Skip to content

Commit 4c38812

Browse files
authored
Update Set-MpPreference.md
1 parent a06d89a commit 4c38812

File tree

1 file changed

+5
-3
lines changed

1 file changed

+5
-3
lines changed

docset/winserver2022-ps/defender/Set-MpPreference.md

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -453,6 +453,7 @@ Accept wildcard characters: False
453453

454454
### -DisableDnsParsing
455455
Specifies whether to disable inspection of DNS traffic that occurs over a UDP channel.
456+
Network Protection inspects DNS traffic that occurs over a TCP channel, to provide metadata for Anti-malware Behavior Monitoring or to allow for DNS sink holing if the "-EnableDnsSinkhole" configuration is set. This can be disabled by setting this value to "$true".
456457

457458
```yaml
458459
Type: Boolean
@@ -701,8 +702,8 @@ Accept wildcard characters: False
701702
```
702703

703704
### -DisableTlsParsing
704-
Specifies whether to disable inspection of TLS traffic, also known as HTTPS.
705-
By default, Network Protection inspects TLS traffic.
705+
Specifies whether to disable inspection of TLS traffic.
706+
Network Protection inspects TLS traffic (also known as HTTPS traffic) to see if a connection is being made to a malicious website, and to provide metadata to Behavior Monitoring. TLS connections to malicious websites can also be blocked if "-EnableNetworkProtection" is set to enabled. HTTP inspection can be disabled by setting this value to "$true". By default, Network Protection inspects TLS traffic.
706707

707708
```yaml
708709
Type: Boolean
@@ -732,7 +733,8 @@ Accept wildcard characters: False
732733
```
733734

734735
### -EnableDnsSinkhole
735-
Specifies whether to examine DNS traffic to detect and sinkhole DNS exfiltration attempts and other DNS based malicious attacks.
736+
Specifies whether to examine DNS traffic to detect and sinkhole DNS exfiltration attempts and other DNS based malicious attacks.
737+
Network Protection can inspect the DNS traffic of a machine and, in conjunction with behavior monitoring, detect and sink hole DNS exfiltration attempts, and other DNS based malicious attacks. Set this configuration to "$true" to enable this feature.
736738

737739
```yaml
738740
Type: Boolean

0 commit comments

Comments
 (0)