liveBook · Manning

Adaptive network hardening

As explained in Azure Security

Adaptive network hardening analyzes traffic and threat indicators to recommend stricter network security group rules that reduce attack surface.

Adaptive network hardening analyzes the current network posture and recommends stricter network security group rules to reduce a virtual machine’s attack surface. It operates as a Microsoft Defender for Servers capability alongside vulnerability assessment, just-in-time VM access, and other layered protections. section 7.2.1

Recommendation-driven hardening

A security operator reviews adaptive recommendations and uses them to harden network security group rules, reducing unnecessary exposure around Azure virtual machines. section 7.2.1

Table 7.1 Comparison of Defender for Servers plans (view table figure)

Defender for Servers plan 1

Defender for Servers plan 2

Microsoft Defender for Endpoint

Microsoft Defender Vulnerability Management

Auto-provisioning

Microsoft Defender for Endpoint

Microsoft Defender Vulnerability Management

Auto-provisioning

Agentless vulnerability scanning for machines

Just-in-time VM access for machine ports

Adaptive application control

File integrity monitoring

Adaptive network hardening

Network layer threat detections

Integrated vulnerability assessment powered by Qualys

Log Analytics 500 MB free data ingestion

Compare Defender for Servers plans to identify where adaptive network hardening is included. section 7.2.1

How Azure Security covers it

How deep it goes
Defines recommendation-based hardening but does not detail traffic analysis, rule changes, or implementation steps.
Examples
Uses recommendations for hardening network security group rules around Azure virtual machines.
What it assumes
Assumes Azure virtual machines and familiarity with network security group rules.
What you can do after
Evaluate recommendations that identify ways to reduce exposure through stricter network security group rules.
How it connects
Connects Microsoft Defender for Servers with network security group rules and attack-surface reduction.
Cover of Azure Security
liveBookmanning.com
Read Azure Security on liveBook Get the book at manning.com

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Azure Security. The section links point to the parts of the book it draws on.