Control: 7.6 Ensure that the endpoint protection for all Virtual Machines is installed
It is recommended to install endpoint protection for all virtual machines. Installing endpoint protection systems (like Antimalware for Azure) provides for real-time protection capability that helps identify and remove viruses, spyware, and other malicious software, with configurable alerts when known malicious or unwanted software attempts to install itself or run on Azure systems.
Perform the following action to check endpoint protection system status:
- Go to
Security Center - Recommendations.
- Ensure that there are no recommendations available for
Endpoint Protection not installed on Azure VMs.
Follow Microsoft Azure documentation to install endpoint protection from the security center - [Security-benchmarks-endpoint](https://docs.microsoft.com/en-us/azure/security-center/security-center-install- endpoint-protection)
- You can employ your own endpoint protection tool for your OS.
steampipe check azure_compliance.control.cis_v130_7_6
This control uses a named query:manual_control