We recommend that you enable Defender for Storage on the subscription level. Doing so ensures all storage accounts currently in the subscription will be protected. Storage accounts that are created after enabling Defender for Storage on the subscription level will be protected up to 24 hours after creation.
- Enable on a subscription (recommended)
- Enable on a storage account
To enable Defender for Storage at the subscription level using the Azure portal:
Sign in to the Azure portal.
Navigate to Microsoft Defender for Cloud > Environment settings.
Select the subscription for which you want to enable Defender for Storage.
Select the three dots on the right and then choose the Edit settings option.
On the Defender plans page, locate Storage in the list and select On and Save. If you currently have Defender for Storage enabled with per-transaction pricing, select the New pricing plan available link and confirm the pricing change.
Microsoft Defender for Storage is now enabled for this subscription, and is fully protected, including on-upload malware scanning and sensitive data threat detection.
If you want to turn off the on-upload malware scanning or sensitive data threat detection, you can select Settings and change the status of the relevant feature to Off and save the changes.
If you want to change the malware scanning size capping per storage account per month for malware, change the settings in Edit configuration and save the changes.
If you want to disable the plan, turn status button to Off for the Storage plan on the Defender plans page and save the changes.
FAQs
Navigate to Microsoft Defender for Cloud > Environment settings. Select the subscription for which you want to enable Defender for Storage. Select the three dots on the right and then choose the Edit settings option. On the Defender plans page, locate Storage in the list and select On and Save.
How to enable Defender in Azure Portal? ›
To enable the Defender for Servers plan:
Sign in to the Azure portal. Search for and select Microsoft Defender for Cloud. In the Defender for Cloud menu, select Environment settings. Select the relevant Azure subscription, AWS account, or GCP project.
How do I enable defender plan for all resource types in Microsoft Defender for Cloud? ›
To enable the Defender for Resource Manager plan on your subscription:
- Sign in to the Azure portal.
- Search for and select Microsoft Defender for Cloud.
- In the Defender for Cloud menu, select Environment settings.
- Select the relevant subscription.
- On the Defender plans page, toggle the Resource Manager plan to On.
From Defender for Cloud's menu, select Environment settings and select the subscription with the machines that you want to receive Defender for Endpoint. In the status of the Endpoint protection component, select On to enable the integration with Microsoft Defender for Endpoint.
How do I enable Azure defender in SQL Server? ›
Steps to enable Defender for SQL on Azure virtual machines
In the Defender for Cloud menu, select Environment settings. Select the relevant subscription. On the Defender plans page, locate the Databases plan and select Select types. In the Resource types selection window, toggle the SQL servers on machines plan to On.
How do I configure Azure defender for storage to be enabled? ›
Navigate to Microsoft Defender for Cloud > Environment settings. Select the subscription for which you want to enable Defender for Storage. Select the three dots on the right and then choose the Edit settings option. On the Defender plans page, locate Storage in the list and select On and Save.
How do I enable Microsoft Defender? ›
Turn Microsoft Defender Firewall on or off
- Select Start , then open Settings . ...
- Select a network profile: Domain network, Private network, or Public network.
- Under Microsoft Defender Firewall, switch the setting to On. ...
- To turn it off, switch the setting to Off.
Azure built-in policy
- Sign in to the Azure portal and navigate to the Policy dashboard.
- In the Policy dashboard, select Definitions from the left-side menu.
- In the “Security Center” category, search for and then select Configure Microsoft Defender for Storage to be enabled. ...
- Select the policy and review it.
In the Microsoft Defender portal at https://security.microsoft.com, go to Permissions > Email & collaboration roles > Roles. Or, to go directly to the Permissions page, use https://security.microsoft.com/emailandcollabpermissions. On the Permissions page, select Create to start the new role group wizard.
What is the difference between Microsoft Defender Plan 1 and Plan 2? ›
Defender for Office 365 Plan 1 protects email and collaboration features from zero-day malware, phishing, and business email compromise (BEC). Defender for Office 365 Plan 2 adds phishing simulations, post-breach investigation, hunting, and response, and automation.
To configure basic firewall settings, follow these steps: Go to the Intune admin center, and sign in. Choose Endpoint security > Firewall, and then choose + Create Policy. Select a platform, such as Windows 10, Windows 11, and Windows Server, select the Microsoft Firewall profile, and then choose Create.
How to enable endpoint protection in Azure? ›
Navigate to the "Security Center", select the "Security policy" and under "Policy Management" select the "Subscription" that needs to enable the "Monitor Endpoint Protection." Select the "Subscription" link under the "Security policy" at the top to get into the configuration settings.
How do I set defender for endpoint? ›
Go to Settings > Endpoints > Enforcement scope > enable 'Use MDE to enforce security configuration settings from Intune' and also enable the platforms you want. Either choose all devices or only tagged devices.
How do I know if Azure defender is enabled? ›
Search for and select Microsoft Defender for Cloud. In the Defender for Cloud menu, select Environment settings. Select the subscription or workspace that you want to protect. Select Enable all to enable all of the plans for Defender for Cloud.
How do I enable SQL Server in Azure portal? ›
In the Azure portal, go to Azure Policy, and then select Definitions. Search for Subscribe eligible Arc-enabled SQL Servers instances to Extended Security Updates and right-click the policy. Select Assign policy. Select a subscription and optionally a resource group as a scope.
What is the main purpose of Microsoft Defender for Azure SQL? ›
Microsoft Defender for Azure SQL helps you discover and mitigate potential database vulnerabilities and alerts you to anomalous activities that might be an indication of a threat to your databases. Vulnerability assessment: Scan databases to discover, track, and remediate vulnerabilities.
How do I enable defender feature? ›
Re-enable Microsoft Defender Antivirus on Windows Server if it was disabled
- Open Command Prompt.
- Run the following command: %ProgramFiles%\Windows Defender\MpCmdRun.exe -wdenable .
- Restart the device.
In the Configuration settings section, go to Microsoft Defender Exploit Guard > Network filtering > Network protection > Enable or Audit. Select Next.
How do I turn on Microsoft Defender in Intune? ›
Go to the Microsoft Intune admin center (https://intune.microsoft.com), and sign in. Navigate to Endpoint Security. Under Manage, choose Antivirus. Select your Microsoft Defender Antivirus policy.
? Definition and Guide - Shopify Philippines)
