Azure Windws 2016 Virtual Machine Security

Hi

I have a Windows 2016 Server running on my Azure account. I want to add a good level of security to it.
According to the following article https://docs.microsoft.com/en-us/azure/security/azure-security-antimalware
it already has Windows Defender software on it. I am not sure where to find this. Is it in my Network
Security Group?
The article also says that the "Azure VM Antimalware extension" can be added. How do I do this. I tried
to create a resource in Azure but couldn't see it.

Any other suggestions on how to bolster my VM security would be greatly appreciated


Thanks
Murray BrownMicrosoft Cloud Azure/Excel Solution DeveloperAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Life1430Sr EngineerCommented:
Hey there,

Please refer below steps from https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/features-windows

Azure portal
VM extensions can be applied to an existing VM through the Azure portal. Select the VM in the portal, choose Extensions, then select Add. Choose the extension you want from the list of available extensions and follow the instructions in the wizard.

The following example shows the installation of the Microsoft Antimalware extension from the Azure portal:
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Shaun VermaakTechnical Specialist/DeveloperCommented:
Harden your servers using the CIS security benchmarks. It is very comprehensive
https://www.cisecurity.org/cis-benchmarks/
0
pma111Commented:
You can also try to analyse the output of vulnerability scanner *.audit files (e.g. Nessus) which are an assessment of compliance against benchmarks such as those linked above. MBSA (Microsoft Baseline Security Analyser) is also a useful free tool to look for assurance that the real basic security measures are in operation, such as open shares, excessive numbers of system administrators, missing security updates, and general security configurations. You can run this remotely but may not get a complete report dependant on firewall settings. The scans are fairly quick to complete, and the results have some remedial advice as well to assist. There is far more to security of windows based devices than just anti-virus.
0
Murray BrownMicrosoft Cloud Azure/Excel Solution DeveloperAuthor Commented:
Thanks very much
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Virtualization

From novice to tech pro — start learning today.