Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-67079 | TANS-SV-000018 | SV-81569r1_rule | Medium |
Description |
---|
In customer environments using the Tanium Zone Server, a Tanium Client may be configured to point to a Zone Server instead of a Tanium Server. The communication requirements for these Clients are identical to the Server-to-Client requirements. https://kb.tanium.com/Port_Configuration_v6.5 |
STIG | Date |
---|---|
Tanium 6.5 Security Technical Implementation Guide | 2016-09-29 |
Check Text ( C-67715r1_chk ) |
---|
Note: If a zone server is not being used, this is Not Applicable. Consult with the Tanium System Administrator to verify which firewall is being used as a host-based firewall on the Tanium Zone Server. Access the host-based firewall configuration on the Tanium Zone Server. Validate a rule exists for the following: Port Needed: Tanium Clients to Zone Server over TCP port 17472. If a host-based firewall rule does not exist to allow TCP port 17472, bi-directionally, from Tanium Clients to the Tanium Zone Server, this is a finding. |
Fix Text (F-73179r1_fix) |
---|
Configure host-based firewall rules as required, to include Tanium Clients to Zone Server over TCP port 17472. |