1 min read

Azure – You can now enforce vulnerability assessment to be deployed on virtual machines

You may already know that Microsoft has introduced a vulnerability assessment capability to Azure – for either SQL Managed Instances, SQL Server or Virtual Machines.

Well, this capability needs to be enabled at the resource level by accessing the Security blade of the virtual machine and click on Vulnerability assessment solution should be installed on your virtual machines. or from the Security Center using the Compute & apps blade under the Resource Security Hygiene section.

image_thumb[2]  image_thumb[1]

But these steps only apply to existing resources, meaning when new virtual machine or SQL resources are created (or if the resource is shutdown), they will not have it enabled automatically and you will have to come again and repeat these steps.

Good news, you can now apply a policy to enforce the deployment of the vulnerability extension.

To enable this policy, go to your Security Center and reach the Security Policy blade under the Policy & Compliance section

image_thumb[3]

Then select either the Tenant Group Management (recommended to apply to all subscriptions) or the specific subscription you want to apply the policy

Then Add a custom initiative (available below the Your custom initiatives section)

image_thumb[4]  image_thumb[5]

Fill the different fields and search for the Vulnerability Assessment should be enabled on Virtual Machines

image_thumb[6]

Ensure the Effect is set to AuditIfNotExist

image_thumb[7]

You can then complete the initiative creation process and deploy it.

Azure – Virtual machine Scale Sets now support automatic update for custom images

As you know with Azure Virtual Machine Scale Sets you can create and group identical virtual machines to deliver load balanced and highly available...

Read More

Azure – You can now recover virtual machine created with custom image

As you may already know, it was possible to restore a virtual machine by creating a new VM, restoring as disk or replacing existing disks.

Read More

Azure – You can now get your virtual machine scale sets to auto-repair

As you know, Azure Virtual Machine Scale Sets let you create a group of identical virtual machine which then will scale up or down to match the...

Read More