[SQL Vulnerability Assessment] - change the schedule/delivery of Periodic recurring scans

Question

Hi All,

We have multiple SQL servers and set up periodic SQL vulnerability scan. All these scan results are getting delievered from Monday to Sunday for each servers randomly. Is there a way to control the delivery of the scan results to group or deliver them on a particular week day for easy remediation in single go and will be helpful for reporting purposes. Thanks!

Answer 1

Hi @Mohan Srinivas Subramanian (MINDTREE LIMITED) Thank you for posting your query on Microsoft Q&A and for using Azure services.
My understanding is that you are looking for a way to control the delivery of a scan results to group them in a particular weekday for easy remediation.
It is currently not possible to manually set the scanning/email schedules.

SQL vulnerability assessment - Azure SQL Database & SQL Managed Instance & Azure Synapse Analytics | Microsoft Learn
"Each database is randomly assigned a scan time on a set day of the week. Email notifications are scheduled randomly per server on a set day of the week. The email notification report includes data from all database scans that were executed during the preceding week."

It is possible to manually export scan results to excel using API and Powershell cmdlets such as:
Convert-AzSqlDatabaseVulnerabilityAssessmentScan (Az.Sql) | Microsoft Learn

Could you please open an ask on Ideas Platform for tracking?
Microsoft Defender for Cloud · Community (azure.com)

Regards,
Oury

Answer 2

Thanks! I have submitted the Idea.