STIGQter: STIG Summary: Tanium 7.3 Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 22 Jan 2021:

Any Tanium configured EMAIL RESULTS connectors must be configured to enable TLS/SSL to encrypt communications.

DISA Rule

SV-234107r612749_rule

Vulnerability Number

V-234107

Group Title

SRG-APP-000442

Rule Version

TANS-SV-000037

Severity

CAT II

CCI(s)

• CCI-002422 - The information system maintains the confidentiality and/or integrity of information during reception.

Weight

10

Fix Recommendation

Using a web browser on a system that has connectivity to the Tanium Application, access the Tanium Application web user interface (UI).

Log on with CAC.

Click on the navigation button (hamburger menu) on the top left of the console.

Click on "Connect".

Review the configured Destinations listed.

Select "Email" destination.

Select the Connection found in the lower half of the screen.

Click "Edit" on the top right of the summary page.

Under the "Source and Destination" section, select the "Enable TLS" checkbox under the "Mail Configuration".

Confirm the rest of the data is correct.

Click "Save" at the bottom of the page.

Do this for all Connections configured with an "Email" destination.

Check Contents

Using a web browser on a system that has connectivity to the Tanium Application, access the Tanium Application web user interface (UI).

Log on with CAC.

Click on the navigation button (hamburger menu) on the top left of the console.

Click on "Connect".

Review the configured Destinations listed.

If an "Email" Destination does not exist, this is not a finding.

Select "Email" destination.

Select each Connection found in the lower half of the screen.

Verify "Enable TLS" is "true".

If "Enable TLS" is "false", this is a finding.

Vulnerability Number

V-234107

Documentable

False

Rule Version

TANS-SV-000037

Severity Override Guidance

Using a web browser on a system that has connectivity to the Tanium Application, access the Tanium Application web user interface (UI).

Log on with CAC.

Click on the navigation button (hamburger menu) on the top left of the console.

Click on "Connect".

Review the configured Destinations listed.

If an "Email" Destination does not exist, this is not a finding.

Select "Email" destination.

Select each Connection found in the lower half of the screen.

Verify "Enable TLS" is "true".

If "Enable TLS" is "false", this is a finding.

Check Content Reference

M

Target Key

5259

Comments