Skip to content
Log In

Tanium 7.x Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The Tanium Server http directory and subdirectories must be restricted with appropriate permissions.

    Discretionary Access Control (DAC) is based on the notion that individual users are "owners" of objects and therefore have discretion over who should be authorized to access the object and in which...
    Rule Medium Severity
    Show

  • SRG-APP-000328

    Group
    Show

  • The permissions on the Tanium Server registry keys must be restricted to only the Tanium service account and the [Tanium Admins] group.

    Discretionary Access Control (DAC) is based on the notion that individual users are "owners" of objects and therefore have discretion over who should be authorized to access the object and in which...
    Rule Medium Severity
    Show

  • SRG-APP-000328

    Group
    Show

  • The Tanium Server Logs and TDL_Logs directories must be restricted with appropriate permissions.

    Discretionary Access Control (DAC) is based on the notion that individual users are "owners" of objects and therefore have discretion over who should be authorized to access the object and in which...
    Rule Medium Severity
    Show

  • SRG-APP-000383

    Group
    Show

  • Firewall rules must be configured on the Tanium module server to allow Server-to-Module Server communications from the Tanium Server.

    The Tanium Module Server is used to extend the functionality of Tanium through the use of various workbenches. The Tanium Module Server requires communication with the Tanium Server on port 17477. ...
    Rule Medium Severity
    Show

  • SRG-APP-000383

    Group
    Show

  • SRG-APP-000427

    Group
    Show

  • SRG-APP-000516

    Group
    Show

  • Tanium Server directory and subsequent files must be excluded from On-Access scan.

    Similar to any other host-based applications, the Tanium Server is subject to the restrictions other system-level software may place on an operating environment. Antivirus, intrusion prevention sys...
    Rule Medium Severity
    Show

  • SRG-APP-000416

    Group
    Show

  • SRG-APP-000001

    Group
    Show

  • The Tanium "max_soap_sessions_total" setting must be explicitly enabled to limit the number of simultaneous sessions.

    Application management includes the ability to control the number of users and user sessions that utilize an application. Limiting the number of allowed users and sessions per user is helpful in li...
    Rule Medium Severity
    Show

  • SRG-APP-000001

    Group
    Show

  • SRG-APP-000039

    Group
    Show

  • The Tanium documentation identifying recognized and trusted folders for Threat Response Local Directory Source must be maintained.

    Using trusted and recognized indicator of compromise (IOC) sources may detect and prevent systems from becoming compromised. An IOC stream is a series or stream of IOCs that are imported from a ven...
    Rule Medium Severity
    Show

  • SRG-APP-000039

    Group
    Show

  • SRG-APP-000039

    Group
    Show

  • The Tanium documentation identifying recognized and trusted Security Content Automation Protocol (SCAP) sources must be maintained.

    SCAP XML documents validated by the National Institute of Standards and Technology (NIST) are provided from several possible sources such as DISA, NIST, and nongovernment entities. These documents ...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules