The Tanium application database must be dedicated to only the Tanium application.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-253833	TANS-DB-000002	SV-253833r850162_rule		Medium

Description
Failure to protect organizational information from data mining may result in a compromise of information. Data storage objects include, for example, databases, database records, and database fields. Data mining prevention and detection techniques include, for example, limiting the types of responses provided to database queries; limiting the number/frequency of database queries to increase the work factor needed to determine the contents of such databases; and notifying organizational personnel when atypical database queries or accesses occur.

Description

Failure to protect organizational information from data mining may result in a compromise of information. Data storage objects include, for example, databases, database records, and database fields. Data mining prevention and detection techniques include, for example, limiting the types of responses provided to database queries; limiting the number/frequency of database queries to increase the work factor needed to determine the contents of such databases; and notifying organizational personnel when atypical database queries or accesses occur.

STIG	Date
Tanium 7.x Security Technical Implementation Guide	2022-08-24

Details

Check Text ( C-57285r842525_chk )
With the Tanium system administrator's assistance, access the server on which the Tanium database(s) is installed. 1. Access the Tanium Server. 2. Log on to each Tanium Application Server with an account that has administrative privileges. 3. Verify SQL Server Services are not running on both servers. If SQL Server Services are running on either server, this is a finding. Review the Tanium database(s). If databases related to products other than Tanium exist in the Tanium database, this is a finding.

Check Text ( C-57285r842525_chk )

With the Tanium system administrator's assistance, access the server on which the Tanium database(s) is installed.

1. Access the Tanium Server.

2. Log on to each Tanium Application Server with an account that has administrative privileges.

3. Verify SQL Server Services are not running on both servers.

If SQL Server Services are running on either server, this is a finding.

Review the Tanium database(s). If databases related to products other than Tanium exist in the Tanium database, this is a finding.

Fix Text (F-57236r842526_fix)
Move the Tanium database from the server hosting multiple databases for products other than Tanium or remove other product databases co-located with Tanium database(s).