Azure-VirtualMachines-VM-Endpoint-Protection

Severity : High

Description : .

Remediation Steps : Install endpoint protection on all virtual machines.

Description: This control ensures that Endpoint protection extension is installed on virtual machines. Endpoint protection prevents the Vm from commonly known and reported attacks. Installing endpoint protection systems provides for real-time protection capabilities that help identify and remove viruses, spyware, and other malicious software, with configurable alerts for malicious or unwanted software.

Remediation Steps:

Perform following to update parameters:

1. Login to Azure Portal using https://portal.azure.com.

2. Go to Virtual Machines.

3. Click VM instance to configure Endpoint Protection.

4. Select Extensions , Click on Add.

5. Select Microsoft Anti-malware, Click Create.

6. Provide location and other data as required.

7. Click OK.

Important:

Reference:

• CIS Microsoft Azure Foundations Benchmark v1.3.0 - 02-01-2021 : Recommendation #7.6

• Microsoft Antimalware for Azure