If a SQL Server is has remote access open, what steps should one take to lock it down?
- strong password
- restrict the user to the database
Should I disable the sa account?
A couple of things off the top of my head...
Another idea is to not publicly expose the SQL server. Instead, use an encrypted SSH or VPN tunnel to connect to it.