Periodic recurring vulnerability assessment scans should be enabled on SQL servers

Documentos > Datadog Security > OOTB Rules > Periodic recurring vulnerability assessment scans should be enabled on SQL servers

This page is not yet available in Spanish. We are working on its translation.
If you have any questions or feedback about our current translation project, feel free to reach out to us!

Description

The Vulnerability Assessment service examines databases for potential security issues and deviations from optimal practices including misconfigurations or excessive permissions. The service provides remediation steps, potentially customizable scripts for each identified issue, and offers customizability in the assessment report through baseline settings for permissions, features, and database configurations. Enabling these features on Microsoft Defender for SQL incurs additional costs per SQL server.

Remediation

Azure is transitioning from Classic Configuration to Express Configuration. For specific configuration instructions that fit your use case, see Enable vulnerability assessment on your Azure SQL databases and servers.