Microsoft Defender Setup details

Question

How do we check whether the setup is working or not, does the below response say it would have the setup configured 100%
[root@n42-cs-maat001p AV]# mdatp connectivity test
Testing connection with https://cdn.x.cp.wd.microsoft.com/ping ... [OK]
Testing connection with https://eu-cdn.x.cp.wd.microsoft.com/ping ... [OK]
Testing connection with https://wu-cdn.x.cp.wd.microsoft.com/ping ... [OK]
Testing connection with https://nf.smartscreen.microsoft.com/api/network/mac ... [OK]
Testing connection with https://unitedstates.x.cp.wd.microsoft.com/api/report ... [OK]
Testing connection with https://ussus1eastprod.blob.core.windows.net ... [OK]
Testing connection with https://ussus1westprod.blob.core.windows.net ... [OK]
Testing connection with https://unitedstates.smartscreen.microsoft.com/api/network/mac ... [ERROR]
["(request #8589)","Network is down"]
Network is down (error code 100)
Testing connection with https://unitedstates.smartscreen-prod.microsoft.com/api/network/mac ... [OK]
Testing connection with https://winatp-gw-cus.microsoft.com/test ... [OK]
Testing connection with https://winatp-gw-eus.microsoft.com/test ... [OK]
Testing connection with https://us-v20.events.data.microsoft.com/ping ... [ERROR]
Timeout was reached
HTTP response: 0
Testing connection with https://automatedirstrprdcus.blob.core.windows.net ... [OK]
Testing connection with https://automatedirstrprdeus.blob.core.windows.net ... [OK]

Answer 1

Hi LingamShravanthiArlington-6248,

Thank you for your post.

As far as I know, we could try to use MpCmdRun.exe to verify if client connect to Windows Defender.

MpCmdRun.exe” –validatemapsconnection

If all is good, you get the following result:

ValidateMapsConnection successfully established a connection to MAPS

https://www.verboon.info/2019/07/testing-windows-defender-maps-connectivity-with-powershell/

Based on my search, to verify if the installation succeeded, one can obtain installation.log and search the installation logs. Please check the troubleshooting part in the link below.

https://argonsys.com/microsoft-cloud/library/deploying-microsoft-defender-advanced-threat-protection-for-linux-servers/

Meanwhile, if we try to test the connection using mdatp connectivity test. The expected output just like the information provided by the official website below.

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/linux-support-connectivity?view=o365-worldwide

If the reply is helpful, please Upvote and Accept as answer

Best Regards,

Carl