Partnership Overview
Proofpoint and VMware Carbon Black Cloud (now Carbon Black Cloud under Broadcom) connect email threat detection with endpoint protection, so a malicious file found after delivery is addressed on both the inbox and the device. Proofpoint Core Email Protection (TAP) detects the file, Threat Response Auto-Pull (TRAP) quarantines the delivered messages, and the details are shared with Carbon Black Cloud, which can apply endpoint controls.
Address the inbox and the endpoint together
TAP detects a delivered malicious file, TRAP quarantines the messages, and the details go to Carbon Black Cloud so the endpoint is handled in the same motion.
Containment options without manual correlation
Carbon Black Cloud can apply controls such as search and purge, a watchlist entry, isolation, or a policy change, so teams spend less time piecing together what happened.
Optional SOAR workflows
Teams that run SOAR can have Carbon Black Cloud send process and threat report details to a webhook to build workflows around a Proofpoint detection.
Post-Delivery Response
When Proofpoint Core Email Protection (TAP) detects that a malicious file has been delivered by email, it can alert Threat Response Auto-Pull (TRAP), which quarantines the delivered messages. The details are shared with Carbon Black Cloud, which can apply endpoint controls such as search and purge, a watchlist entry, isolation, or a policy change.
Post-Delivery Detection
TAP detects malicious file attachments already delivered to users, and TRAP quarantines the delivered messages.
Shared Threat Details
Message and threat details are shared with Carbon Black Cloud to inform the endpoint response.
Endpoint Controls
Carbon Black Cloud can search for the file and purge it, add the hash to an Enterprise EDR watchlist, isolate the endpoint, or move it to a different policy.
Request a Demo
Thank you!
A Proofpoint cybersecurity specialist will reach out to you shortly.
Recommended for You
Proofpoint Core Email Protection (TAP) detects that a malicious file has been delivered by email and can alert Threat Response Auto-Pull (TRAP), which quarantines the delivered messages. The message and threat details are shared with Carbon Black Cloud, which can apply endpoint controls such as search and purge, an Enterprise EDR watchlist, isolation, or a policy change. It addresses malicious file attachments found after delivery, separate from Proofpoint's pre-delivery email protection.
Yes. Broadcom acquired VMware in 2023, and the product is now called Carbon Black Cloud under Broadcom. The Proofpoint integration works with Carbon Black Cloud, which many teams still know as VMware Carbon Black.
You need Proofpoint Core Email Protection (TAP) with Threat Response Auto-Pull (TRAP) and VMware Carbon Black Cloud. Enterprise EDR is used for the watchlist step. Confirm licensing with both vendors before you begin.
