liveBook · Manning

Azure Arc agent

As explained in Azure Security

The Azure Arc agent is software that connects servers and other resources outside Azure to Azure management and security services.

The Azure Arc agent connects multicloud and on-premises servers to Azure, allowing Microsoft Defender for Cloud capabilities to apply beyond Azure-hosted resources. section 7.2.1

Use the agent when extending these Defender for Cloud protections:

Table 7.2 Overview of Defender for Cloud plans that require agents (view table figure)

Defender for Servers

Defender for SQL Servers on Machines

Defender for Containers

Log Analytics agent

Microsoft Defender for Endpoint

Vulnerability assessment powered by Qualys (if using it)

Log Analytics agent

Automatic SQL discovery and registration

Defender profile

Azure Policy Add-On for Kubernetes

Review the additional agents and extensions associated with Defender for Cloud plans that require agent-based coverage. section 7.2.1

How Azure Security covers it

How deep it goes
Identifies when the agent is required but defers installation and configuration procedures.
Examples
Applies Defender protections to multicloud and on-premises servers.
What you can do after
Apply selected Defender for Cloud plans to servers outside Azure.
How it connects
Connects Microsoft Defender for Cloud with Defender for Servers, Defender for SQL Servers on Machines, and Defender for Containers.
Cover of Azure Security
liveBookmanning.com
Read Azure Security on liveBook Get the book at manning.com

This explainer was generated by Manning's knowledge graph from the text of Azure Security. The section links point to the parts of the book it draws on.