection and response is crucial. By integrating our network analysis and analytics platforms with Carbon Black, the leader in endpoint detection and response, Blue Coat is providing customers with a truly comprehensive end-to-end solution—from complete network to endpoint visibility and detection, to swift and effective incident response and remediation.”

Meanwhile, the second example of integration provides a quick pivot integration into Carbon Black. This enables administrators to quickly see if a file executed on an endpoint and, if so, take necessary incident response actions such as endpoint isolation, live response, or attack banning.

“Thousands of companies depend upon Blue Coat technology to defend their networks. This integration will enable organizations to extend those protections down to the endpoint with Carbon Black. By uniting endpoint detection and response, and network detonation and analytics, organizations can leverage both endpoint and network investments to achieve better security,” concluded Tom Barsi, Vice President -Business Development, Carbon Black.