Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Important
Attention: All Microsoft Defender for Cloud features will be officially retired in Azure in China region on August 18, 2026 per the announcement posted by 21Vianet.
Important
- As of August 1, 2023, customers with an existing subscription to Defender for DNS can continue to use the service as a standalone plan.
- There's no change to the protection scope: Defender for DNS continues to protect all Azure resources connected to Azure's default DNS resolvers. The change affects how DNS protection is billed and bundled, not what resources are covered.
Microsoft Defender for DNS provides an additional layer of protection for all Azure resources that use Azure DNS's Azure-provided name resolution capability.
From within Azure DNS, Defender for DNS monitors the queries from these resources and detects suspicious activities without the need for any extra agents.
Availability
| Aspect | Details |
|---|---|
| Release state: | General availability (GA) |
| Pricing: | Microsoft Defender for DNS is billed as shown on the pricing page. You can also estimate costs with the Defender for Cloud cost calculator. |
| Clouds: | 
Microsoft Azure operated by 21Vianet |
What are the benefits of Microsoft Defender for DNS?
Microsoft Defender for DNS detects suspicious and anomalous activities such as:
- Data exfiltration from your Azure resources using DNS tunneling
- Malware communicating with command and control servers
- DNS attacks - communication with malicious DNS resolvers
- Communication with domains used for malicious activities such as phishing and crypto mining
Dependencies
Microsoft Defender for DNS doesn't use any agents.
Related content
- Learn how to Export alerts to a SIEM.