Knox Asset Intelligence for Microsoft Sentinel Public preview
Last updated April 28th, 2025
Welcome to an exciting opportunity to revolutionize the way you secure your mobile ecosystem. We are thrilled to invite you to explore the Public preview of our Knox Asset Intelligence Security Center integration with Microsoft Sentinel.
The Knox Asset Intelligence for Microsoft Sentinel solution is a Labs feature and currently in an experimental phase. It is provided for testing purposes, and features may be updated, modified, or discontinued in a future release.
Why should you participate in the public preview?
By participating in this public preview, you gain early access to the Knox Asset Intelligence solution template in Microsoft Sentinel, granting you unparalleled visibility into the security posture of your entire mobile device fleet. In addition, participation in the Public preview also gives you the opportunity to share valuable feedback about the integration, which can ultimately help shape and improve the final, generally available (GA) release of the solution.
How to join the Public preview
Ready to enhance your mobile security strategy? Let’s make sure you have everything you need to get started. Confirm that you have the following prerequisites:
Samsung Knox
- Samsung Knox account with access to Knox Asset Intelligence.
- A valid Knox Suite license.
- Samsung Galaxy devices running Android 15 (V) or higher, configured with a UEM/EMM in one of the following modes:
- Fully managed (also known as Device Owner/DO) provisioning
- Company-owned Personal Device (COPE) provisioning
Microsoft Azure
You’ll need to pre-configure several services in your Azure portal, including Microsoft Sentinel, Log Analytics workspaces, Microsoft Entra ID before proceeding with this integration. The following Azure services or resources are required:
- An active Azure subscription
- An Azure Resource Group created.
- A Log Analytics Workspace instance created and deployed.
- A Microsoft Sentinel instance created and deployed with the following Sentinel roles granted:
- Sentinel Contributor
- Microsoft Metrics Publisher
- Microsoft preview community (optional) to get access to support and resources.
If you require a Samsung Knox account or Knox Suite license, reach out to a Samsung B2B account executive to get onboarded. Once you have all of the prerequisites, you’re ready to get started.
Take me to the solution!Feedback and support
Your feedback is valuable, and will allow us to refine and perfect the final product. Please direct all feedback and insights regarding the integration through our dedicated Public preview team:
- DJ Ahn, Technical Program Manager at Samsung: dj.ahn1@Samsung.com
- Raj Venkatasubbu, Product Manager at Samsung: rajesh.v2@Samsung.com
We welcome all types of feedback, but would especially love to hear from you regarding the following:
| Area | Questions |
|---|---|
| User experience | How did deployment compare with your previous experience? |
| Functionality and features | How many functions in the SOC could you enable with this integration? |
| Value proposition | Does this product deliver visibility from a mobile security standpoint? Please provide specific details. |
| Security events | From the security events available, could you rate from most to least valuable for your needs? |
| Future enhancements | Are there any new signals that can enhance current value more? |
| Deployment and setup | How was the overall product deployment process? Rate from 1 (hard) to 5 (easy) |
| Documentation and support | How is the availability and completeness of documentation and instructions? Rate from 1 (insufficient) to 5 (sufficient) |
| Overall | How would you rate the overall experience (from 1 to 10)? |
| Others | Please share any major insights you may have with using the product. |
Additional resources
The following onboarding documentation is available to help you along your Knox Asset Intelligence and Microsoft Sentinel journey:
On this page
Is this page helpful?