Vulnerability Scan Timeout

Jim Pelletier 1 Reputation point
2020-08-10T05:10:27.98+00:00

I have a recommendation in the Azure Security Advisor "VA2065 - Server-level firewall rules should be tracked and maintained at a strict minimum" on a number of sql server instances. My understanding of how to remediate these is:

  1. Adjust the firewall rules so they are at a "strict minimum"
  2. As there are new rules that should be part of the baseline, accept the current rules as a new baseline
  3. To clear the recommendation re-ruin the Vulnerability Assessment on the instance
  4. The recommendation for that instance should now be cleared

What is actually happening for me is:

  1. Adjust the firewall rules so they are at a "strict minimum"
  2. As there are new rules that should be part of the baseline, accept the current rules as a new baseline
  3. To clear the recommendation re-ruin the Vulnerability Assessment on the instance - this fails with a timeout (screenshot attached)
  4. The recommendations remain, even days later

Is there logging somewhere for me to further troubleshoot this issue?

16585-timeou-screenshot.png16662-timeout-log.png

Azure SQL Database
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,186 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. JamesTran-MSFT 36,361 Reputation points Microsoft Employee
    2020-08-10T22:39:48.487+00:00

    @Jim Pelletier
    From the error message you received (HTTP 0 Error), it looks like your firewall might've blocked the ARM API call. The "Quick Fix" remediation logging is logged within the Azure Activity Logs, and more information can be found in the Audit logs, if needed.

    If you'd to take a deeper look into what ports or IPs need to be unblocked in order for you to remediate your Security Center issues, I can definitely create a one time free support request for you.

    Please let me know if you have any other questions.
    Thank you for your time!

    Additional links:
    Azure Security Center Troubleshooting Guide
    Azure SQL DB Firewall setup

    0 comments