@@ -1,18 +1,19 @@ ----title: Verify SQL machine protection government+title: Verify Defender for SQL Servers on Machines protection for SQL VMs in government clouds description: Verify that SQL VMs are protected with the Defender for SQL Servers on Machines plan as expected, ensuring that all security measures are properly implemented. ms.topic: how-to-ms.date: 04/23/2025+ms.date: 07/03/2026+ms.custom: msecd-doc-authoring-1013 #customer intent: As a customer, I want to verify that my SQL VMs are protected with the Defender for SQL Servers on Machines plan as expected. ai-usage: ai-assisted --- -# Verify SQL machine protection government+# Verify SQL machine protection in Azure Government  > [!IMPORTANT] > This article applies to government clouds. If you're using commercial clouds, see the [Verify SQL machine protection](verify-machine-protection.md) article. -After enabling protection for SQL VMs with the Defender for SQL Servers on Machines plan, verify that your SQL servers are protected as expected.+After enabling protection for SQL VMs with the Defender for SQL Servers on Machines plan, verify that your SQL servers are protected as expected. This article shows how to check protection status across multiple Azure VMs, Azure Arc-enabled VMs, and individual SQL server VMs in government cloud environments.  ## Verify protection on multiple Azure VMs @@ -20,6 +21,8 @@ Retrieve and review the Defender for SQL Servers on Machines protection status r  ## Verify protection on multiple Azure Arc-enabled VMs +To verify protection status across multiple Azure Arc-enabled VMs, run the following query in Azure Resource Graph to identify unprotected instances.+ 1. In the Azure portal, Search for and select **Azure Resource Graph**.  1. Copy and run the following query to identify Azure Arc-enabled VMs that aren't in a protected state.@@ -37,7 +40,7 @@ Retrieve and review the Defender for SQL Servers on Machines protection status r      :::image type="content" source="media/verify-machines-protection-gov/script-results.png" alt-text="Screenshot of the results screen once the script runs." lightbox="media/verify-machines-protection-gov/script-results.png"::: -1. If the `ProtectionStatusLastUpdate` field doesn't show a date within the last day, the machine might not be protected. [Verify the protection of the single SQL server VM](#verify-protection-on-a-single-sql-server-vm).+1. If the `ProtectionStatusLastUpdate` field doesn't show a date within the last day, the machine might not be protected. To confirm, [verify the protection on a single SQL server VM](#verify-protection-on-a-single-sql-server-vm) by checking its **Protection status** under **Security** > **Defender for Cloud** in the Azure portal.      :::image type="content" source="media/verify-machines-protection-gov/status-update.png" alt-text="Screenshot that shows the last status update for the SQL instance." lightbox="media/verify-machines-protection-gov/status-update.png"::: @@ -49,6 +52,8 @@ The script can return the following possible protection statuses:  ## Verify protection on a single SQL server VM +To verify protection for a single SQL server VM, perform the following steps in the Azure portal.+ 1. Depending on the resources in your environment, search for and select **SQL virtual machines** or **SQL Server - Azure Arc** in the Azure portal.  1. Locate and select the relevant resource.@@ -61,4 +66,4 @@ The script can return the following possible protection statuses:  ## Troubleshoot unprotected machines -If databases aren't protected, follow the instructions in the [troubleshooting guide](troubleshoot-sql-machines-guide-gov.md) to remediate the issues.+If databases aren't protected, follow the instructions in [Troubleshoot SQL machine protection issues](troubleshoot-sql-machines-guide-gov.md) to remediate the issues.