Microsoft Defender now protects Linux desktops
Microsoft Defender supports Linux desktops in businesses. Administrators can manage the devices through their existing infrastructure.
(Image: heise medien)
Microsoft will now offer its Microsoft Defender for Endpoint security software for Linux desktops. To do so, the company is expanding its existing Linux version, which previously ran on servers. With this move, Microsoft aims to respond to Linux’s growing use among software developers and make it easier for administrators to protect devices.
Full feature set for desktops
During setup, Defender for Endpoint automatically detects whether a device is a workstation or a server. To do so, the software checks various system properties, including distribution data, subscription and license information, and other metadata. It then applies the appropriate settings automatically. If it can’t clearly identify the device, it classifies it as a server by default.
There are no differences in features between the server and desktop versions. According to a post on Microsoft’s blog, the tool includes real-time antivirus protection and scheduled virus scans, as well as endpoint detection and response (EDR). The security software monitors files, processes and network connections and reports suspicious activity. This makes it possible to isolate compromised devices.
Centralized management for administrators
Administrators can centrally manage Linux desktops through the existing Defender infrastructure. They can set permissions and control the use of external storage media to prevent data leaks and block infected files from getting in. They can also filter suspicious websites and data packets. Through Defender’s vulnerability management feature, administrators can view installed software, known security vulnerabilities and corresponding updates.
Videos by heise
Linux desktop support is currently still part of a public preview. No specific release date is known at this time. Defender for Endpoint runs on many distributions, including Red Hat Enterprise Linux (RHEL) 7.2 and later, Ubuntu LTS 16.04 and later, and Debian 9 and later. Microsoft lists all system requirements in its documentation. Customers also need an active subscription to Defender for Endpoint Plan 2 or Microsoft 365 E5 or E7.
(sfe)
