You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/security-center/built-in-vulnerability-assessment.md
+18-7Lines changed: 18 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -32,16 +32,20 @@ To deploy the vulnerability scanner extension:
32
32
33
33
1. Select the recommendation named "Enable the built-in vulnerability assessment solution on virtual machines (powered by Qualys)".
34
34
35
-
> [!IMPORTANT]
36
-
> This preview recommendation is being rolled-out slowly across all regions. If you don't see it and want to use this feature, contact support.
37
-
38
-
39
35
[](media/built-in-vulnerability-assessment/va-recommendations-enable-selected.png#lightbox)
40
36
41
37
Your VMs will appear in one or more of the following groups:
38
+
42
39
***Healthy resources** – the vulnerability scanner extension has been deployed to these VMs.
43
40
***Unhealthy resources** – the vulnerability scanner extension can be deployed to these VMs.
44
-
***Not applicable resources** – These VMs can’t have the vulnerability scanner extension deployed. Your VM might be in this tab because it's on the free pricing tier, or it's not running one of the supported OSes (RHEL 6.7/7.6, Ubuntu 14.04/18.04, Centos 6.10/7/7.6, Oracle Linux 6.8/7.6, SUSE 12/15, and Debian 7/8).
41
+
***Not applicable resources** – these VMs can’t have the vulnerability scanner extension deployed. Your VM might be in this tab because it's on the free pricing tier, or it's not running one of the supported OSes:
42
+
43
+
- Red Hat Enterprise Linux 6.7, 7.6
44
+
- Ubuntu 14.04, 18.04
45
+
- CentOS 6.10, 7, 7.6
46
+
- Oracle Linux 6.8, 7.6
47
+
- SUSE Enterprise Linux 12, 15
48
+
- Debian 7, 8
45
49
46
50
1. From the Unhealthy resources tab, select the VMs on which you want to deploy the Qualys scanner and click **Remediate**.
47
51
@@ -99,7 +103,7 @@ If you're a Standard tier customer, and you've already deployed a vulnerability
99
103
Findings will be split between the two recommendation screens.
100
104
101
105
### Why don't I see the "Enable the built-in vulnerability assessment solution (powered by Qualys)" recommendation?
102
-
If you are on the free tier of Security Center, you will not see the new Qualys recommendation; it's only available on the Standard tier.
106
+
If you are on the free tier of Security Center, you will not see the new Qualys recommendation; it's only available on the standard tier.
103
107
104
108
### What permissions are required to install the Qualys extension?
105
109
The Azure Security Center Vulnerability Assessment extension (powered by Qualys), like other extensions, runs on top of the Azure Virtual Machine agent. So it runs as Local Host on Windows, and Root on Linux.
@@ -140,7 +144,14 @@ When you open the recommendation, you'll see your VMs in one or more of the foll
140
144
141
145
-**Healthy resources** – the vulnerability scanner extension has been deployed to these VMs.
142
146
-**Unhealthy resources** – the vulnerability scanner extension can be deployed to these VMs.
143
-
-**Not applicable resources** – These VMs can’t have the vulnerability scanner extension deployed. Your VM might be in this tab because it's on the free pricing tier, or it's not running one of the supported OSes (RHEL 6.7/7.6, Ubuntu 14.04/18.04, Centos 6.10/7/7.6, Oracle Linux 6.8/7.6, SUSE 12/15, and Debian 7/8). The scanner is running on your virtual machine and looking for vulnerabilities of the VM itself. From the virtual machine, it cannot scan your network.
147
+
-**Not applicable resources** – These VMs can’t have the vulnerability scanner extension deployed. Your VM might be in this tab because it's on the free pricing tier, or it's not running one of the supported OSes:
148
+
149
+
- Red Hat Enterprise Linux 6.7, 7.6
150
+
- Ubuntu 14.04, 18.04
151
+
- CentOS 6.10, 7, 7.6
152
+
- Oracle Linux 6.8, 7.6
153
+
- SUSE Enterprise Linux 12, 15
154
+
- Debian 7, 8
144
155
145
156
### What is scanned by the built-in vulnerability scanner?
146
157
The scanner is running on your virtual machine and looking for vulnerabilities of the VM itself. From the virtual machine, it cannot scan your network.
0 commit comments