Release Notes Comply (Version 2.10)

Tanium Comply 2.10.945.0000

Release Date: December 14, 2021

Prerequisites

• Tanium Interact 2.7.210 or later.
• Tanium Client Management 1.7 or later.
• Tanium Connect 4.10.5 or later (To customize columns for exports, you must have Connect 5.8.54 or later).
• Tanium Trends 3.6 or later.
• Tanium Discover 3.0 or later.
• Tanium Platform Services 1.6.8 or later (Tanium Core Platform 7.4 or later)
• Tanium Reporting Service 1.3.12 or later (Tanium Core Platform 7.4 or later)
• Tanium RDB Service 1.0.84 or later (Tanium Core Platform 7.4 or later)
• Tanium System User service 1.0.40 or later (Tanium Core Platform 7.4 or later)
• Tanium Platform Services 1.3.339 (Tanium Core Platform 7.3)

Supported Tanium Platforms

• Tanium Server 7.3.314.4250 or later.
• Tanium Server 7.4.1.1939 or later.
• The next planned release of Comply, 2.11, will no longer support Tanium Server 7.3. If you intend to update to Comply 2.11 and are on Server 7.3, you should begin planning to upgrade your server to Tanium Server 7.4.1.1939 or later.

Enhancement

This release includes:

• Changed the minimum value of the Tanium Connect - Comply (Findings) option Batch Size to be 50.

Bug Fixes

• Fixed an issue with creating new low-resource assessments.
• Fixed an issue with getting the following error: "TSE-Error: Error: Microsoft VBScript runtime error: This key is already associated with an element of this collection" in Findings results.
• Fixed an issue with 504 errors appearing on the Findings page.

Tanium Comply 2.10.940.0000

Release Date: November 30, 2021

Prerequisites

• Tanium Interact 2.7.210 or later.
• Tanium Client Management 1.7 or later.
• Tanium Connect 4.10.5 or later (To customize columns for exports, you must have Connect 5.8.54 or later).
• Tanium Trends 3.6 or later.
• Tanium Discover 3.0 or later.
• Tanium Platform Services 1.6.8 or later (Tanium Core Platform 7.4 or later)
• Tanium Reporting Service 1.3.12 or later (Tanium Core Platform 7.4 or later)
• Tanium RDB Service 1.0.84 or later (Tanium Core Platform 7.4 or later)
• Tanium System User service 1.0.40 or later (Tanium Core Platform 7.4 or later)
• Tanium Platform Services 1.3.339 (Tanium Core Platform 7.3)

Supported Tanium Platforms

• Tanium Server 7.3.314.4250 or later.
• Tanium Server 7.4.1.1939 or later.
• The next planned release of Comply, 2.11, will no longer support Tanium Server 7.3. If you intend to update to Comply 2.11 and are on Server 7.3, you should begin planning to upgrade your server to Tanium Server 7.4.1.1939 or later.

Enhancements

This release includes:

• The ability to create Connect connections based on Comply reports.
• Two new sensors, "Comply - CVE Findings - First Found" and "Comply - CVE Findings - Last Found" to be used to track when vulnerabilities were first and most-recently found. Note that to use these sensors in Connect exports, you must first configure them in Interact->Settings->Registration and Collection.
• A new sensor, "Comply - Max Vulnerability Score", for computing the maximum vulnerability score for endpoints.
• The ability to filter the vulnerabilities list to look for specific vulnerabilities or created/modified dates.

Bug Fixes

• Fixed an issue with deleting imported benchmarks.
• Fixed an issue with mismatches between the ‘Comply - Report Age’ and ‘Comply - Report Results Older Than’ sensors.
• Fixed an issue with missing data in the ‘Tanium Comply (Assessment)’ Connect exports.
• Fixed an issue with scheduling a stale assessment removal action for mac scans.
• Fixed an issue with the Comply Report page not displaying the Save button after changing the Content Set.
• Fixed an issue with the Connect Assessment plugin not returning data.
• Fixed an issue with the `Comply - Is Vulnerable` sensor returning false negatives.
• Fixed an issue with the CVE list flyout definitions missing the Last Modified date.
• Fixed an issue with the Comply - Vulnerability Findings Aggregate erroneously returning "No Vulnerabilities."
• Fixed an issue with Delete Stale Reports failing.
• Fixed an issue with the Initial Compliance Findings grid not loading.
• Fixed an issue with TVL Modified Date and Submit Date "ON" Filter not displaying any data.
• Fixed an issue with displaying Computer Groups with apostrophes in their name.
• Fixed an issue with 'Comply - Vulnerability CVE Search' sensor returning errors.
• Fixed an issue where users could save reports to content sets that are not assigned.
• Fixed an issue with '[no results]' showing as an option in the Status Category filter for Findings.
• Fixed an issue where deleting a stale assessment did not remove results from endpoints.
• Fixed an issue with uploading multiple benchmarks at one time.
• Fixed an issue where exporting Vulnerability Findings to email fails.
• Fixed an issue where editing an existing connection causes values to reset to defaults.

Known Issue

• On Windows-based Tanium Module Servers, if you use Tanium Connect, you must stop the Connect service before updating from Comply 2.10.x to Comply 2.10.940. You can restart the Connect service once the upgrade is complete.

Tanium Comply 2.10.908.0000

Release Date: October 7, 2021

Prerequisites

• Tanium Interact 2.7.210 or later.
• Tanium Client Management 1.7 or later.
• Tanium Connect 4.10.5 or later (To customize columns for exports, you must have Connect 5.8.54 or later).
• Tanium Trends 3.6 or later.
• Tanium Discover 3.0 or later.
• Tanium Platform Services 1.3.339 or later.

Supported Tanium Platforms

• Tanium Server 7.3.314.4250 or later.
• Tanium Server 7.4.1.1939 or later.

Enhancements

This release includes:

• Filtering of Comply findings Connect source data by computer group.
• Additional metadata fields (including OVAL-based fields) included in the Comply findings Connect source data.

Bug Fixes

• Fixed an issue in which the vulnerability database recurring update schedule reset to the default value.
• Fixed an issue in which the Comply assessments Connect plugin would not include offline data when the Comply action group was modified.
• Fixed an issue in which the `Comply - Is Vulnerable` sensor would fail on Windows endpoints.
• Fixed an issue where target computer groups were not displayed correctly in the assessment view.
• Improved validation messages when editing an assessment.
• Fixed an issue which prevented vulnerability definitions from updating in scheduled assessments.
• Fixed an issue in which the reporting privileges were pointing to old services name instead of platform services.
• Added the description column to the compliance list page.
• Added the benchmark version to the custom profile import.
• Fixed an issue in which closing the Comply settings screen sent the user back to the homepage.
• Fixed an issue in which Connect jobs using the Connect plugin would use too many resources.
• Fixed an issue in which the Comply-provided report age sensors gave conflicting results.
• Fixed an issue in which the "Distribute Downloads Over (Minutes)" custom setting was being applied inappropriately to some endpoints.
• Improved the rendering of the Comply HTML export report in Firefox.
• Improved minor user interface issues.

Upgrade Notes

• The next planned release of Comply, 2.11, will no longer support Tanium Server 7.3. If you intend to update to Comply 2.11 and are on Server 7.3, you should begin planning to upgrade your server to Tanium Server 7.4.1.1939 or later.

Tanium Comply 2.10.885.0000

Release Date: August 17, 2021

Prerequisites

• Tanium Interact 2.7.210 or later.
• Tanium Client Management 1.7 or later.
• Tanium Connect 4.10.5 or later (To customize columns for exports, you must have Connect 5.8.54 or later).
• Tanium Trends 3.6 or later.
• Tanium Discover 3.0 or later.
• Tanium Platform Services 1.3.339 or later.

Supported Tanium Platforms

• Tanium Server 7.3.314.4250 or later.
• Tanium Server 7.4.1.1939 or later.

Enhancements

• Support for exporting remote vulnerability findings via Tanium Connect jobs.
• A new configurable option for assessments that allows users to control whether network drives are included in scans.
• New controls for the bulk deletion of reports.

Bug Fixes

• Addressed a variety of cosmetic issues in the Comply workbench.
• Improved the handling of column customizations for CVE lists.
• Protected against duplicate report exports appearing in the Exports view.
• Fixed an issue in which findings are missing when filtered using the "All Computers" computer group.
• Prevented attempts to prioritize engines before they have finished uploading.
• Fixed an issue preventing the sorting of assessments by the Next Assessment Date column.
• Fixed an issue in which findings data was not removed after deleting a report.
• Fixed an issue with the Change Selector control when creating a custom profile
• Clarified the representation of file sizes for exported reports.
• Fixed an issue in which Linux endpoints experience a delay installing engines.
• Fixed an issue preventing the creation of the Current Compliance Exposures report for new customers.
• Removed unexpected action groups from assessment targeting choices.
• Fixed an issue with the Overview page handling assessments which have not yet run.
• Fixed an inconsistency in how the Comply user interface displays pass/fail percentages for findings.
• Fixed a logical problem with action group selection and Tanium Connect exports.
• Fixed an issue with importing some custom profiles.

Security Updates

This release includes security updates. Details of the issues, including affected versions and mitigation information, can be obtained within Tanium's Support Portal or by contacting your TAM.

Tanium Comply 2.10.869.0000

Release Date: July 22, 2021

The functions previously contained in reports have been expanded and broken out into three components: assessments, findings, and reports. Use an assessment to deploy standards to endpoints for running checks. The result or output of an assessment run on an endpoint is a finding. Findings can be filtered and sorted using multiple criteria and can be saved as reports. This allows reports to be customized and re-run using any combination of available finding data.

Prerequisites

• Tanium Interact 2.7.210 or later.
• Tanium Client Management 1.7 or later.
• Tanium Connect 4.10.5 or later (To customize columns for exports, you must have Connect 5.8.49 or later).
• Tanium Trends 3.6 or later.
• Tanium Discover 3.0 or later.
• Tanium Platform Services 1.3.339 or later.

Supported Tanium Platforms

Tanium Server 7.4.1.1939 or later.

Improvements

• Improved Overview page user experience and improved Overview page performance.
• New Standards section that allows the user to manage compliance and vulnerability standards.
• New Assessments section improves user experience with creating and managing assessments.
• New Findings section allows a user to filter, sort, and search compliance findings across all compliance assessments and save the set of findings as a report.
• New Reports section allows a user to view the set of findings for their reports.
• New Configuration section allows a user to control what scan engines, JREs, and custom settings are deployed to the endpoints.
• New Connect plugins for Comply that allows the user to export the new compliance findings.
• New Connect plugins for Comply that allows the user to export the new vulnerability findings.
• This version of Comply introduces "dark mode" for the workbench.
• The workbench has been modified to make the user experience be more consistent with other Tanium modules.

Known Issues

Refer to the Troubleshooting section of the Comply User Guide for known upgrade issues.