CLR Enabled

Name:	CLR Enabled
Platform:	Sqlserver
Category:	Security
Premium package:	Security and compliance package
Description:	Checks if the assemblies can be run by SQL Server.
Long description:	Checks if the assemblies can be run by SQL Server. Enabling use of CLR assemblies widens the attack surface of SQL Server and puts it at risk from both inadvertent and malicious assemblies.
Version:	1.2
Default schedule:	4 1 1 *
Requires engine install:	Yes
Compatibility tag:	[CDATA[.[type=‘instance’ & databasetype=‘sqlserver’]/instance[maj_version > ‘2005’ & hasengine=‘YES’ & eng_inst_priv = 0 & (engine_edition = ‘Microsoft SQL Server’ \| engine_edition = ‘Azure SQL Managed Instance’)

Parameters
Name	Default value	Description
return status	1	Return status value (ALARM – 2, WARNING – 1, or OK – 0) when the “clr enabled” parameter is enabled.
disable CLR user code execution	NO	If set to “YES” the alert will disable “clr enabled” (if it is enabled) by running sp_configure stored procedure.
history threshold	365	The maximum number of days to keep statistics for in the historic tables.

Feedback