Platforms and features supported by Azure Security Center

  • 3 minutes to read
  • Contributors

Security state monitoring and recommendations are available for virtual machines (VMs), created by using both the classic and Resource Manager deployment models, and computers.

Note

Learn more about the classic and Resource Manager deployment models for Azure resources.

Platforms that support the data collection agent

This section lists the platforms on which the Azure Security Center agent can run and from which it can gather data.

Supported platforms for Windows computers and VMs

The following Windows operating systems are supported:

  • Windows Server 2019
  • Windows Server 2016
  • Windows Server 2012 R2
  • Windows Server 2012
  • Windows Server 2008 R2
  • Windows Server 2008

Note

Integration with Windows Defender ATP supports only Windows Server 2012 R2 and Windows Server 2016.

Supported platforms for Linux computers and VMs

The following Linux operating systems are supported:

  • Ubuntu versions 12.04 LTS, 14.04 LTS, and 16.04 LTS.
  • Debian versions 6, 7, 8, and 9.
  • CentOS versions 5, 6, and 7.
  • Red Hat Enterprise Linux (RHEL) versions 5, 6, and 7.
  • SUSE Linux Enterprise Server (SLES) versions 11 and 12.
  • Oracle Linux versions 5, 6, and 7.
  • Amazon Linux 2012.09 through 2017.
  • OpenSSL 1.1.0 is only supported on x86_64 platforms, 64 bit.

VMs and Cloud Services

VMs that run in a cloud service are also supported. Only cloud services web and worker roles that run in production slots are monitored. To learn more about cloud services, see Overview of Azure Cloud Services.

Supported IaaS features

Server Windows Linux
Environment Azure Non-Azure Azure Non-Azure
VMBA threat detection alerts ✔ ✔ ✔ (on supported versions) ✔
Network-based threat detection alerts ✔ X ✔ X
Windows Defender ATP integration ✔ (on supported versions) ✔ X X
Missing patches ✔ ✔ ✔ ✔
Security configurations ✔ ✔ ✔ ✔
Endpoint protection ✔ ✔ X X
JIT VM access ✔ X ✔ X
Adaptive application controls ✔ ✔ ✔ ✔
FIM ✔ ✔ ✔ ✔
Disk encryption ✔ X ✔ X
Third-party deployment ✔ X ✔ X
NSGs ✔ X ✔ X
Fileless threat detection ✔ ✔ X X
Network map ✔ X ✔ X
Adaptive network controls ✔ X ✔ X

Supported endpoint protection solutions

The following table provides a matrix of:

  • Whether you can use Azure Security Center to install each solution for you.
  • Which endpoint protection solutions Security Center can discover. If one of these endpoint protection solutions is discovered, Security Center will not recommend installing one.
Endpoint Protection Platforms Security Center Installation Security Center Discovery
Windows Defender (Microsoft Antimalware) Windows Server 2016 No, Built in to OS Yes
System Center Endpoint Protection (Microsoft Antimalware) Windows Server 2012 R2, 2012, 2008 R2 (see note below) Via Extension Yes
Trend Micro – All version Windows Server Family No Yes
Symantec v12.1.1100+ Windows Server Family No Yes
McAfee v10+ Windows Server Family No Yes
Kaspersky Windows Server Family No No
Sophos Windows Server Family No No

Note

  • Detection of System Center Endpoint Protection (SCEP) on a Windows Server 2008 R2 virtual machine requires SCEP to be installed after PowerShell 3.0 (or an upper version).

Supported PaaS features

Service Recommendations Threat detection
SQL ✔ ✔
PostGreSQL* ✔ ✔
MySQL* ✔ ✔
Azure Blob storage accounts* ✔ ✔
App services ✔ ✔
Cloud Services ✔ X
VNets ✔ NA
Subnets ✔ NA
NICs ✔ ✔
NSGs ✔ NA
Subscription ✔ ✔

* These features are currently supported in public preview.

Next steps