Detections
Analytics
SQL2-00-022400 - SQL Server must ensure, if Database Availability Groups are being used and there is a server failure, that none of the potential failover servers would suffer from resource exhaustion.
Information
SQL Server has a feature called 'Availability Group' which provides automatic failover from a primary SQL Server to a secondary server. This concept is not new, but because SQL Server does warn that if the secondary SQL Server is not dedicated 100% to being a backup server, that 'resource exhaustion' may be an issue if there is some load balancing going on.If the primary SQL Server has a backup/secondary server that is dedicated 100% to the primary server's process, this is not a finding. If, however, the processing of the primary SQL Server is loaded to a secondary server that is already partly resourced to process something other than that of the primary SQL Server responsibility, then there can be load balancing issues.
Load balancing for the purpose of sharing a secondary/backup SQL Server is often done to share and save on resources.
NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Allocate replacement server(s) to provide failover support to the Primary SQL Server.If a single solution cannot be employed, split the processing of a secondary SQL Server amongst two or more secondary servers.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_SQL_Server_2012_V1R20_STIG.zip
Item Details
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-6, CAT|II, CCI|CCI-002394, Rule-ID|SV-53262r3_rule, STIG-ID|SQL2-00-022400, Vuln-ID|V-40908
Plugin: MS_SQLDB
Control ID: 662e893f3adf867e93dd98bf4f65126aadcb597230ab7a5c9839f1920609cccf