Tanium Asset

Tanium Asset provides an inventory of hardware and software assets including servers, laptops, and desktops for thorough insight.

Asset Types Fetched

• Devices, Software, SaaS Applications

Before You Begin

Ports

• TCP port 443: REST API

Authentication Methods

• User Name/Password
• API Token ID/API Token

Permissions

The following Module permission is required:

• Asset Report Read

To assign the permission to the value supplied in User Name:

1. Log in to the value supplied in Hostname or IP Address with an account that has the permissions necessary to edit users.
2. Go to the Administration > Users page.
3. Select the value supplied in User Name from the list of users and click View User.
4. Go to Roles and Effective Permissions > User Administration and click Edit Roles.
5. Under Role Management, go to Assign Roles > Grant Roles. Then, click Edit.
6. In the Edit Grant Roles dialog window, select Asset Report Reader and click Save.
7. Back on the Assign Roles page, click Show Preview to Continue.
8. Click Save and Continue.
9. The User Administration page should now look like this:

Verifying Permissions

1. Login to Tanium Asset with the values supplied for User Name and Password.
2. Go to Asset > Reports.
3. Under Asset Reports, click the All Assets report to verify the permission was assigned properly.

Additional Setup

Creating an API Token

An API Token that is bound to a dedicated Axonius persona is mandatory to connect to a Tanium Cloud instance. To create this token, follow the steps in Managing API Tokens.

Important Guidelines:

• The default persona to which the API Token is bound is the Default persona. You need to create an Axonius-dedicated persona and bind the token to this persona.
  1. Log into Tanium as a user with permissions to Create Personas and Edit Users.
  2. From the main Tanium screen, click on your profile icon at the top right corner.
  3. Click Persona.
  4. In the Select a Persona dialog, select your Axonius-dedicated persona from under Other Personas.
  5. Click Apply.
• The API token must have the Token - Use permission, which is required to send requests to Tanium Cloud for new API tokens. To assign this permission, go to Administration > Permissions > API Tokens, then select the relevant token and permission.
• In the Create API Token dialog:
  • It is recommended to set the value of Expiration to 365 (the maximum allowed).
  • Under Trusted API Addresses, enter the edge URL(s) of your Axonius instance. You can enter 0.0.0.0/0 for testing or troubleshooting purposes.

Configuring a View

If you are connecting to Tanium 7.5 or higher, it is strongly recommended to use a dedicated Axonius View when fetching assets from the Tanium Asset module. See Configuring Views for more information.

Important Guidelines:

• In the Select Columns from Asset Tables section, select the machine attribute you want to include in Axonius. Axonius accepts the following attributes:

  • Asset ID, Computer Name, Serial Number, OS Platform, Operating System, Service Pack, Manufacturer, IP Address, Username, Created Date, Updated Date, Source ID

    
    

Connecting the Adapter in Axonius

To connect the adapter in Axonius, provide the following parameters:

Required Parameters

1. Hostname or IP Address - The Hostname or IP address of the Tanium server that Axonius can communicate with via the required Ports. This adapter supports both on-premise and Tanium Cloud instances. When connecting to a Tanium Cloud instance, "-api" must be added to the end of the subdomain of your Tanium Cloud instance. For example: domain.cloud.tanium.com must be entered as domain-api.cloud.tanium.com.
2. User Name or API Token ID AND Password or API Token - The credentials for a user account that has the Required Permissions to fetch assets.
   • If you’re authenticating with an API Token, follow these steps:

     1. In Tanium, go to Administration > Permissions > API Tokens. This page displays attributes of valid API tokens.

     2. Select the relevant API token in the grid and click View Token.

     3. Copy the token's ID from the ID column, and paste it into the User Name or API Token ID Axonius field. Note that the ID column might be hidden by default.

     4. Copy the token value and paste it into the Password or API Token Axonius field.

        📘

        Note

        You can see the token value in the Tanium console only within 5 minutes after its creation. If you wait longer than that, or refresh the page, or navigate to another page in the console - you will no longer be able to see it.

Optional Parameters

1. Name or ID of View - The name or ID of the a View in Tanium Asset used to fetch assets.
2. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
3. HTTPS Proxy - Connect the adapter to a proxy instead of directly connecting it to the domain.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

📘

Note

Advanced settings can either apply to all connections for this adapter, or to a specific connection. Refer to Advanced Configuration for Adapters.

1. Number of assets to fetch per page (required, default: 200) - Control the number of assets that are fetched per page.
2. Number of seconds to wait in between each page fetch (required, default: 1) - Control the number of seconds to wait in between each page.
3. Devices to exclude by host name (optional) - A comma-separated list of device host names to exclude.
4. Devices to exclude by model (optional) - A comma-separated list of device models to exclude.
5. Devices to exclude by domain (optional) - A comma-separated list of device domain names to exclude.
6. Populate Dynamic Attributes (optional) - Dynamically create fields in Axonius for all attributes returned by Tanium Asset.
   • If enabled, adapter specific fields will be dynamically created in Axonius for all attributes returned for each asset with the appropriately mapped type as defined in Tanium.
   • If disabled, adapter specific fields will not be dynamically created in Axonius.
7. Add running services to installed software (optional) - Select to make ci_running_services visible and queryable.
8. Round RAM memory to the closest power of 2 - Select this option to round the Total RAM (GB) field to the closest power of 2. Example: 14GB is presented as 16GB.
9. Deduplicate devices - Select this option to deduplicate devices.
10. Remove SIU from installed software - Select this option to filter out all software with the source “SIU”.
11. Parse Installed Software: Uninstall String - Select this option to parse the uninstall_string field from raw data to table view for the Installed Software table on assets in the Software module.

📘

Note

To learn more about Adapter Configuration tab advanced settings, see Adapter Advanced Settings.

Related Enforcement Actions

• Tanium - Create Action

Version Matrix

This adapter has only been tested with the versions marked as supported, but may work with other versions. Please contact Axonius Support if you have a version that is not listed and it is not functioning as expected.

Asset Module Versions

Modules within Tanium have their own version, which is separate from the platform version.