Tanium Cloud Release Notes Core Content SSL/TLS Server Audit

Important

• The Core Content - SSL/TLS Server Audit content is deprecated and will no longer receive new improvements. This content will be removed in a future release.

• Usage of this content on non-windows endpoints requires that the 'lsof' package be present on the endpoint.
• Any Scheduled Actions associated with these packages will need to have targeting updated after each update to the Core Content SSL / TLS Server Audit package. The default action group targeting will change to No Computers.

Release Date: October 8, 2024

Improvements

• Updated to support Python 3.12 runtime
• Fixes an issue with the exclusions.txt not being honored by the SSL Server Audit Package.

Release Date: November 28, 2023

Improvements

• Implemented miscellaneous bug fixes, performance enhancements, and supportability improvements.

Release Date: July 19 2023

Fixes

• Fixes an issue where actions were unable to detect the SSL audit database.

Release Date: June 27 2023

Fixes

• Fixes an issue where supporting package files were not available on the client.
• Fixes an issue where trusted certificates were displaying as unauthorized.

Release Date: April 25, 2023

Important Notes

• This version of SSL/TLS Server Audit content removes support for AIX and Solaris

Improvements

• Adds performance improvements for SSL content at runtime
• Adds removal of unused content artifacts located on the endpoint

Fixes

• Fixes an issue where the data fails to return in the sensor SSL Server Certificate Subject sensor

Release Date: Feb 3, 2023

Improvements

• Improved port exclusions functioning
• Enabled reissue for SSL Server Audit Tools Install State

Release Date: Dec 20 2022

Improvements

• Improved sensor performance and description for SSL Server Protocols sensor
• Updated python version
• Internal efficiency updates server audit tooling

Fixes

• Port exclusions can now be added without needing to run SSL Content beforehand
• SSL audits now handles sockets more efficiently
• Maintain port exclusions across updates to endpoint tooling

Release Date: August 8 2022

Fixes

• Resolved an error causing SSL Server Audit Tools Required sensor to fail on Windows endpoints

Release Date: August 3 2022

Improvements

• SSL Audit Deploy packages will now preserve existing exclusions in an overwrite scenario

Fixes

• SSL Server Certificate Expiry sensor no longer inaccurately returns No Results from Linux endpoints
• fixed a Python traceback error when trusted certificates are found. Affected sensors: SSL Server Certificate Details, SSL Server Certificate Details - Exclude Tanium, SSL Server Certificate Details - Exclude Ports, and SSL Server Enhanced Certificate Details
• Resolved 'add-exclusions' error in SSL Server Audit Add Port Exclusions package
• Resolved behavior between Risk and Core Content distribution methods for this content

Release Date: May 24, 2022

Improvements

• Sensor descriptions are now provided

Fixes

• Corrected path conflict that prevented packages from working. Affected packages: SSL Server Audit - Windows, SSL Server Audit - Non-Windows, SSL Server Audit Add Port Exclusions - Windows, SSL Server Audit Add Port Exclusions - Non-Windows, , SSL Server Audit Delete Port Exclusions - Windows, , SSL Server Audit Delete Port Exclusions - Non-Windows, SSL Server Audit Deploy - Windows, SSL Server Audit Deploy - Non-Windows, SSL Server Audit Drop Tables - Windows, SSL Server Audit Drop Tables - Non-Windows, SSL Server Remove Tools - Windows, SSL Server Audit Remove Tools - Non-Windows
• SSL Server Audit Python Exists sensor now correctly identifies TPython.exe
• Corrected package input parameter in SSL Server Audit Add Port Exclusions package
• Corrected intermittent TypeError failures. Affected sensors: SSL Server Tools Audit, SSL Server Audit Age, SSL Server Audit Port Exclusions, SSL Server Audit Python Exists, SSL Server Audit Tools Required, SSL Server Certificate CA Short Name, SSL Server Certificate Details, SSL Server Certificate Details - Exclude Tanium, SSL Server Certificate Details Exclude Ports, SSL Server Certificate Expiry, SSL Server Certificate Expiry - Exclude Tanium, SSL Server Certificate Expiry Exclude Ports, SSL Server Extended Key Usage, SSL Server Certificate Issuer, SSL Server Certificate Key Usage, SSL Server Certificate Signature Algorithm Details, SSL Server Certificate Subject, SSL Server Cipher Suite, SSL Server Enhanced Certificate Details, SSL Server Key Exchange, SSL Server Protocols, SSL Server Root Certificate Authority

Release Date: February 9, 2022

Improvements

• SSL Server Certificate Details - Exclude Tanium, SSL Server Certificate Expiry - Exclude Tanium, SSL Server Certificate Details Exclude Ports, and SSL Server Certificate Expiry Exclude Ports sensors added to allow excluding Tanium certificates
• SSL Server Audit Add Port Exclusions [Non-Windows], SSL Server Audit Add Port Exclusions [Windows], SSL Server Audit Delete Port Exclusions [Non-Windows], SSL Server Audit Delete Port Exclusions [Windows], SSL Server Audit Drop Tables - Windows, and SSL Server Audit Drop Tables - non Windows packages updated to use Python 3

Improvements

• improvements to cmd.exe usage

Release Date: August 27, 2021

Security Updates

• This release includes security updates. Details of the issues, including affected versions and mitigation information, can be obtained within Tanium's Support Portal or by contacting your TAM.

Release Date: May 19, 2021

Improvements

• Production release for use in Tanium as a Service

Product Documentation and Resources

• Solution Documentation is at SSL TLS Server Audit Documentation
• Please work with your Tanium TAM in order to most effectively use this content.
• Tanium Product Documentation
• Tanium User Research
• Software Updates and Announcements Signup