STIGQter: STIG Summary: Tanium 7.x Operating System on TanOS Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 02 Apr 2025:

The Tanium Operating System (TanOS) must limit the number of concurrent sessions to an organization-defined number for all accounts and/or account types.

DISA Rule

SV-254841r958398_rule

Vulnerability Number

V-254841

Group Title

SRG-OS-000027

Rule Version

TANS-OS-000095

Severity

CAT II

CCI(s)

• CCI-000054 - Limit the number of concurrent sessions for each organization-defined account and/or account type to an organization-defined number.

Weight

10

Fix Recommendation

1. Access the Tanium Server interactively.

2. Log on to the TanOS server with the tanadmin role.

3. Press "A" for "Appliance Configuration Menu," and press "Enter".

4. Press "A" for "Security," and then press "Enter".

5. Press P for "Security Policy," and then press "Enter".

6. Press "M" for "Maximum Concurrent Logins," and then press "Enter".

7. Work with the Tanium Administrator to set the number of maximum concurrent users.

Check Contents

1. Access the Tanium Server interactively.

2. Log on to the TanOS server with the tanadmin role.

3. Press "A" for "Appliance Configuration Menu," and then press "Enter".

4. Press "A" for "Security," and then press "Enter".

5. Press "P" for "Security Policy," and then press "Enter".

6. Press "M" for "Maximum Concurrent Logins," and then press "Enter".

7. Work with the Tanium Administrator to confirm the number of maximum concurrent users.

If the value of "Maximum Concurrent Logins:" is greater than the approved value, this is a finding.

Vulnerability Number

V-254841

Documentable

False

Rule Version

TANS-OS-000095

Severity Override Guidance

1. Access the Tanium Server interactively.

2. Log on to the TanOS server with the tanadmin role.

3. Press "A" for "Appliance Configuration Menu," and then press "Enter".

4. Press "A" for "Security," and then press "Enter".

5. Press "P" for "Security Policy," and then press "Enter".

6. Press "M" for "Maximum Concurrent Logins," and then press "Enter".

7. Work with the Tanium Administrator to confirm the number of maximum concurrent users.

If the value of "Maximum Concurrent Logins:" is greater than the approved value, this is a finding.

Check Content Reference

M

Target Key

5491