Can I disable Azure defender for a subset of VMs?

Marcelo Escudero 21 Reputation points
2021-03-06T22:57:35.36+00:00

Hi there, Quick question for you guys! I have to enable Azure Defender into a subscription with 76 VMs but I want to exclude 23 of them. Do you know if this is possible? If yes, could you let me know how to do it? Many thanks in advance!! Best, MarceloE

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,262 questions
0 comments No comments
{count} votes

Accepted answer
  1. VipulSparsh-MSFT 16,251 Reputation points Microsoft Employee
    2021-03-08T05:18:39.97+00:00

    @Marcelo Escudero

    No. When you enable Azure Defender for servers on a subscription, all the servers in the subscription will be protected by Azure Defender.

    An alternative is to enable Azure Defender for servers at the Log Analytics workspace level. If you do this, only servers reporting to that workspace will be protected and billed. However, several capabilities will be unavailable. These include just-in-time VM access, network detections, regulatory compliance, adaptive network hardening, adaptive application control, and more.

    -----------------------------------------------------------------------------------------------------------------

    If the suggested response helped you resolve your issue, please do not forget to accept the response as Answer and "Up-Vote" for the answer that helped you for benefit of the community.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful