Common questions about Defender for Storage classic

Get answers to common questions about Microsoft Defender for Storage classic.

Are there differences in features between the new Defender for Storage plan and the legacy Defender for Storage Classic plan?

Yes. The new Defender for Storage plan offers additional security capabilities, such as near real-time malware scanning and sensitive data threat detection. This plan also provides a more predictable pricing structure for better control over coverage and costs. Learn more about the benefits of migrating to the new plan.

How do I estimate charges at the account level?

To get an estimate of Defender for Storage classic costs, use the Price Estimation Workbook in the Azure portal.

Can I exclude a specific Azure Storage account from a protected subscription?

Yes, you can exclude specific storage accounts from protected subscriptions in Defender for Storage (classic).

Can I switch from the per-transaction pricing in Defender for Storage (classic) to the new Defender for Storage plan?

Yes, you can move to the new Defender for Storage plan with per-storage account pricing through the Azure portal or other supported methods. This change isn't automatic, you'll need to actively make the switch. Learn about how to migrate to the new Defender for Storage.

Can I exclude specific storage accounts from protection in the new Defender for Storage plan?

Yes, the new Defender for Storage plan with per-storage account pricing allows you to exclude and configure specific storage accounts within protected subscriptions. However, you'll need to set up the exclusion again after you migrate to the new plan. Learn about how to migrate to the new Defender for Storage.

Can I switch from an existing per-transaction pricing under the Defender for Storage (classic) plan to the new per-storage account pricing under the new Defender for Storage plan?

Yes, you can migrate to the per-storage account pricing under the new Defender for Storage plan in the Azure portal or using any of the supported enablement methods.

Can I return to per-transaction pricing in the Defender for Storage (classic) plan after switching to per-storage account pricing?

Yes, you can enable per-transaction pricing under the Defender for Storage (classic) plan to migrate back from per-storage account pricing using all enablement methods except for the Azure portal.

Will you continue supporting per-transaction pricing in the Defender for Storage (classic) plan?

Yes, you can enable per-transaction pricing under the Defender for Storage (classic) plan from all the supported enablement methods, except for the Azure portal.

Under the Defender for Storage (classic) per-storage account pricing, can I exclude specific storage accounts from protections?

No, you can only enable per-storage account pricing under the Defender for Storage (classic) plan at the subscription level. All storage accounts in the subscriptions are protected.

How long does it take for per-storage account pricing to be enabled in the Defender for Storage (classic) plan?

When you enable Microsoft Defender for Storage at the subscription level for per-storage account or per-transaction pricing under the Defender for Storage (classic) plan, it takes up to 24 hours for the plan to be enabled.

Is there any difference in the feature set of per-storage account pricing compared to the legacy per-transaction pricing in the Defender for Storage (classic) plan?

No. Both per-storage account and per-transaction pricing under the Defender for Storage (classic) plan include the same features. The only difference is the pricing structure.

How can I estimate the cost for each pricing under the Defender for Storage (classic) plan?

To estimate the cost according to each pricing for your environment under the Defender for Storage (classic) plan, we created a pricing estimation workbook and a PowerShell script that you can run in your environment.