{"id":19422,"date":"2020-06-27T07:22:07","date_gmt":"2020-06-27T07:22:07","guid":{"rendered":"https:\/\/rbsitsoftwaresolution.com\/blog\/microsoft-releases-defender-atp-for-linux.html"},"modified":"2020-06-27T07:22:07","modified_gmt":"2020-06-27T07:22:07","slug":"microsoft-releases-defender-atp-for-linux","status":"publish","type":"post","link":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/microsoft-releases-defender-atp-for-linux.html","title":{"rendered":"Microsoft releases Defender ATP for Linux"},"content":{"rendered":"

<\/span><\/p>\n

Which seems more unlikely to you? Dogs and cats living together in peace or Microsoft releasing a security program for Linux? Actually, both are true. On June 23, Microsoft released Microsoft Defender Advanced Threat Protection (ATP) for Linux for general use<\/a>.\u00a0 <\/p>\n

But before you get excited while you could use this on a Linux desktop, this version of ATP is not meant for the desktop. It’s to protect Linux servers from server and network threats. If you want protection for your standalone desktop, you’re better off with a such as ClamAV<\/a> or Sophos Antivirus for Linux<\/a>. <\/p>\n

For sysadmins and security pros, Microsoft Defender Security Center is now available for monitoring and managing security across the full spectrum of enterprise desktop and server platforms —\u00a0Android<\/a>, Windows, Windows Server, macOS, and Linux. <\/p>\n

The point of this new program, according to Moti Gindi, corporate vice president of Microsoft Threat Protection, is “to protect the modern workplace environment across everything<\/a> that it is, being Microsoft or non-Microsoft. We’re protecting endpoints across Mac and today we’re extending this endpoint protection to Linux and to iOS and Android.”\u00a0 <\/p>\n

This program is now available for Red Hat Enterprise Linux (RHEL)<\/a> 7 or higher; CentOS Linux<\/a> 7 or newer; Ubuntu<\/a> 16.04 or higher LTS versions; SUSE Linux Enterprise Server (SLES)<\/a> 12 or higher; Debian<\/a> 9 or newer; and Oracle Enterprise Linux<\/a> 7.2. <\/p>\n

On these servers, you use its shell program to launch, configure and manage the Defender agent. Once it’s running you can start scans and manage threats from it locally or remotely. You can also deploy and configure it using the DevOps tools Puppet<\/a>, Ansible<\/a>, or manually using Bash commands<\/a>. <\/p>\n

You can also use the ATP’s client shell interface to initiate scans, and manage threats. Once set up, though, you’d usually monitor your servers with the Microsoft Defender Security Center<\/a>. <\/p>\n

\n<\/section>\n

Once installed, ATP reports the following information to the Microsoft Defender Security Center console: <\/p>\n

Antivirus alert information:<\/strong> <\/p>\n