Tanium Server files must be protected from file encryption actions.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-234109	TANS-SV-000043	SV-234109r612749_rule		Medium

Description
Similar to any other host-based applications, the Tanium Server is subject to the restrictions other System-level software may place on an operating environment. Antivirus, Encryption, or other security and management stack software may disallow the Tanium Server from working as expected. https://docs.tanium.com/platform_install/platform_install/reference_host_system_security_exceptions.html.

STIG	Date
Tanium 7.3 Security Technical Implementation Guide	2021-12-20

Details

Check Text ( C-37294r610827_chk )
Consult with the Tanium System Administrator to determine the file-level encryption software used on the Tanium Server. Review the settings for the file-level encryption software. Validate exclusions exist which exclude the Tanium program files from being encrypted by the file-level encryption software. If exclusions do not exist, this is a finding.

Fix Text (F-37259r610828_fix)
Implement excluding policies within the file-level encryption software solution to exclude encryption of the Tanium Server program files.