VA2065 - Server firewall rules query

Question

VA2065 - Server level firewall rules should be tracked and maintained at a strict minimum concern.

All the users seem to use the db from ssms so wanted to know why we are getting this alert ?

And also, when the status shows in baseline for some and not in baseline for others. Does it mean others are using DB firewall rule to access it or ?

Answer 1

You can set the current server level firewall rules related to SSMS users as a baseline and send out an alert when a new rule is created and delete firewall rules no longer used.