Azure Arc-enabled SQL Server Defender for Cloud onboarding

Question

Azure Arc-enabled SQL Server Defender for Cloud onboarding

mara7 166

If I turn on the SQL server Arc, do I have to see the sql server and arc server machines in the defender for cloud? Or do I just have to see the arc machine?

Accepted answer

0 additional answers

Your answer

Answer 1

Akshay-MSFT 17,956 Microsoft Employee Moderator

@mara7

Thank you for posing your query on Microsoft Q&A. From above description I could understand that you are looking for information if you should follow Arc enabled SQL server or Machine Arc within defender for cloud console for vulnerabilities assessment.

Please do correct for any discrepancies in my understanding by responding in the comments section.

Microsoft Defender for SQL servers on machines uses vulnerability assessment to discover, track, and assist you in the remediation of potential database vulnerabilities. Assessment scans provide an overview of your SQL machines' security state and provide details of any security findings. You should see SQL Server and SQL Database recommendation in Micrsoft defender for cloud.

So, this works in 2 dimensions, it does assess the vulnerabilities at SQL server machine level as well as at SQL server database level. If you go to Microsoft defender for cloud > Recommendations, it shows Vulnerability assessment for both SQL server as well as SQL databases, PFB snip for example:

User's image

So, answer to your question is, you must see both see the SQL Database and Arc enabled SQL server for improving your tenant secure score.

Please "Accept the answer (Yes)" and "share your feedback ". This will help us and others in the community as well.

Thanks,

Akshay Kaushik

mara7 166 Reputation points

2023-12-28T01:27:11.84+00:00

@Akshay-MSFT

Hello,

I mean this inventory list

Do they have to have two resources?

the sql server and arc server machine?

I can see only one resources that arc server machine.

I turn on Defender for cloud on the SQL server -arc machine tab

But, I just can see Arc machine on Microsoft defender for cloud inventory list.
Akshay-MSFT 17,956 Reputation points Microsoft Employee Moderator

2023-12-29T07:23:31.6433333+00:00
@mara7

Thanks for shedding light on your concern, the inventory should display 2 types of resources,

Machines - Azure Arc

SQL Server - Azure Arc (this is equal to number of SQL instance you have on the host server)

For example, in below screenshot you could see:

1 Machines - Azure Arc because I have only 1 ARC server hosting SQL instance.

2 SQL Server - Azure Arc because I have 2 DB instance on the host server.

Thanks,

Akshay Kaushik

Please "Accept the answer (Yes)" and "share your feedback ". This will help us and others in the community as well.
Akshay-MSFT 17,956 Reputation points Microsoft Employee Moderator

2024-01-02T09:02:00.45+00:00

@mara7

Hope you got a chance to review the action plan suggested below. Please do let me know if you have any queries in the comments section. If you don't have any further queries and the suggestion works as per your business need.

I hope I was able to clarify the response in the latest post and update the solution, I request that you kindly re-take the feedback for your experience on this thread.

Please "Accept the answer (Yes)" and "share your feedback ". This will help us and others in the community as well.

Thanks,

Akshay Kaushik
mara7 166 Reputation points

2024-01-03T07:25:01.9+00:00

Thanks but I don't know how to setup well.
mara7 166 Reputation points

2024-01-03T09:11:08.9666667+00:00

I can't find vulnerability assessment findings on your sql servers on machines should be remediated tab.
Akshay-MSFT 17,956 Reputation points Microsoft Employee Moderator

2024-01-05T10:22:58.6566667+00:00
@mara7

Looks to be an extension issue to me. Could you try the following:

Validate if Microsoft defender for SQL service is up and running on the windows server, try restarting the same and wait for 24 hours.

Try uninstalling Microsoft defender for cloud extension from the server and wait for it to be installed again.

Thanks

Akshay Kaushik

Share via

Azure Arc-enabled SQL Server Defender for Cloud onboarding

0 additional answers

Your answer