question

YanaShumilova-8876 avatar image
0 Votes"
YanaShumilova-8876 asked tomerr answered

Random Azure Defender ON/OFF value on Security Center Inventory screen

We have enabled Azure Defender for one of our SQL Servers and couple days later, when inspecting Security Center Inventory list, we noticed that all of our resources show up with Defender enabled.
Launching into investigation of how it happened, we found that another user in our company sees all the same resources showing up as Defender disabled.
A more powerful user from our company cleared the situation by checking pricing page and confirming that only the one resource we enabled Azure Defender for is billed.

It seems that the page has a bug that leads to all resources being shown as ON or OFF when a mix of values is present.
Is it a known bug?

azure-security-center
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks for reporting! I will try to reproduce this and reach out to someone on the Security Center team to see if this is a known issue. Do you have any screenshots by chance?

0 Votes 0 ·

Hi Marilee, not sure what would you like the screenshot to show.
Here is my Inventory screen. None of the visible resources has Azure Defender turned on.


58471-image.png


0 Votes 0 ·
image.png (155.0 KiB)

1 Answer

tomerr avatar image
0 Votes"
tomerr answered

We're working on a improved experience of showing the exact protection status in the inventory blade. As a mitigation, please consider looking into your Log Analytics workspaces your machines are connected to, and view the SqlATPStatus table:

104755-screenshot-2021-06-11-132126.png



Regards,

Tomer


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.