User Profile
hmannila2021
Copper Contributor
Joined Aug 09, 2021
User Widgets
Recent Discussions
Azure Lighthouse: how do you target the clients based on their score?
Hello, My apologies if this has already been covered in a different thread. We have a partner who's asking the following, but from the documentation, I can't see how to do this - not sure if an alert using Azure Monitor would be able to effect this requirement: "My requirement is to be able to pull a report from my client's tenant to understand their current security posture. ( Secure Score). Microsoft lighthouse has added the Secure score in August I believe https://gbr01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FMicrosoftDocs%2Fmicrosoft-365-docs%2Fblob%2Fpublic%2Fmicrosoft-365%2Flighthouse%2Fm365-lighthouse-whats-new.md%23microsoft-secure-score&data=05%7C01%7Cazure%40westcoastcloud.co.uk%7C987887900bee47074dab08dbc66db091%7Cf40947984f1c419e9d00b2f366e1064d%7C1%7C0%7C638321946679492990%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=HSUi9EuB8JxweC3FMXMrXvC1Kq6TCHEnNAtlGktYDiY%3D&reserved=0. I am able to see the overall accumulated score but would like a breakdown to be able to target the clients based on their score. " Thanks for any help you're able to provide, Helenna793Views0likes0CommentsData Connector for Defender for Endpoint Server
Hello all, I’ve checked Sentinel in my Sandbox environment and can’t see a specific Data Connector for Defender for Endpoint Server (but can see one for Defender for Endpoint). Looking at the Defender for Endpoint connector, it doesn't specify servers in the description of the connector. Please would you let me know if there is a specific connector suitable for Defender for Endpoint Server? Or if the Defender for Endpoint connector would cover (on-prem) servers? Thanks for your help.SolvedRe: Onboarding servers to MDE after September 2022
Hi Bharat07 - here is what Microsoft have cleared up in the ticket I raised: Defender for Endpoint for Servers is now end of life, but it’s still included in the Price Files Microsoft send us at the start of each calendar month. This was previously an add-on license for any on-prem servers (rather than clients). Therefore, any customer already purchasing this license, can renew the license (as stated by Renato from Microsoft). But for any customer not already purchasing this license, for their on-prem servers they should use: - Defender for Servers (even if they *only* have on-prem servers) - or Defender for Business Servers (which only covers on-prem servers).5.4KViews0likes0CommentsRe: Defender for Endpoint Server SKU - is it still valid?
Thank you for letting me know, Sven. We don't know for certain yet, but we believe it is / near to, end of life. However, it’s still included in the Price Files Microsoft send us at the start of each calendar month. The conclusion at the moment is that for any customer already purchasing this license, they can purchase additional licenses. But for any customer not already purchasing this license, they should use Defender for Servers (even if they only have on-prem servers), or Defender for Business Servers. I'm still waiting for Microsoft Support to confirm this.4.9KViews0likes2CommentsRe: Onboarding servers to MDE after September 2022
I work for a CSP, and unfortunately we've been receiving mixed messaging from Microsoft with the DforE Server license. Initially we were told (through Microsoft webinars, etc., Sept-Nov 2022) that any servers would need to be onboarded through Defender for Servers (Azure). But Microsoft are still sending us our monthly Price Files with DforE Server SKUs, so customer can still purchase this license. And of course for organisations who don't use Azure, they don't want to have to get an Azure Subscription set up, Azure Arc, learn about how Azure works, etc., purely to defend their servers. I have asked the question here: https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/defender-for-endpoint-server-sku-is-it-still-valid/m-p/3726569 (no reply as yet) and also had our Support team log a ticket with Microsoft to try to get a definitive answer. My hunch is that initially Microsoft wanted to have servers onboarded through Defender for Servers, but due to the backlash (their 'Demystifying Defender for Servers' webinar is a case in point) they are re-thinking this approach. I could be wrong, but until we have a definitive answer from Microsoft, we're in the dark.5.7KViews1like2CommentsDefender for Endpoint Server SKU - is it still valid?
Hello, Currently, customers can use Defender for Servers in Azure to onboard servers on-prem, Azure, and other cloud. If a customer (within CSP) has purchased a Defender for Endpoint Server license, please would you let me know: a) is this (Defender for Endpoint Server) still a valid license? (We assume this is the case, as it's still included in the Microsoft Price File we receive from Microsoft at the start of each month.) b) can they use Defender for Endpoint Server, as well as Defender for Servers (concurrently)? c) if they just want to use Defender for Servers, what happens about the duplication of cost for the Defender for Endpoint Server license? Thanks for your help, Helenna5.4KViews0likes4CommentsDefender for Vulnerabilities Management - is add-on available with MDE Plan 2 Defender for Servers?
Core capabilities for Defender for Vulnerabilities Management are in MDE Plan 2. And you can buy an add-on for Defender for Vulnerabilities Management for the remaining (5) capabilities. (Or you can buy a Standalone Defender for Vulnerabilities Management.) However, if you have MDE Plan 2 as part of Defender for Servers, MDE is not an ‘explicit’ license, so will you still be able to get the add-on license for Defender for Vulnerabilities Management? Will the licensing requirements for the add-on for Defender for Vulnerabilities Management (https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/production-deployment?view=o365-worldwide) recognise that there is an ‘implicit’ MDE Plan 2 license with Defender for Servers? Or will those customers with MDE Plan 2 as part of Defender for Servers then also need to purchase a license for Standalone Defender for Vulnerabilities Management (and thus effectively duplicating the core capabilities of Defender for Vulnerabilities Management)?Solved2KViews0likes2Comments
Recent Blog Articles
No content to show