An error occurred:

MS SQL Server 2016 Instance STIG

MS SQL Server 2016 Instance Security Technical Implementation Guide

ID Vuln ID Title Cat Status
SQL6-D0-003600 V-213929 SQL Server must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types. Cat II
SQL6-D0-003700 V-213930 SQL Server must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals. Cat I
SQL6-D0-003800 V-213931 SQL Server must be configured to utilize the most-secure authentication method available. Cat II
SQL6-D0-003900 V-213932 SQL Server must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies. Cat I
SQL6-D0-004000 V-213933 SQL Server must protect against a user falsely repudiating by ensuring all accounts are individual, unique, and not shared. Cat II
SQL6-D0-004100 V-213934 SQL Server must protect against a user falsely repudiating by ensuring the NT AUTHORITY SYSTEM account is not used for administration. Cat II
SQL6-D0-004200 V-213935 SQL Server must protect against a user falsely repudiating by ensuring only clearly unique Active Directory user accounts can connect to the instance. Cat II
SQL6-D0-004300 V-213936 SQL Server must be configured to generate audit records for DoD-defined auditable events within all DBMS/database components. Cat II
SQL6-D0-004400 V-213937 SQL Server must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited. Cat II
SQL6-D0-004600 V-213939 SQL Server must generate audit records when successful/unsuccessful attempts to retrieve privileges/permissions occur. Cat II
SQL6-D0-004700 V-213940 SQL Server must initiate session auditing upon startup. Cat II
SQL6-D0-005500 V-213941 SQL Server must include additional, more detailed, organization-defined information in the audit records for audit events identified by type, location, or subject. Cat II
SQL6-D0-005600 V-213942 SQL Server must by default shut down upon audit failure, to include the unavailability of space for more audit log records; or must be configurable to shut down upon audit failure. Cat II
SQL6-D0-005700 V-213943 SQL Server must be configurable to overwrite audit log records, oldest first (First-In-First-Out - FIFO), in the event of unavailability of space for more audit log records. Cat II
SQL6-D0-005900 V-213944 The audit information produced by SQL Server must be protected from unauthorized access, modification, and deletion. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.