Windows Security Center integration on Client and Server?

Question

Hello, 
 we use Sophos Central with Sophos Intercept X for clients and servers. I noticed a difference in the Windows Security Center. 
 - The clients show Sophos Intercept X as threat protection. 
 - The servers only show the Windows Defender? Can someone explain this to me and is this behavior normal? 
 
 Status of integration on Windows Server 2019

--- 
 Status on Windows 10 Client

Sophos User930 · Answer

How do you mean Supported? For Windows client platforms it's more automated, you could say if Sophos, or other vendors inform the Security Center they are present, which leads to Defender disabling itself, then you could say the integration with Defender on those platforms is Supported/tested, etc.. 
 As I understand it, for Server platforms, the decision is placed more in the hands of the admin. They choose a vendor such as Sophos with the required security features and then can either: 
 - Leave Defender installed and active - the features licenced for or enabled of the third-party product may make this viable. Depending on the features enabled of the third party it could cause serious performance issues. Do you want two products scanning files on-access, performing EDR like work, etc.. 
 - Uninstall Defender from the list of server features to avoid all potential conflicts, performance being the most likely. 
 - Leave defender installed and use this passive mode.

Windows Security Center integration on Client and Server?

Top Replies