SQL6-D0-003600 - SQL Server must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types.

CAT|II

CCI|CCI-000054

Rule-ID|SV-213929r810823_rule

STIG-ID|SQL6-D0-003600

STIG-Legacy|SV-93825

STIG-Legacy|V-79119

Vuln-ID|V-213929

SQL6-D0-003700 - SQL Server must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.

CAT|I

CCI|CCI-000015

Rule-ID|SV-213930r822454_rule

STIG-ID|SQL6-D0-003700

STIG-Legacy|SV-93827

STIG-Legacy|V-79121

Vuln-ID|V-213930

SQL6-D0-003900 - SQL Server must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

CCI|CCI-000213

Rule-ID|SV-213932r754575_rule

STIG-ID|SQL6-D0-003900

STIG-Legacy|SV-93831

STIG-Legacy|V-79125

Vuln-ID|V-213932

SQL6-D0-004100 - SQL Server must protect against a user falsely repudiating by ensuring the NT AUTHORITY SYSTEM account is not used for administration - clustering and availability

CCI|CCI-000166

Rule-ID|SV-213934r754577_rule

STIG-ID|SQL6-D0-004100

STIG-Legacy|SV-93835

STIG-Legacy|V-79129

Vuln-ID|V-213934

SQL6-D0-004100 - SQL Server must protect against a user falsely repudiating by ensuring the NT AUTHORITY SYSTEM account is not used for administration - permissions

SQL6-D0-004200 - SQL Server must protect against a user falsely repudiating by ensuring only clearly unique Active Directory user accounts can connect to the instance.

Rule-ID|SV-213935r754578_rule

STIG-ID|SQL6-D0-004200

STIG-Legacy|SV-93837

STIG-Legacy|V-79131

Vuln-ID|V-213935

SQL6-D0-004300 - SQL Server must be configured to generate audit records for DoD-defined auditable events within all DBMS/database components - audit events

CCI|CCI-000169

Rule-ID|SV-213936r754579_rule

STIG-ID|SQL6-D0-004300

STIG-Legacy|SV-93839

STIG-Legacy|V-79133

Vuln-ID|V-213936

SQL6-D0-004300 - SQL Server must be configured to generate audit records for DoD-defined auditable events within all DBMS/database components - installed audits

SQL6-D0-004400 - SQL Server must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited.

CCI|CCI-000171

Rule-ID|SV-213937r754580_rule

STIG-ID|SQL6-D0-004400

STIG-Legacy|SV-93841

STIG-Legacy|V-79135

Vuln-ID|V-213937

SQL6-D0-004500 - SQL Server must generate audit records when privileges/permissions are retrieved - audit

CCI|CCI-000172

Rule-ID|SV-213938r754581_rule

STIG-ID|SQL6-D0-004500

STIG-Legacy|SV-93843

STIG-Legacy|V-79137

Vuln-ID|V-213938

SQL6-D0-004500 - SQL Server must generate audit records when privileges/permissions are retrieved - retrieval

SQL6-D0-004600 - SQL Server must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - audit

Rule-ID|SV-213939r754582_rule

STIG-ID|SQL6-D0-004600

STIG-Legacy|SV-93845

STIG-Legacy|V-79139

Vuln-ID|V-213939

SQL6-D0-004600 - SQL Server must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - retrieval

SQL6-D0-004700 - SQL Server must initiate session auditing upon startup.

CCI|CCI-001464

Rule-ID|SV-213940r754583_rule

STIG-ID|SQL6-D0-004700

STIG-Legacy|SV-93847

STIG-Legacy|V-79141

Vuln-ID|V-213940

SQL6-D0-005500 - SQL Server must include additional, more detailed, organization-defined information in the audit records for audit events identified by type, location, or subject.

CCI|CCI-000135

Rule-ID|SV-213941r754584_rule

STIG-ID|SQL6-D0-005500

STIG-Legacy|SV-93851

STIG-Legacy|V-79145

Vuln-ID|V-213941

SQL6-D0-005600 - SQL Server must by default shut down upon audit failure, to include the unavailability of space for more audit log records; or must be configurable to shut down upon audit failure.

CCI|CCI-000140

Rule-ID|SV-213942r754585_rule

STIG-ID|SQL6-D0-005600

STIG-Legacy|SV-93853

STIG-Legacy|V-79147

Vuln-ID|V-213942

SQL6-D0-005700 - SQL Server must be configurable to overwrite audit log records, oldest first (First-In-First-Out - FIFO), in the event of unavailability of space for more audit log records.

Rule-ID|SV-213943r754587_rule

STIG-ID|SQL6-D0-005700

STIG-Legacy|SV-93855

STIG-Legacy|V-79149

Vuln-ID|V-213943

SQL6-D0-005900 - The audit information produced by SQL Server must be protected from unauthorized access, modification, and deletion.

CCI|CCI-000162

CCI|CCI-000163

CCI|CCI-000164

Rule-ID|SV-213944r754590_rule

STIG-ID|SQL6-D0-005900

STIG-Legacy|SV-93857

STIG-Legacy|V-79151

Vuln-ID|V-213944

SQL6-D0-006200 - SQL Server must protect its audit features from unauthorized access.

CCI|CCI-001493

Rule-ID|SV-213947r754591_rule

STIG-ID|SQL6-D0-006200

STIG-Legacy|SV-93863

STIG-Legacy|V-79157

Vuln-ID|V-213947

SQL6-D0-006300 - SQL Server must protect its audit configuration from unauthorized modification.

CCI|CCI-001494

Rule-ID|SV-213948r754592_rule

STIG-ID|SQL6-D0-006300

STIG-Legacy|SV-93865

STIG-Legacy|V-79159

Vuln-ID|V-213948

SQL6-D0-006400 - SQL Server must protect its audit features from unauthorized removal.

CCI|CCI-001495

Rule-ID|SV-213949r754593_rule

STIG-ID|SQL6-D0-006400

STIG-Legacy|SV-93867

STIG-Legacy|V-79161

Vuln-ID|V-213949

SQL6-D0-006500 - SQL Server must limit privileges to change software modules and links to software external to SQL Server.

CCI|CCI-001499

Rule-ID|SV-213950r754594_rule

STIG-ID|SQL6-D0-006500

STIG-Legacy|SV-93869

STIG-Legacy|V-79163

Vuln-ID|V-213950

SQL6-D0-006600 - SQL Server must limit privileges to change software modules, to include stored procedures, functions and triggers, and links to software external to SQL Server.

Rule-ID|SV-213951r754595_rule

STIG-ID|SQL6-D0-006600

STIG-Legacy|SV-93871

STIG-Legacy|V-79165

Vuln-ID|V-213951

SQL6-D0-006900 - Default demonstration and sample databases, database objects, and applications must be removed.

CCI|CCI-000381

Rule-ID|SV-213954r754598_rule

STIG-ID|SQL6-D0-006900

STIG-Legacy|SV-93877

STIG-Legacy|V-79171

Vuln-ID|V-213954

SQL6-D0-007000 - Unused database components, DBMS software, and database objects must be removed.

Rule-ID|SV-213955r754599_rule

STIG-ID|SQL6-D0-007000

STIG-Legacy|SV-93879

STIG-Legacy|V-79173

Vuln-ID|V-213955

SQL6-D0-007100 - Unused database components that are integrated in SQL Server and cannot be uninstalled must be disabled.

Rule-ID|SV-213956r754600_rule

STIG-ID|SQL6-D0-007100

STIG-Legacy|SV-93881

STIG-Legacy|V-79175

Vuln-ID|V-213956

SQL6-D0-007200 - Access to xp_cmdshell must be disabled, unless specifically required and approved.

Rule-ID|SV-213957r754601_rule

STIG-ID|SQL6-D0-007200

STIG-Legacy|SV-93883

STIG-Legacy|V-79177

Vuln-ID|V-213957

SQL6-D0-007300 - Access to CLR code must be disabled or restricted, unless specifically required and approved.

Rule-ID|SV-213958r754602_rule

STIG-ID|SQL6-D0-007300

STIG-Legacy|SV-93885

STIG-Legacy|V-79179

Vuln-ID|V-213958

SQL6-D0-007400 - Access to Non-Standard extended stored procedures must be disabled or restricted, unless specifically required and approved.

Rule-ID|SV-213959r754603_rule

STIG-ID|SQL6-D0-007400

STIG-Legacy|SV-93887

STIG-Legacy|V-79181

Vuln-ID|V-213959

SQL6-D0-007500 - Access to linked servers must be disabled or restricted, unless specifically required and approved - linked servers

Rule-ID|SV-213960r754604_rule

STIG-ID|SQL6-D0-007500

STIG-Legacy|SV-93889

STIG-Legacy|V-79183

Vuln-ID|V-213960

SQL6-D0-007500 - Access to linked servers must be disabled or restricted, unless specifically required and approved - linked servers login

SQL6-D0-007800 - SQL Server must uniquely identify and authenticate organizational users (or processes acting on behalf of organizational users).

CCI|CCI-000764

Rule-ID|SV-213963r754607_rule

STIG-ID|SQL6-D0-007800

STIG-Legacy|SV-93895

STIG-Legacy|V-79189

Vuln-ID|V-213963

SQL6-D0-007900 - If DBMS authentication using passwords is employed, SQL Server must enforce the DoD standards for password complexity and lifetime.

Detections

Analytics

DISA STIG SQL Server 2016 Instance DB Audit v2r8

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.1

Miscellaneous