These types of devices require an agentless approach where a remote scan will obtain the necessary information from the devices. Network devices are not managed as standard endpoints since Defender for Endpoint doesn't have a sensor built into the network devices themselves. Once the network devices are discovered and classified, security administrators will be able to receive the latest security recommendations and review recently discovered vulnerabilities on network devices deployed across their organizations.

Once discovered, Defender for Endpoint's Vulnerability Management capabilities provide integrated workflows to secure discovered switches, routers, WLAN controllers, firewalls, and VPN gateways. Network discovery capabilities are available in the Device inventory section of the Microsoft 365 Defender portal and Microsoft 365 Defender consoles.Ī designated Microsoft Defender for Endpoint device will be used on each network segment to perform periodic authenticated scans of preconfigured network devices.

This article provides an overview of the challenge that Network device discovery is designed to address, and detailed information about how get started using these new capabilities. The Network device discovery and vulnerability assessments Blog (published 04-13-2021) provides insights into the new Network device discovery capabilities in Defender for Endpoint.

Home network vulnerability scanner free