Defender for Identity - VPN Integration

Question

Hi,We frequently get false positives from Microsoft Defender for Identity because it's unable to map the IP address Cato assigns a remote user with their laptop hostname.&nbsp;I guess our on prem Microsoft sensors are unaware of the Cato client range. I think the only way to fix it is to send RADIUS accounting events from Cato to the Microsoft sensor, but I don't think this can be done?&nbsp;https://learn.microsoft.com/en-us/defender-for-identity/vpn-integration

michaelsaw · Answer

HI DavidG,&nbsp;
It seems that "Microsoft Defender for Identity" would require RADIUS Accounting capabilities: https://learn.microsoft.com/en-us/defender-for-identity/vpn-integration&nbsp;As an alternative, would you consider Cato XDR to further enhance the security of remote users?https://support.catonetworks.com/hc/en-us/articles/15956708189981-Reviewing-Site-Operations-Stories&nbsp;
Cheers&nbsp;

Forum Discussion

Defender for Identity - VPN Integration

1 Reply

Recent Discussions

Internet Network Rules - No Option for IP Address

Azure Virtual Desktop - Always on policy

Anti-Tampering Query- Auto upgrade of client version

Visual Bugs in the UI?

Azure Virtual Desktop Session Host Routing