Share via

Is Defender for Cloud's integrated Qualys vulnerability scanner FedRAMP authorized?

Chen, Vivien (CGI Federal) 0 Reputation points
2023-02-27T20:21:24.8266667+00:00

Is Defender for Cloud's integrated Qualys vulnerability scanner FedRAMP authorized? And if so, what level?

Is Microsoft's Defender built-in Vulnerability Management be FedRAMP authorized? And if so, what level?

If these vulnerability scanners are in Azure Commercial does that affect their FedRAMP authorization level?

Thank you!

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Andrew Blumhardt 10,051 Reputation points Microsoft Employee
    2023-03-01T19:40:29.95+00:00

    FedRamp applies to the Azure Gov tenants. Qualys is not available for the Gov tenants. https://learn.microsoft.com/en-us/azure/defender-for-cloud/deploy-vulnerability-assessment-vm#availability

    I recommend the following link:
    https://learn.microsoft.com/en-us/azure/compliance/offerings/offering-fedramp

    I also recommend working with your organization's Microsoft support contacts for additional details if needed.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.