Forum Discussion
A vulnerability assessment solution should be enabled on your virtual machines
Problem: A vulnerability assessment solution should be enabled on your virtual machines from MCSB Initiative marking my VMs as unhealthy in MS Defender Secure score. My systems have Qualys as Vul sc...
Matan_Shabtay
Microsoft
MicrosoftHave you installed Qualys by your own? not through Defender for Cloud's integration with Qualys?
If that is the case then Defender for Cloud will not recognize that you have installed it and therefore will mark your VMs as unhealthy.
This is because Defender for Cloud checks if the VM has 'Qualys.QualysAgent' or 'Qualys.
QualysAgentLinux' VM extension installed in the VM, but since you didnt install the agent through Azure control plane, you won't have this VM extension installed. For more info refer to https://learn.microsoft.com/en-us/azure/defender-for-cloud/deploy-vulnerability-assessment-byol-vm
So in that case I have to DISABLE the recommendation of "A vulnerability assessment solution should be enabled on your virtual machines" from Azure Security Center Initiative so that it doesnt affect the secure score?