STIGQter: STIG Summary: Microsoft SQL Server 2022 Instance Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

SQL Server must be configured to prohibit or restrict the use of organization-defined protocols as defined in the Ports, Protocols, and Services Management (PPSM) Category Assurance List (CAL) and vulnerability assessments.

DISA Rule

SV-271304r1109265_rule

Vulnerability Number

V-271304

Group Title

SRG-APP-000142-DB-000094

Rule Version

SQLI-22-007600

Severity

CAT II

CCI(s)

CCI-000382 - Configure the system to prohibit or restrict the use of organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services.

Weight

Fix Recommendation

Navigate to SQL Server Configuration Manager >> SQL Server Network Configuration >> Protocols, then right-click on each listed protocol that is enabled but not authorized and select "Disable".

Check Contents

To determine the protocol(s) enabled for SQL Server, open SQL Server Configuration Manager. In the left pane, expand SQL Server Network Configuration. Click on the entry for the SQL Server instance under review: "Protocols for". The right-side pane displays the protocols enabled for the instance.

Alternatively, run the following SQL Script and review the registry_key for enabled protocols.

SELECT
*
FROM sys.dm_server_registry
WHERE registry_key like 'HKLM\Software\Microsoft\Microsoft SQL Server\%\MSSQLServer\SuperSocketNetLib\%'
AND value_name = 'enabled'
AND value_data = 1

If any listed protocols are enabled but not documented and authorized, this is a finding.

Vulnerability Number

V-271304

Documentable

False

Rule Version

SQLI-22-007600

Severity Override Guidance

Check Content Reference

Target Key

5677