From 95b5cb36253def03c01a0b3bea414d7521fce2b2 Mon Sep 17 00:00:00 2001 From: Martin Schvartzman Date: Sun, 29 Dec 2024 11:58:17 +0200 Subject: [PATCH 1/4] Update health-alerts.md updated text on sensor stopped communicating --- ATPDocs/health-alerts.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ATPDocs/health-alerts.md b/ATPDocs/health-alerts.md index f51c76abfb..ca782a99b7 100644 --- a/ATPDocs/health-alerts.md +++ b/ATPDocs/health-alerts.md @@ -103,7 +103,7 @@ Sensor-specific health issues are displayed in the **Sensor health issues** tab |Alert|Description|Resolution|Severity|Displayed in| |----|----|----|----|----| -|There has been no communication from the Defender for Identity sensor. The default time span for this alert is 5 minutes.|Network traffic is no longer captured by the network adapter on the Defender for Identity sensor. This affects Defender for Identity's ability to detect suspicious activities, since network traffic isn't able to reach the Defender for Identity cloud service.|Check that the port used for the communication between the Defender for Identity sensor and Defender for Identity cloud service isn't blocked by any routers or firewalls.|Medium|Sensors health issues tab| +|There has been no communication from the Defender for Identity sensor. The default time span for this alert is 5 minutes.|This indicates that the sensor failed to send data or a keep-alive signal to the Defender for Identity services for a period exceeding the allowed time. This typically suggests either a network issue in the environment that prevented data transmission or a server restart that took longer than the acceptable time frame, impacting Defender for Identity's ability to detect suspicious activities.|Check the communication between the Defender for Identity sensor and Defender for Identity cloud service isn't blocked by any routers or firewalls.|Medium|Sensors health issues tab| ### Some Windows events are not being analyzed From bdeb4310bf45e5832a9c84164368ead7eae9bb9a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 30 Dec 2024 09:29:44 -0800 Subject: [PATCH 2/4] Learn Editor: Update mdb-manage-subscription.md --- defender-business/mdb-manage-subscription.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/defender-business/mdb-manage-subscription.md b/defender-business/mdb-manage-subscription.md index be166a244c..b28e5631d6 100644 --- a/defender-business/mdb-manage-subscription.md +++ b/defender-business/mdb-manage-subscription.md @@ -44,16 +44,16 @@ This article describes how to apply either Defender for Business or Defender for > - You don't have enough Defender for Endpoint Plan 2 licenses for all users in your organization > - The ability to change your subscription settings hasn't rolled out to your organization yet -4. On the **Subscription settings** flyout, choose whether to use only Defender for Business or Defender for Endpoint Plan 2 across your organization's devices. +1. On the **Subscription settings** flyout, choose whether to use only Defender for Business or Defender for Endpoint Plan 2 across your organization's devices. > [!IMPORTANT] > Keep the following important points in mind before you save your changes: - > - > - Make sure you have enough licenses for the subscription you're using for all users in your organization. - > - If you select **Only Microsoft Defender for Endpoint Plan 2**, the simplified configuration experience for Defender for Business is replaced with advanced settings that you can configure in Defender for Endpoint. If this change is applied, you can't undo it. - > - It can take up to three hours for your changes to be applied. - > - Make sure to review your security policies and settings. To get help with Defender for Endpoint policies and settings, see [Configure Defender for Endpoint capabilities](/defender-endpoint/onboard-configure). To get help with Defender for Business policies and settings, see [Review and edit your security policies and settings in Defender for Business](mdb-configure-security-settings.md). +> - Make sure you have enough licenses for the subscription you're using for all users in your organization. +- If you select **Only Microsoft Defender for Endpoint Plan 2**, the simplified configuration experience for Defender for Business is replaced with advanced settings that you can configure in Defender for Endpoint. If this change is applied, you can't undo it. + > - It can take up to six hours for your changes to be applied. +- Make sure to review your security policies and settings. To get help with Defender for Endpoint policies and settings, see [Configure Defender for Endpoint capabilities](/defender-endpoint/onboard-configure). To get help with Defender for Business policies and settings, see [Review and edit your security policies and settings in Defender for Business](mdb-configure-security-settings.md). + ## Review license usage The license usage report is estimated based on sign-in activities on the device. Defender for Endpoint Plan 2 licenses are assigned to users, and each user can have up to five concurrent, onboarded devices. To learn more about license terms, see [Microsoft Licensing](https://www.microsoft.com/licensing/default). From 8fde00503a0145170ce4951ab5bafd27d844c1c9 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 30 Dec 2024 09:29:55 -0800 Subject: [PATCH 3/4] Learn Editor: Update mdb-manage-subscription.md From 86e152e4467ce729757d9e890a946570194ad2c4 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 30 Dec 2024 09:31:38 -0800 Subject: [PATCH 4/4] Update subscription settings instructions and date --- defender-business/mdb-manage-subscription.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/defender-business/mdb-manage-subscription.md b/defender-business/mdb-manage-subscription.md index b28e5631d6..75a76f7905 100644 --- a/defender-business/mdb-manage-subscription.md +++ b/defender-business/mdb-manage-subscription.md @@ -7,7 +7,7 @@ ms.author: chrisda manager: deniseb audience: ITPro ms.topic: overview -ms.date: 01/03/2024 +ms.date: 12/30/2024 ms.service: defender-business ms.localizationpriority: medium ms.reviewer: shlomiakirav, efratka @@ -44,14 +44,14 @@ This article describes how to apply either Defender for Business or Defender for > - You don't have enough Defender for Endpoint Plan 2 licenses for all users in your organization > - The ability to change your subscription settings hasn't rolled out to your organization yet -1. On the **Subscription settings** flyout, choose whether to use only Defender for Business or Defender for Endpoint Plan 2 across your organization's devices. +4. On the **Subscription settings** flyout, choose whether to use only Defender for Business or Defender for Endpoint Plan 2 across your organization's devices. > [!IMPORTANT] > Keep the following important points in mind before you save your changes: -> - Make sure you have enough licenses for the subscription you're using for all users in your organization. -- If you select **Only Microsoft Defender for Endpoint Plan 2**, the simplified configuration experience for Defender for Business is replaced with advanced settings that you can configure in Defender for Endpoint. If this change is applied, you can't undo it. + > - Make sure you have enough licenses for the subscription you're using for all users in your organization. + > - If you select **Only Microsoft Defender for Endpoint Plan 2**, the simplified configuration experience for Defender for Business is replaced with advanced settings that you can configure in Defender for Endpoint. If this change is applied, you can't undo it. > - It can take up to six hours for your changes to be applied. -- Make sure to review your security policies and settings. To get help with Defender for Endpoint policies and settings, see [Configure Defender for Endpoint capabilities](/defender-endpoint/onboard-configure). To get help with Defender for Business policies and settings, see [Review and edit your security policies and settings in Defender for Business](mdb-configure-security-settings.md). + > - Make sure to review your security policies and settings. To get help with Defender for Endpoint policies and settings, see [Configure Defender for Endpoint capabilities](/defender-endpoint/onboard-configure). To get help with Defender for Business policies and settings, see [Review and edit your security policies and settings in Defender for Business](mdb-configure-security-settings.md). ## Review license usage