MS SQL Server 2016 Instance STIG

MS SQL Server 2016 Instance Security Technical Implementation Guide

ID	Vuln ID	Title	Cat
SQL6-D0-017200	V-214037	Remote Access feature must be disabled, unless specifically required and approved.	Cat II
SQL6-D0-017400	V-214038	Hadoop Connectivity feature must be disabled, unless specifically required and approved.	Cat II
SQL6-D0-017500	V-214039	Allow Polybase Export feature must be disabled, unless specifically required and approved.	Cat II
SQL6-D0-017600	V-214040	Remote Data Archive feature must be disabled, unless specifically required and approved.	Cat II
SQL6-D0-017700	V-214041	SQL Server External Scripts Enabled feature must be disabled, unless specifically required and approved.	Cat II
SQL6-D0-017800	V-214042	The SQL Server Browser service must be disabled unless specifically required and approved.	Cat III
SQL6-D0-017900	V-214043	SQL Server Replication Xps feature must be disabled, unless specifically required and approved.	Cat II
SQL6-D0-018000	V-214044	If the SQL Server Browser Service is specifically required and approved, SQL instances must be hidden.	Cat III
SQL6-D0-018100	V-214045	When using command-line tools such as SQLCMD in a mixed-mode authentication environment, users must use a logon method that does not expose the password.	Cat I
SQL6-D0-018200	V-214046	Applications must obscure feedback of authentication information during the authentication process to protect the information from possible exploitation/use by unauthorized individuals.	Cat I
SQL6-D0-018300	V-265870	Microsoft SQL Server products must be a version supported by the vendor.	Cat I

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.