Review the requirements before you install and use Reveal.
In addition to a license for the Reveal product module, make sure that your environment also meets the following requirements.
|Platform||7.2.314.2831 or later|
|Tanium Client||6.0.314.1540 or later recommended|
|Tanium Module||Tanium™ Trace 2.7.7|
Reveal is installed and runs as a service on the Module Server host computer. The impact on Module Server is minimal and depends on usage.
Reveal supports Windows and macOS endpoints. Up to 2 GB of free disk space is required.
Specific ports and processes are needed to run Reveal.
The following ports are required for Reveal communication.
|Module Server||17444||Inbound||Connecting to the Module Server for live connections to endpoints.|
If security software is in use in the environment to monitor and block unknown host system processes, your security administrator must create exclusions to allow the Tanium processes to run without interference.
|Module Server||<Tanium Module Server>\services\ProductName\node.exe|
The Trace Live Connections Write permission is required for any user to make direct connections to endpoints to investigate rule matches.
Provide the Bypass Action Approval Advanced Role to the Trace Analysis Content Set so that Trace users can make Live Connections to endpoints without having to go through action approval and still require approval on all other actions.
Last updated: 1/16/2019 11:56 AM | Feedback