Skip to content

Commit 4bc987e

Browse files
authored
Update network devices documentation formatting and details
1 parent 939f0e5 commit 4bc987e

File tree

1 file changed

+17
-17
lines changed

1 file changed

+17
-17
lines changed

defender-endpoint/network-devices.md

Lines changed: 17 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ ms.collection:
1414
ms.custom: admindeeplinkDEFENDER
1515
ms.topic: conceptual
1616
search.appverid: met150
17-
ms.date: 01/02/2025
17+
ms.date: 03/06/2025
1818
---
1919

2020
# Network device discovery and vulnerability management
@@ -23,15 +23,14 @@ ms.date: 01/02/2025
2323

2424
**Applies to:**
2525

26-
- [Microsoft Defender for Endpoint Plan 1](microsoft-defender-endpoint.md)
27-
- [Microsoft Defender for Endpoint Plan 2](microsoft-defender-endpoint.md)
26+
- [Microsoft Defender for Endpoint Plan 1 and Plan 2](microsoft-defender-endpoint.md)
2827
- [Defender Vulnerability Management](/defender-vulnerability-management/defender-vulnerability-management)
2928
- [Microsoft Defender XDR](/defender-xdr)
3029

3130
> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://signup.microsoft.com/create-account/signup?products=7f379fee-c4f9-4278-b0a1-e4c8c2fcdf7e&ru=https://aka.ms/MDEp2OpenTrial?ocid=docs-wdatp-portaloverview-abovefoldlink)
3231
3332
> [!NOTE]
34-
> The [Network device discovery and vulnerability assessments](https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/network-device-discovery-and-vulnerability-assessments/ba-p/2267548) Blog \(published 04-13-2021\) provides insights into the new **Network device discovery** capabilities in Defender for Endpoint. This article provides an overview of the challenge that **Network device discovery** is designed to address, and detailed information about how get started using these new capabilities.
33+
> The [Tech Community Blog: Network device discovery and vulnerability assessments](https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/network-device-discovery-and-vulnerability-assessments/ba-p/2267548) (published 04-13-2021) provides insights into the new **Network device discovery** capabilities in Defender for Endpoint. This article provides an overview of the challenge that **Network device discovery** is designed to address, and detailed information about how get started using these new capabilities.
3534
3635
Network discovery capabilities are available in the **Device inventory** section of the [Microsoft Defender portal](https://security.microsoft.com) and Microsoft Defender XDR consoles.
3736

@@ -42,8 +41,9 @@ Once the network devices are discovered and classified, security administrators
4241
## Approach
4342

4443
Network devices aren't managed as standard endpoints since Defender for Endpoint doesn't have a sensor built into the network devices themselves. These types of devices require an agentless approach where a remote scan obtains the necessary information from the devices. Depending on the network topology and characteristics, a single device or a few devices onboarded to Microsoft Defender for Endpoint performs authenticated scans of network devices using SNMP (read-only).
45-
>[!NOTE]
46-
>The authenticated scans support SNMPv2, SNMPv3
44+
45+
> [!NOTE]
46+
> Authenticated scans support `SNMPv2` and `SNMPv3`.
4747
4848
There are two types of devices to keep in mind:
4949

@@ -87,9 +87,9 @@ Your first step is to select a device that performs the authenticated network sc
8787

8888
8. To allow the scanner to be authenticated and work properly, it's essential that you add the following domains/URLs:
8989

90-
- \*.security.microsoft.com
91-
- login.microsoftonline.com
92-
- \*.blob.core.windows.net/networkscannerstable/\*
90+
- `*.security.microsoft.com`
91+
- `login.microsoftonline.com`
92+
- `*.blob.core.windows.net/networkscannerstable/*`
9393

9494
> [!NOTE]
9595
> Not all URLs are specified in the Defender for Endpoint documented list of allowed data collection.
@@ -111,7 +111,7 @@ The scanner is supported on Windows 10, version 1903 and Windows Server, version
111111

112112
2. Download the scanner and install it on the designated Defender for Endpoint scanning device.
113113

114-
:::image type="content" source="/defender/media/defender-endpoint/network-authenticated-scan-new.png" alt-text="Screenshot of the add new authenticated scan screen" lightbox="/defender/media/defender-endpoint/network-authenticated-scan-new.png":::
114+
:::image type="content" source="/defender/media/defender-endpoint/network-authenticated-scan-new.png" alt-text="Screenshot of the add new authenticated scan screen" lightbox="/defender/media/defender-endpoint/network-authenticated-scan-new.png":::
115115

116116
## Scanner installation & registration
117117

@@ -124,8 +124,8 @@ To complete the scanner registration process:
124124

125125
1. Copy and follow the URL that appears on the command line and use the provided installation code to complete the registration process.
126126

127-
> [!NOTE]
128-
> You may need to change Command Prompt settings to be able to copy the URL.
127+
> [!NOTE]
128+
> You may need to change Command Prompt settings to be able to copy the URL.
129129
130130
2. Enter the code and sign in using a Microsoft account that has the Defender for Endpoint permission called "Manage security settings in Defender."
131131

@@ -143,7 +143,7 @@ If there's a difference between the two versions, the update process determines
143143

144144
2. Select **Add new scan** and choose **Network device authenticated scan** and select **Next**.
145145

146-
:::image type="content" source="/defender/media/defender-endpoint/network-authenticated-scan.png" alt-text="Screenshot of the add new network device authenticated scan screen" lightbox="/defender/media/defender-endpoint/network-authenticated-scan.png":::
146+
:::image type="content" source="/defender/media/defender-endpoint/network-authenticated-scan.png" alt-text="Screenshot of the add new network device authenticated scan screen" lightbox="/defender/media/defender-endpoint/network-authenticated-scan.png":::
147147

148148
3. Choose whether to **Activate scan**.
149149

@@ -161,9 +161,9 @@ If there's a difference between the two versions, the update process determines
161161

162162
|Authentication Method|Azure KeyVault secret value|
163163
|:----|:----:|
164-
|AuthPriv|Username;AuthPassword;PrivPassword|
165-
|AuthNoPriv|Username;AuthPassword|
166-
|CommunityString |CommunityString|
164+
|`AuthPriv`|Username;AuthPassword;PrivPassword|
165+
|`AuthNoPriv`|Username;AuthPassword|
166+
|`CommunityString` |CommunityString|
167167

168168
9. Select **Next** to run or skip the test scan.
169169

@@ -174,7 +174,7 @@ If there's a difference between the two versions, the update process determines
174174
175175
### Scan and add network devices
176176

177-
During the set-up process, you can perform a one time test scan to verify that:
177+
During the setup process, you can perform a one time test scan to verify that:
178178

179179
- There's connectivity between the Defender for Endpoint scanning device and the configured target network devices.
180180
- The configured SNMP credentials are correct.

0 commit comments

Comments
 (0)