STIGQter: STIG Summary: Microsoft Azure SQL Managed Instance Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 23 Sep 2025:

Access to CLR code must be disabled for Azure SQL Server Managed Instance, unless specifically required and approved.

DISA Rule

SV-276301r1149812_rule

Vulnerability Number

V-276301

Group Title

SRG-APP-000141-DB-000093

Rule Version

MSQL-D0-007300

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

Disable use of or remove any CLR code that is not authorized.

To disable the use of CLR, from the query prompt:

EXEC SP_CONFIGURE 'clr enabled', 0;
RECONFIGURE WITH OVERRIDE;

Check Contents

To determine if CLR is enabled, execute the following command:

SELECT name, value, value_in_use
FROM sys.configurations
WHERE name = 'clr enabled'

If "value_in_use" is a "1", review the system documentation to determine whether the use of CLR is approved. If it is not approved, this is a finding.

Vulnerability Number

V-276301

Documentable

False

Rule Version

MSQL-D0-007300

Severity Override Guidance

To determine if CLR is enabled, execute the following command:

SELECT name, value, value_in_use
FROM sys.configurations
WHERE name = 'clr enabled'

If "value_in_use" is a "1", review the system documentation to determine whether the use of CLR is approved. If it is not approved, this is a finding.

Check Content Reference

M

Target Key

5711