STIGQter: STIG Summary: Tanium 7.x Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 02 Jul 2025:

The Tanium database(s) must be installed on a separate system.

DISA Rule

SV-253832r1099949_rule

Vulnerability Number

V-253832

Group Title

SRG-APP-000323

Rule Version

TANS-DB-000001

Severity

CAT II

CCI(s)

CCI-002346 - Employs organization-defined data mining prevention techniques for organization-defined data storage objects to protect against unauthorized data mining.

Weight

Fix Recommendation

Move the Tanium database from the Tanium Server or Tanium Module Server to a separate server. Steps to move the Tanium database can be found in vendor documentation.

Check Contents

Note: If the customer is using a Tanium Appliance, this is not applicable.

Consult with the Tanium system administrator to determine the server to which the database has been installed and is configured.

1. Access the Tanium Server.

2. Log on to each Tanium Application Server with an account that has administrative privileges.

3. Verify Tanium Module Service is not running on both servers.

4. Verify SQL Server Services are not running on both servers.

If the Tanium Module Service is running on either server, this is a finding.

If SQL Server Services are running on either server, this is a finding.

If the database is installed on the same server as the Tanium Server or Tanium Module Server, this is a finding.

The Tanium database(s) must be installed on a separate system.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key