Microsoft Defender for Cloud Plan for Azure Servers

Question

Microsoft Defender for Cloud Plan for Azure Servers

Ghulam Abbas 211

Hi, currently we have the basic Foundational CSPM MS Defender for Cloud plan enabled and also Defender CSPM. We would like to enable the Cloud Workload Protection (CWP) plan 2 for our Azure servers that costs around $15/Server/month. We have around 50 servers in our production subscription and would like to check if there is a way to configure this plan to include only a few of our critical severs for this plan and exclude the rest? Many thanks

K-Mohammed 240 Reputation points Microsoft Employee

2024-08-01T12:49:32.14+00:00

Hi, thanks for posting your question!
Based on my research, you can try excluding specific resources by enabling the Defender for Servers plan at the resource level. Check out these documentations for more info: https://learn.microsoft.com/en-us/azure/defender-for-cloud/tutorial-enable-servers-plan and https://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-defender-for-servers-select-plan

1 answer

Your answer

K-Mohammed 240 Reputation points Microsoft Employee

2024-08-01T12:49:32.14+00:00

Hi, thanks for posting your question!
Based on my research, you can try excluding specific resources by enabling the Defender for Servers plan at the resource level. Check out these documentations for more info: https://learn.microsoft.com/en-us/azure/defender-for-cloud/tutorial-enable-servers-plan and https://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-defender-for-servers-select-plan

Answer 1

Hi Ghulam Abbas,

The only Plan that supports the full enablement (disable and enable) per single VM is P1, P2 supports exclusion only.

Plan 1 can be enabled and disabled at resource level. - https://learn.microsoft.com/en-us/azure/defender-for-cloud/tutorial-enable-servers-plan#enable-defender-for-servers-at-the-resource-level
Plan 2 can't be enabled at the resource level, but you can disable the plan at the resource level or turn off a plan for multiple machines. via script or policy or Turn off a plan for specific machines via API - Update Pricing

For more details refer to the deployment scope table here - https://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-defender-for-servers-select-plan#decide-on-deployment-scope

Share via

Microsoft Defender for Cloud Plan for Azure Servers

1 answer

Your answer