Azure resources scanned

Find out which Azure resources are checked.

Sophos Cloud Optix checks the following:

  • Virtual machines (VMs)
  • VM scale sets
  • Network security groups (NSG)
  • Virtual Networks (VNets)
  • Resource groups
  • IoT Hubs
  • Storage accounts
  • SQL servers
  • DBs
  • Cosmos DBs
  • IAM
  • Role-based access control (RBAC)
  • Function apps
  • Logic Apps
  • App Services
  • Activity logs
  • NSG Flow Logs
  • Log profiles
  • Key Vault
  • Security Center: Sophos Cloud Optix checks that specific ASC settings are turned on
  • Managed Kubernetes services (AKS)
Note If you've integrated Sophos Cloud Optix with the Azure Advisor service, it may scan additional services.