Go from MS ATP to Azure ATP

Question

Hi guys,
I was asked to help moving/transition from MS ATP to Azure ATP.
As I understand the MS ATP is an older agent installed on on-prem DCs?
The Azure ATP is a newer agent? (if that is cloud only what was MS ATP them, on-prem only?)
They both feed data into ATA?

What is the difference and is it hard to upgrade from MS ATP to Azure ATP?

Had read a bunch documents but cannot get the grip on this.

Thanks and sorry for my very unsophisticated questions...

Answer 1

I am assuming you mean ATA vs AATP (MDI).
Functionally the products do the same concept.
ATA is "on prem" in the sense that in additionally to deploying an agent on the DC, you also deploy the "center" that holds all the data on your own.
It's also the older product that is no longer actively developed (switching to extended support on Jan 21).

For AATP (MDI) you just need to install the sensor services on the DC (instead of the ATA Gateway services) and Microsoft gives you the "Center" hosting in Azure.
This product is actively developed, and at this point also offers much more features compared to the older ATA.

As for migration, it's normally uninstalling the Gateway services, and installing the sensor services instead.
There is no auto migration, it's advised to take note of any settings you had in the ATA console (like exclusions, AD credentials, notification rules, reports etc)
And manually apply them in AATP Portal.

Eventually, both products protect on prem domain controllers.

Answer 2

https://learn.microsoft.com/en-us/defender-for-identity/migrate-from-ata-overview

please find the answer i hope this also help you hope the answer of the question if issue revolve please accept answer