Nov 01 2021
Nov 01 2021
Got a few questions today, hopefully someone can shed some light on these question regarding MS Defender for Endpoint (to be deployed on a server) and Azure Defender for Servers :)
Been trying to wrap my head around "MS Defender for Endpoint (MDE) vs Azure Defender for Servers" - and what I have come up with is this:
"Azure Defender for Servers includes MDE plus Cloud Protection Posture Management and Cloud Workload Protection Platform....hence the $15/server/month"
Is that correct?
My Azure Security Center is showing me 8 Azure Defender for Servers (under Price & Settings).
How can I add more? Lets say I want all my servers listed here...how do I do this?
So my ASC console shows 8 Azure Defender for Servers.
However, if I filter for 'Servers' in my Microsoft Defender for Endpoint Portal, I see MDE deployed on 41 servers.
Why is only 1 server from the Azure Defender for Server list on my MDE server list?
Shouldn't I see all of them on both lists?
Does Azure Defender for Server also need the Log Analytics Agent deployed, while if I am only installing MDE on a server, I dont need the Log Analytics Agent installed?
Looking forward to some clarifications around my questions - and thank you all in advance.