Network misconfigurations

Azure virtual machine allows direct access to MSSQL service from the Internet

Description

Microsoft SQL Server is using port numbers 1433, 1434. Those ports are open on your virtual machine and allow all incoming traffic from the Internet. In order to keep security best practices, you should restrict access to be only from allowed IP addresses.
  • Recommended Mitigation

    Configure networking rule to allow incoming MSSQL traffic from allowed IP addresses only.