Release Notes Tanium Server (Version 7.3.314.3409)

Thank you for choosing Tanium.  The following Release Notes document changes between releases of the Tanium Server.
This platform release includes the release of a Windows and Linux Tanium Server.
The previous version can be found here: Release Notes (Version 7.3.314.3364)

Tanium Server for Windows and Linux v7.3.314.3409

Limited Availability Release Date: October 16, 2018.
General Availability Release Date: October 16, 2018.

Special Notes

• Due to security issues against this release of Tanium Server, Tanium strongly recommends upgrading to at least v7.3.314.4324 if you are using this version.

Major Features

• Per Subnet Bandwidth Throttling.
• A new REST API with full equivalency to the existing SOAP API that provides programmatic access to Tanium functionality using JSON and REST conventions and can be used manage access, ask questions, retrieve question results, create sensors, deploy packages, upload files, and much more.
  The Tanium Server REST API Reference can be downloaded from tokens.corp.tanium.com, contact your TAM for access to this documentation.
• Performance improvements for all client to Tanium Server / Tanium Zone Server network interactions.
• Resource and performance improvements for the Zone Server, resulting in significant reduction in resource usage and performance of clients communicating through the Tanium Zone Server.
• Sensor Statistics.

Improvements

• SAML Improvements
  • SP Initiated support
  • Custom SAML provider support
• Ability to migrate content from deleted / removed users
• Server side import API, for scripting product installations
• Auditing Improvements
  • Audit API support
  • Multiple new audit data sources, including module upgrades and modification audit types
  • New RBAC privilege for specialized user access to audit data
• Additional LDAP Filtering support
• Added ability for Zone Server to use different ports for Tanium Client access and Zone Server Hub access
• IPv6 preliminary support (Requires 7.3 client, not yet available)

Security Updates

• This release includes security updates. Details of the issues, including affected versions and mitigation information, can be obtained within Tanium's Support Portal or by contacting your TAM.

Bug Fixes

• Fixed a problem where the Tanium Server crash on Windows could crash under load.
• Fixed a Question Parser problem where the maxAge modifier was removed from select clause Sensors.
• Fixed an issue seen on drill-downs in the handling of columns for Sensors with multi-character column separators.
• The Tanium TDownloader is now able to trigger seeding of Windows root Certificate Authorities for download URLs.
• Fixed a condition which would cause the display of duplicate client names in the System Status page.
• Modified the database upgrade phase of the Tanium installer to run using the Tanium Service account credentials .
• Fixed a problem where Question results returning [no results] were not being tallied properly.
• Fixed a condition where clients that were registered and answering questions would not appear in the System Status page.
• Fixed a REST API bug where enumerating Packages could fail with the message InvalidTiimeT when the package has pending downloads.
• Fixed a bug in the REST API where updating a Global Setting without a value would delete the current existing.
• Corrected a problem in the synchronization of the number of results and percentage complete in the Question result grid
• Fixed sorting by the Question column in the Question History display.
• Changed the behavior of per-column filters to make "is greater than or equal" and "is less than or equal" honor equal values.
• The REST API now allows retrieving Sensors by their name hash.
• Reduced the memory usage on the Tanium Server when handling thousands of concurrent client connections.
• The REST API now supports fetching  sensor_stats objects.
• The REST API now supports retrieving  effective_content_set_privileges   by   user_id .
• Added support for IPv4 and  IPv6 versions of the  zs_address_mask parameter in Zone Servers.
• SAML settings now support on /  off style values.
• The Tanium Server will now create   /info/diagnostics_*   files by default.
• Fixed the canonicalization of some XML namespaces which affected PingFederate SAML authentication.
• Column filtering using the  having clause now works as expected for parameterized Sensors.
• Fixed an issue when returning SOAP ResultData that caused the estimated_total value of a result set to be set to zero.
• Tightened the validation of JSON in all REST API routes.
• Fixed an error in the creation of the default value for the   site_throttles_use_local_ip   Global Setting.
• Added support to the REST API for  saved_questions_questions call.
• Added auditing support for plugin_schedule objects.
• Added controls to the closing of lingering reflection connections: leader_shutdown_period_seconds   and   leader_keep_alive_interval_seconds .
• Fixed an issue related to the coherence in naming  cache_filers in the REST API to match the SOAP API.
• Improved the performance in accepting new client connections on the Windows operating system.
• Fixed the value of audit_history_size as a SOAP option to limit the number of audit history records returned.
• A failed startup of the Tanium Server binary from the command-line will now produce diagnostic output messages.
• The Import API now honors Action approval when Scheduled Actions are imported.
• Removed misplaced LDAP synchronization messages from the Tanium Server log0.txt  log.
• Changed the Import API for   saved_action   to always put Actions in "Default" Action Group.
• Fixed an interaction with the database where a SOAP request of a Scheduled Action by ID would fail to retrieve it.
• Fixed an installer condition where the Tanium Server binary would fail to create the tanium and  tanium_archive databases on Microsoft SQL.
• Fixed a condition where a Tanium Server failed to serve the System Status page when running in an Active-Active configuration.

Known Issues and Workarounds

• N/A.

Additional Information

This version of Tanium Server shipped with Common UI Components version 1.3.1.0450.

Product Documentation and Resources

• Tanium Product Documentation
• Tanium User Research
• Software Updates and Announcements Signup