The existing endpoint security Antivirus policy for the Microsoft Defender Antivirus profile on Linux Server now includes new settings you can configure and deploy to your managed Linux devices:

  • Offline security intelligence update - Manage how Microsoft Defender Antivirus keeps its security intelligence current on Linux Server devices, including updates while the device is offline.
  • Scheduled scan - Manage when Microsoft Defender Antivirus runs scheduled scans on Linux devices.

These settings:

  • Are added to the existing endpoint security Antivirus policy for the Microsoft Defender Antivirus profile on Linux. No new profile is required. By default, they're set to Not configured.
  • Are supported for Linux Server devices enrolled with Intune, and for Linux devices managed through the Microsoft Defender for Endpoint security settings management scenario, which supports devices that are managed by Defender for Endpoint but not enrolled with Intune.

For details about the available Defender settings, see Set preferences for Microsoft Defender for Endpoint on Linux in the Microsoft Defender for Endpoint documentation.

Applies to

  • Linux