Control: 7.6 Ensure that the endpoint protection for all Virtual Machines is installed
Description
It is recommended to install endpoint protection for all virtual machines. Installing endpoint protection systems (like Antimalware for Azure) provides for real-time protection capability that helps identify and remove viruses, spyware, and other malicious software, with configurable alerts when known malicious or unwanted software attempts to install itself or run on Azure systems.
Remediation
From Console
Perform the following action to check endpoint protection system status:
- Go to
Security Center - Recommendations. - Ensure that there are no recommendations available for
Endpoint Protection not installed on Azure VMs.
Follow Microsoft Azure documentation to install endpoint protection from the security center - Security-benchmarks-endpoint
Note
- You can employ your own endpoint protection tool for your OS.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.cis_v140_7_6Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.cis_v140_7_6 --shareSQL
This control uses a named query:
manual_control