Virtual Endpoints (VDI & VMs) - Tanium Agent FAQs - Tanium Tech Talks #90

Virtual Endpoints (VDI & VMs) - Tanium Agent FAQs - Tanium Tech Talks #90

May 8, 2024

How do I tune Tanium for virtual infrastructure like VMs and VDI? Many folks who have worked in IT ops are familiar with the struggle of keeping virtual infrastructure properly resourced with memory, disk, CPU, and network. Sometimes it’s a balancing act of hardware, budget, and virtual machines. Now you’re deploying a real time agent on every guest on those virtual hosts, so how can we make sure it doesn’t create a resource storm? Also pick up bonus Windows performance tips from an industry veteran in this behind-the-scenes interview with a Tanium Principal Escalation Engineer.

  • Reduce agent impact without reducing data
  • Use virtual sensors and computer groups to target optimized settings
  • Out-of-the-box settings to reduce load of sensors and packages
  • Module-specific settings for Index, Comply, Threat Response

#informationsecurity #informationtechnology #taniumagentfaqs #virtualization #vm #vdi

All videos in this series
Agent Impact
Virtualized Endpoints

Action Distribute Over Time

Virtualization Client Settings

Golden Image: Preparing the Tanium Client on a virtual desktop infrastructure (VDI) instance

Comply - low resource mode

Threat Response - low resource profile


00:00 Intro

01:14 Meet Jeff

01:57 Issues when not tuned

03:06 Resource storms

03:57 Recent engineering improvements

05:17 Computer groups for virtualized endpoints

06:15 Slower data response

06:43 Default capabilities to help

07:42 Actions: Distribute Over Time

10:16 Built-in client config safeguards

14:42 File Index tuning

17:27 Module-specific tuning

18:15 Comply low resource mode

19:13 Wrap up