The server must only use approved network communication libraries, ports, and protocols. Obtain a list of all approved network libraries, communication ports, and protocols from the server documentation. Verify that the protocols are enabled for the instance. Run the following SQL to list ports: SELECT VARIABLE_NAME, VARIABLE_VALUE FROM performance_schema.global_variables WHERE VARIABLE_NAME in ('port', 'mysqlx_port', 'admin_port'); The default ports for MySQL for organizational connects are: Classic MySQL Protocol - 3306, MySQL X Protocol 33060, MySQL Admin Port (disabled by default) If these are in conflict with guidance, and not explained and approved in the system documentation, this is a finding. Run the following to determine if a local socker/pipe are in use: SELECT VARIABLE_NAME, VARIABLE_VALUE FROM performance_schema.global_variables where VARIABLE_NAME like '%pipe%' or VARIABLE_NAME = 'socket' or VARIABLE_NAME = 'mysqlx_socket'; Values are for classic and xprotocol will be returned. For example on Linux 'socket','/tmp/mysql.sock' 'mysqlx_socket','/tmp/mysqlx.sock' Windows 'named_pipe', 'ON'; If these are in conflict with guidance, and not explained and approved in the system documentation, this is a finding. Run the following statement to inspect port settings: SELECT VARIABLE_NAME, VARIABLE_VALUE FROM performance_schema.global_variables WHERE VARIABLE_NAME LIKE '%port%' or VARIABLE_NAME LIKE '%port' order by VARIABLE_NAME; Linux local socket select @@socket; Windows local pipe select @@named_pipe; If any ports or protocols are used that are not specifically approved in the server documentation, this is a finding.