Checklist Summary:

The Tanium 7.x Security Technical Implementation Guide (STIG) is intended to provide security guidelines for the protection of the Tanium application and its components, including but not limited to the Tanium application, Tanium Console, Tanium Module Server, Tanium Clients, and Tanium SQL Database. This Tanium 7.x STIG is intended to apply to Tanium 7.4 and beyond. For versions previous to Tanium 7.4, refer to the appropriate Tanium 7.3 or 7.0 STIG. Tanium 7.x is a scalable endpoint security and management system. Its foundation is the Tanium Core. Tanium Core includes basic asset inventory, control, and utilization monitoring capabilities, as well as connectors for integrating with third-party systems. Tanium uses a linear peer-to-peer architecture specifically designed for fault tolerance, transient endpoints, and global wide area network (WAN) segments. It is not a typical peer-to-peer application; only other Tanium endpoints can communicate over the peer-to-peer architecture. The clients communicate with each other over a specific Transmission Control Protocol (TCP) port.

Checklist Role:

• Office Software

Known Issues:

Not provided.

Target Audience:

Not provided.

Target Operational Environment:

• Managed
• Specialized Security-Limited Functionality (SSLF)

Testing Information:

Not provided.

Regulatory Compliance:

DoD Instruction (DoDI) 8500.01

Comments/Warnings/Miscellaneous:

Comments or proposed revisions to this document should be sent via email to the following address: [email protected]. DISA will coordinate all change requests with the relevant DoD organizations before inclusion in this document. Approved changes will be made in accordance with the DISA maintenance release schedule.

Disclaimer:

Not provided.

Product Support:

Not provided.

Point of Contact:

[email protected]

Sponsor:

Not provided.

Licensing:

Not provided.

Change History:

Updated resource per DISA - 8/26/22
updated to FINAL - 9/26/2022
Updated Version, Resources and SHA - 08/08/2024
Updated Resources and Title Version - 04/09/2025
Added New Resources - 08/20/2025
Updated Resources, General - 12/1/2025

Dependency/Requirements:

URL	Description

References:

Reference URL	Description

NIST checklist record last modified on 12/01/2025