Jamf Protect now offers an updated Microsoft Sentinel integration. The updated integration supports forwarding of the latest telemetry data. The new version of the integration is available for download on the Microsoft Azure Marketplace.

Note:

If you are updating from the deprecated version of Microsoft Sentinel data forwarding, verify that you have installed and configured the latest version of the Jamf Protect for Microsoft Sentinel integration available on the Azure Marketplace or Microsoft Sentinel Content Hub.

If you have previously configured data forwarding to the Microsoft Sentinel solution, you will see two configuration options: Microsoft Sentinel (Deprecated) and Microsoft Sentinel.

Important:

Disabling the Microsoft Sentinel (Deprecated) integration causes the deprecated section to no longer be available on the data forwarding screen.

Jamf recommends configuring the latest Microsoft Sentinel integration and validating that your data is being forwarded as expected, before disabling the deprecated Microsoft Sentinel data forwarding option.

Do not enable both Microsoft Sentinel data forwarding options simultaneously, as having both Microsoft Sentinel integrations enabled at the same time may result in duplicated data being sent.

Requirements
The latest version of the Jamf Protect Microsoft Sentinel integration available on the Microsoft Azure Marketplace.
  1. Enable the latest version of the Jamf Protect Microsoft Sentinel integration. For detailed configuration steps, see Forwarding macOS Security Data to Microsoft Sentinel.
    Note:

    Jamf recommends only enabling one version of the Microsoft Sentinel integration at a time. Having both versions of the Microsoft Sentinel integration enabled for any period of time can cause duplicated data to be forwarded.

  2. Validate that the latest integration is configured correctly and sending the desired data to your Microsoft Sentinel solution.
  3. Disable the Microsoft Sentinel (Deprecated) data forwarding option by sliding the toggle to the off position.