Jul 22 2023 10:33 PM
Is there a problem when installing the MDE agent on a VM without public IP?
For examples, problems of updating agent...etc
Jul 23 2023 06:47 AM
SolutionThe VM itself does not need a public IP, but it will need be able to reach the internet.
This can be through a proxy or FW etc, as long as the required URLs are reachable.
Jul 23 2023 05:48 PM - edited Jul 23 2023 05:52 PM
Jul 23 2023 06:45 PM - edited Jul 23 2023 06:45 PM
If you can access all the required URLS it is fine.
If you do not have any access to the internet at all, you cannot use MDE.
Onboarding to MDE means registering the VM to the MDE cloud platform, and all the EDR functionality lies in the cloud, so it requires internet access.
Logs are streamed from the VM to the cloud, and are analyzed in the cloud.
We are talking about the MDE as an EDR, right?
Or is this about Defender Antivirus?
Jul 23 2023 06:51 PM
Jul 23 2023 06:57 PM
Jul 23 2023 07:00 PM
Jul 23 2023 06:47 AM
SolutionThe VM itself does not need a public IP, but it will need be able to reach the internet.
This can be through a proxy or FW etc, as long as the required URLs are reachable.