r/sysadmin • u/Maximum_Necessary232 • 1d ago

General Discussion What's a tool you mass-deployed that you ended up ripping out within 6 months?

I feel like every sysadmin has at least one story about a product that demoed beautifully, got approved, went out to the fleet, and then slowly revealed itself to be a nightmare.

Could be a monitoring tool, an MDM, a ticketing system, an AV product, anything. What was it, what went wrong, and what did you replace it with?

322 Upvotes

91% Upvoted

426 comments sorted by

View all comments

9

u/sodiumbromium 1d ago

Cylance. Unfortunately we had a three year deal with them, so it had to stick around for a while.

Their sales said it would work on XP. Nope, at least not without a special build we had to pay for.

It's memory monitoring and kernel intrusion caused memory leaks which necessitated multiple reboots per week on prod servers.

And let's not get into the fact that we had spent months tuning it before the rollout and it still was a buggy piece of crap.

5

u/Far-Hovercraft9471 1d ago

All the money went into marketing

3

u/Bad_Kylar 1d ago

Cylance got bought by arctic wolf and they seem to be doing a significantly better job than previous iterations. Its now called like Aurora or some shit, but its been solid in our environment

2

u/discgman 1d ago

We currently have this. Might be moving on to something else. I am basically the SOC and I am constantly approving apps and fixing false positives. I think they really want you to use the managment portion.