Forum Discussion
Solved
SQL Advanced Threat Protection - Requirements Unclear
When configuring Defender for SQL, nothing suggests auditing is required for ATP to work. However, when looking at audit section https://learn.microsoft.com/en-us/azure/azure-sql/database/auditing-o...
- SQL auditing is not a requirement for MDC to protect your Azure SQL, it's a recommendation based on the MS benchmark to increase your posture score. MDC will work if SQL audit is enabled or not.
Roberts951 once you turn on the Defender for Cloud for Azure SQL, MDC will automatically trigger a list of recommendations to apply for you Azure SQL based on Microsoft cloud security benchmark standard, see example below
- It doesn't specify that the auditing is a requirement for the APT functionality to be able to correlate and create alerts.
- SQL auditing is not a requirement for MDC to protect your Azure SQL, it's a recommendation based on the MS benchmark to increase your posture score. MDC will work if SQL audit is enabled or not.
- This is spot on - confirmed with with MS support as well.
