The Tanium Operating System (TanOS) must limit the number of concurrent sessions to an organization-defined number for all accounts and/or account types.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-254841	TANS-OS-000095	SV-254841r866064_rule		Medium

Description

Operating system management includes the ability to control the number of users and user sessions that utilize an operating system. Limiting the number of allowed users and sessions per user is helpful in limiting risks related to DoS attacks. This requirement addresses concurrent sessions for information system accounts and does not address concurrent sessions by single users via multiple system accounts. The maximum number of concurrent sessions should be defined based upon mission needs and the operational environment for each system.

STIG	Date
Tanium 7.x Operating System on TanOS Security Technical Implementation Guide	2022-10-31

Details

Check Text ( C-58454r866062_chk )

1. Access the Tanium Server interactively. 2. Log on to the TanOS server with the tanadmin role. 3. Press "A" for "Appliance Configuration Menu," and then press "Enter". 4. Press "A" for "Security," and then press "Enter". 5. Press "P" for "Security Policy," and then press "Enter". 6. Press "M" for "Maximum Concurrent Logins," and then press "Enter". 7. Work with the Tanium Administrator to confirm the number of maximum concurrent users. If the value of "Maximum Concurrent Logins:" is greater than the approved value, this is a finding.

Fix Text (F-58398r866063_fix)

1. Access the Tanium Server interactively. 2. Log on to the TanOS server with the tanadmin role. 3. Press "A" for "Appliance Configuration Menu," and press "Enter". 4. Press "A" for "Security," and then press "Enter". 5. Press P for "Security Policy," and then press "Enter". 6. Press "M" for "Maximum Concurrent Logins," and then press "Enter". 7. Work with the Tanium Administrator to set the number of maximum concurrent users.