Merge pull request #47787 from TerryLanfear/dec-sec

Dec sec

Author: itechedit

articles/security-center/media/tutorial-protect-resources/adaptive-application-control-options.png

@@ -3,7 +3,7 @@ title: Managing security recommendations in Azure Security Center  | Microsoft D
 description: This document walks you through how recommendations in Azure Security Center help you protect your Azure resources and stay in compliance with security policies.
 services: security-center
 documentationcenter: na
-author: TerryLan
+author: TerryLanfear
 manager: MBaldwin
 editor: ''
 
@@ -13,7 +13,7 @@ ms.devlang: na
 ms.topic: article
 ms.tgt_pltfrm: na
 ms.workload: na
-ms.date: 07/12/2018
+ms.date: 07/31/2018
 ms.author: terrylan
 
 ---
@@ -91,7 +91,7 @@ Use the table below as a reference to help you understand the available recommen
 | [Vulnerability assessment not installed](security-center-vulnerability-assessment-recommendations.md) |Recommends that you install a vulnerability assessment solution on your VM. |
 | [Remediate vulnerabilities](security-center-vulnerability-assessment-recommendations.md#review-the-recommendation) |Enables you to see system and application vulnerabilities detected by the vulnerability assessment solution installed on your VM. |
 | [Enable encryption for Azure Storage Account](security-center-enable-encryption-for-storage-account.md) | Recommends that you enable Azure Storage Service Encryption for data at rest. Storage Service Encryption (SSE) works by encrypting the data when it is written to Azure storage and decrypts before retrieval. SSE is currently available only for the Azure Blob service and can be used for block blobs, page blobs, and append blobs. To learn more, see [Storage Service Encryption for data at rest](../storage/common/storage-service-encryption.md).</br>SSE is only supported on Resource Manager storage accounts. |
-| [Enable adaptive applications controls](security-center-adaptive-application.md) | Recommends that you apply adaptive application controls on your Windows VMs. This feature is in preview and available on the Standard tier of Security Center. See [Pricing](security-center-pricing.md) to learn more about Security Center's pricing tiers. |
+| [Enable adaptive applications controls](security-center-adaptive-application.md) | Recommends that you apply adaptive application controls on your Windows VMs. This feature is available on the Standard tier of Security Center. See [Pricing](security-center-pricing.md) to learn more about Security Center's pricing tiers. |
 | App Service should only be accessible over HTTPS | Recommends that you limit access of App Service over HTTPS only. |
 | Web Sockets should be disabled for Web Application| Recommends that you carefully review the use of Web Sockets within web applications.  The Web Sockets protocol is vulnerable to different types of security threats. |
 | Use custom domains for your Web Application | Recommends that you use custom domains to protect a web application from common attacks such as phishing and other DNS-related attacks. |

articles/security-center/media/tutorial-protect-resources/add-port.png

@@ -14,7 +14,7 @@ ms.topic: tutorial
 ms.custom: mvc
 ms.tgt_pltfrm: na
 ms.workload: na
-ms.date: 02/22/2018
+ms.date: 07/30/2018
 ms.author: terrylan
 
 ---
@@ -35,8 +35,6 @@ To step through the features covered in this tutorial, you must be on Security C
 ## Manage VM access
 Just in time VM access can be used to lock down inbound traffic to your Azure VMs, reducing exposure to attacks while providing easy access to connect to VMs when needed.
 
-Just in time VM access is in preview.
-
 Management ports do not need to be open at all times. They only need to be open while you are connected to the VM, for example to perform management or maintenance tasks. When just in time is enabled, Security Center uses Network Security Group (NSG) rules, which restrict access to management ports so they cannot be targeted by attackers.
 
 1. At the Security Center main menu, select **Just in time VM access** under **ADVANCED CLOUD DEFENSE**.
@@ -71,7 +69,7 @@ Management ports do not need to be open at all times. They only need to be open
 ## Harden VMs against malware
 Adaptive application controls help you define a set of applications that are allowed to run on configured resource groups, which among other benefits helps harden your VMs against malware. Security Center uses machine learning to analyze the processes running in the VM and helps you apply whitelisting rules using this intelligence.
 
-Adaptive application controls is in preview. This feature is only available for Windows machines.
+This feature is only available for Windows machines.
 
 1. Return to the Security Center main menu. Under **ADVANCED CLOUD DEFENSE**, select **Adaptive application controls**.