STIGQter: STIG Summary: Tanium 7.x Application on TanOS Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 02 Apr 2025:

Tanium Comply must be configured to receive SCAP content only from trusted sources.

DISA Rule

SV-254893r960804_rule

Vulnerability Number

V-254893

Group Title

SRG-APP-000039

Rule Version

TANS-AP-000160

Severity

CAT II

CCI(s)

CCI-001414 - Enforce approved authorizations for controlling the flow of information between connected systems based on organization-defined information flow control policies.

Weight

Fix Recommendation

1. Using a web browser on a system that has connectivity to the Tanium Application, access the Tanium Application web user interface (UI) and log on with multi-factor authentication.

2. Click "Modules" on the top banner of the console.

3. Click "Comply".

4. Click the menu on the left side of the interface and then click "Compliance" under "Standards".

5. Delete any compliance benchmarks that come from nontrusted sources.

Check Contents

1. Using a web browser on a system, that has connectivity to the Tanium Application, access the Tanium Application web user interface (UI) and log on with multi-factor authentication.

2. Click "Modules" on the top banner of the console.

3. Click "Comply".

4. Click the menu on the left side of the interface and then click "Compliance" under "Standards".

Verify all imported compliance benchmarks are from a documented trusted source.

If any compliance benchmark is found that does not come from a documented trusted source, this is a finding.

Tanium Comply must be configured to receive SCAP content only from trusted sources.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key