ThreatLocker

Avantages

I've looked into application allow listing several times in the course of my career, and it always seemed to be too difficult to do and require far too much management. ThreatLocker actually figured out how to do this in a way that works. It's still involved, but it's an incredibly well designed product that allows us to do application allow listing, privilege access management for applications, and network and storage control. We have a lot of applications that require admin rights to run (or to update), but with ThreatLocker we can manage which applications can run with elevated privileges and which can't. The application control ensures our users can't install any apps that we haven't approved, which makes it easier for us to ensure we have a consistent environment from user to user and also cuts down on shadow IT. It's really helped us move towards a more secure environment and to implement more elements of Zero Trust.

It's an immense application with a lot of parts and that can be confusing and overwhelming at times, but their support is terrific. They claim to answer all support requests within a minute, and, so far, when we've needed support we've had someone in chat support within a minute. If the support incident requires more than chat support, it quickly gets escalated to a Zoom meeting (and by "quickly" I mean a matter of minutes). We also rely on our Solutions engineer a lot. He's always willing to carve out a meeting time where we can dig into particular aspects of the product and he can walk us through solutions and features in a way that helps us learn to better manage the product and it's features.

All of the folks we've interacted with a ThreatLocker (our account manager, support, our solutions engineer, etc) have been terrific. They know the product is complicated, but they helped us to implement the product in a way that ensured we'd be successful. This isn't a company that sells you a product and walks away. They reach out on a regular basis, which makes me feel like we have a partner in them and not just a software vendor.

I also like ThreatLocker University (their training site) because it has a ton of good content that's targeted to specific parts of the product and is normally broken into 20-30 minute training sessions, so you can do a deep dive into a single area in a short amount of time. I use it a lot if I need a quick refresher on how to manage a feature.

Inconvénients

It's an incredibly complex product and it can be overwhelming sometimes. It also does require a fair amount of maintenance. The maintenance goes down with some time and fine tuning, but it will never be a product where you set it and forget it. But I think the company is aware of that which is why they've built a strong and quick to respond support organization,

Avantages

the "Built-in" Application definitions and Policies...
and
the Behind the scenes management (absorption) of the major OS (Microsoft) update releases - and the same for the major Applications (Adobe).

Inconvénients

the setup of new Administrators has been tricky. Seems to be getting better.

Avantages

ThreatLocker locks the workstations and servers' ability to install new or unapproved software and applications. Its straightforward interface allows users to request approval to install new applications. The protection is true for regular users as well as administrators.

Inconvénients

It can be overwhelming at the beginning to set up and understand - though support is top-notch.

Avantages

its flexibility to meet any use case presented to us. we are always able to find a policy solution.

Inconvénients

you can get lost in there! when dealing with software devleopers or engineers, it can seem to restrictive

Avantages

The Vendor Support has been Fantastic! Their Application Control and Elevation Control has been a great addition to DiD Security Stack! The ability to overwrite Microsoft Windows default UAC with ThreatLocker and give end users more control over apps that are approved to run is a huge help for those tools that require Admin writes just to function.

Inconvénients

The ability to control the Tray settings and the ability to add customer popups to the Request Access popup is my least favorite part of the tool. It's pretty limited and doesn't allow much ability to customization options.

Avantages

ThreatLocker was easy to implement and deloy to our (AAD/Intune) environment, and has thus far been easy to manage. Compared to our previous access control solution, TL is leagues ahead in terms of flexibility and simplicity. Due to TL's not-for-profit pricing, it also coss less than competitor's solution. Our support and account management team have been extremely helpful, answering all queries that we've had. [sensitive content hidden]
in particular has shown exceptional knowledge of the platform and has always been able to provide a solution when asked. Regular updates bring new product features and QoL improvements.

Inconvénients

Platform limitations around use of batch and python scripts, though understandable, have been the main source of contention internally since deployment. The mobile app could also do with additional features to match that of the web portal, though I understand this is planned for future updates.

Avantages

I like that it is a different approach to security. I like that it can be its own security software.

Inconvénients

There is one thing I do not like about the new site. The computers section you can only group by 500 where it was 1000 before.

Avantages

Ease of setup and Deployment.
Robust features, and inclusion of many tools.

Inconvénients

many of the nice features or extra tools cost extra per module such as admin by request etc. Cloud only deployment and no on prem options.

Avantages

I would like to preface this by saying that I am still fairly new to ThreatLocker. However, I have had a very positive experience both in onboarding with [sensitive content hidden] and the application itself. So far, the most used case has been managing application installs for users, which has mostly been effortless.

Inconvénients

The only negative experience I've had so far has been when an application was updated, but ThreatLocker saw this application as a new one post-update. This was mostly a minor inconvenience and methods to make the application accessible to the entire organization again were shared when I brought this up with my representative.

Avantages

Tha ability to quickly secure devices in an environment.

Inconvénients

Initial learning curve is quite high, so it'll require hours of training to get started.

Avantages

Does a great job of whitelisting applications that can be installed and preventing others

Inconvénients

Convincing end users that it is a good thing.

Avantages

Threatlockwe will stop users from clicking links and download and installing unauthorized software.

Inconvénients

There is a steep learning curve, but like any good software it is worth it to learn.

Avantages

The high level of attentive care and support from the onboarding team.

Inconvénients

Really struggle with this Q, only thing I can think of is on occasion the storage policy deployment struggles a bit with allowing USBs. Could just be our own infrastructure though, 1 in 100 (if that) have a problem.

Avantages

It does what it says it will. Good, solid product.

Inconvénients

The learning curve takes a bit to learn it.

Avantages

It is easy to use. User interface for both the client and the admin console are very understandable. I love the "install" mode. It is very easy to add new software to the policies, especially since ThreatLocker comes with many pre-defined policies or it is very easy to create a new.

When you initially install TreatLocker on a a computer or server, you run it in Learn or Monitored mode. Then it creates the policies if they don't already exist.

Inconvénients

I don't really have any negative things to say about it.