What are the benefits of adding an Azure account?

• Changes in your Azure virtual machine inventory are automatically reflected in Deep Security Manager. For example, if you delete a number of instances in Azure, those instances disappear automatically from the manager. By contrast, if you use Computers > Add Computer, Azure instances that are deleted from Azure remain visible in the manager until they are manually deleted.
• Virtual machines are organized into their own branch in the manager, which lets you easily see which Azure instances are protected and which are not. Without the Azure account, all your virtual machines appear at the same root level under Computers.

Configure a proxy setting for the Azure account

Add virtual machines from a Microsoft Azure account to Deep Security

1. Before you begin, create an Azure app for Deep Security.
2. In Deep Security Manager, go to Computers > Add > Add Azure Account.

   Note As of Deep Security Manager 12.0, 'Quick' mode is no longer available. If you used Quick mode in prior releases, there is no impact to your deployment. All new Azure Cloud accounts must use the advanced method.

3. Enter a Display name, and then enter the following Azure access information you recorded in step 1:

   • Directory ID
   • Subscription ID
   • Application ID

   Note If you are upgrading from the Azure classic connector to the Azure Resource Manager connector, the Display name and the Subscription ID of the existing connector will be used.

   Note If you have multiple Azure subscriptions, specify only one in the Subscription ID field. You can add the rest later.

4. Select the type of application credential that you want to use (Password or Certificate) and then provide the credential information:

   • For Password:

     • In the Application Password field, enter the client secret.
   • For Certificate:

     • Next to Certificate, click Choose File and upload the certificate.
     • Next to Private Key, click Choose File and upload the private key.
     • If the private key is protected by a password, enter it in Private Key Password (optional).

     Note The certificate must be in X.509 PEM text format and must be within its validity period. Binary format is not supported.

5. Click Next.
6. Review the summary information, and then click Finish.
7. Repeat this procedure for each Azure subscription, specifying a different Subscription ID each time.

Tip You can right-click your Azure account name and select Synchronize Now to see the latest set of Azure VMs.

Tip You will see all the virtual machines in the account. If you'd like to only see certain virtual machines, use smart folders to limit your results. See Group computers dynamically with smart folders for more information.

Note If you have previously added virtual machines from this Azure account, they will be moved under this account in the Computers tree.

Manage Azure classic virtual machines with the Azure Resource Manager connector

1. On the Computers page, in the Computers tree, right-click the Azure classic portal and then click Properties.
2. Click Enable Resource Manager connection.
3. Click Next. Follow the corresponding procedure above.

Remove an Azure account

1. Go to the Computers page, right-click on the Microsoft Azure account in the navigation panel, and select Remove Cloud Account.
2. Confirm that you want to remove the account.
3. The account is removed from the Deep Security Manager.

Synchronize an Azure account

1. In Deep Security Manager, click Computers.
2. On the left, right-click your Azure account and select Synchronize Now.