Introduction

This chapter will help you gain a thorough understanding of what "surface area" is and why it's important when securing your server. After completing this chapter, you'll understand what the Surface Area Configuration tool is and how to use the tool to help secure an SQL Server. You'll also learn why it's best to use the Surface Area Configuration tool as part of your SQL Server setup.

SQL Server Surface Area Configuration tool can also be used as an auditing tool to gauge the surface attack area on an existing SQL Server configuration.

Ideally, SQL Server surface area configuration tool should be run after installing or upgrading to SQL Server 2005. Take the time to verify which types of connections should be allowed, and which features should be enabled.

In addition to securing SQL Server, also secure the underlying operating system. The Microsoft Baseline Security Analyzer (MBSA) tool can help ensure the operating system is secure. Maintaining the operating system and installing service packs and patches will go a long way in helping to keep the data secure.

We'd also like to mention the fact there is also a Microsoft best practices analysis tool. Although this tool isn't focused strictly on security, it does have an impact on the overall security of the SQL Server's installation. We would highly recommend using the tool to ensure you are following the best practices recommended by Microsoft. There are a number of security related settings and features the Best Practices analyzer will...