Skip to content

Commit

Permalink
Merge branch 'public' into patch-1
Browse files Browse the repository at this point in the history
  • Loading branch information
denisebmsft authored Dec 30, 2024
2 parents 34d929f + dc70fac commit 3c1be7c
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 4 deletions.
2 changes: 1 addition & 1 deletion ATPDocs/health-alerts.md
Original file line number Diff line number Diff line change
Expand Up @@ -103,7 +103,7 @@ Sensor-specific health issues are displayed in the **Sensor health issues** tab

|Alert|Description|Resolution|Severity|Displayed in|
|----|----|----|----|----|
|There has been no communication from the Defender for Identity sensor. The default time span for this alert is 5 minutes.|Network traffic is no longer captured by the network adapter on the Defender for Identity sensor. This affects Defender for Identity's ability to detect suspicious activities, since network traffic isn't able to reach the Defender for Identity cloud service.|Check that the port used for the communication between the Defender for Identity sensor and Defender for Identity cloud service isn't blocked by any routers or firewalls.|Medium|Sensors health issues tab|
|There has been no communication from the Defender for Identity sensor. The default time span for this alert is 5 minutes.|This indicates that the sensor failed to send data or a keep-alive signal to the Defender for Identity services for a period exceeding the allowed time. This typically suggests either a network issue in the environment that prevented data transmission or a server restart that took longer than the acceptable time frame, impacting Defender for Identity's ability to detect suspicious activities.|Check the communication between the Defender for Identity sensor and Defender for Identity cloud service isn't blocked by any routers or firewalls.|Medium|Sensors health issues tab|

### Some Windows events are not being analyzed

Expand Down
6 changes: 3 additions & 3 deletions defender-business/mdb-manage-subscription.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ ms.author: chrisda
manager: deniseb
audience: ITPro
ms.topic: overview
ms.date: 01/03/2024
ms.date: 12/30/2024
ms.service: defender-business
ms.localizationpriority: medium
ms.reviewer: shlomiakirav, efratka
Expand Down Expand Up @@ -48,12 +48,12 @@ This article describes how to apply either Defender for Business or Defender for

> [!IMPORTANT]
> Keep the following important points in mind before you save your changes:
>
> - Make sure you have enough licenses for the subscription you're using for all users in your organization.
> - If you select **Only Microsoft Defender for Endpoint Plan 2**, the simplified configuration experience for Defender for Business is replaced with advanced settings that you can configure in Defender for Endpoint. If this change is applied, you can't undo it.
> - It can take up to three hours for your changes to be applied.
> - It can take up to six hours for your changes to be applied.
> - Make sure to review your security policies and settings. To get help with Defender for Endpoint policies and settings, see [Configure Defender for Endpoint capabilities](/defender-endpoint/onboard-configure). To get help with Defender for Business policies and settings, see [Review and edit your security policies and settings in Defender for Business](mdb-configure-security-settings.md).

## Review license usage

The license usage report is estimated based on sign-in activities on the device. Defender for Endpoint Plan 2 licenses are assigned to users, and each user can have up to five concurrent, onboarded devices. To learn more about license terms, see [Microsoft Licensing](https://www.microsoft.com/licensing/default).
Expand Down

0 comments on commit 3c1be7c

Please sign in to comment.