Forum Discussion
Can Azure Sentinel monitor on-prem only?
Hi, Imagine a scenario where a client only has on-prem, but are looking for a new SIEM/SOAR solution. They will remain on-prem for an unforeseeable future. Can a new Azure Tenant be spun up to ...
I agree with Rod here.
Yes it's possible to use it entirely on-prem. You don't even need AAD Connect, you can just use cloud users if you want. But the real benefit of Azure Sentinel is in the tight integration with our cloud services.
What is your reasoning with going for Sentinel?
Yes it's possible to use it entirely on-prem. You don't even need AAD Connect, you can just use cloud users if you want. But the real benefit of Azure Sentinel is in the tight integration with our cloud services.
What is your reasoning with going for Sentinel?
Thijs Lecomteyou wrote: "You don't even need AAD Connect, you can just use cloud users if you want."
In this scenario, there is not Cloud presence, there are no Cloud users. Everything is on-prem. We are just trying to determine whether Sentinel will be able to deliver both SIEM and SOAR capabilities to an on-prem only environment.
The client in question is not satisfied with their existing SIEM solution and is look for a more modern alternative, hence Sentinel on the discussion table.