How to hide sql version number from nmap -sV output?

Mohamad Fazlie Bin Zairon 0 Reputation points
2023-03-07T15:25:30.6766667+00:00

VA was conducted on-premises by external vendor. They use nmap using switches -A and -sV to scan the port and IPs. This particular ip have standalone sql 2017 installed specifically for Symantec database backup on the same server.

The result output shows the sql and was flagged due to able to capture the sql version. See pic attached.

Question - Is it possible to hide this version info?sql hide version.png

SQL Server
SQL Server
A family of Microsoft relational database management and analysis systems for e-commerce, line-of-business, and data warehousing solutions.
13,361 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,635 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Erland Sommarskog 107.1K Reputation points
    2023-03-07T22:38:02.7+00:00

    That is not possible to my knowing.

    But I see that the SQL Server instance in question is running the RTM version of SQL 2017, and you should download and install CU31, the last Cumulative Update of SQL 2017, to get access to many bug fixes, including security updates.

    0 comments No comments

  2. Seeya Xi-MSFT 16,461 Reputation points
    2023-03-08T02:18:24.35+00:00

    Hi @Mohamad Fazlie Bin Zairon,

    It cannot be hidden. Is there any reason why you want to hide it, please? Maybe we can find another solution

    Best regards,

    Seeya