This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(86.4, 99%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENH%3C/text%3E%3C/svg%3E)
We use MSFT Defender for cloud and it reported that we have a vulnerability of having CLR Enabled turned on.
We are trying to turn it off but the sp_reconfigure does not work on Azure SQL so we are at a loss.
Q1: If the query returns Value 1, Value_in_use 1, does it mean CLR Enabled is on?
Q2: How to turn CLR Enabled off on Azure SQL?
Thank you very much for the help in advance
Here is the query and its output
SELECT 'check if CLR enabled flag is on', DB_Name() DatabaseName, * FROM sys.configurations
WHERE name = 'clr enabled'
My Goodness! One hand does not know what the other one does.
This is a very false alarm. The CLR is not available in Azure SQL Database. Or to be precise, the ability to create user-written CLR modules is not available. There is some built-in functionality in SQL Server that uses the CLR, but the flag does not relate to those.
@Erland Sommarskog Can I use your comments to explain why I close the vulnerability that flags our Azure SQL databases have CLR enabled? Thanks
Sure you can!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(25.6, 1%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECE%3C/text%3E%3C/svg%3E)
Hey there!
Are you using Azure SQL Database or Azure SQL MI? The CLR related rules should not be evaluated against Azure SQL Database, as documented here: https://learn.microsoft.com/en-us/azure/defender-for-cloud/sql-azure-vulnerability-assessment-rules#surface-area-reduction
It would be great to see a screenshot of what you see in the Defender for Cloud UI.