从 Symantec 迁移 - 阶段 1:准备迁移Migrate from Symantec - Phase 1: Prepare for your migration

适用于:Applies to:

阶段 1:准备
阶段 1:准备Phase 1: Prepare
阶段 2:设置Phase 2: Set up
阶段 2:设置Phase 2: Set up
阶段 3:开始使用Phase 3: Onboard
阶段 3:开始使用Phase 3: Onboard
你在这里!You are here!

欢迎使用从 Symantec 迁移到 Microsoft Defender for Endpoint 的"准备"阶段Welcome to the Prepare phase of migrating from Symantec to Microsoft Defender for Endpoint.

此迁移阶段包括以下步骤:This migration phase includes the following steps:

  1. 获取 Microsoft Defender for EndpointGet Microsoft Defender for Endpoint.
  2. 授予对 Microsoft Defender 安全中心的访问权限Grant access to the Microsoft Defender Security Center.
  3. 配置设备代理和 Internet 连接设置Configure device proxy and internet connectivity settings.

获取 Microsoft Defender for EndpointGet Microsoft Defender for Endpoint

若要开始,你必须拥有 Microsoft Defender for Endpoint,并分配并预配许可证。To get started, you must have Microsoft Defender for Endpoint, with licenses assigned and provisioned.

  1. 立即购买或试用 Microsoft Defender for Endpoint。Buy or try Microsoft Defender for Endpoint today. 访问 Microsoft Defender for Endpoint 以启动免费试用版或请求一个引号Visit Microsoft Defender for Endpoint to start a free trial or request a quote.
  2. 验证许可证是否正确预配。Verify that your licenses are properly provisioned. 检查你的许可证状态Check your license state.
  3. 作为全局管理员或安全管理员,设置 Microsoft Defender for Endpoint 的专用云实例。As a global administrator or security administrator, set up your dedicated cloud instance of Microsoft Defender for Endpoint. 请参阅 Microsoft Defender for Endpoint setup: Tenant configurationSee Microsoft Defender for Endpoint setup: Tenant configuration.
  4. 如果终结点 (,) 使用代理访问 Internet,请参阅 Microsoft Defender for Endpoint setup: Network configurationIf endpoints (such as devices) in your organization use a proxy to access the internet, see Microsoft Defender for Endpoint setup: Network configuration.

此时,你已准备好向将使用 Microsoft Defender 安全中心 () https://aka.ms/MDATPportal 的安全管理员和安全操作员授予访问权限。At this point, you are ready to grant access to your security administrators and security operators who will use the Microsoft Defender Security Center (https://aka.ms/MDATPportal).

备注

Microsoft Defender 安全中心有时称为 Microsoft Defender 终结点门户。The Microsoft Defender Security Center is sometimes referred to as the Microsoft Defender for Endpoint portal.

授予对 Microsoft Defender 安全中心的访问权限Grant access to the Microsoft Defender Security Center

Microsoft Defender 安全中心 () 访问和配置 https://aka.ms/MDATPportal 适用于终结点的 Microsoft Defender 的特性和功能。The Microsoft Defender Security Center (https://aka.ms/MDATPportal) is where you access and configure features and capabilities of Microsoft Defender for Endpoint. 若要了解更多信息,请参阅 Microsoft Defender 安全 中心概述To learn more, see Overview of the Microsoft Defender Security Center.

可以通过使用基本权限或基于角色的访问控制来授予对 Microsoft Defender 安全中心 (RBAC) 。Permissions to the Microsoft Defender Security Center can be granted by using either basic permissions or role-based access control (RBAC). 我们建议使用 RBAC,以便可以更精细地控制权限。We recommend using RBAC so that you have more granular control over permissions.

  1. 为安全管理员和安全操作员规划角色和权限。Plan the roles and permissions for your security administrators and security operators. 请参阅 基于角色的访问控制See Role-based access control.
  2. 设置和配置 RBAC。Set up and configure RBAC. 我们建议使用 Intune 配置 RBAC,尤其是在你的组织使用 Windows 10、macOS、iOS 和 Android 设备的组合时。We recommend using Intune to configure RBAC, especially if your organization is using a combination of Windows 10, macOS, iOS, and Android devices. 请参阅使用 Intune 设置 RBAC。See setting up RBAC using Intune.
    如果你的组织需要 Intune 外的其他方法,请选择以下选项之一:If your organization requires a method other than Intune, choose one of the following options:
  3. 授予对 Microsoft Defender 安全中心的访问权限。Grant access to the Microsoft Defender Security Center. (需要帮助?(Need help? 请参阅 使用 RBAC 管理门户) 。See Manage portal access using RBAC).

配置设备代理和 Internet 连接设置Configure device proxy and internet connectivity settings

若要启用设备和 Microsoft Defender for Endpoint 之间的通信,请配置代理和 Internet 设置。To enable communication between your devices and Microsoft Defender for Endpoint, configure proxy and internet settings. 下表包含指向可用于为各种操作系统和功能配置代理和 Internet 设置的资源的链接:The following table includes links to resources you can use to configure your proxy and internet settings for various operating systems and capabilities:

功能Capabilities 操作系统Operating System 资源Resources
终结点检测和响应 ( EDR) Endpoint detection and response (EDR) - Windows 10- Windows 10
- Windows Server 2019- Windows Server 2019
- Windows Server 1803 或更高版本- Windows Server 1803 or later
配置计算机代理和 Internet 连接设置Configure machine proxy and internet connectivity settings
EDREDR - Windows Server 2016- Windows Server 2016
- Windows Server 2012 R2- Windows Server 2012 R2
- Windows Server 2008 R2 SP1- Windows Server 2008 R2 SP1
- Windows 8.1- Windows 8.1
- Windows 7 SP1- Windows 7 SP1
配置代理和 Internet 连接设置Configure proxy and internet connectivity settings
EDREDR macOS:macOS:
- 10.15 (加泰罗尼亚语) - 10.15 (Catalina)
- 10.14 (Mojave) - 10.14 (Mojave)
- 10.13 (High Sierra) - 10.13 (High Sierra)
macOS 上的 Microsoft Defender for Endpoint:网络连接Microsoft Defender for Endpoint on macOS: Network connections
Microsoft Defender 防病毒Microsoft Defender Antivirus - Windows 10- Windows 10
- Windows Server 2019- Windows Server 2019
- Windows Server 1803 或更高版本- Windows Server 1803 or later
- Windows Server 2016- Windows Server 2016
配置和验证 Microsoft Defender 防病毒软件网络连接Configure and validate Microsoft Defender Antivirus network connections
防病毒Antivirus macOS:macOS:
- 10.15 (加泰罗尼亚语) - 10.15 (Catalina)
- 10.14 (Mojave) - 10.14 (Mojave)
- 10.13 (High Sierra) - 10.13 (High Sierra)
Mac 上的 Microsoft Defender for Endpoint:网络连接Microsoft Defender for Endpoint on Mac: Network connections
防病毒Antivirus Linux:Linux:
- RHEL 7.2+- RHEL 7.2+
- CentOS Linux 7.2 及以上- CentOS Linux 7.2+
- Ubuntu 16 LTS 或更高版本 LTS- Ubuntu 16 LTS, or higher LTS
- SLES 12+- SLES 12+
- Debian 9+- Debian 9+
- Oracle Linux 7.2- Oracle Linux 7.2
Linux 上的 Microsoft Defender for Endpoint:网络连接Microsoft Defender for Endpoint on Linux: Network connections

后续步骤Next step

恭喜!Congratulations! 你已完成从Symantec迁移到 Microsoft Defender for Endpoint 的"准备"阶段! You have completed the Prepare phase of migrating from Symantec to Microsoft Defender for Endpoint!