Home
Security Hardening
DISA STIG SQL Server 2014 Instance OS V2R2

DISA STIG SQL Server 2014 Instance OS V2R2

SQL4-00-016810 – SQL Server must have the SQL Server Distributed Replay Controller software component removed if it is unused.
Details Information systems are capable of providing a wide variety of functions and services. Some of the functions and services,...
SQL4-00-016845 – SQL Server must have the Client Tools SDK software component removed if it is unused.
Details Information systems are capable of providing a wide variety of functions and services. Some of the functions and services,...
SQL4-00-016850 – SQL Server must have the Management Tools software component removed if it is unused.
Details Information systems are capable of providing a wide variety of functions and services. Some of the functions and services,...
SQL4-00-031100 – SQL Server must use NIST FIPS 140-2 validated cryptographic modules for cryptographic operations.
Details Use of weak or not validated cryptographic algorithms undermines the purposes of utilizing encryption and digital signatures to protect...
SQL4-00-033600 – SQL Server must produce time stamps that can be mapped to Coordinated Universal Time (UTC, formerly GMT).
Details If time stamps are not consistently applied and there is no common time reference, it is difficult to perform...
SQL4-00-034200 – SQL Server must disable communication protocols not required for operation.
Details Having unnecessary protocols enabled exposes the system to avoidable threats. In a typical installation, only TCP/IP will be required....
SQL4-00-034800 – SQL Server must implement and/or support cryptographic mechanisms preventing the unauthorized disclosure of organization-defined information at rest on organization-defined information system components.
Details DBMSs handling data requiring ‘data at rest’ protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of...
SQL4-00-035400 – Security-relevant software updates to SQL Server must be installed within the time period directed by an authoritative source (e.g., IAVM, CTOs, DTMs, and STIGs).
Details Security flaws with software applications, including database management systems, are discovered daily. Vendors are constantly updating and patching their...
SQL4-00-039100 – The SQL Server Browser service must be disabled if its use is not necessary..
Details The SQL Server Browser simplifies the administration of SQL Server, particularly when multiple instances of SQL Server coexist on...
SQL4-00-016815 – SQL Server must have the Full-Text Search software component removed if it is unused.
Details Information systems are capable of providing a wide variety of functions and services. Some of the functions and services,...

Prev Next

DISA STIG SQL Server 2014 Instance OS V2R2

SQL4-00-016810 – SQL Server must have the SQL Server Distributed Replay Controller software component removed if it is unused.

SQL4-00-016845 – SQL Server must have the Client Tools SDK software component removed if it is unused.

SQL4-00-016850 – SQL Server must have the Management Tools software component removed if it is unused.

SQL4-00-031100 – SQL Server must use NIST FIPS 140-2 validated cryptographic modules for cryptographic operations.

SQL4-00-033600 – SQL Server must produce time stamps that can be mapped to Coordinated Universal Time (UTC, formerly GMT).

SQL4-00-034200 – SQL Server must disable communication protocols not required for operation.

SQL4-00-034800 – SQL Server must implement and/or support cryptographic mechanisms preventing the unauthorized disclosure of organization-defined information at rest on organization-defined information system components.

SQL4-00-035400 – Security-relevant software updates to SQL Server must be installed within the time period directed by an authoritative source (e.g., IAVM, CTOs, DTMs, and STIGs).

SQL4-00-039100 – The SQL Server Browser service must be disabled if its use is not necessary..

SQL4-00-016815 – SQL Server must have the Full-Text Search software component removed if it is unused.