diff --git a/plugins/services/mssql.go b/plugins/services/mssql.go
index 93055ec..47203b6 100644
--- a/plugins/services/mssql.go
+++ b/plugins/services/mssql.go
@@ -65,7 +65,7 @@ func (p *MSSQLPlugin) createAuthFunc(info *common.HostInfo, config *common.Confi
 
 // doMSSQLAuth 执行MSSQL认证
 func (p *MSSQLPlugin) doMSSQLAuth(ctx context.Context, info *common.HostInfo, cred Credential, config *common.Config, state *common.State) *AuthResult {
-	connStr := fmt.Sprintf("server=%s;user id=%s;password=%s;port=%d;database=master;connection timeout=%d",
+	connStr := fmt.Sprintf("server=%s;user id=%s;password=%s;port=%d;database=master;encrypt=disable;connection timeout=%d",
 		info.Host, cred.Username, cred.Password, info.Port, int64(config.Timeout.Seconds()))
 
 	db, err := sql.Open("mssql", connStr)
@@ -148,7 +148,7 @@ func classifyMSSQLErrorType(err error) ErrorType {
 func (p *MSSQLPlugin) identifyService(ctx context.Context, info *common.HostInfo, config *common.Config, state *common.State) *ScanResult {
 	target := info.Target()
 
-	connStr := fmt.Sprintf("server=%s;user id=invalid;password=invalid;port=%d;database=master;connection timeout=%d",
+	connStr := fmt.Sprintf("server=%s;user id=invalid;password=invalid;port=%d;database=master;encrypt=disable;connection timeout=%d",
 		info.Host, info.Port, int64(config.Timeout.Seconds()))
 
 	db, err := sql.Open("mssql", connStr)
diff --git a/web/api/scan.go b/web/api/scan.go
index 4dc75b5..6ed4f64 100644
--- a/web/api/scan.go
+++ b/web/api/scan.go
@@ -185,7 +185,7 @@ func (h *ScanHandler) runScan(req ScanRequest) {
 		fv.ScanMode = "all"
 	}
 	fv.ThreadNum = req.ThreadNum
-	if fv.ThreadNum == 0 {
+	if fv.ThreadNum <= 0 {
 		fv.ThreadNum = 600
 	}
 	fv.TimeoutSec = int64(req.Timeout)
@@ -193,7 +193,7 @@ func (h *ScanHandler) runScan(req ScanRequest) {
 		fv.TimeoutSec = 3
 	}
 	fv.ModuleThreadNum = req.ModuleThreadNum
-	if fv.ModuleThreadNum == 0 {
+	if fv.ModuleThreadNum <= 0 {
 		fv.ModuleThreadNum = 20
 	}
 	fv.DisablePing = req.DisablePing