Update Defender for SQL Servers on Machines plan configuration ,What action take for this protection plan

Well, follow this guide so you can proceed with the update that Microsoft is recommending to your SQL Environment

Links https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-sql-usage

Links https://learn.microsoft.com/en-us/azure/defender-for-cloud/update-sql-machine-configuration

Identify the Machines with SQL Servers

Use Azure Arc or Azure guest configuration to detect machines running SQL Server.

These can be on-prem or in other clouds.

2. Ensure Prerequisites Are Met

The machine must be Azure Arc-enabled if it’s not a native Azure VM.

SQL Server must be properly discovered.

The Log Analytics agent or Azure Monitoring Agent (AMA) must be installed.

The Microsoft Defender for Endpoint integration is also recommended.

3. Enable the Defender Plan

Go to:

Azure Portal → Microsoft Defender for Cloud → Environment Settings → [Select Subscription] → Defender Plans

Make sure “Defender for SQL servers on machines” is turned ON.

4. Configure the SQL Vulnerability Assessment

For each machine:

Go to Microsoft Defender for Cloud → Inventory → [Your SQL server machine]

Enable SQL Vulnerability Assessment if not yet active.

Ensure Log Analytics workspace is properly connected.

5. Validate and Monitor

• Go to Defender for Cloud → Recommendations
• Check for any alerts or misconfiguration under:
  • “SQL servers on machines should have vulnerability findings resolved”
  • “SQL servers on machines should be protected by Microsoft Defender for SQL” Identify the Machines with SQL Servers
    • Use Azure Arc or Azure guest configuration to detect machines running SQL Server.
    • These can be on-prem or in other clouds.
    2. Ensure Prerequisites Are Met
    • The machine must be Azure Arc-enabled if it’s not a native Azure VM.
    • SQL Server must be properly discovered.
    • The Log Analytics agent or Azure Monitoring Agent (AMA) must be installed.
    • The Microsoft Defender for Endpoint integration is also recommended.
    3. Enable the Defender Plan Go to:

    Azure Portal → Microsoft Defender for Cloud → Environment Settings → [Select Subscription] → Defender Plans

    Make sure “Defender for SQL servers on machines” is turned ON. 4. Configure the SQL Vulnerability Assessment For each machine:
    • Go to Microsoft Defender for Cloud → Inventory → [Your SQL server machine]
    • Enable SQL Vulnerability Assessment if not yet active.
    • Ensure Log Analytics workspace is properly connected.
    5. Validate and Monitor
    • Go to Defender for Cloud → Recommendations
    • Check for any alerts or misconfiguration under:
      • “SQL servers on machines should have vulnerability findings resolved”
      • “SQL servers on machines should be protected by Microsoft Defender for SQL”

😊 If my answer helped you resolve your issue, please consider marking it as the correct answer. This helps others in the community find solutions more easily. Thanks!