STIGQter: STIG Summary: Tanium 7.x Operating System on TanOS Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 02 Apr 2025:

The Tanium Operating System (TanOS) must manage excess capacity, bandwidth, or other redundancy to limit the effects of information flooding types of denial-of-service (DoS) attacks.

DISA Rule

SV-254851r1067742_rule

Vulnerability Number

V-254851

Group Title

SRG-OS-000142

Rule Version

TANS-OS-000455

Severity

CAT II

CCI(s)

CCI-001095 - Manage capacity, bandwidth, or other redundancy to limit the effects of information flooding types of denial of service attacks.

Weight

Fix Recommendation

1. Sign in to the TanOS console as a user with the tanadmin role.

2. Enter "A" to go to the "Appliance Configuration" menu.

3. Enter "A" to go to the "Security" menu.

4. Enter "X" to go to the "Advanced Security" menu.

5. Enter "6" to enable DoS protection. The screen updates with an enabled status.

Check Contents

1. Sign in to the TanOS console as a user with the tanadmin role.

2. Enter "A" to go to the "Appliance Configuration" menu.

3. Enter "A" to go to the "Security" menu.

4. Enter "X" to go to the "Advanced Security" menu.

5. If you see "DOS protection: disabled" in the middle of the screen, this is a finding.

Vulnerability Number

V-254851

Documentable

False

Rule Version

TANS-OS-000455

Severity Override Guidance

1. Sign in to the TanOS console as a user with the tanadmin role.

2. Enter "A" to go to the "Appliance Configuration" menu.

3. Enter "A" to go to the "Security" menu.

4. Enter "X" to go to the "Advanced Security" menu.

5. If you see "DOS protection: disabled" in the middle of the screen, this is a finding.

Check Content Reference

Target Key

5491