Tanium Reviews

Implementation is based on client requirement and we don't create any particular policies or any rules among all the networks. The decision is completely based on client-side requirement. Analytics are also completely based on client requirement. To the end users, everything is completely provided by the client. We don't know exactly what they have invested in the particular tool or the subscription value. However, I can suggest that it plays a main role while any high alert is going on and it should be present in any endpoint or any user's machine within enterprise-level security patches.

Tanium provides an endpoint which is isolated from the network and environment. We can easily search its logs and history and connect remotely directly to that particular device which has been isolated from the network. We can search for the history and logs, including audit logs and event logs. The complete activity of the user or owner of the device is visible to us. We can see the artifacts of particular USB transfers internally for official use.

We can not only connect remotely but also see the device status and how many failures have occurred within the network so far. We can see the IP address, how many times it has changed its IP address, and how many times it was connected to VPN or external VPN or internal VPN and what has been searched while on VPN. We can block the IOCs or IP addresses as well. We can block domains, hashes, SHA values, SHA-256, SHA-1, SHA-5 and MD5.

Although I am not completely involved in the automation team, we do have that team and I have worked in some CERT recently. Tanium is more useful while we are in the CERT because most of the times when we are on high alert, Tanium does play a main role for that particular incident or any high case. Tanium is a simple tool and we can easily integrate it to many devices and it is a mandatory tool to secure an endpoint. It is mandatory to give any RDP connection and the tool should be present in the particular device. It is completely mandatory and it is in the policy as well.

In my opinion, sometimes it takes a long time to give solutions or resolve the issue. Tanium side team will respond instantly but sometimes they are delaying in the response. These are the two major causes which I have observed so far. Additionally, while remotely connecting, sometimes it automatically disconnects and the issue is still unresolvable. We are working on that, but it is still a question mark.

I have four years of experience in cybersecurity and I have experience with Tanium for around two years.

I am not using Sophos products like Cloud Optix or Sophos Labs. Previously, I worked in one organization which used Sophos Firewall Endpoint and XDR, and SecurOn as well. However, I have joined a new organization and they are not using either SecurOn or Sophos.

It is completely simple and no need for any tension while installing it.

Tanium is a simple tool and we can easily integrate it to many devices and it is a mandatory tool to secure an endpoint. It is mandatory to give any RDP connection.

It is moderate. It is not that much too costly or really that much low cost, but it is moderate.

Splunk or CrowdStrike are competitors for Tanium right now. However, Tanium is still at the top.

We are not reselling Tanium but we are taking services from them. Implementation is based on client requirement. The review rating for this product is nine out of ten.

Currently, we have around six Fortinet boxes in three locations, but nothing as a cloud service yet.

We are using Kaseya VSA. Kaseya is deployed in the cloud with Office 365. We also have Tanium from the corporate office, which is another tool that is part of Trend Micro.

We manage Tanium by looking at what is happening and report any anomalies to the head office.

Tanium is a mandate from our corporate office. We had to install it so that they can push their applications remotely. For example, we implemented Trend Micro, but nothing was done from our side. We had to install Tanium on the endpoints and then we got Trend Micro up and running on the endpoints through Tanium.

Once we install Tanium, we see that after a certain period of time, Trend Micro has been deployed without our intervention. It is a good tool for remote application deployment. However, Tanium itself has to be deployed manually.

We set a policy to block USB access. The moment a device is being set up on the network, I apply the policy, but it does not come into effect immediately. Sometimes it takes three or four days for it to reflect.

Tanium seems to be quite powerful, but we do not have the opportunity to explore its full potential because we are on a restricted access level from the corporate head office. However, with the limited access we have, we see that it is quite powerful in terms of acquiring data. It allows you to run queries from the interface.

Once you onboard Tanium, there is a lot to explore.

Tanium is quite powerful, but PDQ, when I used it, I preferred PDQ more than Tanium. That may be because I had full control, not the limited access that is given to us in Tanium right now.

The integration is not simple and easy. It requires experienced users or people who have done the implementation.

When certain policies are applied, they do not immediately push the policies. For example, we manage endpoint device USB access. We set a policy to block it, but it does not come into effect immediately. Sometimes it takes three or four days for it to reflect. That is a pain point.

I have raised this issue with support as well, but they said that I need to limit the number of devices in the policy.

In terms of application deployment, for us, it was seamless.

Almost two years now.

Tanium is stable and it is also lightweight. It is not heavy on the endpoint.

Technical support is handled through the corporate support, so we are not directly dealing with Tanium's technical support. Nevertheless, I feel it may be good because it is vastly used on the Europe side.

We had to move with Fortinet because of the corporate mandate. We were using Forcepoint for more than a decade since they were Stonesoft, then they became Forcepoint. However, recently, last year, we had to change our solution to a Fortinet firewall.

Two years back we were acquired by another company. Until then, we had Forcepoint and everything all in-house. We had a say and used to go with the choice of solutions, but after the acquisition happened, we had to blend with the corporate policies. We cannot do anything independently.

Tanium's corporate office did all the back-end policy setup, but we had to deploy the application in-house.

I did use PDQ in the past during the COVID times for remote deployment of applications. PDQ Deploy is one alternative solution.

For Tanium, PDQ Deploy is one alternative to consider. My overall review rating for Tanium is eight out of ten.

Tanium is used for endpoint management, specifically patching and configuration management.

There are downsides and drawbacks in Tanium, and there is room for improvement from my perspective. Covering more types of platforms would be beneficial. Currently, Tanium has good support on most present platforms such as Windows and Linux, but we also have some niche platforms such as Power Platform, and I think that would be more interesting.

I have been using Tanium for about two years.

I am currently using Tanium or Microsoft Defender.

Tanium is used for heterogeneous endpoint management in general. As a consultant, I work with different customers across multiple industries. Tanium could be useful in finance, education, federal, and I have worked with companies in education, distribution, logistics, manufacturing, and aerospace. Some of them do have Tanium in those situations.

Tanium’s best features include support for any Windows, Linux, or Mac endpoint, regardless of where it is, and the ability to do IT operations and security operations. That’s really the big benefit.

I assess Tanium’s real-time data aggregation capabilities for aiding risk identification or remediation as probably the best in the industry.

While Tanium doesn’t call it that, I utilize dashboards and reporting for analytics for endpoint performance insights.

Regarding the metrics that are most useful with Tanium’s detailed analytics, it depends on what your goal is and what problem you’re trying to solve or what you’re trying to address, because it does so much with both IT operations and security operations.

Tanium has top of the line integration. There are areas that could be improved with Tanium, in my opinion, with continuous improvements anywhere.

I have been using Tanium for five years.

Tanium is suitable for small and medium businesses at around 5,000 endpoints and under.

I rate Tanium’s support as very good.

Positive

I am still using Tanium within the last 12 months.

I do use the automated patch management with Tanium.

Patching with Tanium, if you’re doing regular patching manually or automated, is going to reduce vulnerability findings.

I think the pricing for Tanium is fair enough for small and medium businesses and enterprise. It's good for multiple kinds of use cases, but I would say it’s better for enterprise.

Overall, I would rate Tanium an eight on a scale of one to ten.

Positive

We primarily use Tanium for patching, focusing on vulnerabilities. Our major goal with Tanium is to patch based on vulnerabilities detected by our other vulnerability tools.

It's a little difficult, however, I get results immediately once I start patching something. When I push a quick update, it's done right away, and I can rescan immediately to confirm completion within minutes. This is a pro because most patching tools take a while to reflect changes, but Tanium updates quickly.

When working with Tanium, there are some older devices that haven't been patched for a long time, and certain patches are not included in Tanium. I have to search outside to download patches, create bundles, and then perform the task. It would be easier if Tanium provided the patches directly. Some other brands provide the patch with a direct download link, which facilitates the process. 

Also, I feel that if there were more detailed documents and remediations readily available online for troubleshooting, especially more up-to-date information, it would be beneficial. Currently, some resources online are very out-of-date.

I have been using Tanium for the last three or four years.

I would rate stability around mid-level. I haven't noticed severe problems, however, don't feel entirely confident in marking it as very stable.

The solution is scalable, and I would rate it seven out of ten on scalability. I haven't faced any significant limitations.

Customer service is good. However, I would appreciate more comprehensive documentation for troubleshooting.

If there was a feature that could group devices with similar problems for troubleshooting, it would be beneficial. 

Overall, I rate Tanium an eight out of ten.

I use the solution in my company for reporting, software delivery, and patching. The tool is similar to SCCM.

The most valuable feature of the solution stems from the fact that it works like SCCM. The fact that it doesn't require on-premises infrastructure is one thing I like about Tanium XEM.

There are some bugs in the product. The tool needs to improve in the area of reporting. Even though the reporting part of the product is powerful, my company has observed that there are some glitches in the reports.

I have been using Tanium XEM for a year and a half.

Stability-wise, I rate the solution an eight out of ten.

Scalability-wise, I rate the solution an eight out of ten.

Around 25,000 people in my company use the product.

The solution's technical support is very responsive. I rate the technical support a nine out of ten.

Positive

Actually, I wasn't involved in the setup or implementation phases of Tanium XEM, so I am not that much aware about it.

The product's installation phase was straightforward.

The solution is deployed on the cloud and on-premises models.

I evaluated products like Workspace ONE, SCCM, and Intune against Tanium XEM. My company chose Tanium XEM.

The real-time visibility offered by the product has impacted our company's IT operations, and I can say that it is a user-friendly or admin-friendly product.

I recommend the product to others since it is a powerful solution. The product is reliable and efficient. The product vendors are helpful, and they try to engage with the customers and improve the product.

In terms of the benefits offered by the product, it is a powerful tool where the vendor offers support to users.

I rate the tool a nine out of ten.

Positive

We use Tanium as an EDR solution for managing end-user devices and servers.

The product is granular and can build complex roles compared to other EDR vendors.

Tanium's dashboard UI could be similar to CrowdStrike.

We have been using Tanium for two and a half years.

The product is stable. I rate the stability an eight out of ten.

I rate the platform's scalability a seven out of ten. It is suitable for medium-sized businesses.

We contacted the technical support team with the help of a third-party vendor. They were able to solve 90% of the cases.

I rate the initial setup process a seven or eight. It takes five days to complete.

The product's pricing differs from region to region depending on negotiations and the number of endpoints.

I advise others to go through the product's documentation. It is very helpful. I rate it an eight out of ten. They could improve the UI.

We use Tanium to deploy applications and for third parties, like Google Chrome which is already in-built in Tanium. We have deployed some packages which we are already using through SCCM, and those packages are what we are using in Tanium to attach those files and make a command line. Installation, uninstallation part, and detection methods are the things that we are using in Tanium.

I would say Tanium is the best tool for vulnerability management. If there is any issue, Tanium is a good tool.

We had some issues with the solution's OS upgrade. We had just downloaded one HP driver through the HP site, and the pack used, like, for more than 1 GB. Now, when I was deploying this package or the machine, its sync was getting so delayed because when I was installing it, I was not able to see the complete status, whether it was installed or not. The aforementioned areas in the solution I faced, especially for the driver, have room for improvement in this section.

I have been using Tanium Version 2.2014 for the past nine months.

This tool is good for vulnerability. But if I talk about the driver issue, some areas need to be improved for the driver and some heavy packages. Tanium basically says to use peer-to-peer connections.

As for my project, there are around six team members using Tanium.

When I was getting issues, there were some engineers from Tanium whom I asked regarding the driver package. They informed me that it would take some time to sync it. So, we cannot confirm on the console whether it is being installed or not. I was not able to see the error code because it was not syncing. That is a point which I notice Tanium. These are the things, which I discuss whenever we are stuck, and then we take help from Tanium when there is any major issue. As for the error message, I know that in Tanium, there are a few log files that we need to monitor. So, that is basically executed.

As for the technical support team, I would rate them six out of ten.

Neutral

As for the initial setup, it is somewhere in the middle, so it's neither easy nor difficult.

My advice to others would be that they should use Tanium. As you see in the market, you will find out that for Tanium, when you compare through its SCCM, there are only a few openings in Tanium. But as you will see, the SCCM market is a huge market.

As a vulnerability tool, I rate Tanium a ten out of ten. If you ask for the applications, it would be six to seven out of ten.

Overall, I rate Tanium a six out of ten.