STIGQter: STIG Summary: Tanium 7.x Operating System on TanOS Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 02 Apr 2025:

Tanium Operating System (TanOS) must terminate all network connections associated with a communications session at the end of the session, or as follows: For in-band management sessions (privileged sessions), the session must be terminated after 10 minutes of inactivity; for user sessions (nonprivileged session), the session must be terminated after 15 minutes of inactivity, except to fulfill documented and validated mission requirements.

DISA Rule

SV-254852r970703_rule

Vulnerability Number

V-254852

Group Title

SRG-OS-000163

Rule Version

TANS-OS-000465

Severity

CAT II

CCI(s)

CCI-001133 - Terminate the network connection associated with a communications session at the end of the session or after an organization-defined time period of inactivity.

Weight

Fix Recommendation

1. Access the Tanium Server interactively.

2. Log on to the TanOS server with the tanadmin role.

3. Press "A" for "Appliance Configuration Menu," and then press "Enter".

4. Press "A" for "Security," and then press "Enter".

5. Press "X" for "Advanced Security," and then press "Enter".

6. Press "5" for "Set Menu Timeout," and then press "Enter".

7. Enter a timeout value no greater than "600" seconds, and then press "Enter".

The timeout is not applied until a new login session is started.

8. Type "RR" and press "Enter" to return to the root menu.

9. Press "Z" for "Log out," and then press Enter.

The session will disconnect and the menu timeout will be active at next sign in.

Check Contents

1. Access the Tanium Server interactively.

2. Log on to the TanOS server with the tanadmin role.

3. Press "A" for "Appliance Configuration Menu," and then press "Enter".

4. Press "A" for "Security," and then press "Enter".

5. Press "X" for "Advanced Security," and then press "Enter".

If the "Menu Timeout" setting is "-" for "Current" or "Persistent", this is a finding.

If the "Menu Timeout" is greater than "600" (seconds) for either "Current" or "Persistent", this is a finding.

Vulnerability Number

V-254852

Documentable

False

Rule Version

TANS-OS-000465

Severity Override Guidance

1. Access the Tanium Server interactively.

2. Log on to the TanOS server with the tanadmin role.

3. Press "A" for "Appliance Configuration Menu," and then press "Enter".

4. Press "A" for "Security," and then press "Enter".

5. Press "X" for "Advanced Security," and then press "Enter".

If the "Menu Timeout" setting is "-" for "Current" or "Persistent", this is a finding.

If the "Menu Timeout" is greater than "600" (seconds) for either "Current" or "Persistent", this is a finding.

Check Content Reference

Target Key

5491