Skip to main content

💼 8.1.3.1 Ensure that Defender for Servers is Set to 'On' (Automated)

  • ID: /frameworks/cis-azure-v6.0.0/08/01/03/01

Description

The Defender for Servers plan in Microsoft Defender for Cloud reduces security risk by providing actionable recommendations to improve and remediate machine security posture. Defender for Servers also helps to protect machines against real-time security threats and attacks.

Defender for Servers offers two paid plans:

Plan 1

The following components are enabled by default:

  • Log Analytics agent (deprecated)
  • Endpoint protection

Plan 1 also offers the following components, disabled by default:

  • Vulnerability assessment for machines
  • Guest Configuration agent (preview)

Plan 2

The following components are enabled by default:

  • Log Analytics agent (deprecated)
  • Vulnerability assessment for machines
  • Endpoint protection
  • Agentless scanning for machines

Plan 2 also offers the following components, disabled by default:

  • Guest Configuration agent (preview)
  • File Integrity Monitoring

Similar

  • Sections
    • /frameworks/cis-azure-v5.0.0/08/01/03/01

Similar Sections (Take Policies From)

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 CIS Azure v5.0.0 → 💼 8.1.3.1 Ensure that Defender for Servers is set to 'On' (Automated)1no data

Similar Sections (Give Policies To)

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 CIS Azure v5.0.0 → 💼 8.1.3.1 Ensure that Defender for Servers is set to 'On' (Automated)1no data

Sub Sections

SectionSub SectionsInternal RulesPoliciesFlagsCompliance

Policies (1)

PolicyLogic CountFlagsCompliance
🛡️ Azure Subscription Microsoft Defender For Servers is not set to On🟢1🟢 x6no data