Information
Enable automatic provisioning of vulnerability assessment for machines on both Azure and hybrid (Arc enabled) machines.
Rationale:
Vulnerability assessment for machines scans for various security-related configurations and events such as system updates, OS vulnerabilities, and endpoint protection, then produces alerts on threat and vulnerability findings.
Impact:
Additional licensing is required and configuration of Azure Arc introduces complexity beyond this recommendation.
Solution
From Azure Portal
From Azure Home select the Portal Menu
Select Microsoft Defender for Cloud
Then Environment Settings
Select a subscription
Click on Settings & Monitoring
Ensure that Vulnerability assessment for machines is set to On
Repeat the above for any additional subscriptions.
Default Value:
By default, Automatic provisioning of monitoring agent is set to Off.