Azure Windws 2016 Virtual Machine Security

Murray Brown
Murray Brown used Ask the Experts™
on
Hi

I have a Windows 2016 Server running on my Azure account. I want to add a good level of security to it.
According to the following article https://docs.microsoft.com/en-us/azure/security/azure-security-antimalware
it already has Windows Defender software on it. I am not sure where to find this. Is it in my Network
Security Group?
The article also says that the "Azure VM Antimalware extension" can be added. How do I do this. I tried
to create a resource in Azure but couldn't see it.

Any other suggestions on how to bolster my VM security would be greatly appreciated


Thanks
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2012
Commented:
Hey there,

Please refer below steps from https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/features-windows

Azure portal
VM extensions can be applied to an existing VM through the Azure portal. Select the VM in the portal, choose Extensions, then select Add. Choose the extension you want from the list of available extensions and follow the instructions in the wizard.

The following example shows the installation of the Microsoft Antimalware extension from the Azure portal:
Shaun VermaakTechnical Specialist
Awarded 2017
Distinguished Expert 2018
Commented:
Harden your servers using the CIS security benchmarks. It is very comprehensive
https://www.cisecurity.org/cis-benchmarks/
Commented:
You can also try to analyse the output of vulnerability scanner *.audit files (e.g. Nessus) which are an assessment of compliance against benchmarks such as those linked above. MBSA (Microsoft Baseline Security Analyser) is also a useful free tool to look for assurance that the real basic security measures are in operation, such as open shares, excessive numbers of system administrators, missing security updates, and general security configurations. You can run this remotely but may not get a complete report dependant on firewall settings. The scans are fairly quick to complete, and the results have some remedial advice as well to assist. There is far more to security of windows based devices than just anti-virus.
Murray BrownASP.net/VSTO Developer

Author

Commented:
Thanks very much

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial