Home
Security Hardening
DISA STIG SQL Server 2016 Instance OS V2R6

DISA STIG SQL Server 2016 Instance OS V2R6

SQL6-D0-008700 – SQL Server must use NIST FIPS 140-2 validated cryptographic modules for cryptographic operations.
Details Use of weak or not validated cryptographic algorithms undermines the purposes of utilizing encryption and digital signatures to protect...
SQL6-D0-008300 – Confidentiality of controlled information during transmission through the use of an approved TLS version – SSL 3.0 Server DisabledByDefault
Details Transport Layer Security (TLS) encryption is a required security setting as a number of known vulnerabilities have been reported...
SQL6-D0-009200 – SQL Server must maintain the authenticity of communications sessions by guarding against man-in-the-middle attacks that guess at Session ID values.
Details One class of man-in-the-middle, or session hijacking, attack involves the adversary guessing at valid session identifiers based on patterns...
SQL6-D0-008300 – Confidentiality of controlled information during transmission through the use of an approved TLS version – SSL 3.0 Server Enabled
Details Transport Layer Security (TLS) encryption is a required security setting as a number of known vulnerabilities have been reported...
SQL6-D0-009900 – SQL Server must prevent unauthorized and unintended information transfer via shared system resources.
Details The purpose of this control is to prevent information, including encrypted representations of information, produced by the actions of...
SQL6-D0-008300 – Confidentiality of controlled information during transmission through the use of an approved TLS version – TLS 1.0 Client DisabledByDefault
Details Transport Layer Security (TLS) encryption is a required security setting as a number of known vulnerabilities have been reported...
SQL6-D0-008300 – Confidentiality of controlled information during transmission through the use of an approved TLS version – TLS 1.0 Client Enabled
Details Transport Layer Security (TLS) encryption is a required security setting as a number of known vulnerabilities have been reported...
SQL6-D0-008300 – Confidentiality of controlled information during transmission through the use of an approved TLS version – TLS 1.0 Server DisabledByDefault
Details Transport Layer Security (TLS) encryption is a required security setting as a number of known vulnerabilities have been reported...
SQL6-D0-015600 – SQL Server must implement NIST FIPS 140-2 validated cryptographic modules to provision digital signatures.
Details Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. The application must...
SQL6-D0-015700 – SQL Server must implement NIST FIPS 140-2 validated cryptographic modules to generate and validate cryptographic hashes.
Details Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. The application must...

Prev Next

DISA STIG SQL Server 2016 Instance OS V2R6

SQL6-D0-008700 – SQL Server must use NIST FIPS 140-2 validated cryptographic modules for cryptographic operations.

SQL6-D0-008300 – Confidentiality of controlled information during transmission through the use of an approved TLS version – SSL 3.0 Server DisabledByDefault

SQL6-D0-009200 – SQL Server must maintain the authenticity of communications sessions by guarding against man-in-the-middle attacks that guess at Session ID values.

SQL6-D0-008300 – Confidentiality of controlled information during transmission through the use of an approved TLS version – SSL 3.0 Server Enabled

SQL6-D0-009900 – SQL Server must prevent unauthorized and unintended information transfer via shared system resources.

SQL6-D0-008300 – Confidentiality of controlled information during transmission through the use of an approved TLS version – TLS 1.0 Client DisabledByDefault

SQL6-D0-008300 – Confidentiality of controlled information during transmission through the use of an approved TLS version – TLS 1.0 Client Enabled

SQL6-D0-008300 – Confidentiality of controlled information during transmission through the use of an approved TLS version – TLS 1.0 Server DisabledByDefault

SQL6-D0-015600 – SQL Server must implement NIST FIPS 140-2 validated cryptographic modules to provision digital signatures.

SQL6-D0-015700 – SQL Server must implement NIST FIPS 140-2 validated cryptographic modules to generate and validate cryptographic hashes.