STIGQter: STIG Summary: Microsoft SQL Server 2022 Instance Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

SQL Server must be configured to prohibit or restrict the use of organization-defined ports, as defined in the Ports, Protocols, and Services Management (PPSM) Category Assurance List (CAL) and vulnerability assessments.

DISA Rule

SV-271303r1109116_rule

Vulnerability Number

V-271303

Group Title

SRG-APP-000142-DB-000094

Rule Version

SQLI-22-007700

Severity

CAT II

CCI(s)

• CCI-000382 - Configure the system to prohibit or restrict the use of organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services.

Weight

10

Fix Recommendation

Use SQL Server Configuration to change the ports used by SQL Server to comply with PPSM guidance, or document the need for other ports, and obtain written approval. Close ports no longer needed.

Check Contents

Review SQL Server Configuration for the ports used by SQL Server.

To determine whether SQL Server is configured to use a fixed port or dynamic ports, in the right-side pane, double-click on the TCP/IP entry to open the Properties dialog. (The default fixed port is 1433.)

Alternatively, run the following SQL query to determine the port used by SQL Server:

SELECT ISNULL(CONVERT(VARCHAR(25),local_tcp_port),'Dynamic Ports are Enabled')
FROM sys.dm_exec_connections
WHERE session_id = @@SPID

If any ports in use are in conflict with PPSM guidance and not explained and approved in the system documentation, this is a finding.

Vulnerability Number

V-271303

Documentable

False

Rule Version

SQLI-22-007700

Severity Override Guidance

Review SQL Server Configuration for the ports used by SQL Server.

To determine whether SQL Server is configured to use a fixed port or dynamic ports, in the right-side pane, double-click on the TCP/IP entry to open the Properties dialog. (The default fixed port is 1433.)

Alternatively, run the following SQL query to determine the port used by SQL Server:

SELECT ISNULL(CONVERT(VARCHAR(25),local_tcp_port),'Dynamic Ports are Enabled')
FROM sys.dm_exec_connections
WHERE session_id = @@SPID

If any ports in use are in conflict with PPSM guidance and not explained and approved in the system documentation, this is a finding.

Check Content Reference

M

Target Key

5677