Ensure SharePoint database servers are segregated from application server and placed in a secure zone.

MediumLevel 1Manual reviewsharepoint

Description

Segregating the SharePoint database server from the application server provides a layered defense architecture. Manual review.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Review the SharePoint architecture and verify the SharePoint database server is segregated from the application servers and placed in a secure network zone, with only the required ports open from the application servers.

How it is fixed

Fix method: Guidance or infrastructure patch

Move the SharePoint database server into a secure network zone and open only the specific ports required from the application servers.

Properties

Operating systems: Any
Tags: sharepointnetworksql
Reference: CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 3.10 Ensure SharePoint database servers are segregated from application server and placed in a secure zone.