The 1E Tachyon single agent and platform is a remote endpoint management solution designed to significantly improve IT’s ability to support the Work From Anywhere Enterprise. It provides endpoint diagnostics and remediation, end-user experience management and monitoring, and service delivery for ServiceNow ITSM.
N/A
Palo Alto Networks Cortex XDR
Score 8.7 out of 10
N/A
Traps
replaces traditional antivirus with multi-method prevention, a proprietary
combination of malware and exploit prevention methods that protect
users and endpoints from known and unknown threats.
When we are needing to patch workstations for zero-day vulnerabilities or security risks, Tachyon Explorer is our go-to tool to push out those settings quickly. We have a Tachyon server stood up in our DMZ to communicate with the workstations outside of our VPN, so we can push those settings or patches to devices without needing them to attach to our network. It's really nice to be able to communicate with the computers that rarely connect to our corporate network and ensure that they are still protected. We do have the 1E Client installed on all of our internal servers in order to get inventory and licensing information, but we don't typically utilize the Tachyon software on the servers for much else. A different team handles those computers and often requires change management, so expedited changes don't happen often there. Standard deployment and patching tools do the job.
Malware that doesn’t leave files behind has become widely available. Anyone who can afford to reverse this trend should purchase technology. Application whitelisting isn’t for everyone, and Palo Alto Networks Traps can help. Enterprises looking for a low-affected, next-generation solution with high protection should consider it. PAN Traps is a great product at a reasonable price, and I highly recommend it.
They currently don't have all of their products incorporated into the Tachyon web interface, meaning that we need a separate administration console for using their Shopping product.
The 1E Tachyon Exchange is an online repository for common or useful instructions, but it is still a bit lacking. New instructions aren't published very often.
Writing your own custom instructions for Tachyon Explorer has a bit of a learning curve if you aren't already familiar with SQL queries or their SCALE language. There is published documentation for SCALE, but I'd like to see them add a basic functionality course to their online training portal.
1E Tachyon has plenty of features and functionality right out of the box. They offer a Tachyon Exchange web portal where you can go to download new Tachyon product packs as they become available through consulting engagements and customer requests. Sometimes you might need to do something more specific or customized than what is available to everyone, and that's when your own knowledge is put to the test. Being able to write your own SCALE code would be invaluable, but takes a while to learn if you aren't already familiar with SQL, PowerShell, or a few other popular languages. Making it your own can definitely take some work, but it's worth it in the end.
Day to day, Cortex is easy to use when you have no alerts and when an agent upgrade doesn't go south. Alerts are far too "clicky", there's too many steps to drilling down to what actually happened to trigger an alert. Investigating alerts in Cortex takes about 5x longer than it should.
The support we receive from Palo Alto is one of the best aspects of Traps. It is very easy to recommend their support. It seems much easier to connect directly with someone with a deep understanding of the product rather than other companies where you basically have to make an airtight case that it is some kind of non-standard issue that can't be solved with existing documentation. Palo Alto digs deep and helps with advanced troubleshooting to get things working.
Microsoft has good intentions, but they are often late to the table. On more than one occasion, we have seen Microsoft incorporate a new feature into their own products, but it's something that 1E had already been offering for a year or more. By the time Microsoft adds a new feature, it has already been in our 1E toolbox and even then doesn't seem to have all of the additional functionality that we get from the 1E software. Currently, we're starting to see Microsoft's push for endpoint performance analytics, which 1E Tachyon has already done impressively for some time now.
Traps is the slickest interface, easy to use and intuitive rule making, and the rest just didn't quite stack up to the performance level of Traps. McAfee and Kaspersky just hog processor and RAM power. I didn't like the interface and functionality of SentinelOne as much as Traps. Palo Alto really put a lot of time into the development of this software, and had some of the founding fathers of IT Security heading the development process. Can't beat that.
Being able to deploy configuration changes while devices are off-network was a real-life-saver for us during the sudden work-from-home scenarios we faced during the pandemic.
Reclaiming unused software licenses has provided some additional budget to use towards other products, and helps us to justify the cost of what we already have.
Using Experience to proactively troubleshoot performance issues not only reduces the number of help desk tickets but also provides a better work environment for our employees.
