Microsoft released a new Web protection feature on securitycenter.microsoft.com which uses the 3rd party Cyren web proxy. This does require an E5 License.
00:00 - Intro
02:29 - Enable custom network indicators
03:19 - Connect to a partner
06:24 - Create web content filtering policy
08:43 - Create machine group
11:26 - Web content filtering with Microsoft Defender ATP now in public preview
14:03 - Web content filtering
20:53 - Wrap-up
Looks like we might have forgotten to enable network protection which can be done either by policy from the Microsoft Defender ATP security baseline or the endpoint protection configuration profile. You can also do this using PowerShell with the following command:
Set-MpPreference -EnableNetworkProtection Enabled
Nice blog post on this:
Prerequisites
Before trying out this feature, make sure you have the following:
Windows 10 Enterprise E5 license
Access to Microsoft Defender Security Center portal
Machines running Windows 10 Anniversary Update (version 1607) or later with the latest MoCAMP update (for Network Protection on Internet Explorer, Edge, Chrome, or Firefox)
Machines running Windows 10 May 2019 Update (version 1903) or later (for a better user experience from SmartScreen on Edge). Note that if SmartScreen is not turned on, Network Protection will take over the blocking
A valid license with a partner data provider
Visit our websites and social media for more or to get in touch with us
Steve Hosking - Microsoft EM+S MVP
Adam Gross - Microsoft EM MVP
Ben Reader - Microsoft EM MVP
0 Comments