Logging and monitoring

Missing Alert for SQL server firewall Rules Editing

Risk Level

Informational (4)

Platform(s)
Compliance Frameworks

Description

Monitoring for Create/Update SQL Server Firewall Rule events gives insight into network access changes and may reduce the time it takes to detect suspicious activity.
  • Recommended Mitigation

    Under Monitor -> Alerts, create an alert for 'Microsoft.Sql/servers/firewallRules/write'