1

© 2015 Tanium, Inc. All rights reserved. Tanium is a registered trademark of Tanium, Inc. All other brands, products, or service names are or may be trademarks or service marks of their respective owners.

HS-DS-TAN-CR-010416

2020년에는 전 세계적으로 250억 대의 디바이스가 연결될 것으로 예상되며, 이는 1인당 4대의 기기를 보유한 것과 같은 수치입니다. 하지만 현재, 보안 및 IT 운영팀은 기업 수준에서 네트워크에 접속해있는 모든 엔드포인트를 목록화하고, 보안을 확립하며, 관리하는 것은 고사하고, 이들의 존재 여부를 파악하는 것만으로도 많은 어려움을 겪고 있습니다. 

현대의 사이버 공격이 효율성 및 빈도 면에서 위협적인 속도로 진화하고 있음에도 불구하고, 보안팀은 여전히 사용하기 어렵고, 불완전한 데이터를 제공하며, 확장에 많은 비용이 들고, 속도가 너무 느려서 침입이 발생하는 시점에 즉각적인 대응이 어려운, 효과적이지 못한 툴에 의존하고 있습니다. 더 나아가, 발생한 사고 및 문제를 완전히 해결하기 위해서는 종종 보안 및 IT 운영팀이 협력해야 하지만, IT팀은 성능이 떨어지는 독자적인 솔루션을 통해 중요 유지보수 작업 및 많은 시간을 소요하는 컴플라이언스 감사 업무를 처리하느라 항시 바쁜 관계로, 이러한 협력은 실질적으로 거의 불가능합니다. 추후에 커넥티드 디바이스의 수가 걷잡을 수 없이 늘어나고, 또 가뜩이나 오래된 개념을 토대로 설계된 레거시 기술이 속도, 신뢰성, 확장성 면에서 점점 뒤처지게 되는 경우, 기존의 심각한 상황은 더욱더 악화될 것입니다.

태니엄 Core 개요태니엄 엔드포인트 플랫폼은 보안 및 IT 운영팀에게 15초 가시성 및 컨트롤 능력을 제공하여 글로벌 네트워크에서도 모든 엔드포인트들을 보호하고 관리할 수 있게 해주는 최초 이자 유일무이한 기업용 플랫폼입니다. 태니엄 Core는 이러한 태니엄 엔드포인트 플랫폼의 근간을 이룹니다. 태니엄이 특허를 받은 리니어 체인 아키텍처를 기반으로, 태니엄 Core는 각 팀이 자신들의 환경에 대해 그 어떤 질문도 자연어(영어)로 질의하고, 15초 이내에 정확하고 완전한 데이터를 수집하며, 특정 엔드포인트에 대해 유연하게 직접 조치를 취할 수 있게 해줍니다. 태니엄 Core는 기본 자산 목록화, 컨트롤 및 사용현황 모니터링 기능을 제공하며, 그 외에도 즉시 사용 가능한 다양한 커넥터를 제공하여 간편하고 끊김 없이 써드파티 시스템과 연동이 가능합니다. 태니엄 Core는 보안 및 IT 운영팀이 새로운 차원의 비용 효율성을 달성하고, 현대의 공격들로부터 언제나 한 발짝 앞서있기 위해 필요한 속도와 확장성, 그리고 신뢰도를 제공합니다.

Key Features

Ask, Know, Act In 15 Seconds. Even Across A Million Endpoints.Tanium Core provides the backbone technology that enables teams to ask any question, confidently know what is happening right now in their environment and act directly on any or every endpoint for precise remediation and control of any kind in seconds. With its natural language parser, Tanium Core provides its hallmark feature of allowing questions to be structured in plain English, along with a minimal, cost-reducing infrastructure that not only scales to support millions of endpoints, but is also resilient to the e­ects of today’s dynamic environments and capable of navigating around o­line clients or network blockages to preserve high availability throughout the system at all times.

Asset Inventory, Control and Utilization MonitoringTanium Core provides a wide array of general-purpose tools and functionality that allows teams to accurately inventory, control and monitor the utilization of hardware and so�ware assets right out of the box. With Tanium Core, teams can better secure their environment by identifying all unmanaged assets on the network and directly maintain configurations such as firewalls, user permissions and open ports in their desired states for every endpoint. IT teams can also reduce operational ine­iciencies by having the ability to produce up-to-the-second global inventory reports for every asset with detailed information such as CPU consumption, external devices, memory usage and much more, and also reduce costs associated with preparing for sudden audits or reclaim over-licensed so�ware by accurately monitoring where they are being installed and how they are being used over time.

Tanium ConnectTanium Core includes the Tanium Connect integration layer that enriches any number of external or third-party systems like SIEMs, log analytic tools, help desk ticketing systems, CMDBs and big data clusters with up-to-the-second data from every endpoint in the environment. By addressing the narrow focus and timeliness of the data typically available to these systems, Tanium Connect enables shared visibility across both security and IT operations teams, and dramatically reduces the time to resolution for the most complex challenges these teams face in securing and managing endpoints at enterprise scale.

Enterprise Ready• Zone Servers enable every roaming machine, as long as they are connected to the Internet, to stay in contact with the Tanium Endpoint

Platform, allowing them to answer any questions or perform targeted actions as if they were on the enterprise network.

• Kerberos-based authentication leverages existing Active Directory infrastructure, credentialing and security policies.

• Role-based access control (RBAC) regulates access available to di­erent users based on their job responsibility or authority. Users can be limited from asking questions, executing existing actions, authoring new actions, authoring sensors, creating users or assigning management rights. RBAC can even be flexibly set to apply for just a select group of machines.

• 512-bit Elliptic Curve Cryptography is used for queries and actions distributed across the network to prevent man-in-the-middle attacks or other malicious behavior initiated by compromised endpoints.

Tanium Core태니엄 Core는 보안 및 IT 운영팀이 자신의 환경에 대한 그 어떠한 내용도 자연어(영어)로 질의하고, 이에 대해 15초 이내에 정확하고 완전한 데이터를 수집하며, 직접 특정 엔드포인트에 대해 유연하게 조치를 수행할 수 있게 해줌으로써, 기업 내에 산재한 수많은 엔드포인트를 컨트롤, 관리, 보안 확립 가능한 독창적인 능력을 제공합니다.

IoT 시대, 당신의 툴은 대응 가능합니까?

한눈에 보기● 수백만 대의 엔드포인트에 대해

그 어떠한 질문도 자연어(영어)로질의하고, 이에 대해 15초 이내에정확하고 완전한 데이터를 수집

● 모든 엔드포인트에 대해 원하는대로 유연하게 사고 조치 및 다양한 변경 작업 실시

● 기본 제공 기능을 통해 하드웨어및 소프트웨어 자산을 정확하게목록화하고, 컨트롤하며, 사용현황을 모니터링

● 실시간의 풍부한 엔드포인트 데이터를 통해 외부 및 써드파티 시스템을 강화

Data Sheet

태니엄 Core는 태니엄 엔드포인트 플랫폼의 근간을 이룹니다.

2

ABOUT TANIUM태니엄은 전 세계의 가장 큰 기업 및 정부기관들에 수 초 이내에 수백만 대의 엔드포인트를 보호, 컨트롤 및 관리할 수 있는 독보적인 경쟁력을 제공합니다. 이제 보안 및 IT 운영팀은 태니엄이 제공하는 전례 없는 속도와 간편함, 그리고 확장성을 통해 항시 정확하고 총체적인 엔드포인트 상태 정보를 수집하여 현재의 보안위협에 대해 효과적으로 방어할 수 있게 되었을 뿐만 아니라, IT 운영에 있어서도 새로운 차원의 비용 효율을 달성할 수 있게 되었습니다. 더 많은 정보를 위해서는 www.tanium.com을 방문하시거나, 트위터에서 @Tanium을 팔로우하세요.

© 2015 Tanium, Inc. All rights reserved. Tanium is a registered trademark of Tanium, Inc. All other brands, products, or service names are or may be trademarks or service marks of their respective owners.

25 Billion Endpoints By 2020, Are Your Tools Ready For This?It has been forecasted that by 2020, there will be a staggering 25 billion connected devices worldwide – almost 4 devices per person globally. Security and IT operations teams are already struggling to maintain basic awareness of all the endpoints connected to their networks, let alone inventory, secure and manage them at enterprise scale.

As modern cyber attacks continue to evolve at an alarming pace in e iciency and frequency, security teams are still relying on ine ective tools that are di icult to use, provide incomplete data, expensive to scale and too slow to combat intrusions as they are happening. Furthermore, o�entimes security and IT operations teams need to join forces to fully resolve incidents, yet successful coordination is too o�en impossible due to competing priorities with IT teams preoccupied with increasingly time-consuming compliance audits and other critical maintenance tasks using their own failing solutions. This already dire situation will only get worse as the rampant proliferation of connected devices accelerates, and legacy technologies designed with outdated notions continue to deteriorate in speed, reliability and ability to scale.

Tanium Core OverviewTanium Core forms the foundation for the Tanium Endpoint Platform, which is the first and only enterprise platform that empowers security and IT operations teams with 15-second visibility and control to secure and manage every endpoint, even across the largest global networks. By providing Tanium’s patented linear-chaining architecture technology, Tanium Core enables teams to ask any question about their environment in plain English, retrieve accurate and complete data in 15-seconds, and flexibly take any corrective action directly on the endpoint as desired. Tanium Core includes basic asset inventory, control and utilization monitoring capabilities, as well as a variety of ready to use connectors making integrations with third-party systems simple and seamless. Tanium Core delivers the speed, scalability and reliability security and IT operations teams need to realize new levels of cost e iciency and stay a step ahead of modern attacks.

핵심 기능

수백만 대의 엔드포인트에 대해 15초 이내에 질의(Ask), 파악(Know), 조치(Act)태니엄 Core는 보안 및 IT 운영팀이 자신들의 환경에 대해 그 어떤 질문이든 질의하고, 현재 일어나고 있는 상황을 확실히 인지하며, 각각의 모든 엔드포인트에 대해 수초 이내에 직접 정밀한 조치 및 통제를 내릴 수 있는 근간 기술을 제공합니다. 태니엄 Core가 제공하는 자체 자연어 파서(Parser)는 평범한 영어로 질문을 구성할 수 있게 해주며, 최소화된, 비용절감 가능한 인프라는 엔드포인트 수가 수백만 대 규모로 확장되어도 지원이 가능하며, 현대의 다이나믹한 엔드포인트 환경에도 탄력 있게 대응 가능합니다. 이들은 오프라인 클라이언트 및 네트워크 장애를 우회할 수 있으며, 이를 통해 시스템 전반에 대해 항시 고가용성(HA)을 유지할 수 있습니다.

자산 목록 작성, 컨트롤 및 사용 현황 모니터링태니엄 Core는 보안 및 IT 운영팀이 하드웨어 및 소프트웨어 자산을 정확하게 목록화하고, 컨트롤하며, 사용 현황을 모니터링할 수 있게 해주는 다양한 범용 툴 및 기능을 기본 탑재하고 있습니다. 이러한 태니엄 Core를 통해, 각 팀은 네트워크 상의 모든 미관리 자산을 파악하고, 각 엔드포인트에 대해 방화벽, 사용자권한, 오픈 포트 등의 설정을 직접 원하는 대로 변경 및 유지할 수 있습니다. 뿐만 아니라, IT 팀은 모든 글로벌 자산에 대해 CPU 점유현황, 외부장치현황, 메모리 사용량 등, 다양한 상세 정보를 포함한 실시간 목록 레포트를 통해 운영적 비효율을 줄일 수 있습니다. 또한, 소프트웨어의 설치 위치 및 기간에 걸친 사용량을 파악함으로써, 불시의 감사에 대비하는데 드는 비용을 줄이고, 과보유 소프트웨어의 라이선스를 반납할 수도 있습니다.

다양한 연동을 위한 태니엄 Connect태니엄 Core는 태니엄 Connect 연동 레이어를 포함하며, 이는 환경 내 모든 엔드포인트에서 수집된 실시간 데이터를 SIEM, 로그분석툴, 헬프데스크 티켓시스템, CMDB, 빅데이터 클러스터 등 다수의 외부, 또는 써드파티 시스템에 공급시켜줌으로써, 이들의 기능 및 성능을 강화시켜줍니다. 태니엄 Connect는 일반적으로 이러한 시스템들에 제공되던 데이터의 협소한 범위 및 실시간성에 대한 문제를 해결함으로써, 보안 및 IT 운영팀 간 가시성의 공유가 가능해지며, 기업 수준에서의 엔드포인트 관리 및 보안 확립에 있어서 이들이 마주치게 되는 가장 복잡한 문제의 해결에 소요되는 시간도 극적으로 감소시켜 줍니다.

기업 환경에 최적화• Zone 서버를 통해, 외부에 있는 엔드포인트 기기도 인터넷 연결만 확보되면 태니엄으로 관리 및 통제가 가능하며, 마치 사내 망에 존재하는

것처럼 똑같이 질의에 대해 응답 및 특정 액션 수행 가능

• 기존의 액티브 디렉토리 인프라와 Credentialing 및 보안 정책을 활용한 Kerberos 기반 인증

• 역할기반 접근통제(RBAC,Role Base Access Control)는 각 사용자의 직무 또는 권한에 따라 접근권한을 가변적으로 컨트롤하며, 사용자는 이에 따라 질의, 기존 액션의 실행, 새로운 액션 저작, 센서 저작, 사용자 생성 및 관리권한 부여 등에 대해 제한을 받을 수 있음. 또한, 특정 기기 그룹에만 이러한 역할기반접근통제를 적용하도록 유연한 설정도 가능

• 네트워크 상에 배포되는 쿼리 및 액션에 512비트 Elliptic Curve Cryptography 적용을 통해, 중간자(MITM, Man-in-the-Middle) 공격 및 감염된 엔드포인트에서 시작되는 악의적 행위 예방

관리 대상 엔드포인트 수 5,000대 이하 150,000대 이하 400,000대 이하

Hardware Requirements(Tanium Server / Database Server)

Processor Cores (Physical)

Memory

Disk Space2

So�ware Requirements

Operating System

Database Version

16 / 8

48 GB / 16 GB

400 GB / 1 TB

40 / 32

256 GB / 64 GB

1.5 TB / 4 TB

Microso� Windows Server 2008 R2, 2012 or 2012 R2

Microso� SQL Server 2008, 2012 or 2014

80 / 64

512 GB / 128 GB

3 TB / 10 TB

시스템 요구사항 Server Requirements1 Client Requirements1

● Microsoft Windows Vista, 7, 8 or Windows Server 2003, 2008, 2012

● Mac OS X 10.7+ (Intel-only)

● Linux (RHEL 5.x / 6.x, CentOS 5.x / 6.x, SLES 11, OpenSUSE 11.x / 12.x,Debian 6.x / 7.x, Ubuntu 10.04LTS, 12.04LTS, 14.04LTS)

● Oracle Solaris 10 SPARC / x86 “U8”+, 11 SPARC / x86

● IBM AIX 6.1 TL7SP10+, 7.1 TL1SP10+

1 더 많은 정보는 https://kb.tanium.com/System_Requirements 참조2 제시된 디스크 용량 요구사항은 근사치이며, 사용사례 및 사용방법에 따라 달라질 수 있음