Tanium Appliance overview

This guide describes how to deploy Tanium Appliances with Tanium Core Platform roles and how to use the Tanium operating system (TanOS) menus.

Tanium Infrastructure types

There are three primary infrastructure options for deploying the Tanium Core Platform:

  • Hardened physical or virtual Tanium Appliance (on-premise)
  • Tanium Cloud Appliance
  • Windows installation on customer-provided hardware

This version of the Tanium Appliance Deployment Guide contains instructions for the physical and virtual Tanium Appliance to be deployed on-premise. For instructions on cloud-based appliances, use the toggle in the navigation menu to view the Tanium Cloud Appliance version of the Tanium Appliance Deployment Guide.

This version of the Tanium Appliance Deployment Guide contains instructions for the Tanium Cloud Appliance. For instructions on physical and virtual Tanium Appliances to be deployed on-premise, use the toggle in the navigation menu to see the on-premise version of the Tanium Appliance Deployment Guide.

When possible, use a physical, virtual, or cloud-based Tanium Appliance to deploy the Tanium Core Platform. The Tanium Appliance is purpose-built hardware designed for the low-latency and high-throughput needs of the Tanium Core Platform. The Tanium Appliance runs a tuned, hardened Linux-based operating system (OS). Deploying a Tanium Appliance provides the following advantages:

  • Built and tested with specified hardware components that are proven to support the indicated deployment sizes.
  • Easy-to-use TanOS menus to quickly configure and deploy Tanium Core Platform roles.
  • Eliminates challenges or side-effects of OS patch deployments. Tanium tests updates to the OS and provides RPM updates that are simple to install.
  • Eliminates adverse interactions with third-party tools or drivers.
  • Eliminates issues when provisioning service accounts needed by Tanium Core Platform components and solution modules.
  • Eliminates difficulty troubleshooting across components that were designed by multiple vendors. Tanium is the single point of contact for hardware, OS, and application support.
  • Reduces additional licensing costs for OS and database products. TanOS is based on a Linux OS and the Tanium Server role is integrated with a limited access database.
  • Improves Tanium Core Platform performance. The Tanium Core Platform runs even faster without the overhead of most Windows server systems.
  • Saves time. A controlled and consistent Tanium platform environment means high reliability. Your teams can focus on Tanium use cases instead of OS and hardware issues.

Download the Tanium Infrastructure data sheet for an overview of Tanium Infrastructure offerings.

Appliance roles

You can deploy a Tanium Appliance in any of the following Tanium Core Platform roles:

  • Tanium™ Server

    The core server that communicates with clients. The Tanium Server also runs the UI console and API services and communicates with all other platform and solution components, as well as the content.tanium.com servers that host Tanium content packs and Tanium solutions. The Tanium Server depends on a database server that is installed when the Tanium Server role is installed.

  • Tanium™ Module Server

    A dedicated server to run application services and store files for Tanium solution modules. It is installed on a separate Tanium Appliance to prevent intentional or accidental scripts from having a direct impact on the Tanium Server.

  • All-in-One

    Tanium Server, Tanium Module Server, and database server on the same appliance. An All-in-One deployment is supported only for proof-of-concept (POC) deployments.

  • Tanium™ Zone Server

    A server typically deployed in an enterprise DMZ network to proxy traffic between Tanium™ Clients that reside on limited-access networks and a Tanium Server that resides on the trusted core network.

Topology

In an enterprise production deployment, the Tanium Server and Tanium Module Server reside on separate Tanium Appliances.

Figure  1:  Enterprise production or enterprise lab deployment

TanOS menus

TanOS includes a menu interface to guide you through installation, configuration, and maintenance tasks.

TanOS Flexible Menu Search

The instructions in this guide show the canonical navigation steps to complete a task. Alternatively, you can use the TanOS Flexible Menu Search (FMS) feature to navigate.

To access FMS, enter F from the tanadmin (main) menu.

------------------------------------------------------

                >>> tanadmin menu <<< 

         1: Tanium Installation Menu
         2: Tanium Operations Menu
         3: Tanium Support Menu
         4: Status Menu

         A: Appliance Configuration Menu
         B: Appliance Maintenance Menu
         C: User Administration Menu

         P: Password change (current user)
         Q: View End User License Agreement (EULA)

         F: Flexible Menu Search      <---------- 
         @: About this Appliance

         H: Help
         Z: Log out

------------------------------------------------------

For help with FMS, type help and then select the help menu.

        Welcome tanadmin to appliance-156.tam.local 

        TFMS (TanOS Flexible Menu Search)

         Type help for help text

 ------------------------------------------------------

>>> help
         help  TFMS Help  

To navigate with FMS, start typing. Press the Tab key to complete the current word. Use the spacebar to go to a submenu and use the Enter key to select the menu.

        TFMS (TanOS Flexible Menu Search)

         Type help for help text

 ------------------------------------------------------

>>> appliance configuration networking 
                                networking  Appliance Maintenance Networking  

FMS also has shortcuts to some menus. A shortcut is a keyword that navigates directly to the menu. For a list of shortcut keywords, type shortcuts.

        TFMS (TanOS Flexible Menu Search)

         Type help for help text

 ------------------------------------------------------

>>> shortcuts networking 


Alphabetically Sorted Shortcuts :

 about configuration db dns hostname ip ipsec main maintenance name
networking operations power privileged reset restricted routing
support tanadmin tanuser


>>> 
     about      About this appliance  
     appliance  Appliance Menu Items  
     main       Main Menu             
     support    Support Menu Items    
     tanium     Tanium Menu Items     
     status     Status Menu Items     
     shortcuts  Show Shortcut List    
     user       User Menu Items