Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

If a SQL Server is has remote access open, what steps should one take to lock it down?

  1. strong password
  2. restrict the user to the database

Anything else?

Should I disable the sa account?

share|improve this question

1 Answer 1

A couple of things off the top of my head...

  • Change the TCP port number SQL server is listening on.
  • If client connections to sql server come from a small number of known sites, use a firewall to accept connections only from a those clients' IPs.
  • Rename the sa account?

Another idea is to not publicly expose the SQL server. Instead, use an encrypted SSH or VPN tunnel to connect to it.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.