Blog Post

Microsoft Defender for Cloud Blog
5 MIN READ

Introducing Microsoft Defender for Containers

mahersko's avatar
mahersko
Icon for Microsoft rankMicrosoft
Dec 09, 2021
Container adoption is booming - production deployments of Kubernetes clusters and containers continue to soar as organizations increasingly containerize applications to meet their needs for scalabili...
Updated Dec 09, 2021
Version 1.0
cloud security
container security
mahersko's avatar
Icon for Microsoft rankMicrosoft
Joined June 17, 2019
View Profile
Microsoft Defender for Cloud Blog
Microsoft Defender for Cloud is a cloud-native application platform (CNAPP) that offers security and compliance from code to runtime, enhanced by AI, for hybrid and multicloud environments.
DietZilz's avatar
DietZilz
Copper Contributor
Jul 25, 2022

Hello,

 

It is not 100% clear to me whether or not I need Microsoft Defender for Cloud for servers for the servers in the VMSS Scaleset. 

Looking at your article and given the fact that it is vCore based it almost looks like it replaces it. 

 

However, technically it would be possible to install other systems and services and Qualys vulnerability scan only comes with Defender for Servers. 

So in a practical example. 

I am looking at

  1. Microsoft Defender for Servers Plan 2
  2. Microsoft Defender for Containers



Let's say I have 8 user node servers with 4vCores each and 2 system node servers, i.e. 2 VMSS Scalesets.

So what is my Defender for Cloud licensing? 

40 vCore for Containers? 

 

Do I also need to accomodate server plans? Or is this superfluous as the container protection is adequate for server in Scalesets created through AKS provisioning?

If I had manually created the servers I would think I need 10 server plans? But then also since we only have 2 VMSS Scalesets this seems wrong as technically we only have 2 images to scan.

 

Can you give any clear example on how Microsoft envisions Microsoft Defender for Cloud to be configured for servers in the VMSS Scalesets of the AKS clusters? 

Many thanks for your kind help.
Dietmar