19 February 2013

Default TCP Port

by Fabiano Amorim

10,349 0 Security

This metric checks whether your SQL Server installation is using the default TCP port, which is a known security risk.

Metrics install automatically if you have Redgate Monitor installed.

If you are using Redgate’s SQL Server monitoring tool, Redgate Monitor, you can instantly install and run this metric on your servers.

This alert is raised when you are using the default port of 1433 which is a known security risk. You should consider modifying the port to a non-standard, non-default port in order to thoroughly secure your systems.

For information on how to change the TCP a server listens on, see MSDN.

Metric definition

Name

Default TCP Port

Description

This metric checks whether your SQL Server installation is using the default TCP port. It’s widely known that SQL Server 2005 and 2008 listen on TCP port 1433. Keeping this default gives hackers a potential way of attacking your server. For information on how to change the TCP a server listens on, see MSDN http://msdn.microsoft.com/en-GB/library/ms177440(v=sql.90).aspx.

The T-SQL query that will collect data


		
			
			
Transact-SQL
			
			DECLARE @KeyValue VarChar(500),
        @Data Varchar(255),
        @InstanceName VarChar(200)

SET @InstanceName = CONVERT(VarChar(200), ISNULL(SERVERPROPERTY('InstanceName'), 'MSSQLSERVER'))
SET @KeyValue = 'SOFTWARE\Microsoft\Microsoft SQL Server\Instance Names\SQL'
EXEC xp_regread 'HKEY_LOCAL_MACHINE',
                @KeyValue,
                @InstanceName,
                @InstanceName OUTPUT

SET @Data = NULL
SET @KeyValue = 'SOFTWARE\Microsoft\Microsoft SQL Server\' + @InstanceName + '\MSSQLServer\SuperSocketNetLib\Tcp\IPAll\'
EXEC xp_regread 'HKEY_LOCAL_MACHINE',
                @KeyValue,
                'TcpPort',
                @Data OUTPUT

IF (COALESCE(@Data,1433) = 1433)
  SELECT 1 AS IsDefaultTCPPort
ELSE 
  SELECT 0 AS IsDefaultTCPPort
			
				
					
				
					1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
				
						DECLARE @KeyValue VarChar(500),
        @Data Varchar(255),
        @InstanceName VarChar(200)
 
SET @InstanceName = CONVERT(VarChar(200), ISNULL(SERVERPROPERTY('InstanceName'), 'MSSQLSERVER'))
SET @KeyValue = 'SOFTWARE\Microsoft\Microsoft SQL Server\Instance Names\SQL'
EXEC xp_regread 'HKEY_LOCAL_MACHINE',
                @KeyValue,
                @InstanceName,
                @InstanceName OUTPUT
 
SET @Data = NULL
SET @KeyValue = 'SOFTWARE\Microsoft\Microsoft SQL Server\' + @InstanceName + '\MSSQLServer\SuperSocketNetLib\Tcp\IPAll\'
EXEC xp_regread 'HKEY_LOCAL_MACHINE',
                @KeyValue,
                'TcpPort',
                @Data OUTPUT
 
IF (COALESCE(@Data,1433) = 1433)
  SELECT 1 AS IsDefaultTCPPort
ELSE 
  SELECT 0 AS IsDefaultTCPPort

Instances to collect from

Select all

Databases to collect from

master

Collection frequency

86400

Use collected or calculated values

Leave the Use a calculated rate of change between collections check box unchecked

Metric collection

Enabled

Alert definition

Alert name

Default TCP Port Alert

Description

This alert is raised when you are using the default port of 1433, which is a known security risk.

Raise an alert when the metric value goes

Above the defined threshholds

Default threshold values

High:	0
Medium:
Low:

Raise an alert when the threshold is passed for

1 collection

Alert is

Enabled

10,349 Rate

Click to rate this post!

[Total: 1 Average: 3]

Default TCP Port

Metric definition

Name

Description

The T-SQL query that will collect data

Instances to collect from

Databases to collect from

Collection frequency

Use collected or calculated values

Metric collection

Alert definition

Alert name

Description

Raise an alert when the metric value goes

Default threshold values

Raise an alert when the threshold is passed for

Alert is

What are custom metrics?

What is Redgate Monitor?

Featured custom metrics

Total database file size

Number of active backups and restores

Full backup to odd path

Find metrics