The aim of this article is to give you a better understanding of the Microsoft Defender Vulnerability Management capabilities available to Microsoft Defender for Cloud customers, as well as information on some recent changes in behavior, which enables these capabilities only to eligible devices.
Defender Vulnerability Management premium capabilities are included in Defender for Servers Plan 2 and available for eligible server devices via the Microsoft 365 Defender portal.
Customers that wish to benefit from these Defender Vulnerability Management premium capabilities on their client devices, can either https://learn.microsoft.com/en-us/microsoft-365/security/defender-vulnerability-management/get-defender-vulnerability-management?view=o365-worldwide Defender Vulnerability Management Standalone or the Defender Vulnerability Management Add-on license for their Microsoft Defender for Endpoint Plan 2 devices.
Background:
https://learn.microsoft.com/en-us/microsoft-365/security/defender-vulnerability-management/defender-vulnerability-managementis integrated in https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/defender-endpoint-plan-1-2?view=o365-worldwide#compare-microsoft-endpoint-security-plans-1 and https://learn.microsoft.com/en-us/azure/defender-for-cloud/deploy-vulnerability-assessment-defender-vulnerability-management.
For client devices, Defender Vulnerability Management capabilities are available in the following offerings:
- Core capabilities in Defender for Endpoint Plan 2.
- https://aka.ms/mdvmgablog capabilities via Defender Vulnerability Management Add-On license on top of Defender for Endpoint Plan 2.
- Core and premium capabilities via Defender for Vulnerability Management Standalone license, currently available as a https://signup.microsoft.com/get-started/signup?products=E8AEC735-F13E-4371-9A0B-7502F321C95B while in public preview.
https://learn.microsoft.com/en-us/microsoft-365/security/defender-vulnerability-management/defender-vulnerability-management-capabilities?view=o365-worldwide#vulnerability-management-capabilities-for-servers, Defender for Endpoint and Defender Vulnerability Management integrates seamlessly with Defender for Servers. You can onboard servers automatically and have servers monitored by Defender for Cloud appear in Defender for Endpoint and Defender Vulnerability Management dashboard.
- Defender for Servers Plans 1 includes Defender Vulnerability Management Core capabilities.
- Defender for Server Plan 2 includes both Core and Premium capabilities.
Initially, when Defender Vulnerability Management premium capabilities were rolled out in Defender for Servers Plan 2, they were enabled across all devices (both clients and servers) for customers with Defender for Servers Plan 2.
Update:
Following a recent update, the Defender Vulnerability Management premium capabilities are only available to eligible client devices for customers that:
- Purchased the Defender Vulnerability Management Add-on
- Started an https://learn.microsoft.com/en-us/microsoft-365/security/defender-vulnerability-management/get-defender-vulnerability-management?view=o365-worldwide.
Detailed messaging describing this change was made available in the Defender Vulnerability Management portal in addition to https://learn.microsoft.com/en-us/microsoft-365/security/defender-vulnerability-management/defender-vulnerability-management-capabilities?view=o365-worldwide#vulnerability-management-capabilities-for-servers.
How does this affect me?
Customers who are interested in continuing to use these premium capabilities on their client devices, which are not covered by Defender for Servers Plan 2, are encouraged to start a https://learn.microsoft.com/en-us/microsoft-365/security/defender-vulnerability-management/get-defender-vulnerability-management?view=o365-worldwide#try-defender-vulnerability-management-standalone or https://learn.microsoft.com/en-us/microsoft-365/security/defender-vulnerability-management/defender-vulnerability-management-trial?view=o365-worldwide trial and regain access to the premium capabilities for their client devices, with their previous data saved (e.g., Security baselines profiles).
With this update, Defender for Servers Plan 2 customers will be able to use the https://learn.microsoft.com/en-us/microsoft-365/security/defender-vulnerability-management/tvm-block-vuln-apps?view=o365-worldwide capability on their eligible server devices.
Learn more
If you’re interested in learning more about Microsoft Defender Vulnerability Management https://www.microsoft.com/en-us/security/business/threat-protection/microsoft-defender-vulnerability-management to take advantage of our free 90-day trial, check out our https://aka.ms/mdvmguide, and read more information in our https://learn.microsoft.com/en-us/microsoft-365/security/defender-vulnerability-management/defender-vulnerability-management?view=o365-worldwide.
