Tanium Reviews

I use Tanium to run all the security operations, threat intelligence, vulnerability management, threat hunting, red teaming, purple teaming, and everything within the vulnerability management space.

Server message block communication is one of the platform's strengths that tells how quickly it can get all the data. However, when we first deployed it, we were told to remove it immediately because it was causing issues along those lines. Within our system, we use the solution for the instant discovery and visibility aspect instead of using it to scan for vulnerability management. We have another solution for regular scanning. We use Tanium to collect the data from endpoints for the live response functions for looking at anomalous behaviors. When we had a specific targeted attack against it, a specific process was running, and we could identify and stop all of those.

Tanium's most valuable feature is its instant discovery aspect. You can have a look and see the processes running on the machine when looking for specific indicators. We use the solution within the threat-hunting and vulnerability-management space.

Tanium’s scalability could be improved. When we first deployed Tanium to Bank of America, it caused a massive contention issue on the network due to the size of the network and the amount of traffic coming back from SMB.

We first used Tanium in 2016 at Bank of America.

Initially, we had some problems with the contention of the traffic, and the solution kept crashing. However, after a bit, it wasn't too bad.

Tanium's scalability was good once we got to it working properly on the smaller things. It was pretty good once it was optimized and used within the wider business. My organization has a huge infrastructure with over 20,00,000 switches and 3,00,000 servers within the business.

I rate Tanium an eight or nine out of ten for scalability.

The initial setup of Tanium was very hard due to the size of the network of Bank of America. When you put out the initial bit, the amount of traffic coming back wasn't tunneled correctly, and it caused contention in various areas. We've got so many other technologies running within it, and it's a very, very complex environment.

We did the deployment in small bits. There was an initial three-month deployment, but that wasn't complete. Since Bank of America is across 29 countries and is absolutely huge, it involved breaking it down into logical business areas. The solution's overall deployment took over 12 months.

We don't have a full-scale deployment per se. We're looking at the threat module within Tanium Threat Response in my current place.

Tanium is a very useful product. You've got to have the right use cases for it, but the visibility of things it gives you and the response time is really, really beneficial.

Overall, I rate Tanium an eight out of ten.

We use the tool as an infrastructure operational management solution. 

The solution is scalable and helps to understand how infrastructure works. It helps to improve the health of the organization. 

Any movement into a SaaS solution has challenges since the processes and data flows are not well defined. Hence, you need to build it at the same time. 

I would rate the solution's stability a ten out of ten.

I would rate the product's scalability a ten out of ten. 

The product's setup is easy but depends on the environment. The tool's deployment took three months to complete. 

The solution offers value for money. 

I would rate the product an eight out of ten. You need to know about your environment and if you are in a legacy environment, then you need to plan methodically. 

There are some very compelling use cases. A value proposition.

The most valuable features of this solution are the consolidation of all historical data on device endpoints, security drivers, firmware, and Software version gaps. 

Things that are sometimes overlooked within an IT support, operational, and security model framework, and all of that being consolidated into a multi-view and multi-windows dashboard.

The problem or challenge is a pre-sales and go-to strategy for the SMB market delivered through a channel or model.

It's very convoluted and vague, which leads to some confusion about the various types of modules, and the device-to-seat cost is extremely difficult to calculate.

You could have six different modules with 15 to 20 different device counts, which raises some red flags regarding service support and operational operations availability.

To be honest, I don't have enough time in the seat, or on the technology, to say whether or not there is a gap in terms of function or software.

It is not really additional functions, or the features that are needed, rather the complexity would be reduced based on the number of modules required to put together a comprehensive operational security and risk compliance model.

We are not really using it. As part of what my company does, we provide executive-level advisory and consulting services based on these types of products and other products in the marketplace. We are not end-users, rather we are, a service delivery, and integrator, as well as an executive business and operational technology alignment company.

We last worked with our clients on this solution in the last 30 days.

The version is the endpoint security and point management suite under a thousand seats.

The client hasn't used it long enough to know whether it's stable or not. It is reasonably stable, but it does not provide long-term stability or service to this software. I don't have enough working time on it.

Tanium is a scalable product.

Technical support is lacking.

I would rate the technical support a three out of five.

That is not necessarily people; it's the service window.

Neutral

HPE Simplivity, Nutanix Acropolis AOS, and VMware vSAN are all available. I don't have much experience. The research was being done as part of an inquiry on a consulting engagement for one of my clients.

We are working with Rapid Seven, and Crowdsource.

It's hosted by a third party on an MSP cloud platform.

This is not a light switch. It is probably a four on the level of complexity.

It may take up to 60 days to implement.

There is an on-premises version, but it is only available for more than a thousand seats through an appliance model.

It is not inexpensive.

It is higher than some competitors in the market. However, it appears to be more robust and functional to me.

Aside from the standard licensing fees, there are significant additional costs.

Some of the current topics of interest include software as a service based on cyber risk and cyber security. But I would say that would be the most, one of the most prevalent.

I would suggest doing your due diligence.

I am an independent consultant.

I would rate Tanium a seven out of ten.

We use the solution for patching and security response. 

I like the tool's incident response and security patching. 

The solution needs to improve the reporting and tracking capabilities. 

I have been using the product for six years. 

The solution is stable. Tanium's agents that get deployed are highly reliable, which is the one benefit it has over SCCM. 

The product is built to scale. 

I have not contacted the tool's support directly but my team has and finds them to be pretty responsive. They are top in customer service. 

The solution is expensive but it's a good investment. 

We decided to use Tanium instead of SCCM because of security reasons. It's one of the most effective security response tools.

I would rate the product a seven out of ten. I would not choose the product blindly. It's a product you almost can't do without. You need to have an experienced person with strong security background or experience in setting up and using Tanium. 

Tanium is primarily used for CMDV (Configuration management database) discovery. Tanium is meant to discover CIs and assets.

It's a good tool, but that's about it. It's like any other discovery tool. It's very detailed, and it will allow you to do hardware and software. I was using it in a very large enterprise.

The interrogation piece was the most valuable feature because it was very detailed.

Tanium's limitations should be improved because although it is a great tool, it is limited to only a few classes during a session. That doesn't do me any good if I do more than 300 classes.

Tanium’s user interface should be made better by making it a little bit more simplistic.

I was a system integrator for Tanium for about eight months.

I didn't face any issues with the stability part of the solution.

Scalability is an issue. It's limited to the classes. When you're doing a large deployment, it doesn't meet your needs.

The problem with the tool is the way it is developed. It's not anything that support could resolve. The tool's limitations do not make it a viable product if you're dealing with a large enterprise.

I have worked with SCCM. There are lots of discovery tools out there, but Tanium works a little bit differently.

Tanium is not a difficult tool to deploy. It's a fine tool, but it's geared to small to medium organizations. If you have a very large organization, it falls on its face.

We just followed the instructions during deployment. We had to put an agent on every unit, which was a little bit cumbersome. Six people were involved in the deployment, which took a few weeks.

Tanium is not a difficult solution to maintain, and a specific team was responsible for its maintenance.

I suggest being aware of the tool's limitations.

Overall, I rate Tanium five out of ten.

It's mainly used by the cybersecurity team for Windows patching and deployment of some software solutions.

I like the fact that you can create patching campaigns depending on the area of your network that you want to address first. I like the ability it has to make several campaigns that work in parallel.

Tanium is easy to use as well.

The most painful thing is the interface. It's a bit unclear sometimes.

The user interface also has to be more secure. If the end users are trying to patch a whole set of machines, they should be warned that it's going to be a deployment on the huge environment.

I've been using it for two years now.

It is a stable solution.

The scalability is perfect.

We have a direct relationship with Tanium, so we have an educated technical account manager.

The deployment is simple.

We have four people for deployment and maintenance: one for the server and the complete functionality, one for the patch manager to create the campaigns, and two from the IT team for the deployment and to address issues if there are any.

We deployed it ourselves.

It's an expensive solution. It would be nice if the cost were lower.

Try the solution on a reduced scale to get used to the interface so that you don't make mistakes that can be harmful to your environment.

On a scale from one to ten, I would rate Tanium at seven.

Tanium is used for network security. We can acquire files, detect malicious file-related activities, and process-related activities in our environment.

Threat hunting is a very good feature on Tanium. We have just started using it and have not used it extensively.

The performance could improve in future releases. We have had performance issues in specialized web environments, but overall I think the problems are less than 2% of the computer systems being used.

I have been using Tanium for a few months.

The stability is good but it could still improve.

Tanium is highly scalable.

We have approximately 7,000 laptops and 40,000 regular systems that we have deployed Tanium on.

I have used other security solutions, such as CrowdStrike Falcon and HX FireEye.

The initial setup is straightforward.

We have a security engineering team of four people that does the implementation and maintenance of the solution.

There is an annual license required to use this solution.

I rate Tanium a six out of ten.

Tanium can be deployed on the cloud and on-premise.

Tanium's most valuable features are patch management, inventory, and distribution software.

The upgrades in Tanium are easy because it is in the cloud. The upgrades are embedded in the solution, they do the upgrades. When the customer does not use the application and it's no problem. When using other solutions you need to do the upgrades through a technical team, that can apply the upgrades when agreed with the customer.

The main issues are the network connection because different customers have issues with their networks. It's difficult implementing this type of solution because the network is the main feature in the architecture for these types of solutions. Tanium could improve by creating some network optimization.

I have been using Tanium for approximately one year.

The support Tanium provides could improve by reducing the delay times for issue responses.

Tanium is a more expensive solution in Latin America than some of the competitors, such as BigFix.

I rate Tanium an eight out of ten.

We primarily use the solution for inventory and incident response for the most part.

The inventory aspect of the solution has been the product's most valuable aspect for us so far.

The scalability is very good overall.

It's a really good tool. 

For inventory purposes, it's from one of the best things on the scene, as you can get live inventory. 

I like the architecture for a vulnerability scan, for example, as it doesn't put a whole lot of load on the asset. It basically queries. This is not a hub-and-spoke. It's more like a circling of the wagons that all the other assets in the circle or in that particular chain can report on things, that have not logged into Tanium, can report on each other, can grab near real-time data. For incident response tasks, all these tasks can get done in minutes with minimal disruption to the end-user.

The solution can give a lot of false positives. It's an aspect of the solution that could be looked at and worked on.

If you deploy all the threat intelligence rules that come with it, you may spend a lot of time suppressing some of the false positives as some of them are very vague. You'll have the indicators due to the fact that you can suppress by hash or by pass or by command and parents process. However, that information is often very limited. You may get an alert for common language image load which can be a hacker technique, however, it's also a normal process between valid Microsoft processes, between the Msiexec, or some sort of system process. 

It's frustrating that there's not enough data - at least that I've found - to be able to determine whether something is a false positive or true positive. Whether it should be suppressed or whether you should let it go, the number of false positives you may have to deal with, if you enable all of these sources, could be over a hundred thousand.

The scalability can be challenging, depending on a company's setup.

The ability to calculate risk with one query would be useful. In other words, to be able to combine known vulnerabilities on an asset with known threats that are targeting that vulnerability from Intel. 

Being able to determine some way or another, which processes you prefer would be ideal. There should be more access to automated processes. Somehow you should be able to determine the business value of that asset and be able to have a true risk meaning and a true way to bubble up these high-value, high-risk assets. They need to get more attention. The solution needs some sort of risk engine that takes into account threat vulnerability and business value.

I've been using the solution for less than a year. It hasn't been that long.

The stability is actually quite good. There are no bugs or glitches. It doesn't crash or freeze. Its performance is reliable.

The scalability isn't as straightforward as it seems in that adding more assets. Sometimes it depends on where those assets are - such as remote offices that have different controls. If it's a large organization that has bought other businesses, then there are different architectures and different protections and protocols. In that sense, Tanium may have difficulty with some of those different architectures due to the fact that you may have to go and troubleshoot one type also another. Of course, the most painful part is having to put RDP into assets and try and restart the services. 

The technical support on offer is below average.

For some of our other systems, I have a phone number I can call. I wait a few minutes, I get a ticket, I get a live agent. Then we troubleshoot live. Tanium doesn't have that. Instead, you can send in an email and when the technical support person has time, your cam will contact you. It's painful, that part, they get a C-rating on their level of support. We aren't quite satisfied.

I can't speak to the implementation process. I can't comment on if it was a difficult or straightforward process or how long the deployment actually took.

I can't speak to if the solution was delivered by a consultant or integrator or if it was handled in-house.

I'm a customer and end-user.

We are using the most current version of the solution in our organization at this time.

I'm not sure how the solution is typically deployed.

It's great for inventory and even incident response. It's right up there with some other top-notch products. However, in terms of the implementation, getting everything on board, all that sort of thing, a company initially setting it up is going to need help troubleshooting. I would advise a company takes the time to definitely engage with some sort of professional services. It's going to be required.

I'd rate the solution nine out of ten.

Our primary use case of this solution is for endpoint protection and, more particularly, the patching. We are integrators and customers of Tanium and I'm a channel director.

The security features are very valuable to us as is the fact that the solution is easy to use with a quick implementation time. 

Our biggest issue with the solution is its lack of mobility. Also, when it comes to deploying the SaaS, it's more difficult to deploy on-prem.

I've been using this solution for five years. 

The stability of the solution is good. 

The solution is scalable. We currently have 1,500 mainly end users using this product. There are approximately 15 additional people working in the IT department that also use this solution. 

I have never used the technical support so can't comment. The community is pretty good although there's not enough technical information available. The community's helpful for the day-to-day business.

We previously used SCCM and we moved to Tanium because of the number of platforms we can manage with Tanium which is much greater than SCCM offers. SCCM is only Microsoft and we needed to cover all the platforms such as Linux as well as others.

The initial setup was relatively easy. Installation and deployment took less than a week. 

I would recommend the solution for what it is, but not for what it is not. It's actually lacking one major feature and that is mobility which is very important. The lack of this software is why I wouldn't recommend Tanium but in terms of security, deployment and installation, the solution is fine. 

I would rate this solution a seven out of 10.