Checklist Summary:

This Tanium 7.3 Security Technical Implementation Guide (STIG) is intended to provide security guidelines for the protection of the Tanium Application and its components, including but not limited to the Tanium Application, Tanium Console, Tanium Module Server, Tanium Clients, and Tanium SQL Database. Tanium 7.3 is a scalable Endpoint Security and Management system. Its foundation is the Tanium Core. Tanium Core includes basic asset inventory, control and utilization monitoring capabilities, and connectors for integrating with third-party systems. Tanium uses a linear peer-to-peer architecture specifically designed for fault tolerance, transient endpoints, and the global Wide Area Network (WAN) segments. It is not a typical peer-to-peer application; only other Tanium endpoints can communicate over the peer-to-peer architecture. The clients communicate with each other over a specific Transmission Control Protocol (TCP) port.

Checklist Role:

• Application Server

Known Issues:

Not provided.

Target Audience:

Parties within the DoD and Federal Government’s computing environments can obtain the applicable STIG from the Information Assurance Support Environment (IASE) website. This site contains the latest copies of any STIGs, SRGs, and other related security information. The address for the IASE site is http://iase.disa.mil/.

Target Operational Environment:

• Managed
• Specialized Security-Limited Functionality (SSLF)

Testing Information:

Not provided.

Regulatory Compliance:

DoDI 8500.01

Comments/Warnings/Miscellaneous:

Not provided.

Disclaimer:

Not provided.

Product Support:

Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil. DISA will coordinate all change requests with the relevant DoD organizations before inclusion in this document. Approved changes will be made in accordance with the DISA maintenance release schedule.

Point of Contact:

disa.stig_spt@mail.mil

Sponsor:

Not provided.

Licensing:

Not provided.

Change History:

Updated to FINAL - 3/25/19
updated status to FINAL - 4/25/19
Updated URLs - 7/12/19
Updated resources per DISA - 1/27/21
null
updated URLs - 1/26/2022

Dependency/Requirements:

URL	Description

References:

Reference URL	Description

NIST checklist record last modified on 01/26/2022