Try our new research platform with insights from 80,000+ expert users

SonicWall Capture Client vs VMware Carbon Black Endpoint comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
1.0
SonicWall Capture Client offers cost savings, improved security, reduced manual work, lower infection rates, and easy deployment for better productivity.
Sentiment score
6.0
VMware Carbon Black Endpoint delivers strong ROI with enhanced security, reducing costs and malware incidents within six months.
 

Customer Service

Sentiment score
4.9
SonicWall Capture Client support is mixed, with some satisfied but many seeking faster response and improved escalation processes.
Sentiment score
6.3
VMware Carbon Black Endpoint support is knowledgeable but inconsistent, with varied satisfaction and room for improvement in response times.
Partners can purchase single endpoints at prices equivalent to 1,000-endpoint deals, providing an advantage for managed security service provider partners.
While their escalation process is understandable, it can be time-consuming as all logs need to be provided multiple times across different service levels.
 

Scalability Issues

Sentiment score
8.5
SonicWall Capture Client delivers scalable licensing, easy installation, cloud management, and an accessible interface, favored by small to medium businesses.
Sentiment score
7.3
VMware Carbon Black Endpoint is highly scalable, supporting diverse environments efficiently, despite some data extraction and management complexities.
There are no restrictions on the scalability of SonicWall Capture Client.
The installation process is straightforward, requiring only five pilot installations to enable customers to complete the remaining installations independently.
SonicWall Capture Client is accessed via cloud-based management console.
 

Stability Issues

Sentiment score
8.6
SonicWall Capture Client's stability divides opinion, praised for threat prevention but critiqued for high resource consumption and slowdowns.
Sentiment score
7.5
VMware Carbon Black Endpoint offers reliable security, but some users experience stability issues and update-related challenges for resource allocation.
 

Room For Improvement

SonicWall Capture Client suffers from performance issues, outdated interface, high RAM use, and lacks robust threat detection and support.
VMware Carbon Black Endpoint needs better integration, UI, mobile support, pricing, responsiveness, threat detection, and stability improvements.
One of the drawbacks is that I cannot use Advanced and Premier licenses within a single tenant, which can be problematic when users need to deploy different licenses.
XDR cannot be used unless MDR services are purchased with SonicWall.
The RAM usage is higher compared to SentinelOne, utilizing approximately 150 megabytes of memory.
 

Setup Cost

SonicWall Capture Client pricing receives mixed reviews for cost-effectiveness, varying by business size, region, and additional costs.
VMware Carbon Black Endpoint is seen as pricey, varying by deployment size, with mixed views on its value and flexibility.
SonicWall Capture Client offers a cost-effective solution that's cheaper compared to other vendors like CrowdStrike.
 

Valuable Features

SonicWall Capture Client provides robust protection features, including rollback, machine learning, and dual-agent real-time threat detection.
VMware Carbon Black Endpoint excels in threat detection, management, and integration, providing scalable and efficient security with minimal resource use.
Machine learning is particularly effective due to SonicWall sandboxing's threat intelligence database of approximately 7.1 billion entries.
One is that users can use the sandbox of SonicWall, which is called Capture ATP for free.
 

Categories and Ranking

SonicWall Capture Client
Ranking in Endpoint Protection Platform (EPP)
45th
Ranking in Endpoint Detection and Response (EDR)
43rd
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
11
Ranking in other categories
No ranking in other categories
VMware Carbon Black Endpoint
Ranking in Endpoint Protection Platform (EPP)
33rd
Ranking in Endpoint Detection and Response (EDR)
27th
Average Rating
7.8
Reviews Sentiment
6.8
Number of Reviews
63
Ranking in other categories
Security Incident Response (4th), Ransomware Protection (7th)
 

Mindshare comparison

As of October 2025, in the Endpoint Protection Platform (EPP) category, the mindshare of SonicWall Capture Client is 0.6%, up from 0.6% compared to the previous year. The mindshare of VMware Carbon Black Endpoint is 1.8%, down from 2.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP) Market Share Distribution
ProductMarket Share (%)
VMware Carbon Black Endpoint1.8%
SonicWall Capture Client0.6%
Other97.6%
Endpoint Protection Platform (EPP)
 

Featured Reviews

LUIZ FERNANDO MARIANO SILVA - PeerSpot reviewer
Enables faster updates and provides an easy-to-use user interface
I have an advanced license that includes all features. Though we have the license, we cannot use it completely because it is not enabled in the Microsoft tier. It does not make sense. We do not want to buy it separately because the price is different if we buy separate licenses.
Nikunj Kamboj - PeerSpot reviewer
Integrates well with our existing SIEM tool and helps in identifying suspicious activities
The solution's integration with our existing security infrastructure is good. Whenever we have any alert in VMware Carbon Black Endpoint, we can easily that alert in our SIEM tool and check logs from the SIEM tool itself. VMware Carbon Black Endpoint is just a secondary security tool for us, and we are just monitoring the alerts from it. The solution's behavioral analytics feature helps in identifying suspicious activities pretty well. Whenever we have even a small thing, we get an alert. The solution is deployed on the cloud in our organization. Performance-wise, the solution is doing great in terms of connecting to the host directly. Performing a malware scan usually takes a lot of time, more than 24 hours. A malware scan is something that we do only on Carbon Black for the old endpoint devices and servers. It used to take sometimes three days to perform. I would recommend the solution to other users. Overall, I rate the solution an eight out of ten.
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
869,832 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Government
11%
Educational Organization
9%
Comms Service Provider
9%
Computer Software Company
9%
Financial Services Firm
12%
Computer Software Company
11%
Government
9%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise1
By reviewers
Company SizeCount
Small Business31
Midsize Enterprise9
Large Enterprise30
 

Questions from the Community

What is your experience regarding pricing and costs for SonicWall Capture Client?
SonicWall Capture Client offers a cost-effective solution that's cheaper compared to other vendors like CrowdStrike.
What needs improvement with SonicWall Capture Client?
It is not similar to other products. For XDR, users have to use another product. XDR cannot be used unless MDR services are purchased with SonicWall. If a user has SonicWall MDR services, then they...
What is your primary use case for SonicWall Capture Client?
I am a distributor, but I can be counted as a reseller. It does not differ anyway. Most of my clients are SMBs, and I inform them that they should protect their servers with this kind of product, n...
What to choose: an endpoint antivirus, an EDR solution or both?
I can recommend Carbon Black, an award-winning next-gen anti-virus (NGAV) and endpoint detection and response (EDR) security solution. The CB Predictive Security Cloud platform combines multiple hi...
What's the difference between Carbon Black CB Response and Carbon Black CB Defense?
Carbon Black offers two different levels of Endpoint Detection and Response. One is the VM Carbon Black Cloud Endpoint Standard (CB Defense), and the other is the Carbon Black Endpoint Detection an...
What do you like most about Carbon Black CB Defense?
VMware Carbon Black Endpoint is a highly stable solution.
 

Also Known As

No data available
Carbon Black CB Defense, Bit9, Confer
 

Overview

 

Sample Customers

Luton College
Netflix, Progress Residential, Indeed, Hologic, Gentle Giant, Samsung Research America
Find out what your peers are saying about SonicWall Capture Client vs. VMware Carbon Black Endpoint and other solutions. Updated: September 2025.
869,832 professionals have used our research since 2012.