Get answers to common questions about Microsoft Defender for Storage.
Is malware scanning included in the free trial of Defender for Cloud?
Malware scanning in Defender for Storage is not included for free in the first 30 day trial and will be charged from the first day. Defender for Cloud is free for the first 30 days. Any usage beyond 30 days is automatically charged as per the pricing scheme. Learn more.
Is it possible to enable Defender for Storage on a resource level?
Yes, it's possible to enable Defender for Storage at the resource level and set up Malware Scanning and Sensitivity Scanning accordingly. Keep in mind that enabling it at the subscription level is the recommended approach, as it will automatically protect all new storage accounts.
Can I exclude certain storage accounts from protection?
Yes, you can exclude storage accounts from protection.
How long does it take for subscription-level enablement to take effect?
Enabling Defender for Storage at the subscription level might take up to 24 hours to be fully enabled across all storage accounts.
Is there a difference in features between the new and Defender for Storage (classic)?
Yes, there's a difference in the capabilities of the two plans. New and future security capabilities will only be available in the new Defender for Storage plan. If you want to access these new capabilities, you need to enable the new plan.
Will the Defender for Storage (classic) continue to be supported?
The Defender for Storage (classic) will still continue to be supported for three years after the release of the new Defender for Storage to general availability (GA).
Can I switch back to the Defender for Storage (classic)?
Yes, you can use the REST API to return to the Defender for Storage (classic) plan.
If you want to switch back to the Defender for Storage (classic) plan, you need to do two things. First, disable the new Defender for Storage plan that is enabled now. Second, check if there are any policies that can re-enable the new plan and turn them off too. The two Azure built-in policies enabling the new plan are Configure Microsoft Defender for Storage to be enabled and Configure basic Microsoft Defender for Storage to be enabled (Activity Monitoring only).
How can I calculate the cost Defender for Storage?
To estimate the cost of Defender for Storage and add-ons like Malware Scanning, we've provided a pricing estimation workbook that you can deploy in your environment. This workbook also provides visibility into your Defender for Storage and add-ons - Malware Scanning and Sensitivity Data Discovery - enablement status across subscriptions. For more information about how this workbook works, visit this Blog Post. You can also check out the Defender for Cloud pricing page for more information.