There are essentially two problems to solve when dealing with environment variables in OS X. The first is when invoking programs from Spotlight (the magnifying glass icon on the right side of the Mac menu/status bar) and the second when invoking programs from the Dock. In Mac OS X, you can set the environment variables in one of the following files: /.bashrc /.bashprofile /.profile; By default, Mac OS X does not has above files, you need to create it manually. Mac os x set environment variable for application.

Click Download Windows Package, Download Mac Package, or Download Linux Package. Run the appropriate installer package on endpoints to install the client. To obtain the installers for Solaris or AIX, contact Tanium support. For more information about deploying the client using an installer, see: Tanium Client User Guide: Deploying the Tanium.
Tanium Platform already provides a robust custom tagging mechanism that is used extensively to create and maintain computer groups. It allows administrators to attach and query simple, string-based tags to.

We use cookies and Google Analytics to provide the most user-friendly website and continuously improve the user experience. If you continue to visit the site, you agree to the use of cookies and Google Analytics.

Tanium Client For Mac Catalina

Findings (MAC II - Mission Support Public)

Finding ID	Severity	Title	Description
V-67013	High	Common Access Card (CAC)-based authentication must be enabled on the Tanium Server for network access with privileged accounts.	To assure accountability and prevent unauthenticated access, organizational users must be identified and authenticated to prevent potential misuse and compromise of the system.Organizational ..
V-66995	High	The Tanium Console_ProhibitSavedLogin option must be explicitly enabled to prevent console browsers from saving non-CAC logon information.	The Tanium Console, by default, can cache console users' credentials for convenience so that operators are not required to re-enter their passwords when logging back into the console. When this ..
V-67005	High	Role-based system access must be configured to least privileged access to Tanium Server functions through the Tanium interface.	User accessibility to various Tanium Server functions performed via the console can be restricted by User Roles. Those User Roles are: Administrator, Read Only User, Question Author, Action User, ..
V-67085	High	The Tanium Server certificate and private/public keys directory must be protected with appropriate permissions.	If the private key is discovered, an attacker can use the key to authenticate as an authorized user and gain access to the network infrastructure.The cornerstone of the PKI is the private key ..
V-67017	High	Common Access Card (CAC)-based authentication must be enforced on the Tanium Server for authentication for local access with privileged accounts.	To assure accountability and prevent unauthenticated access, organizational users must be identified and authenticated to prevent potential misuse and compromise of the system.Organizational ..
V-66991	Medium	The Tanium Client must ensure the authenticity of communications sessions when answering requests from the Tanium Server.	Authenticity protection provides protection against man-in-the-middle attacks/session hijacking and the insertion of false information into sessions.Application communication sessions are ..
V-66993	Medium	Tanium endpoint files must be protected from file encryption actions.	Similar to any other host-based applications, the Tanium Client is subject to the restrictions other System-level software may place on an operating environment. That is to say that Antivirus, ..
V-67065	Medium	The Tanium Application Server must protect audit tools from unauthorized access.	Protecting audit data also includes identifying and protecting the tools used to view and manipulate log data. Therefore, protecting audit tools is necessary to prevent unauthorized operation on ..
V-66997	Medium	The Tanium Application Server must be configured with a connector to sync to Microsoft Active Directory for account management functions.	By restricting access to the Tanium Server to only Microsoft Active Directory, user accounts and related permissions can be strictly monitored. Account management will be under the operational ..
V-66999	Medium	The Tanium Application Server must be configured to only use Microsoft Active Directory for account management functions.	By restricting access to the Tanium Server to only Microsoft Active Directory, user accounts and related permissions can be strictly monitored. Account management will be under the cog of the ..
V-67033	Medium	SQL stored queries or procedures installed during Tanium installation must be removed from the Tanium Server.	Failure to protect organizational information from data mining may result in a compromise of information.Data storage objects include, for example, databases, database records, and database ..
V-67043	Medium	Public keys of content providers must be validated against documented trusted content providers.	A Tanium Sensor, also called content, enables an organization to gather real-time inventory, configuration, and compliance data elements from managed computers. Sensors gather specific information ..
V-67037	Medium	The Tanium Application Server console must be configured to initiate a session lock after a 15-minute period of inactivity.	The Tanium Console, when CAC is enabled, will initiate a session lock based upon the ActivClient or other Smart Card software.By initiating the session lock, the console will be locked and not ..
V-66975	Medium	The Tanium cryptographic signing capabilities must be enabled on the Tanium Server.	All of Tanium's signing capabilities should be enabled upon install. Tanium supports the cryptographic signing and verification before execution of all Sensors, Questions, Actions, Sensor ..
V-67077	Medium	Firewall rules must be configured on the Tanium Server for Client-to-Server communications.	In addition to the client-to-server TCP communication that takes place over port 17472, Tanium Clients also communicate to other Tanium-managed computers over port 17472. The Tanium environment ..
V-67061	Medium	Tanium Server files must be protected from file encryption actions.	Similar to any other host-based applications, the Tanium Server is subject to the restrictions other System-level software may place on an operating environment. Antivirus, Encryption, or other ..
V-66987	Medium	The Tanium Client - Set Action Lock must be set to OFF during maintenance window timeframes only.	Set Action Lock On will prevent any managed system from executing Tanium generated actions. This functionality is helpful when needing to eliminate systems from taking actions (e.g. patch ..
V-67071	Medium	The Tanium cryptographic signing capabilities must be enabled on the Tanium Server.	All of Tanium's signing capabilities should be enabled upon install. Tanium supports the cryptographic signing and verification before execution of all Sensors, Questions, Actions, Sensor ..
V-67089	Medium	The Tanium Module server must be installed on a separate system.	Unauthorized access to the Tanium Server is protected by disabling the Module Server service on the Tanium Server and by configuring the Module Server on a separate system. When X509 smartcard ..
V-66985	Medium	Tanium endpoint files must be protected from antivirus actions.	Similar to any other host-based applications, the Tanium Client is subject to the restrictions other System-level software may place on an operating environment. That is to say that Antivirus, ..
V-66979