You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/security-center/built-in-vulnerability-assessment.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
---
2
2
title: Built-in vulnerability scanner in Azure Security Center
3
-
description: Azure Security Center includes a fully integrated vulnerability assessment solution from Qualys. This article describes how to deploy and use the tool.
3
+
description: Azure Security Center includes a fully integrated vulnerability assessment solution from Qualys. Learn more about this Security Center extension on this page.
4
4
services: security-center
5
5
documentationcenter: na
6
6
author: memildin
@@ -10,7 +10,7 @@ ms.devlang: na
10
10
ms.topic: conceptual
11
11
ms.tgt_pltfrm: na
12
12
ms.workload: na
13
-
ms.date: 03/22/2020
13
+
ms.date: 03/30/2020
14
14
ms.author: memildin
15
15
16
16
---
@@ -60,7 +60,7 @@ To deploy the vulnerability scanner extension:
60
60
61
61
***Healthy resources** – the vulnerability scanner extension has been deployed to these VMs.
62
62
***Unhealthy resources** – the vulnerability scanner extension can be deployed to these VMs.
63
-
***Not applicable resources** – these VMs can't have the vulnerability scanner extension deployed. Your VM might be in this tab because it's on the free pricing tier, it's missing the ImageReference class (relevant to custom images and VMs restored from backup, as explained in the Azure for .NET documentation](https://docs.microsoft.com/dotnet/api/microsoft.azure.batch.imagereference?view=azure-dotnet), or it's not running one of the supported OSes:
63
+
***Not applicable resources** – these VMs can't have the vulnerability scanner extension deployed. Your VM might be in this tab because it's on the free pricing tier, it's missing the ImageReference class (relevant to custom images and VMs restored from backup, as explained in [this Azure for .NET page](https://docs.microsoft.com/dotnet/api/microsoft.azure.batch.imagereference?view=azure-dotnet)), or it's not running one of the supported OSes:
64
64
65
65
- All versions of Windows
66
66
- Red Hat Enterprise Linux 6.7, 7.6
@@ -80,7 +80,7 @@ To deploy the vulnerability scanner extension:
80
80
81
81
## Viewing and remediating discovered vulnerabilities
82
82
83
-
When Security Center identifies vulnerabilities, it presents findings and related information as recommendations. The related information includes remediation steps, related CVEs, CVSS scores, and more. You can view the identified vulnerabilities for one or more subscriptions, or for a specific virtual machine.
83
+
When Security Center identifies vulnerabilities, it presents findings and related information as recommendations. The related information includes remediation steps, related CVEs, CVSS scores, and more. You can view the identified vulnerabilities for one or more subscriptions, or for a specific VM.
84
84
85
85
To see the findings and remediate the identified vulnerability:
86
86
@@ -124,7 +124,7 @@ For full instructions and a sample ARG query, see this Tech Community post: [Exp
124
124
## Built-in Qualys vulnerability scanner FAQ
125
125
126
126
### Are there any additional charges for the Qualys license?
127
-
No. The built-in scanner is free to all standard tier users. The "Enable the built-in vulnerability assessment solution on virtual machines (powered by Qualys)" recommendation deploys a scanner that includes all the necessary licensing and configuration information. No additional licenses are required.
127
+
No. The built-in scanner is free to all standard tier users. The "Enable the built-in vulnerability assessment solution on virtual machines (powered by Qualys)" recommendation deploys the scanner with its licensing and configuration information. No additional licenses are required.
128
128
129
129
### What permissions are required to install the Qualys extension?
130
130
You'll need write permissions for any VM on which you want to deploy the extension.
@@ -167,7 +167,7 @@ When you open the recommendation, you'll see your VMs in one or more of the foll
167
167
168
168
-**Healthy resources** – the vulnerability scanner extension has been deployed to these VMs.
169
169
-**Unhealthy resources** – the vulnerability scanner extension can be deployed to these VMs.
170
-
-**Not applicable resources** – These VMs can't have the vulnerability scanner extension deployed. Your VM might be in this tab because it's on the free pricing tier, it's missing the ImageReference class (relevant to custom images and VMs restored from backup, as explained in the Azure for .NET documentation](https://docs.microsoft.com/dotnet/api/microsoft.azure.batch.imagereference?view=azure-dotnet), or it's not running one of the supported OSes:
170
+
-**Not applicable resources** – These VMs can't have the vulnerability scanner extension deployed. Your VM might be in this tab because it's on the free pricing tier, it's missing the ImageReference class (relevant to custom images and VMs restored from backup, as explained in [this Azure for .NET page](https://docs.microsoft.com/dotnet/api/microsoft.azure.batch.imagereference?view=azure-dotnet)), or it's not running one of the supported OSes:
171
171
172
172
- All versions of Windows
173
173
- Red Hat Enterprise Linux 6.7, 7.6
@@ -186,7 +186,7 @@ The Security Center extension is a separate tool from your existing Qualys scann
186
186
### Microsoft Defender Advanced Threat Protection also includes Threat & Vulnerability Management (TVM). How is the Security Center Vulnerability Assessment extension different?
187
187
Microsoft is actively developing world-class vulnerability management with Microsoft Defender ATP's Threat & Vulnerability Management solution, built into Windows.
188
188
189
-
Today, Azure Security Center's Vulnerability Assessment extension is powered by Qualys. This ensures support for both Windows and Linux virtual machines. The extension also benefits from Qualys's own knowledge of vulnerabilities that don't yet have CVEs.
189
+
Today, Azure Security Center's Vulnerability Assessment extension is powered by Qualys. The Qualys extension ensures support for both Windows and Linux VMs. The extension also benefits from Qualys's own knowledge of vulnerabilities that don't yet have CVEs.
190
190
191
191
## Next steps
192
192
This article described the Azure Security Center Vulnerability Assessment extension (powered by Qualys) for scanning your VMs. For related material, see the following articles:
0 commit comments