News

Microsoft Announces Bundled Enterprise Security Solution

• By Kurt Mackie
• 09/28/2018

As part of its 2018 Ignite conference this week, Microsoft announced it is bundling some of its existing security products into a single enterprise-grade solution.

The new Microsoft Threat Protection product was highlighted in a Tuesday Ignite session with Adam Hall, director of security product marketing at Microsoft.

According to Hall, Microsoft Threat Protection purposely doesn't contain any new security solutions. The idea is to provide optimal security with minimal complexity for enterprises.

Hall said that organizations should be operating in a world where you assume a security breach has occurred, and assume that you've been attacked. Moreover, anything can serve as an attack vector, from smartphones to laptops to Internet of Things (IoT) sensors. Microsoft's approach is to stay one step ahead by correlating collected security information, namely "6.5 trillion signals per day," which is done using Microsoft Graph information collected from consumers and businesses using Microsoft products. Microsoft additionally uses the expertise of "3,500+ in-house security specialists" to analyze threats, according to Microsoft's announcement.

Microsoft Threat Protection includes multiple security solutions that Microsoft also sells separately, but they are all tied together through the Microsoft 365 Security Center, a single dashboard that provides a graphical overview of alerts, top threats, and the devices and accounts that could be at risk. The dashboard also includes Office 365 Secure Score, a service that shows Azure services being used, along with an overall assessment of an organization's security state. There are also e-mail and phishing protections displayed in the dashboard.

There are five broad categories of security protections addressed by the Microsoft Threat Protection product. The list below, which comes from Microsoft's announcement, illustrates the security services included in the product:

• Identities: Azure Active Directory Information Protection, Azure Advanced Threat Protection, Microsoft Cloud App Security
• Endpoints: Windows Defender Advanced Threat Protection, Windows 10, Microsoft Intune
• User Data: Exchange Online Protection, Office 365 Advanced Threat Protection, Office 365 Threat Intelligence, Windows Defender Advanced Threat Protection, Microsoft Cloud App Security
• Cloud Apps: Exchange Online Protection, Office 365 Advanced Threat Protection, Microsoft Cloud App Security
• Infrastructure: Azure Security Center, SQL Server, Linux

During the Ignite session, speakers also typically mentioned that Attack Simulator is part of the solution. It's a tool that lets IT pros send phishing e-mails to end users to check their susceptibilities to those avenues of attack.

Microsoft's announcement promised that "customers who leverage all the services in Microsoft Threat Protection will enjoy a fully integrated, end-to-end solution, securing their enterprise, across the entire attack surface."

Possibly, since no new security products are involved, Microsoft Threat Protection may be available for enterprises to purchase and use today. It's not clear from Microsoft's announcement if that's the case, as the licensing wasn't described or mentioned.