STIGQter: STIG Summary: Microsoft Azure SQL Database Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 02 Jul 2025:

Azure SQL Database must maintain the confidentiality and integrity of information during preparation for transmission.

DISA Rule

SV-255348r961638_rule

Vulnerability Number

V-255348

Group Title

SRG-APP-000441-DB-000378

Rule Version

ASQL-00-012500

Severity

CAT II

CCI(s)

CCI-002420 - Maintain the confidentiality and/or integrity of information during preparation for transmission.

Weight

Fix Recommendation

Implement and document protective measures against unauthorized disclosure and modification during preparation for transmission.

https://docs.microsoft.com/en-us/azure/azure-sql/database/connectivity-settings

https://docs.microsoft.com/en-us/azure/azure-sql/database/connectivity-architecture

https://docs.microsoft.com/en-us/azure/azure-sql/database/network-access-controls-overview

Check Contents

Document transmission protection mechanisms based on organizationally defined requirements, if this documentation does not exist this is a finding.

Validate that transmission protection mechanisms match documentation of organizationally defined requirements, if discrepancies exist this is a finding.

Run the following PowerShell script to check the TLS version:
$ResourceGroupName = '<Resource Group Name>'
Get-AzSqlServer -ResourceGroupName $ResourceGroupName | Format-Table ServerName,MinimalTlsVersion

Ensure that the minimum TLS version property is set to the latest available TLS version, if a less secure TLS version is set this is a finding.

Vulnerability Number

V-255348

Documentable

False

Rule Version

ASQL-00-012500

Severity Override Guidance

Check Content Reference

Target Key

5500