Microsoft previews Defender security tools for Linux workstations
Microsoft has released Defender for Linux Workstations in public preview, extending its Defender for Endpoint security tools to Linux desktops. The move gives organisations a way to monitor and protect Linux workstations alongside their other devices, as more developers use Linux and businesses seek consistent security coverage.
The service includes antivirus, vulnerability management, inventory and security settings tools, and device isolation; it uses the existing Linux server agent, so no separate desktop agent is needed. It requires Defender for Endpoint Plan 2 or Microsoft 365 E5 or E7, and support depends on the Linux distribution and kernel version, with RHEL, CentOS, Ubuntu LTS, SUSE Linux Enterprise Server and Oracle Linux among those listed. Linux users may have concerns about compliance monitoring through Microsoft’s tools.
- Defender for Linux Workstations is now in public preview.
- It brings Microsoft’s endpoint protection tools to Linux desktops.
- Access requires qualifying Microsoft security subscriptions.
New here? Start with this
Linux is an operating system used on servers and personal computers, including by developers who build and test software. Organisations often run a mix of Linux, Windows and other systems, which can make it harder to apply the same security checks across all their devices.
Microsoft Defender for Endpoint is a set of tools organisations use to monitor devices and respond to security risks. Its Linux tools can check for malware and weaknesses, track device details and settings, and isolate a device if needed; availability depends on the Linux distribution and kernel version, and the service requires certain Microsoft subscriptions.
Security monitoring can help organisations spot problems and manage risks across their networks. It can also collect information about devices and their settings, so Linux users may have questions about what their employer can monitor and how that information is used.
Both sides, in good faith
The strongest fair case each way — we don't pick a winner.
The case for
Organisations with Linux workstations may value having the same monitoring, vulnerability management and response tools across their device fleet, which can make security oversight more consistent and reduce gaps between desktop and server protection. Reusing the existing Linux agent could also simplify deployment, provided the organisation already has the required licence and supported systems.
The case against
Linux users may reasonably worry that centralised monitoring and device isolation could collect or control more information than they are comfortable with, particularly in workplaces where privacy and developer autonomy matter. The licence requirements and limited distribution and kernel support may also make the preview a costly or incomplete fit for some organisations, while adding reliance on Microsoft’s security platform.
Read the full article at the source →
Originally published by The Register as “Microsoft bringing Defender to Linux desktops. Repeat: Microsoft bringing Defender to Linux desktops”.