Forum Discussion

mara's avatar
mara
Copper Contributor
Jul 23, 2023

Is there a problem when installing the MDE agent on a VM without public IP?

Is there a problem when installing the MDE agent on a VM without public IP? For examples, problems of updating agent...etc
  • Jonhed's avatar
    Jonhed
    Jul 23, 2023

    mara 

    The VM itself does not need a public IP, but it will need be able to reach the internet.

    This can be through a proxy or FW etc, as long as the required URLs are reachable.

Jonhed's avatar
Jonhed
Steel Contributor
Jul 24, 2023

If you can access all the required URLS it is fine.

If you do not have any access to the internet at all, you cannot use MDE.
Onboarding to MDE means registering the VM to the MDE cloud platform, and all the EDR functionality lies in the cloud, so it requires internet access.

Logs are streamed from the VM to the cloud, and are analyzed in the cloud.

We are talking about the MDE as an EDR, right?
Or is this about Defender Antivirus?

mara's avatar
mara
Copper Contributor
Jul 24, 2023
Yes MDE right,
If I can reach internet but no public ip, Is all good right?
What are the issues with installing MDE and disconnecting the public ip?
As you said, I think Is all right. right?
  • Jonhed's avatar
    Jonhed
    Steel Contributor
    Jul 24, 2023
    Yes, does not matter if the VM has its own public IP or not.
    As long as it has access to internet someway.
    • mara's avatar
      mara
      Copper Contributor
      Jul 24, 2023
      Thanks a lot,
      I have a question.
      Is there any problems if I use Defender Antivirus without no public ip ?

Resources