The Microsoft Defender for Identity GCC High offering uses the same underlying technologies and capabilities as the commercial instance of Defender for Identity. A list of feature variances can be found in the Service Description.
Get started with US Government offerings
The Defender for Identity GCC, GCC High, and Department of Defense (DoD) offerings are built on the Microsoft Azure Government Cloud and are designed to inter-operate with Microsoft 365 GCC, GCC High, and DoD. Use Defender for Identity public documentation as a starting point for deploying and operating the service and refer to the Service Description, which details all changes from functionality or features specific to the GCC, GCC High, and DoD environments.
Licensing requirements
Defender for Identity for US Government customers requires one of the following Microsoft volume licensing offers:
| GCC | GCC High | DoD |
|---|---|---|
| Microsoft 365 GCC G5 | Microsoft 365 E5 for GCC High | Microsoft 365 G5 for DOD |
| Microsoft 365 G5 Security GCC | Microsoft 365 G5 Security for GCC High | Microsoft 365 G5 Security for DOD |
| Standalone Defender for Identity licenses | Standalone Defender for Identity licenses | Standalone Defender for Identity licenses |
URLs
To access Microsoft Defender for Identity for US Government offerings, use the appropriate addresses in this table:
| US Government offering | Portal | Workspace | Agent endpoint |
|---|---|---|---|
| DoD | portal.azure.atp.us |
<workspacename>.atp.azure.us |
<your-instance-name>sensorapi.atp.azure.us |
| GCC-H | portal.azure.atp.us |
<workspacename>.atp.azure.us |
<your-instance-name>sensorapi.atp.azure.us |
| GCC | portal.gcc.atp.azure.com |
<workspacename>.gcc.atp.azure.com |
<your-instance-name>sensorapi.gcc.atp.azure.com |
You can also use the IP address ranges in our Azure service tag (AzureAdvancedThreatProtection) to enable access to Defender for Identity. For more information about service tags, see Virtual network service tags or download the Azure IP Ranges and Service Tags – US Government Cloud file.
Required connectivity settings
Use this link to configure the minimum internal ports necessary that the Defender for Identity sensor requires.
Feature parity with the commercial environment
Unless otherwise specified, new feature releases, including preview features, documented in What’s new with Defender for Identity, will be available in GCC, GCC High, and DoD environments within three weeks of release in the Defender for Identity commercial environment. Preview features may not be supported in the GCC, GCC High, and DoD environments. Refer to the Service Description for a list of functionality or features specific to the GCC, GCC High, and DoD environments.