An error occurred:

MS SQL Server 2016 Instance STIG

MS SQL Server 2016 Instance Security Technical Implementation Guide

ID Vuln ID Title Cat Status
SQL6-D0-011000 V-213984 SQL Server must provide a warning to appropriate support staff when allocated audit record storage volume reaches 75% of maximum audit record storage capacity. Cat II
SQL6-D0-011100 V-213985 SQL Server must provide an immediate real-time alert to appropriate support staff of all audit log failures. Cat II
SQL6-D0-011200 V-213986 SQL Server must record time stamps in audit records and application data that can be mapped to Coordinated Universal Time (UTC, formerly GMT). Cat II
SQL6-D0-011400 V-213987 SQL Server must enforce access restrictions associated with changes to the configuration of the instance. Cat II
SQL6-D0-011500 V-213988 Windows must enforce access restrictions associated with changes to the configuration of the SQL Server instance. Cat II
SQL6-D0-011800 V-213989 SQL Server must produce audit records when attempts to modify SQL Server configuration and privileges occur within the database(s). Cat II
SQL6-D0-012300 V-213991 SQL Server must maintain a separate execution domain for each executing process. Cat II
SQL6-D0-012400 V-213992 SQL Server services must be configured to run under unique dedicated user accounts. Cat II
SQL6-D0-012700 V-213993 When updates are applied to SQL Server software, any software components that have been replaced or made unnecessary must be removed. Cat II
SQL6-D0-012800 V-213994 Security-relevant software updates to SQL Server must be installed within the time period directed by an authoritative source (e.g. IAVM, CTOs, DTMs, and STIGs). Cat II
SQL6-D0-013400 V-214000 SQL Server must generate audit records when successful and unsuccessful attempts to add privileges/permissions occur. Cat II
SQL6-D0-013600 V-214002 SQL Server must generate audit records when successful and unsuccessful attempts to modify privileges/permissions occur. Cat II
SQL6-D0-013800 V-214004 SQL Server must generate audit records when successful and unsuccessful attempts to modify security objects occur. Cat II
SQL6-D0-014200 V-214008 SQL Server must generate audit records when successful and unsuccessful attempts to delete privileges/permissions occur. Cat II
SQL6-D0-014800 V-214014 SQL Server must generate audit records when successful and unsuccessful logons or connection attempts occur. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.