Defender for Cloud begins assessing the security state of all your VMs, networks, applications, and data. For on-premises Windows and Linux servers and VMs, you can manually deploy the agent, use your organization's deployment tool, such as Microsoft Endpoint Protection Manager, or utilize scripted deployment methods. When activated, the Log Analytics agent deploys automatically into Azure Virtual Machines. Microsoft Defender for Cloud provides threat protection for Azure workloads, both on-premises and in other clouds, including Windows and Linux virtual machines (VMs), containers, databases, and Internet of Things (IoT). CWPP is defined by workload-centric security protection solutions, which are typically agent-based. Defender for Cloud is segmented as a cloud security posture management (CSPM) and cloud workload protection platform (CWPP). This is an advanced, unified security-management platform that Microsoft offers to all Azure subscribers.

The architecture consists of the following workflow: Architectureĭownload a Visio file of this architecture. This reference architecture illustrates how to use Microsoft Defender for Cloud and Microsoft Sentinel to monitor the security configuration and telemetry of on-premises and Azure operating system workloads.

Verint edge vms vid center monitor