Release Notes Connect (Version 4.9)

Tanium Connect Version 4.9.2

Release Date 01/08/2019

Resolved Issues

• Restore API RBAC privileges to the "Connect User" role.
• Ensure Connect's logging service does not error if optional metadata is not available.

Security Update

This release includes security updates. Details of the issue including affected versions and mitigation information can be obtained from either Tanium's Support Portal or your TAM.

Tanium Connect Version 4.9.1

Release Date 12/11/2018

Resolved Issues

• Fix writing sensitive credentials for Reputation service providers via the web interface

Tanium Connect Version 4.9.0

Release Date 12/04/2018

Resolved Issues

• Connections from Palo Alto Wildfire to the Detect module no longer fail
• The Connect UI no longer freezes when creating a connection from the Asset module to Elasticsearch
• Socket destinations can once again target internal IPs if allowed by the top-level Connect configuration
• Users no longer see connections displayed if they do not have access to the connection's source or destination
• Fixed occasional SQL Server destination error message "Cannot read property 'getUpdatedConnectionRunStats' of undefined"
• The "Clear" button on New Items Filter now correctly clears learning data and no longer clears columns
• Connection export/import now properly handles exporting and importing new item filter configurations
• SQL Server destination connections no longer create a malformed SQL table if the connection was initially created with a file destination

Enhancements

• The System Status source now includes the "Using TLS" column as "RegisteredWithTLS"
• SQL Server destinations no longer require a destination name
• JSON formatting options are more clear
  • "Enhanced JSON" and "Nested JSON" are now "Group Columns by Sensor"
  • Column customization is hidden if "Group Columns by Sensor" is checked because it supersedes any column customizations
  • "Row Delimiter" now indicates that it is ignored when "Generate Document" is selected
  • "Wrap Data with Source" is now only available if "Generate Document" is selected as it has no effect otherwise
• Connect now includes a cryptographically safe hash of the user session token to uniquely and securely allow more debugging analysis of user session issues
• Tanium session plugin schedules are now only created for users that own a connection
• The audit_text field from the saved_actions_audit table is now available to the Audit Log source
• Connect home page loading spinner is now present until the home page is fully loaded
• The JSON format "Value Escape Regex/Replace" advanced options now apply to nested JSON data
• Connect no longer pings Reputation from the Connect user interface
• Connect now allows users with the Micro Admin RBAC "System Status" privilege to access the System Status source
• Home page configuration now persists across browsers
• Socket destination connections can now allow TLS connections to sockets with a self-signed cert in the chain
• The System Status source user interface now allows setting a value of 0 for the "Computer Registration Interval"
• The Amazon S3 destination can now use a custom endpoint

New Features

• New Connect RBAC privileges
  • connect read all: allow user to view all connections
  • connect write all: allow user to edit all connections
  • connect run: allow user to run their own connections
  • connect run all: allow user to run all connections
• New RBAC Role:
  • Connect Reputation Administrator: configure the Reputation service
• RFC compliant syslog format
• Connect and Reputation now include audit logs in the support bundle that audit user changes

Known Issues and Workarounds

• Reputation service provider sensitive credentials configured via the web interface are not correctly written to the database

Supported Tanium Platforms

Tanium Server 6.5, 7.0, 7.1, 7.2, 7.3

Product Documentation and Resources

• Connect Documentation
• Tanium Product Documentation
• Tanium User Research
• Software Updates and Announcements Signup