Ensure Single-Function Member Servers are Used

ThấpCấp 1Xem xét thủ côngmssql

Mô tả

It is recommended that SQL Server software be installed on a dedicated server. This architectural consideration affords security flexibility in that the database server can be placed on a separate subnet allowing access only from particular hosts and over particular protocols. Degrees of availability are easier to achieve as well - over time, an enterprise can move from a single database server to a failover to a cluster using load balancing or to some combination thereof. It is easier to manage (i.e. reduce) the attack surface of the server hosting SQL Server software if the only surfaces to consider are the underlying operating system, SQL Server itself, and any security/operational tooling that may additionally be installed. As noted in the description, availability can be more easily addressed if the database is on a dedicated server.

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

Ensure that no other roles are enabled for the underlying operating system and that no excess tooling is installed, per enterprise policy.

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

Uninstall excess tooling and/or remove unnecessary roles from the underlying operating system.

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: mssqlsqlserver-2022
Tham chiếu: CIS Microsoft SQL Server 2022 Benchmark v1.3.0 - 1.2 Ensure Single-Function Member Servers are Used