Defender for Servers support
This article summarizes support information for the Defender for Servers plan in Microsoft Defender for Cloud.
Azure cloud support
This table summarizes Azure cloud support for Defender for Servers features.
| Feature/Plan | Azure | Azure Government | Microsoft Azure operated by 21Vianet 21Vianet |
|---|---|---|---|
| Microsoft Defender for Endpoint integration | GA | GA | NA |
| Compliance standards Compliance standards might differ depending on the cloud type. |
GA | GA | GA |
| Microsoft Cloud Security Benchmark recommendations for OS hardening | GA | GA | GA |
| VM vulnerability scanning-agentless | GA | NA | NA |
| VM vulnerability scanning - Microsoft Defender for Endpoint sensor | GA | NA | NA |
| VM vulnerability scanning - Qualys | GA | NA | NA |
| Just-in-time VM access | GA | GA | GA |
| File integrity monitoring | GA | GA | GA |
| Docker host hardening | GA | GA | GA |
| Agentless secret scanning | GA | NA | NA |
| Agentless malware scanning | GA | NA | NA |
| Agentless assessment checks for endpoint detection and response solutions | GA | NA | NA |
Windows machine support
The following table shows feature support for Windows machines in Azure, Azure Arc, and other clouds.
| Feature | *Azure VMs VM Scale Sets (Flexible orchestration |
Azure Arc-enabled machines | Defender for Servers required |
|---|---|---|---|
| Virtual machine behavioral analytics (and security alerts) | ✔ | ✔ | Yes |
| Fileless security alerts | ✔ | ✔ | Yes |
| Just-in-time VM access | ✔ | - | Yes |
| File Integrity Monitoring | ✔ | ✔ | Yes |
| Network map | ✔ | - | Yes |
| Regulatory compliance dashboard & reports | ✔ | ✔ | Yes |
| Docker host hardening | - | - | Yes |
| Missing OS patches assessment | ✔ | ✔ | Azure: Yes Azure Arc-enabled: Yes |
| Security misconfigurations assessment | ✔ | ✔ | Azure: No Azure Arc-enabled: Yes |
| Endpoint protection assessment | ✔ | ✔ | Azure: No Azure Arc-enabled: Yes |
| Disk encryption assessment | ✔ (supported scenarios) |
- | No |
| Third-party vulnerability assessment (BYOL) | ✔ | - | No |
| Network security assessment | ✔ | - | No |
Linux machine support
The following table shows feature support for Linux machines in Azure, Azure Arc, and other clouds.
| Feature | Azure VMs VM Scale Sets (Flexible orchestration |
Azure Arc-enabled machines | Defender for Servers required |
|---|---|---|---|
| Virtual machine behavioral analytics (and security alerts) | ✔ Supported versions |
✔ | Yes |
| Fileless security alerts | - | - | Yes |
| Just-in-time VM access | ✔ | - | Yes |
| File Integrity Monitoring | ✔ | ✔ | Yes |
| Network map | ✔ | - | Yes |
| Regulatory compliance dashboard & reports | ✔ | ✔ | Yes |
| Docker host hardening | ✔ | ✔ | Yes |
| Missing OS patches assessment | ✔ | ✔ | Azure: Yes Azure Arc-enabled: Yes |
| Security misconfigurations assessment | ✔ | ✔ | Azure: No Azure Arc-enabled: Yes |
| Endpoint protection assessment | - | - | No |
| Disk encryption assessment | ✔ supported scenarios) |
- | No |
| Third-party vulnerability assessment (BYOL) | ✔ | - | No |
| Network security assessment | ✔ | - | No |
Next steps
Start planning your Defender for Servers deployment.