Update Defender for SQL Servers on Machines plan configuration ,What action take for this protection plan

Question

Update Defender for SQL Servers on Machines plan configuration ,What action take for this protection plan

Venkata Subbareddy 0

We got email from client for Update Defender for SQL Servers on Machines plan configuration
is this update applicable to our environment and if yes what action we have to take, please provide the steps ?

Jose Benjamin Solis Nolasco 3,511 Reputation points

2025-05-01T12:44:09.3766667+00:00
Well, follow this guide so you can proceed with the update that Microsoft is recommending to your SQL Environment

Links https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-sql-usage

Links https://learn.microsoft.com/en-us/azure/defender-for-cloud/update-sql-machine-configuration

Identify the Machines with SQL Servers

Use Azure Arc or Azure guest configuration to detect machines running SQL Server.

These can be on-prem or in other clouds.

Ensure Prerequisites Are Met

The machine must be Azure Arc-enabled if it’s not a native Azure VM.

SQL Server must be properly discovered.

The Log Analytics agent or Azure Monitoring Agent (AMA) must be installed.

The Microsoft Defender for Endpoint integration is also recommended.

Enable the Defender Plan

Go to:

Azure Portal → Microsoft Defender for Cloud → Environment Settings → [Select Subscription] → Defender Plans

Make sure “Defender for SQL servers on machines” is turned ON.

Configure the SQL Vulnerability Assessment

For each machine:

Go to Microsoft Defender for Cloud → Inventory → [Your SQL server machine]

Enable SQL Vulnerability Assessment if not yet active.

Ensure Log Analytics workspace is properly connected.

Validate and Monitor

Go to Defender for Cloud → Recommendations

Check for any alerts or misconfiguration under:

“SQL servers on machines should have vulnerability findings resolved”

“SQL servers on machines should be protected by Microsoft Defender for SQL” Identify the Machines with SQL Servers

Use Azure Arc or Azure guest configuration to detect machines running SQL Server.

These can be on-prem or in other clouds.

2. Ensure Prerequisites Are Met

The machine must be Azure Arc-enabled if it’s not a native Azure VM.

SQL Server must be properly discovered.

The Log Analytics agent or Azure Monitoring Agent (AMA) must be installed.

The Microsoft Defender for Endpoint integration is also recommended.

3. Enable the Defender Plan Go to:

Azure Portal → Microsoft Defender for Cloud → Environment Settings → [Select Subscription] → Defender Plans

Make sure “Defender for SQL servers on machines” is turned ON. 4. Configure the SQL Vulnerability Assessment For each machine:

Go to Microsoft Defender for Cloud → Inventory → [Your SQL server machine]

Enable SQL Vulnerability Assessment if not yet active.

Ensure Log Analytics workspace is properly connected.

5. Validate and Monitor

Go to Defender for Cloud → Recommendations

Check for any alerts or misconfiguration under:

“SQL servers on machines should have vulnerability findings resolved”

“SQL servers on machines should be protected by Microsoft Defender for SQL”

😊 If my answer helped you resolve your issue, please consider marking it as the correct answer. This helps others in the community find solutions more easily. Thanks!
Venkata Jagadeep 1,400 Reputation points Microsoft External Staff Moderator

2025-05-06T02:45:27.0133333+00:00

Hello Venkata Subbareddy,

The Defender for SQL Servers on Machines plan is one of the Defender for Databases plans in Microsoft Defender for Cloud and now it is undergoing a transition to the new agent architecture.

Customers who enabled Defender for SQL Server on machines plan before 21st April are required to follow these instructions to update their configuration, following the enhanced agent release.

You can follow the steps mentioned by Jose Benjamin Solis Nolasco in the previous comment to update the Microsoft Recommendations.

Please let us know if you have any further questions.
Venkata Jagadeep 1,400 Reputation points Microsoft External Staff Moderator

2025-05-07T03:13:53.4766667+00:00

Hello Venkata Subbareddy,

Did you get a chance to review the comments posted by Jose Benjamin Solis Nolasco and myself. And in case if you have any questions, please let us know for further clarification.
Venkata Jagadeep 1,400 Reputation points Microsoft External Staff Moderator

2025-05-08T00:50:58.54+00:00

Hello Venkata Subbareddy,

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Venkata Jagadeep 1,400 Reputation points Microsoft External Staff Moderator

2025-05-09T02:21:18.0533333+00:00

Hello Venkata Subbareddy,

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
SrideviM 5,710 Reputation points Microsoft External Staff Moderator

2025-05-09T07:34:08.39+00:00

Hello Venkata Subbareddy,

As Jose Benjamin Solis Nolasco suggested, you can follow this Microsoft Article for the steps https://learn.microsoft.com/en-us/azure/defender-for-cloud/update-sql-machine-configuration.

Please confirm if it's helpful or not. Otherwise, respond with more details and we will try to help.
SrideviM 5,710 Reputation points Microsoft External Staff Moderator

2025-05-12T00:38:41.4733333+00:00

Hello Venkata Subbareddy,

Is there anything else I can help you with regarding this issue? If you still need further help, please feel free to let me know. Otherwise, respond with more details and we will try to help.