Deploy Microsoft Defender for Endpoint in Linux
I recently deployed Defender for cloud on some Linux servers that I run in my lab environment. But I was surprised when I noticed an issue. This article I aim to go through the troubleshooting steps that I took to fix that issue and some learnings that you should also take up for when you're deploying Defender for cloud for servers on your Linux Distros.
Defender for Cloud automated onboarding
One of the biggest benefits of the Defender for cloud (MDC) is its automated deployment option. Essentially for any. Server workload that you have deployed in Azure enabling Defender for a cloud will roll out. An extension that enables Defender for server. Naturally this is dependent on your enabling the plan within Defender for cloud settings.
If, however you are leveraging servers elsewhere, think Multicloud or On-premises, you should deploy Azure Arc to use Defender for Cloud for servers. From the official documentation:
To use Defender for Servers, all AWS, GCP, and on-premises machines should be Azure Arc-enabled.
You can onboard the Azure Arc agent to your AWS or GCP servers…