STIGQter STIGQter: STIG Summary: Tanium 7.x Application on TanOS Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 02 Apr 2025:

Firewall rules must be configured on the Tanium Zone Server for Client-to-Zone Server communications.

DISA Rule

SV-254907r1043177_rule

Vulnerability Number

V-254907

Group Title

SRG-APP-000142

Rule Version

TANS-AP-000365

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

1. Consult with the personnel who maintain the Enterprise Security Suite to configure host-based and network firewall rules to allow the following:

1A. Tanium Clients or Zone Clients over TCP port 17472, bi-directionally.

Check Contents

Note: If a Zone Server is not being used, this is Not Applicable.

1. Consult with the Tanium System Administrator to verify which firewall is being used as a host-based firewall on the Tanium Zone Server.

2. Access the host-based firewall configuration on the Tanium Zone Server.

3. Validate a rule exists for the following:

3A. Port Needed: Tanium Clients to Zone Server over TCP port 17472, bi-directionally.

If a host-based firewall rule does not exist to allow TCP port 17472, bi-directionally, from Tanium Clients to the Tanium Zone Server, this is a finding.

Vulnerability Number

V-254907

Documentable

False

Rule Version

TANS-AP-000365

Severity Override Guidance

Note: If a Zone Server is not being used, this is Not Applicable.

1. Consult with the Tanium System Administrator to verify which firewall is being used as a host-based firewall on the Tanium Zone Server.

2. Access the host-based firewall configuration on the Tanium Zone Server.

3. Validate a rule exists for the following:

3A. Port Needed: Tanium Clients to Zone Server over TCP port 17472, bi-directionally.

If a host-based firewall rule does not exist to allow TCP port 17472, bi-directionally, from Tanium Clients to the Tanium Zone Server, this is a finding.

Check Content Reference

M

Target Key

5492