Hi,

I ran a PCI DSS scan on the prtg probe that is opened to the internet. I got automatic fail, please see below

Security Notes found on port/service "mssql (27660/tcp)"

Status

Automatic Failure as listed by the PCI SSC (This must be resolved for your device to be compliant) Plugin

"Microsoft SQL Server TCP/IP Listener Detection"

Category

"Service detection "

Priority

"Low Priority

Synopsis

A database server is listening on the remote port.

Description The remote host is running MSSQL, a database server from Microsoft. It is possible to extract the version number of the remote installation from the server pre-login response.

Risk factor NONE / CVSS BASE SCORE :0.0

Please advise what to do.


Article Comments

Attention: This article is a record of a conversation with the Paessler support team. The information in this conversation is not updated to preserve the historical record. As a result, some of the information or recommendations in this conversation might be out of date.

Hello,

Thank you very much for using PRTG. PRTG does not use MS SQL. It does not run such a server, neither the PRTG Probe nor the Core. This has to be a false positive then.

best regards.


Nov, 2014 - Permalink