Tanium 7.0 STIG Version Comparison

There are 1 differences between versions v1 r1 (Dec. 11, 2017) (the "left" version) and v1 r2 (July 27, 2018) (the "right" version).

Check TANS-SV-000016 was changed between these two versions. Green, underlined text was added, red, struck-out text was removed.

The regular view of the left check and right check may be easier to read.

Title

All installation files originally downloaded to the Tanium Server must be configured to download to a location other than the Tanium Server directory.

Check Content

Access the Tanium Server interactively. Log on with an account with administrative privileges to the server. Run regedit as Administrator. Navigate to HKEY_LOCAL_MACHINE >> SOFTWARE >> Wow6432Node >> Tanium >> Tanium Server. Validate the "DownloadPath" REG_SZ value does not point points to a location off of the Tanium Server directory. If the "DownloadPath" REG_SZ value does not points point to a location off of the Tanium Server directory, this is a finding.

Discussion

Typically, the Tanium Server stores the Package Source Files that it downloads from the Internet and server shares or files uploaded through the Tanium Console in a subdirectory of the server's installation directory called Downloads. To ensure package files are not accessible to non-authorized functions, the files must be re-located to outside of the server's installation directory.

Fix

Access the Tanium Server interactively. Log interactively. Log on with an account with administrative privileges to the server. Configure a directory elsewhere on off of the Tanium server to relocate the installation package files. Run regedit as Administrator. Navigate to HKEY_LOCAL_MACHINE >> SOFTWARE >> Wow6432Node >> Tanium >> Tanium Server. Change the "DownloadPath" REG_SZ value to point to the location of the relocated installation package files. Move the files from the original directory to the location created for the installation package files.