This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 38%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EN%3C/text%3E%3C/svg%3E)
Hi
What is the recommended security package for Azure Servers? We currently use Sophos on our non Azure cloud servers.
Thank you,
Nick
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(246.4, 4%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
Hello @Nick ,
Welcome to Microsoft Q&A and thank you for posting your questions here.
For more clarity, you were asking the recommended security package for Azure Servers, and you already using Sophos on your on-premises servers.
Sophos is good with all of its features for on-premises servers and enterprise network solutions, and I have recommended for many enterprises.
For Microsoft Azure Servers, there is no single recommended security package for Azure Servers, as different scenarios may require different security solutions.
Microsoft Defender for Cloud is the first line of defense for your resources in Azure. It periodically analyzes the security state of your Azure resources to identify potential security vulnerabilities. It then recommends how to address the vulnerabilities.
However, Azure provides a variety of security features and capabilities that can help you protect your servers from various threats and vulnerabilities. Some of these features are:
Azure Disk Encryption
Azure Security Center
Azure Firewall
Azure Backup
Find recommendations that can improve your security posture on Azure from this links:
Recommendations that can improve your security.
Security recommendations for virtual machines in Azure.
Also, you can read more about Azure Security:
https://learn.microsoft.com/en-us/azure/security/fundamentals/overview.
https://azure.microsoft.com/en-us/explore/security/.
I hope this is helpful! Do not hesitate to let me know if you have any other questions.
Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.
Best Regards,
Sina Salam
Hi Sina
Thank you for your help. There are multiple options in the portal
Defender CSPM
Cloud Workload Protection (CWP)
What is the standard option? We currently have one Azure Cloud Server which has a SQL Server database we use for development.
Hi Nick,
Defender CSPM should be the best option in your case.
Thank you.
Regards,
Sina
Thank you for your help. One other question. In Defender CSPM it shows 2 resources
1 Server
1 Storage Account
0 Databases
However we do have a SQL Server database on the server
Hi Nick,
Thank you too for your persistency and feedback.
In Cloud Security Explorer, you should be able to see all that happened. Includes any Microsoft Cloud Security Benchmark (MCSB), other compliance standards, vulnerabilities and misconfigurations.
However, for more clarity Microsoft Defender CSPM protects across all your multicloud workloads, but billing only applies for Servers, Database, and Storage accounts at $5/billable resource/month thereabout. So, the underlying compute services for AKS are regarded as servers for billing purposes. Therefore, databases are not shown as a separate category in the dashboard, but are included in the server category.
Also, if you have not enabled Defender for Database, you might need to do so, to enable the Databases plan, you can follow the steps in this link:
https://learn.microsoft.com/en-us/azure/defender-for-cloud/tutorial-enable-databases-plan
You can still view the security alerts and recommendations for your databases by using the Cloud security explorer or the Azure Workbook for Defender CSPM.
Hope this is helpful. Try to check out these options.
Success,
Sina
I would like to add some more specifics:
Get Defender for Cloud P2
Go to the Defender for Cloud > Workloads blade and take a look at the workload features you may need.
See comparison between P1 and P2 here:
https://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-defender-for-servers-select-plan
For on-prem servers, I would recommend installing the Azure Arc Agent and then from the Defender for Cloud > Workloads menu you can enable whatever workloads features you like from the list in the link above.
You can also enable defender for Endpoint from the security.microsoft.com portal but it's recommended to manage all servers through Defender for Cloud for the CSPM and CWPP capabilities.
(Server VMs in Azure don't need the Arc agent, just on-prem servers)
References:
https://learn.microsoft.com/en-us/azure/defender-for-cloud/deploy-vulnerability-assessment-vm
Hi David
Thank you for your help. Where do I find Defender for Cloud > Workloads blade in the portal?
Hi Nick
You can search for Microsoft Defender for Cloud from search bar in your portal our simply type defender as shown below. Then, after click on Microsoft Defender for Cloud, you will see under Cloud Security lists, Workload protections.
Have a good Success.
Sina
Thank you for the screenshot. I found workload protections, but I do not see the Defender for Cloud P2
Hi Nick,
P2 is a pricing option that you might have subscribed. I don't know why @David asked you to check out for what you don't have, but I commented to make your navigation easy.
The Defender for Servers plan is part of Defender for Cloud and is available in two pricing models; P1/ P2. P1 focused on a limited set of defenses with a strong focus on Defender for Endpoint technology. P2 contains the full set of Defender for Cloud-enhanced security features including for example; Network layer threat detection, FIM, Qualys vulnerability assessment, and 500MB free data ingestion.
P1=$5 Server/Month (calculated for running time)
P2=$15 Server/Month (calculated for running time)
For your on-prem purpose:
When you have Microsoft Defender for Severs Plan 1, it includes Microsoft Defender for Endpoint Plan 2. Both P1/ P2 contains all features of Defender for Endpoint P2. By integrating Defender for Endpoint with Defender for Cloud, it gives the following benefits:
Automated onboarding
Azure Arc (On-Prem) can be easily deployed using Defender for Cloud
The Defender for Cloud portal pages display Defender for Endpoint alerts
After enabling the Defender for Endpoint integration in Defender for Cloud machines will be provisioned.
Concentrate on what you already have in-place for your cloud resources, if you would need to extend the cloud to on-premises integrating Microsoft Defender; then, that will be a good idea.
Success in all you do.
Sina
Thank you for clarifying