Netskope Help

Configure the Microsoft Defender Plugin
  1. In Cloud Exchange, go to Settings from the left panel and then click Plugins.

  2. Select the Microsoft Defender ATP Plugin box to open the plugin creation pages.

  3. Enter and select the Basic Information on the first page:

    • Configuration Name: Enter a name appropriate for your integration.

    • Poll Interval: Adjust to environment needs. We recommend not to go below 5 minutes for production environments.

    • Aging Criteria: Leave the default.

    • Override Reputation: Leave the default.

    • Enable SSL Verification: Leave the default.

  4. Click Next.

  5. Enter and select the Configuration Parameters on the second page:

    • Tenant ID: Enter the Tenant ID from your Defender API.

    • App ID: Enter the Client ID from your Defender API.

    • App Secret: Enter the Client Secret from your defender API.

    • Region: Select the appropriate region.

    • Device Groups: Leave the default.

    • Initial Range (in days): Leave the default.

  6. Click Save in the top right corner. Go to Threat Exchange > Plugins to see your new Defender plugin.