快速入门:启用 Azure DefenderQuickstart: Enable Azure Defender

若要了解 Azure Defender 的优点,请参阅安全中心免费版与已启用 Azure Defender 的版本的比较To learn about the benefits of Azure Defender, see Security Center free vs Azure Defender enabled.

先决条件Prerequisites

若要学习安全中心快速入门和教程,需要启用 Azure Defender。For the purpose of the Security Center quickstarts and tutorials you must enable Azure Defender.

可以使用 Azure Defender 保护整个 Azure 订阅,且该保护将由订阅中的所有资源继承。You can protect an entire Azure subscription with Azure Defender and the protections will be inherited by all resources within the subscription.

可免费试用 30 天。A free 30-day trial is available. 有关根据你所在区域以所选货币给出的定价详细信息,请参阅安全中心定价For pricing details in your currency of choice and according to your region, see Security Center pricing.

从 Azure 门户启用 Azure DefenderEnable Azure Defender from the Azure portal

若要启用包括威胁防护功能在内的全部安全中心功能,必须在包含适用工作负载的订阅上启用 Azure Defender。To enable all Security Center features including threat protection capabilities, you must enable Azure Defender on the subscription containing the applicable workloads. 如果在工作区级别启用它,则不会为 Azure 资源启用实时 VM 访问、自适应应用程序控制和网络检测功能。Enabling it at the workspace level doesn't enable just-in-time VM access, adaptive application controls, and network detections for Azure resources. 此外,只在工作区级别提供的 Azure Defender 计划为适用于服务器的 Azure Defender。In addition, the only Azure Defender plans available at the workspace level are Azure Defender for servers.

  • 可以在订阅级别或资源级别启用 用于 SQL 的 Azure DefenderYou can enable Azure Defender for SQL at either the subscription level or resource level

若要在订阅和工作区中启用 Azure Defender:To enable Azure Defender on your subscriptions and workspaces:

  • 若要在一个订阅中启用 Azure Defender:To enable Azure Defender on one subscription:

    1. 从安全中心的主菜单中,选择“定价和设置”。From Security Center's main menu, select Pricing & settings.
    2. 选择要保护的订阅或工作区。Select the subscription or workspace that you want to protect.
    3. 选择要升级的“Azure Defender 打开”。Select Azure Defender on to upgrade.
    4. 选择“保存”。Select Save.

    提示

    可以看到,Azure Defender 中的每个计划是单独定价的,并可以单独设置为“打开”或“关闭”。You'll notice that each plan in Azure Defender is priced separately and can be individually set to on or off. 例如,你可能想要在订阅中关闭适用于服务器的 Azure Defender。For example, you might want to turn off Azure Defender for Servers on subscriptions.

    门户中安全中心的定价页

  • 在多个订阅或工作区中启用 Azure Defender:To enable Azure Defender on multiple subscriptions or workspaces:

    1. 从安全中心的边栏选择“开始使用”。From Security Center's sidebar, select Getting started.

      “升级”选项卡列出了符合加入条件的订阅和工作区。The Upgrade tab lists subscriptions and workspaces eligible for onboarding.

      “入门”页的“升级”选项卡

    2. 在“选择要在其中启用 Azure Defender 的订阅和工作区”列表中,选择要升级的订阅和工作区,然后选择“升级”以启用 Azure Defender。 From the Select subscriptions and workspaces to enable Azure Defender on list, select the subscriptions and workspaces to upgrade and select Upgrade to enable Azure Defender.

      • 如果选择的订阅和工作区不符合试用条件,会在下一步骤中对其进行升级,并开始收费。If you select subscriptions and workspaces that aren't eligible for trial, the next step will upgrade them and charges will begin.
      • 如果你选择了一个符合试用条件的工作区,下一步将开始试用。If you select a workspace that's eligible for a trial, the next step will begin a trial.

      在“开始使用”页中升级所有选定的工作区和订阅

后续步骤Next steps

启用 Azure Defender 后,请根据 Azure 安全中心的自动预配代理和扩展中所述,启用由所需代理和扩展实现的自动数据收集。Now that you've enabled Azure Defender, enable automatic data collection by the necessary agents and extensions described in auto provisioning agents and extensions from Azure Security Center.