Migrate from sophos to defender

Question

I have been tasked with getting off sophos and moving to defender for servers. We are running all OUT servers on azure. Sophos is simple enough as an AV and has a simple portal for exclusions etc. I'm finding it really confusing reading about defender. I have no idea what to do. Do I manage through cloud for defender or intune. Some docs i read then link to docs for only Win10. I've looks at this stuff for 2 days solid and i;m still non the wiser. Can anyone shed any light on this ?

Answer 1

HI ,

I think you are looking for MS Defender for Endpoints. There are different plans for Defender Endpoints that you may need to consider for your deployment based on the features that they offer. Check below URL

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/defender-endpoint-plan-1-2?view=o365-worldwide

As far as onboarding is concerned , there are different options that you can utilize based on the workload ,whether if is server or Windows client. The below will give complete overview of the onboarding process

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configure-server-endpoints?view=o365-worldwide

However , if your servers are in Azure and you are using MS Defender for Cloud(previously Security Center) , there is a unified solution for onboarding that you can use to seamlessly onboard servers from Defender for Cloud to Defender for Endpoints