Home
Security Hardening
DISA STIG SQL Server 2016 Instance OS V2R6

DISA STIG SQL Server 2016 Instance OS V2R6

SQL6-D0-003800 – SQL Server must be configured to utilize the most-secure authentication method available.
Details Enterprise environments make account management for applications and databases challenging and complex. A manual process for account management functions...
SQL6-D0-004000 – SQL Server must protect against a user falsely repudiating by ensuring all accounts are individual, unique, and not shared.
Details Non-repudiation of actions taken is required in order to maintain data integrity. Examples of particular actions taken by individuals...
SQL6-D0-006700 – SQL Server software installation account must be restricted to authorized users.
Details When dealing with change control issues, it should be noted any changes to the hardware, software, and/or firmware components...
SQL6-D0-006800 – Database software, including DBMS configuration files, must be stored in dedicated directories, separate from the host OS and other applications.
Details When dealing with change control issues, it should be noted any changes to the hardware, software, and/or firmware components...
SQL6-D0-008300 – Confidentiality of controlled information during transmission through the use of an approved TLS version – SSL 2.0 Client DisabledByDefault
Details Transport Layer Security (TLS) encryption is a required security setting as a number of known vulnerabilities have been reported...
SQL6-D0-008300 – Confidentiality of controlled information during transmission through the use of an approved TLS version – SSL 2.0 Client Enabled
Details Transport Layer Security (TLS) encryption is a required security setting as a number of known vulnerabilities have been reported...
SQL6-D0-008300 – Confidentiality of controlled information during transmission through the use of an approved TLS version – SSL 2.0 Server DisabledByDefault
Details Transport Layer Security (TLS) encryption is a required security setting as a number of known vulnerabilities have been reported...
SQL6-D0-008300 – Confidentiality of controlled information during transmission through the use of an approved TLS version – SSL 2.0 Server Enabled
Details Transport Layer Security (TLS) encryption is a required security setting as a number of known vulnerabilities have been reported...
SQL6-D0-008300 – Confidentiality of controlled information during transmission through the use of an approved TLS version – TLS 1.0 Server Enabled
Details Transport Layer Security (TLS) encryption is a required security setting as a number of known vulnerabilities have been reported...
SQL6-D0-008300 – Confidentiality of controlled information during transmission through the use of an approved TLS version – TLS 1.1 Client DisabledByDefault
Details Transport Layer Security (TLS) encryption is a required security setting as a number of known vulnerabilities have been reported...

DISA STIG SQL Server 2016 Instance OS V2R6

SQL6-D0-003800 – SQL Server must be configured to utilize the most-secure authentication method available.

SQL6-D0-004000 – SQL Server must protect against a user falsely repudiating by ensuring all accounts are individual, unique, and not shared.

SQL6-D0-006700 – SQL Server software installation account must be restricted to authorized users.

SQL6-D0-006800 – Database software, including DBMS configuration files, must be stored in dedicated directories, separate from the host OS and other applications.

SQL6-D0-008300 – Confidentiality of controlled information during transmission through the use of an approved TLS version – SSL 2.0 Client DisabledByDefault

SQL6-D0-008300 – Confidentiality of controlled information during transmission through the use of an approved TLS version – SSL 2.0 Client Enabled

SQL6-D0-008300 – Confidentiality of controlled information during transmission through the use of an approved TLS version – SSL 2.0 Server DisabledByDefault

SQL6-D0-008300 – Confidentiality of controlled information during transmission through the use of an approved TLS version – SSL 2.0 Server Enabled

SQL6-D0-008300 – Confidentiality of controlled information during transmission through the use of an approved TLS version – TLS 1.0 Server Enabled

SQL6-D0-008300 – Confidentiality of controlled information during transmission through the use of an approved TLS version – TLS 1.1 Client DisabledByDefault