Views:

Connect your subscription to enable cloud security features and give Trend Vision One greater visibility and protection over your cloud assets.

Connecting your Azure subscription allows Trend Vision One apps and security features to access your cloud assets and gain greater visibility over assets and check for potential threats. Each feature and permission is described in the table below.

Feature
Description
Core Features
The core set of features and permissions required to connect your Azure subscription.
Core features enable you to connect your Azure subscription to Trend Vision One to discover your cloud assets and identify risks such as compliance and security best practice violations on your cloud infrastructure.
Note
Note
Core features are required to connect your Azure subscription and cannot be disabled. If you need to disconnect your subscription, see Azure subscriptions.
The core features enable the following Trend Vision One apps and features to monitor your cloud environment:
  • Cyber Risk Exposure Management → Attack Surface Discovery → Cloud Assets
    For more information, see Cloud assets.
  • Cyber Risk Exposure Management → Attack Surface Discovery → APIs
    For more information, see APIs.
  • Cyber Risk Exposure Management → Cloud Posture
    For more information, see Cloud Posture.
  • Endpoint Security → Server & Workload Protection
    You can view and manage your Azure virtual machines in Server & Workload Protection like any other computer. These instances are tree structures and are treated as computer groups.
    For more information, see Computers.
Note
Note
Your Azure assets appear in the Endpoint Inventory list. Assets without the endpoint agent installed appear as unmanaged endpoints.
Agentless Vulnerability & Threat Detection
Deploy Agentless Vulnerability & Threat Protection in your Azure subscription to discover vulnerabilities and malware in your Azure Virtual Machines, disks, and Azure Container Registry images.
Agentless Vulnerability & Threat Protection is automatically enabled across all available regions by default. To customize this setting:
  1. Click the Deployment list to view all available regions.
  2. Uncheck the box next to any region where you want to disable Agentless Vulnerability & Threat Protection.
  3. Leave the boxes checked for regions where you want to maintain protection.