So let's go ahead and explore the rest of the
Microsoft Defender for Cloud components.
Under Cloud Security, the first section that we have is Security posture.
Navigating to Security posture essentially gives you the ability to
see your security posture across Azure and AWS NGCP,
if you had those environments connected.
From a graph perspective, you can quickly view your Secure Score Over Time.
All you need to do is select your workspace where
you have the details being logged,
and then you can select your time range as to how far back you want to look.
For example, with my instance, I'm looking at the last 30 days,
and I can see statistics related to my current score percentage,
my seven‑day change, and, of course,
this instance has not been running for 30 days,
but should it have been,
I would have been able to see my statistics for any
changes over the last 30 days,
but at least I've got some graphs that can give me some good
indication and clear insight into how I am tracking in
relation to my security posture.
And as I'm scrolling down,
you can see the details that this component provides you.
So moving back to the Security posture overview,
if I wanted to take a look at what my security posture looks like,
I will go ahead and select my environment,
which is Azure, and under Recommendations,
I will click on View recommendations,
and this is going to go and show me all of the security
recommendations in relation to my environment.
Now, you'll notice that this looks familiar,
and that is because we've already seen this in the previous video.
Essentially from here, I can now look at my secure score recommendations,
or all the recommendations.
All right, so moving back to Defender for Cloud,
I'm going to skip over Regulatory compliance because I
will cover that in a dedicated video,
but the next component that I want to show you is Workload protection.
Now workload protection gives you the ability to see different
types of protections that you can enable,
based on your workloads.
You'll notice that here,
we've got workload protections that span across vulnerability assessments,
just‑in‑time access, which we've seen before,
adaptive controls, container image scanning,
network hardening, and a lot more.
On the right‑hand side, we have some insights,
and you can see that we'll have options to upgrade our current Defender plan,
and then as I scroll down, we'll see the most prevalent security alerts,
information about the most attacked resources,
high‑severity VM vulnerabilities, and a lot more information.
Now from here, we can navigate to the different components.
So, for example, if I wanted to look at my vulnerability assessments,
clicking on the card would take me to the vulnerability assessment finding,
and based on this, I can now take action on the resources that are not protected,
which in my case, I have two servers which are not protected.
And then, of course, I can also view my healthy resources,
which will show me those that are protected.
All right, so moving along to Firewall Manager.
Now,
Firewall Manager will provide you with a status of your Azure network security.
This will look at your network security across all your
virtual networks and virtual hubs, if you had those configured.
From a security standpoint,
you have a couple of options that you can configure; the first,
being an Azure Firewall policy, which is a pretty straightforward configuration,
allowing you to set configuration items such as DNS,
TLS inspection, Rules, IDPS, Leveraging threat intelligence,
and so forth.
Under the DDoS Protection plan, this is where you can
configure different types of DDoS Protection plans that can be
deployed to specific resource groups, locations, or even subscriptions.
You then also have the ability to leverage Web Application Firewall
Policies, should you have any web apps configured. And then, of course,
you can link to different types of security partner providers, allowing
you to leverage those partner capabilities.
So in the next video, we're going to dive into the regulatory compliance component of Defender for Cloud.