Release Notes Connect (Version 4.12)
Thank you for choosing Tanium. This document is intended to document changes between releases of Tanium Connect.
Important Note
Service account is required to run Connections. Make sure that the Connect database is backed up before upgrading to 4.12.0.
Reputation 5.0 is not compatible with Connect 4.10.5 or earlier. Upgrade to at least Connect 4.11 prior to installing Reputation 5.0.
Tanium Connect Version 4.12.5
Release Date 03/31/2020
New Features
- Tanium Connect now integrates with Tanium Trends to show Connect charts through the Trends initial gallery (Requires Tanium Trends 2.4 or later).
Resolved Issues
- Fix logging issue that incorrectly stated error during possible key rotation
- Fix communication issue with Detect Intel Source destination
- Fix API parameters not working on v1/connectionruns route
- Fix import failure of a newly exported connection
Security Update
This release includes security updates. For details, including affected versions and mitigation information, see the Tanium Support Portal, or contact your TAM.
Tanium Connect Version 4.12.4
Release Date 02/25/2020
New Features
- Import and automatically configure default settings and dependencies for Connect with Tanium Core Platform 7.4.2 or later.
Resolved Issues
- Default column types to unmodified instead of string
- Increase timeouts on installer to prevent timeout errors
Tanium Connect Version 4.12.3
Release Date 02/06/2020
Resolved Issues
- Fix Email data send race condition causing emails not to be sent when the email relay is slow
- Fix Elastic Search and HTTP logging on failure
Tanium Connect Version 4.12.2
Release Date 01/21/2020
New Features
- Add service status endpoint
Enhancements
- Add approver information to action history source
- Improve display of Tanium audit source options
- Improve performance of Tanium audit source
- Improve handling of query parameters
- Improve handling of service account RBAC
Resolved Issues
- Action history now resets data when a connection fails
- Archiving issues with SMTP destination fixed
- Fixed JSON format breaking Detect Events
- Improved trust on first use error communication
- Tanium Audit source no longer re-sends already processed data
- Trust on first use now rejects null certs
Known Issues and Workarounds
- The failure logging for the http and elasticsearch destination says records were sent, even when they weren't
Security Update
This release includes security updates. For details, including affected versions and mitigation information, see the Tanium Support Portal, or contact your TAM.
Tanium Connect Version 4.12.1
Release Date 12/17/2019
Enhancements
- Allow empty string in connection Regex replacements
- Store multiple backups of db rather than overwriting with each install. Also adds a flag on whether to include the backups in the support bundle.
- Add form validation for HTTP destination to ensure "http://" or "https://" exists
- Add support for multiple CA certs
Resolved Issues
- Immediate failover in active/active config
- Improve migration of connection settings
- Prevent connections from being ran or edited before a service account is configured
- Remove duplicated Angular dependency
- Prevent data from being lost in the export of action history connections
- Prevent data from being lost in upgrades to 4.12
- Improve unicode support in connection output
- Restore the HTML format in events
- Stop checking user sessions for old completed connections
- Fix issues with Splunk connections hanging
- Fix upgrade issues on TanOs
- Prevent capital letters from breaking http security validation
Tanium Connect Version 4.12.0
Release Date 11/19/2019
New Features
- Trust On First Use (TOFU) for self-signed certificate validation for the following destinations: HTTP, Socket Receiver, Elasticsearch, HP ArcSight, IBM QRadar, LogRhythm, McAfee SIEM, Splunk. Note that there is no direct migration from connections that used to the skip certificate validation option to automatically trusting the TOFU certificate. You will need to edit your connection and accept the certificate to migrate to the TOFU option.
- Audit source for Tanium platform logs
- Ability to specify number of days to reset New Items Filter
- New Plugin architecture allows sources and destinations to be installed separately from Connect
- Service Account (REQUIRED)
Enhancements
- Simplify configuration of secure connections
- Consistent time, date and Connect variable usage
- Use of common library for securely storing passwords and API tokens
- Update SQL Server destination to more easily support Microsoft Azure
- Add support for variables for S3 bucket names and paths
- Add support for standard strftime variables in file names and paths
- Change Saved Question unmet percentage from a failure to a warning
Resolved Issues
- Fix removal of Reputation Service during Connect install
- Fix AWS S3 CSV data to include headers properly
- Fix HTML format so that it doesn't send a partial document when Saved Question returns no results
- Fix Availability of API Documentation
- Fix socket connections so that they run properly when owned by one user and run by another
- Various UI Fixes
Additional Information
- Event Source no longer supports syslog/cef/leef formats
- Convert Server Information source, Detect destination, Reputation destination, Email destination, HTTP destination to Connect Plugin architecture
- Connect 4.11 and on is compatible with Reputation 5.0
- Remove Virus Total destination deprecated in March 2017 - https://kb.tanium.com/Release_Notes_Connect_(Version_4.1.1)#Tanium_Connect_Version_4.1.1.0035
- Connect Documentation
Known Issues and Workarounds
- Zipped attachments in emails are not working properly. Contents are not nesting properly.
Security Update
This release includes security updates. For details, including affected versions and mitigation information, see the Tanium Support Portal, or contact your TAM.
Supported Tanium Platforms
- Tanium Server 7.2, 7.3, 7.4