Skip to content

II - Mission Support Sensitive

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000454

    <GroupDescription></GroupDescription>
    Group
  • SQL stored queries or procedures installed during Tanium installation must be removed from the Tanium Server.

    &lt;VulnDiscussion&gt;Failure to protect organizational information from data mining may result in a compromise of information. Data storage objec...
    Rule Medium Severity
  • SRG-APP-000429

    <GroupDescription></GroupDescription>
    Group
  • The Tanium Server must protect the confidentiality and integrity of transmitted information, in preparation to be transmitted and data at rest, with cryptographic signing capabilities enabled to protect the authenticity of communications sessions when making requests from Tanium Clients.

    &lt;VulnDiscussion&gt;Without protection of the transmitted information, confidentiality and integrity may be compromised since unprotected communi...
    Rule Medium Severity
  • SRG-APP-000003

    <GroupDescription></GroupDescription>
    Group
  • The Tanium Application Server console must be configured to initiate a session lock after a 15-minute period of inactivity.

    &lt;VulnDiscussion&gt;The Tanium Console, when CAC is enabled, will initiate a session lock based upon the ActivClient or other Smart Card software...
    Rule Medium Severity
  • SRG-APP-000015

    <GroupDescription></GroupDescription>
    Group
  • Tanium Trusted Content providers must be documented.

    &lt;VulnDiscussion&gt;A Tanium Sensor, also called content, enables an organization to gather real-time inventory, configuration, and compliance da...
    Rule Medium Severity
  • SRG-APP-000015

    <GroupDescription></GroupDescription>
    Group
  • Content providers must provide their public key to the Tanium administrator to import for validating signed content.

    &lt;VulnDiscussion&gt;A Tanium Sensor, also called content, enables an organization to gather real-time inventory, configuration, and compliance da...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules