Tanium pros and cons

For incident response tasks, all these tasks can get done in minutes with minimal disruption to the end-user.

The most valuable features of this solution are the consolidation of all historical data on device endpoints, security drivers, firmware, and Software version gaps.

I like the fact that you can create patching campaigns depending on the area of your network that you want to address first. I like the ability it has to make several campaigns that work in parallel.

Threat hunting is a very good feature on Tanium. We have just started using it and have not used it extensively.

Tanium's most valuable features are patch management, inventory, and distribution software.

The solution can give a lot of false positives.

It is not really additional functions, or the features that are needed, rather the complexity would be reduced based on the number of modules required to put together a comprehensive operational security and risk compliance model.

The most painful thing is the interface. It's a bit unclear sometimes.

The performance could improve in future releases. We have had performance issues in specialized web environments, but overall I think the problems are less than 2% of the computer systems being used.

The main issues are the network connection because different customers have issues with their networks. It's difficult implementing this type of solution because the network is the main feature in the architecture for these types of solutions. Tanium could improve by creating some network optimization.