TMAegisBeta
更多 mssql 规则

Microsoft SQL Server

TMA-MSSQL2022-8.1

Ensure 'SQL Server Browser Service' is configured correctly

低级别 1人工审核mssql

说明

No recommendation is being given on disabling the SQL Server Browser service. In the case of a default instance installation, the SQL Server Browser service is disabled by default. Unless there is a named instance on the same server, there is typically no reason for the SQL Server Browser service to be running. In this case it is strongly suggested that the SQL Server Browser service remain disabled. When it comes to named instances, given that a security scan can fingerprint a SQL Server listening on any port, it's therefore of limited benefit to disable the SQL Server Browser service. However, if all connections against the named instance are via applications and are not visible to end users, then configuring the named instance to listening on a static port, disabling the SQL Server Browser service, and configuring the apps to connect to the specified port should be the direction ta...

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时,扫描结果会列出该项并附带这些说明。

Check the SQL Browser service's status via services.msc or similar methods.

修复方式

修复方法: 操作指南或基础设施补丁

Enable or disable the service as needed for your environment.

属性

操作系统
任意
标签
mssqlsqlserver-2022
参考
CIS Microsoft SQL Server 2022 Benchmark v1.3.0 - 8.1 Ensure 'SQL Server Browser Service' is configured correctly