Release Notes Comply (Version 2.1)

Tanium Comply 2.1.5.0007

Release Date: June 18, 2019

Bug Fixes

• Fixed an issue where the deployment status Saved Question was re-issued too frequently under specific conditions.
• Fixed an issue where Vulnerability exports failed to complete for large volumes of results.
• Fixed an issue where Vulnerability CSV exports were formatted incorrectly.
• Fixed an issue where one-time reports could be re-executed if their Saved Action was deleted.
• Fixed an issue where drilling into a specific CVE asked a Question incorrectly.
• Fixed an issue where custom sources were processed even if they contained no changes.

Tanium Comply 2.1.4.0010

Release Date: May 28, 2019

Bug Fixes

• Fixed an issue where Vulnerability reports could fail to display under specific load conditions.
• Fixed an issue where Vulnerability reports' top vulnerable machines displayed incorrectly on IE11.
• Fixed an issue where Vulnerability exports could contain duplicate CVE information.
• Fixed an issue where Compliance reports could not be created with only Custom Checks.
• Fixed an issue where detailed CVE information was omitted from Remote Vulnerability exports.
• Fixed an issue where editing a Comply Connect connection always selected the first report listed.

Tanium Comply 2.1.3.0004

Release Date: May 7, 2019

Bug Fixes

• Fixed an issue where Vulnerability reports would not display results if any endpoints were still running the scan.
• Fixed an issue where Vulnerability reports would not display results if reports contained unknown CVEs.
• Fixed an issue where Vulnerability reports could create too many requests and overwhelm the Comply service.

Other Enhancements

• Added support for CIS-CAT engine version 3.0.57.

Tanium Comply 2.1.2.0008

Release Date: April 30, 2019

Bug Fixes

• Fixed an issue where reports with large result volumes showed inconsistent completion progress.
• Fixed an issue where Vulnerability reports could remain in the publishing state indefinitely.

Other Enhancements

• Added support for CIS-CAT engine version 3.0.56.
• Changes to default configuration to improve memory allocation and stability:
  • Reduced default report loading 'question_page_size' setting to 250.
  • Increased memory limit for Comply service to 4GB.

Tanium Comply 2.1.1.0005

Release Date: April 23, 2019

Bug Fixes

• Fixed an issue where Vulnerability reports could not be created when using a custom mapping.
• Fixed an issue where Amazon Corretto JRE version 8.212 could not be uploaded.
• Fixed an issue where 'Scan in Progress' state was not properly displayed for reports.
• Fixed an issue where report statistics could fail to load if Remote reports with no results were present.

Tanium Comply 2.1.0.0169

Release Date: April 16, 2019

New Features

• Enriched Vulnerability Reporting UI
  • More complete information displayed for Vulnerabilities reported by endpoints.
  • New information: Remediation, Criteria, Related CVEs, Created & Last Modified dates, External Links.
  • Bubble chart visualization of Top 10 missing patches (by affected endpoints).
  • HTML & CSV exports also include additional CVE details.

• Patch Integration
  • Link directly into Patch when a CVE has an associated KB that Patch contains.

• Custom Profile editing
  • Custom Profiles can now be edited and their associated reports can be automatically updated.
  • Allows for adoption of new Benchmarks without the need for new Compliance reports!

• Support for Tanium Comply as a Connect Source
  • Added the necessary services to support a new Tanium Comply connect source
  • Note: Requires an update to the Tanium Connect module (version TBD)

Other Enhancements

• Improved distribution of Tanium Vulnerability Library (TVL)
  • TVL is now distributed as a pre-built database instead of raw OVAL XML.
  • This avoids the expensive database build process on the Tanium Module Server.

• Removed ability to create Remote Open Ports reports
  • Obsoleted by the addition of Remote Vulnerability reports.
  • Support for Remote Open Ports will be completely removed in an upcoming release.

Bug Fixes

• Fixed an issue where upgrading modules on TanOS could result in an inconsistent file structure.
• Fixed an issue where users were unable to switch from Oracle JRE to Amazon Corretto JRE on Linux endpoints.
• Fixed an issue where deploying the Amazon Corretto JRE to Linux/Mac endpoints could fail with no error logged.
• Fixed an issue where vulnerability aggregate calculations could fail on Ubuntu 18 under specific conditions.
• Fixed an issue where Vulnerability Exports would fail with when the report had no results.
• Fixed an issue where the Compliance report exports Summary option was ignored.
• Fixed an issue where expanding a report in Chrome could automatically open the detail report view.
• Fixed an issue where creating Vulnerability Reports resulted in an unnecessary delay in showing the results view.
• Fixed an issue where Comply was not respecting Custom Profiles when running STIG Benchmarks.
• Fixed an issue where Vulnerability report CSV exports contained unnecessary extra white space.
• Fixed an issue where Compliance assessment assumed it ran even if an error had occurred.
• Fixed an issue where removing advanced settings from deployment didn't remove existing endpoints settings.
• Fixed an issue where Discover Scan detection was not distinguishing between NMap scan methods.
• Fixed an issue where a race condition could case Report update to fail with 'another publish job is running' message.
• Fixed an issue where Ubuntu Advisory links were broken due to changes in the Ubuntu advisory URLs.
• Fixed an issue where Aggregate result chart showed as empty when results are below 1%.

Supported Tanium Platforms

Tanium Server 7.0, 7.1, 7.2, 7.3

Product Documentation and Resources

• Tanium Comply User Guide
• Tanium Product Documentation
• Tanium User Research
• Software Updates and Announcements Signup