This page shows the platforms and environments supported by Microsoft Defender for Cloud.
Combinations of environments
Microsoft Defender for Cloud supports virtual machines and servers on different types of hybrid environments:
- Only Azure
- Azure and on-premises
- Azure and other clouds
- Azure, other clouds, and on-premises
For an Azure environment activated on an Azure subscription, Microsoft Defender for Cloud will automatically discover IaaS resources that are deployed within the subscription.
Supported operating systems
Defender for Cloud depends on the Log Analytics agent. Ensure your machines are running one of the supported operating systems for this agent as described on the following pages:
- Log Analytics agent for Windows supported operating systems
- Log Analytics agent for Linux supported operating systems
Also ensure your Log Analytics agent is properly configured to send data to Defender for Cloud
To learn more about the specific Defender for Cloud features available on Windows and Linux, see Feature coverage for machines.
Even though Microsoft Defender for Servers is designed to protect servers, most of its features are supported for Windows 10 machines. One feature that isn't currently supported is Defender for Cloud's integrated EDR solution: Microsoft Defender for Endpoint.
Managed virtual machine services
Virtual machines are also created in a customer subscription as part of some Azure-managed services as well, such as Azure Kubernetes (AKS), Azure Databricks, and more. Defender for Cloud discovers these virtual machines too, and the Log Analytics agent can be installed and configured if a supported OS is available.
Virtual machines that run in a cloud service are also supported. Only cloud services web and worker roles that run in production slots are monitored. To learn more about cloud services, see Overview of Azure Cloud Services.
Submit and view feedback for