Skip to content

Commit cf0c877

Browse files
committed
remove cm mentions
1 parent b654ced commit cf0c877

15 files changed

+26
-56
lines changed

articles/defender-for-iot/organizations/architecture.md

Lines changed: 3 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -21,8 +21,6 @@ Defender for IoT includes the following OT security monitoring components:
2121

2222
- **Operational technology (OT) or Enterprise IoT network sensors**, to detect devices across your network. Defender for IoT network sensors are deployed on either a virtual machine or a physical appliance. OT sensors can be configured as cloud-connected sensors, or fully on-premises, locally managed sensors.
2323

24-
- **An on-premises management console** for centralized OT sensor management and monitoring for local, air-gapped environments.
25-
2624
## OT and Enterprise IoT network sensors
2725

2826
Defender for IoT network sensors discover and continuously monitor network traffic across your network devices.
@@ -31,7 +29,7 @@ Defender for IoT network sensors discover and continuously monitor network traff
3129

3230
- Network sensors use OT/IoT-aware analytics engines and Layer-6 Deep Packet Inspection (DPI) to detect threats, such as fileless malware, based on anomalous or unauthorized activity.
3331

34-
Data collection, processing, analysis, and alerting takes place directly on the sensor, which can be ideal for locations with low bandwidth or high-latency connectivity. Only telemetry and insights are transferred on for management, either to the Azure portal or an on-premises management console.
32+
Data collection, processing, analysis, and alerting takes place directly on the sensor, which can be ideal for locations with low bandwidth or high-latency connectivity. Only telemetry and insights are transferred on for management to the Azure portal.
3533

3634
For more information, see [Defender for IoT OT deployment path](ot-deploy/ot-deploy-path.md).
3735

@@ -49,13 +47,13 @@ Cloud-connected sensors are sensors that are connected to Defender for IoT in Az
4947

5048
**In contrast, when working with locally managed sensors**:
5149

52-
- View any data for a specific sensor from the sensor console. For a unified view of all information detected by several sensors, use an on-premises management console.
50+
- View any data for a specific sensor from the sensor console.
5351

5452
- You must manually upload any threat intelligence packages to locally managed sensors.
5553

5654
- Sensor names can be updated in the sensor console.
5755

58-
For more information, see [Manage OT sensors from the sensor console](how-to-manage-individual-sensors.md) and [Manage OT sensors from the management console](legacy-central-management/how-to-manage-sensors-from-the-on-premises-management-console.md).
56+
For more information, see [Manage OT sensors from the sensor console](how-to-manage-individual-sensors.md).
5957

6058
### Defender for IoT analytics engines
6159

@@ -91,12 +89,6 @@ Defender for IoT provides hybrid network support using the following management
9189

9290
:::image type="content" source="media/release-notes/new-interface.png" alt-text="Screenshot that shows the updated interface." lightbox="media/release-notes/new-interface.png":::
9391

94-
- **The on-premises management console**. In air-gapped environments, you can get a central view of data from all of your sensors from an on-premises management console, using extra maintenance tools and reporting features.
95-
96-
The software version on your on-premises management console must be equal to that of your most up-to-date sensor version. Each on-premises management console version is backwards compatible to older, supported sensor versions, but cannot connect to newer sensor versions.
97-
98-
For more information, see [Air-gapped OT sensor management deployment path](ot-deploy/air-gapped-deploy.md).
99-
10092
## Devices monitored by Defender for IoT
10193

10294
[!INCLUDE [devices-inventoried](includes/devices-inventoried.md)]

articles/defender-for-iot/organizations/cli-ot-sensor.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -124,7 +124,7 @@ Use the following commands to turn on synchronization for the appliance time wit
124124
To use these commands, make sure that:
125125

126126
- The NTP server can be reached from the appliance management port
127-
- You use the same NTP server to synchronize all sensor appliances and the on-premises management console
127+
- You use the same NTP server to synchronize all sensor appliances
128128

129129
|User |Command |Full command syntax |
130130
|---------|---------|---------|

articles/defender-for-iot/organizations/concept-zero-trust.md

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -73,12 +73,9 @@ For example, if your growing company has factories and offices in Paris, Lagos,
7373
|**Dubai office** | - Ground floor (Convention center) <br>- Floor 1 (Sales)<br>- Floor 2 (Offices) |
7474
|**Tianjin office** | - Ground floor (Offices) <br>- Floors 1-2 (Factory) |
7575

76-
7776
## Next steps
7877

79-
Create sites and zones as you onboard OT sensors in the Azure portal, and assign site-based access policies to your Azure users.
80-
81-
If you're working in an air-gapped environment with an on-premises management console, create OT site and zones directly on the on-premises management console.
78+
Create sites and zones as you onboard OT sensors in the Azure portal, and assign site-based access policies to your Azure users.
8279

8380
Use built-in Defender for IoT workbooks and create custom workbooks of your own to monitor your security perimeter over time.
8481

articles/defender-for-iot/organizations/detect-windows-endpoints-script.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ ms.topic: how-to
1111
> This feature is in PREVIEW. The [Azure Preview Supplemental Terms](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) include other legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
1212
>
1313
14-
In addition to detecting OT devices on your network, use Defender for IoT to discover Microsoft Windows workstations and servers and enrich workstation and server data for devices already detected. Same as other detected devices, detected Windows workstations and servers are displayed in the Device inventory. The **Device inventory** pages on the sensor and on-premises management console show enriched data about Windows devices, including data about the Windows operating system and applications installed, patch-level data, open ports, and more.
14+
In addition to detecting OT devices on your network, use Defender for IoT to discover Microsoft Windows workstations and servers and enrich workstation and server data for devices already detected. Same as other detected devices, detected Windows workstations and servers are displayed in the Device inventory. The **Device inventory** pages on the sensor show enriched data about Windows devices, including data about the Windows operating system and applications installed, patch-level data, open ports, and more.
1515

1616
This article describes how to use a Defender for IoT Windows-based WMI tool to get extended information from Windows devices, such as workstations, servers, and more. Run the WMI script on your Windows devices to get extended information, increasing your device inventory and security coverage. While you can also use [scheduled WMI scans](configure-windows-endpoint-monitoring.md) to obtain this data, scripts can be run locally for regulated networks with waterfalls and one-way elements if WMI connectivity isn't possible.
1717

articles/defender-for-iot/organizations/device-inventory.md

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
title: Device inventory - Microsoft Defender for IoT
3-
description: Learn about the Defender for IoT device inventory features available from the Azure portal, OT sensor console, and the on-premises management console.
3+
description: Learn about the Defender for IoT device inventory features available from the Azure portal, and OT sensor console.
44
ms.date: 02/19/2023
55
ms.topic: conceptual
66
---
@@ -47,14 +47,12 @@ Defender for IoT device inventory is available in the following locations:
4747
|**Azure portal** | OT devices detected from all cloud-connected OT sensors. | - If you also use [Microsoft Sentinel](iot-solution.md), incidents in Microsoft Sentinel are linked to related devices in Defender for IoT. <br><br>- Use Defender for IoT [workbooks](workbooks.md) for visibility into all cloud-connected device inventory, including related alerts and vulnerabilities. <br><br>- If you have a [legacy Enterprise IoT plan](whats-new.md#enterprise-iot-protection-now-included-in-microsoft-365-e5-and-e5-security-licenses) on your Azure subscription, the Azure portal also includes devices detected by Microsoft Defender for Endpoint agents. If you have an [Enterprise IoT sensor](eiot-sensor.md), the Azure portal also includes devices detected by the Enterprise IoT sensor. |
4848
| **Microsoft Defender XDR** | Enterprise IoT devices detected by Microsoft Defender for Endpoint agents | Correlate devices across Microsoft Defender XDR in purpose-built alerts, vulnerabilities, and recommendations. |
4949
|**OT network sensor consoles** | Devices detected by that OT sensor | - View all detected devices across a network device map<br><br>- View related events on the **Event timeline** |
50-
|**An on-premises management console** | Devices detected across all connected OT sensors | Enhance device data by importing data manually or via script |
5150

5251
For more information, see:
5352

5453
- [Manage your device inventory from the Azure portal](how-to-manage-device-inventory-for-organizations.md)
5554
- [Defender for Endpoint device discovery](/microsoft-365/security/defender-endpoint/device-discovery)
5655
- [Manage your OT device inventory from a sensor console](how-to-investigate-sensor-detections-in-a-device-inventory.md)
57-
- [Manage your OT device inventory from an on-premises management console](legacy-central-management/how-to-investigate-all-enterprise-sensor-detections-in-a-device-inventory.md)
5856

5957
## Automatically consolidated devices
6058

@@ -158,6 +156,5 @@ For more information, see:
158156

159157
- [Manage your device inventory from the Azure portal](how-to-manage-device-inventory-for-organizations.md)
160158
- [Manage your OT device inventory from a sensor console](how-to-investigate-sensor-detections-in-a-device-inventory.md)
161-
- [Manage your OT device inventory from an on-premises management console](legacy-central-management/how-to-investigate-all-enterprise-sensor-detections-in-a-device-inventory.md)
162159
- [Microsoft Defender for IoT - supported IoT, OT, ICS, and SCADA protocols](concept-supported-protocols.md)
163160
- [Investigate devices on a device map](how-to-work-with-the-sensor-device-map.md)

articles/defender-for-iot/organizations/how-to-control-what-traffic-is-monitored.md

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ Before performing the procedures in this article, you must have:
2121

2222
- An OT network sensor [installed](ot-deploy/install-software-ot-sensor.md), [configured, and activated](ot-deploy/activate-deploy-sensor.md).
2323

24-
- Access to your OT network sensor and on-premises management console as an **Admin** user. For more information, see [On-premises users and roles for OT monitoring with Defender for IoT](roles-on-premises.md).
24+
- Access to your OT network sensor as an **Admin** user. For more information, see [On-premises users and roles for OT monitoring with Defender for IoT](roles-on-premises.md).
2525

2626
This step is performed by your deployment teams.
2727

@@ -142,9 +142,6 @@ VLANs are either discovered automatically by the OT network sensor or added manu
142142

143143
VLAN's support is based on 802.1q (up to VLAN ID 4094).
144144

145-
> [!NOTE]
146-
> VLAN names aren't synchronized between the OT network sensor and the on-premises management console. If you want to view customized VLAN names on the on-premises management console, [define the VLAN names](legacy-central-management/how-to-manage-the-on-premises-management-console.md#define-vlan-names) there as well.
147-
148145
**To configure VLAN names on an OT network sensor:**
149146

150147
1. Sign in to your OT sensor as an **Admin** user.

articles/defender-for-iot/organizations/how-to-manage-cloud-alerts.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ ms.custom: enterprise-iot
1010

1111
Microsoft Defender for IoT alerts enhance your network security and operations with real-time details about events logged in your network. This article describes how to manage Microsoft Defender for IoT alerts on the Azure portal, including alerts generated by OT and Enterprise IoT network sensors.
1212

13-
- OT alerts are also available on each [OT network sensor console](how-to-view-alerts.md), or a connected [on-premises management console](legacy-central-management/how-to-work-with-alerts-on-premises-management-console.md)
13+
- OT alerts are also available on each [OT network sensor console](how-to-view-alerts.md).
1414

1515
- [Integrate with Microsoft Sentinel](iot-solution.md) to view Defender for IoT alerts in Microsoft Sentinel and manage them together with security incidents.
1616

articles/defender-for-iot/organizations/how-to-manage-sensors-on-the-cloud.md

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -81,7 +81,6 @@ Use the options on the **Sites and sensor** page and a sensor details page to do
8181
|Task |Description |
8282
|---------|---------|
8383
|:::image type="icon" source="media/how-to-manage-sensors-on-the-cloud/icon-recover.png" border="false"::: **Recover a OT sensor password** | Individual, OT sensors only. <br><br>Available from the **...** options menu or a sensor details page. Enter the secret identifier obtained on the sensor's sign-in screen. |
84-
| **Recover an on-premises management console password** | Available from the **Sites and sensors** toolbar **More actions** menu. <br><br>For more information, see [Manage the on-premises management console](legacy-central-management/how-to-manage-the-on-premises-management-console.md). |
8584
|:::image type="icon" source="media/how-to-manage-sensors-on-the-cloud/icon-export.png" border="false"::: **Download an activation file** | Individual, OT sensors only. <br><br>Available from the **...** options menu or a sensor details page. |
8685
|:::image type="icon" source="media/how-to-manage-sensors-on-the-cloud/icon-edit.png" border="false"::: **Edit a sensor zone** | For individual sensors only, from the **...** options menu or a sensor details page. <br><br>Select **Edit**, and then select a new zone from the **Zone** menu or select **Create new zone**. Select **Submit** to save your changes. |
8786
| **Download SNMP MIB file** | Available from the **Sites and sensors** toolbar **More actions** menu. <br><br>For more information, see [Set up SNMP MIB health monitoring on an OT sensor](how-to-set-up-snmp-mib-monitoring.md).|
@@ -92,7 +91,7 @@ Use the options on the **Sites and sensor** page and a sensor details page to do
9291

9392
|Task |Description |
9493
|---------|---------|
95-
| :::image type="icon" source="media/how-to-manage-sensors-on-the-cloud/icon-settings.png" border="false"::: **Sensor settings (Preview)** | OT sensors only. <br><br> Define selected sensor settings for one or more cloud-connected OT network sensors. For more information, see [Define and view OT sensor settings from the Azure portal (Public preview)](configure-sensor-settings-portal.md). <br><br>Other settings are also available directly from the [OT sensor console](how-to-manage-individual-sensors.md), or the [on-premises management console](legacy-central-management/how-to-manage-sensors-from-the-on-premises-management-console.md).|
94+
| :::image type="icon" source="media/how-to-manage-sensors-on-the-cloud/icon-settings.png" border="false"::: **Sensor settings (Preview)** | OT sensors only. <br><br> Define selected sensor settings for one or more cloud-connected OT network sensors. For more information, see [Define and view OT sensor settings from the Azure portal (Public preview)](configure-sensor-settings-portal.md). <br><br>Other settings are also available directly from the [OT sensor console](how-to-manage-individual-sensors.md).|
9695
|:::image type="icon" source="media/how-to-manage-sensors-on-the-cloud/icon-export.png" border="false"::: **Export sensor data** | Available from the **Sites and sensors** toolbar only, to download a CSV file with details about all the sensors listed. |
9796
|:::image type="icon" source="media/how-to-manage-sensors-on-the-cloud/icon-delete.png" border="false"::: **Delete a sensor** | For individual sensors only, from the **...** options menu or a sensor details page. |
9897
| :::image type="icon" source="media/how-to-manage-sensors-on-the-cloud/icon-diagnostics.png" border="false"::: **Send diagnostic files to support** | Individual, locally managed OT sensors only. <br><br>Available from the **...** options menu. <br><br>For more information, see [Upload a diagnostics log for support](#upload-a-diagnostics-log-for-support).|

articles/defender-for-iot/organizations/how-to-manage-subscriptions.md

Lines changed: 3 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -62,14 +62,9 @@ This procedure describes how to add an OT plan for Defender for IoT in the Azure
6262

6363
1. Select **Next** and review the details for any of your licensed sites. The details listed on the **Review and purchase** pane reflect any licenses you've purchased from the Microsoft 365 admin center.
6464

65-
1. Do one or both of the following:
65+
1. Select the terms and conditions.
6666

67-
- Select the terms and conditions.
68-
- If you're working with an on-premises management console, select **Download OT activation file (Optional)**.
69-
70-
When you're finished, select **Save**. If you've selected to download the on-premises management console activation file, the file is downloaded and you're prompted to save it locally. You'll use it later, when [activating your on-premises management console](legacy-central-management/activate-deploy-management.md#activate-the-on-premises-management-console).
71-
72-
[!INCLUDE [on-premises-management-deprecation](includes/on-premises-management-deprecation.md)]
67+
1. When you're finished, select **Save**.
7368

7469
Your new plan is listed under the relevant subscription on the **Plans and pricing** > **Plans** page.
7570

@@ -182,9 +177,8 @@ If you have multiple legacy subscriptions and are migrating to a Microsoft 365 p
182177

183178
1. After any changes are made, make sure to reactivate your sensors. For more information, see [Reactivate an OT sensor](how-to-manage-sensors-on-the-cloud.md#reactivate-an-ot-sensor).
184179

185-
1. If you have an on-premises management console, make sure to upload a new activation file, which reflects the changes made. For more information, see [Upload a new activation file](legacy-central-management/how-to-manage-the-on-premises-management-console.md#upload-a-new-activation-file).
186-
187180
Changes to your plan will take effect one hour after confirming the change. This change appears on your next monthly statement, and you're charged based on the length of time each plan was in effect.
181+
188182
## Next steps
189183

190184
For more information, see:

articles/defender-for-iot/organizations/how-to-view-alerts.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ ms.topic: how-to
99

1010
Microsoft Defender for IoT alerts enhance your network security and operations with real-time details about events logged in your network. OT alerts are triggered when OT network sensors detect changes or suspicious activity in network traffic that needs your attention.
1111

12-
This article describes how to view Defender for IoT alerts directly on an OT network sensor. You can also view OT alerts on the [Azure portal](how-to-manage-cloud-alerts.md) or an [on-premises management console](legacy-central-management/how-to-work-with-alerts-on-premises-management-console.md).
12+
This article describes how to view Defender for IoT alerts directly on an OT network sensor. You can also view OT alerts on the [Azure portal](how-to-manage-cloud-alerts.md).
1313

1414
For more information, see [Microsoft Defender for IoT alerts](alerts.md).
1515

0 commit comments

Comments
 (0)