) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Tanium 7.3 STIG Ver 2, Rel 2 Checklist Details (Checklist Revisions)
NOTE
This is not the current revision of this Checklist, view the current revision.
Supporting Resources:
-
Download Standalone XCCDF 1.1.4 - Tanium 7.3 STIG Ver 1, Rel 1
- Defense Information Systems Agency
Target:
| Target | CPE Name |
|---|---|
| Tanium 7.3 | cpe:/a:tanium:tanium:7.3 (View CVEs) |
Checklist Highlights
- Checklist Name:
- Tanium 7.3 STIG
- Checklist ID:
- 896
- Version:
- Ver 2, Rel 2
- Type:
- Compliance
- Review Status:
- Final
- Authority:
- Governmental Authority: Defense Information Systems Agency
- Original Publication Date:
- 02/20/2019
Checklist Summary:
This Tanium 7.3 Security Technical Implementation Guide (STIG) is intended to provide security guidelines for the protection of the Tanium Application and its components, including but not limited to the Tanium Application, Tanium Console, Tanium Module Server, Tanium Clients, and Tanium SQL Database. Tanium 7.3 is a scalable Endpoint Security and Management system. Its foundation is the Tanium Core. Tanium Core includes basic asset inventory, control and utilization monitoring capabilities, and connectors for integrating with third-party systems. Tanium uses a linear peer-to-peer architecture specifically designed for fault tolerance, transient endpoints, and the global Wide Area Network (WAN) segments. It is not a typical peer-to-peer application; only other Tanium endpoints can communicate over the peer-to-peer architecture. The clients communicate with each other over a specific Transmission Control Protocol (TCP) port.
Checklist Role:
- Application Server
Known Issues:
Not provided.
Target Audience:
Parties within the DoD and Federal Government’s computing environments can obtain the applicable STIG from the Information Assurance Support Environment (IASE) website. This site contains the latest copies of any STIGs, SRGs, and other related security information. The address for the IASE site is http://iase.disa.mil/.
Target Operational Environment:
- Managed
- Specialized Security-Limited Functionality (SSLF)
Testing Information:
Not provided.
Regulatory Compliance:
DoDI 8500.01
Comments/Warnings/Miscellaneous:
Not provided.
Disclaimer:
Not provided.
Product Support:
Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil. DISA will coordinate all change requests with the relevant DoD organizations before inclusion in this document. Approved changes will be made in accordance with the DISA maintenance release schedule.
Point of Contact:
disa.stig_spt@mail.mil
Sponsor:
Not provided.
Licensing:
Not provided.
Change History:
Updated to FINAL - 3/25/19 updated status to FINAL - 4/25/19
Dependency/Requirements:
| URL | Description |
|---|
References:
| Reference URL | Description |
|---|---|
| https://iasecontent.disa.mil/stigs/pdf/%28U%29_Tanium_7.3_STIG_V1_Release_Memo.pdf | Tanium 7.3 STIG Version 1 Release Memo |