I - Mission Critical Public
Rules and Groups employed by this XCCDF Profile
-
SRG-APP-000427
Group -
The Tanium Server certificate must be signed by a DoD certificate authority (CA).
The Tanium Server has the option to use a "self-signed" certificate or a trusted CA signed certificate for SSL connections. During evaluations of Tanium in lab settings, customers often conclude th...Rule Medium Severity -
SRG-APP-000516
Group -
Tanium Server directory and subsequent files must be excluded from On-Access scan.
Similar to any other host-based applications, the Tanium Server is subject to the restrictions other system-level software may place on an operating environment. Antivirus, intrusion prevention sys...Rule Medium Severity -
SRG-APP-000416
Group -
The SSLCipherSuite must be configured to disable weak encryption algorithms on the Tanium Server.
Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data. The application must implement cryptographic modules adhering to the higher standards appr...Rule Medium Severity -
SRG-APP-000001
Group -
The Tanium "max_soap_sessions_total" setting must be explicitly enabled to limit the number of simultaneous sessions.
Application management includes the ability to control the number of users and user sessions that utilize an application. Limiting the number of allowed users and sessions per user is helpful in li...Rule Medium Severity -
SRG-APP-000001
Group -
The Tanium "max_soap_sessions_per_user" setting must be explicitly enabled to limit the number of simultaneous sessions.
Application management includes the ability to control the number of users and user sessions that utilize an application. Limiting the number of allowed users and sessions per user is helpful in li...Rule Medium Severity -
SRG-APP-000039
Group -
The Tanium documentation identifying recognized and trusted folders for Threat Response Local Directory Source must be maintained.
Using trusted and recognized indicator of compromise (IOC) sources may detect and prevent systems from becoming compromised. An IOC stream is a series or stream of IOCs that are imported from a ven...Rule Medium Severity -
SRG-APP-000039
Group -
The Tanium Threat Response Local Directory Source must be configured to restrict access to only authorized maintainers of threat intel.
Using trusted and recognized indicator of compromise (IOC) sources may detect and prevent systems from becoming compromised. An IOC stream is a series or stream of intel that is imported from a ven...Rule Medium Severity -
SRG-APP-000039
Group -
The Tanium documentation identifying recognized and trusted Security Content Automation Protocol (SCAP) sources must be maintained.
SCAP XML documents validated by the National Institute of Standards and Technology (NIST) are provided from several possible sources such as DISA, NIST, and nongovernment entities. These documents ...Rule Medium Severity -
SRG-APP-000039
Group -
The Tanium documentation identifying recognized and trusted Open Vulnerability and Assessment Language (OVAL) feeds must be maintained.
OVAL XML documents are provided from several possible sources such as the Community Intercomparison Suite (CIS) open-source repository and vendor/third-party paid repositories. These documents are ...Rule Medium Severity -
SRG-APP-000039
Group -
Tanium Comply must be configured to receive Security Content Automation Protocol (SCAP) content only from trusted sources.
SCAP XML documents validated by the National Institute of Standards and Technology (NIST) are provided from several possible sources such as DISA, NIST, and other nongovernment entities. These docu...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.