Skip to content

Commit 0230d6c

Browse files
committed
Learn Editor: Update enable-network-protection.md
1 parent 1853cab commit 0230d6c

File tree

1 file changed

+13
-15
lines changed

1 file changed

+13
-15
lines changed

defender-endpoint/enable-network-protection.md

Lines changed: 13 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -55,45 +55,43 @@ To enable network protection, you can use one of the following methods:
5555

5656
#### Create an endpoint security policy
5757

58-
-
59-
Sign in to the [Microsoft Defender portal](https://security.microsoft.com/) using at least a Security Administrator role assigned.
58+
- Sign in to the [Microsoft Defender portal](https://security.microsoft.com/) using at least a Security Administrator role assigned.
6059

61-
Select Endpoints > Configuration management > Endpoint security policies and then select Create new Policy.
60+
- Select Endpoints > Configuration management > Endpoint security policies and then select Create new Policy.
6261

6362
- Under Select Platform, select "Windows 10, Windows 11, and Windows Server".
6463

6564
- Under Select Template, select Microsoft Defender Antivirus, then select Create policy.
6665

67-
On the Basics page, enter a name and description for the profile, then choose Next.
66+
- On the Basics page, enter a name and description for the profile, then choose Next.
6867

6968
- On the Settings page, expand each group of settings, and configure the settings you want to manage with this profile.
7069

71-
####
72-
Network Protection on Windows clients:
70+
### Network Protection on Windows clients:
7371

7472
| Description| Setting|
7573
| -------- | -------- |
76-
| Enable Network Protection|Options:<br> Enabled (block mode) <br>Enabled (audit mode) <br>Disabled (Default) <br>Not Configured|
74+
| Enable Network Protection|Options:<br>Enabled (block mode) Note: Block mode is needed to block IP address/URL indicators and Web Content Filtering.<br>Enabled (audit mode) <br>Disabled (Default) <br>Not Configured|
7775

7876
#### Network Protection on Windows Server 2012 R2 and Windows Server 2016:
7977

8078
| Description|Setting|
8179
| -------- | -------- |
82-
|Allow Network Protection Down Level|Options:<br> Network protection will be enabled downlevel. <br>Network Protection will be disabled downlevel. (Default) <br>Not Configured|
80+
|Allow Network Protection Down Level|Options:<br>Network protection will be enabled downlevel. <br>Network Protection will be disabled downlevel. (Default) <br>Not Configured|
8381

8482
#### Optional Network Protection settings for Windows and Windows Server:
8583

8684
> [!WARNING]
87-
> For Domain Controllers, Windows DNS servers and Microsoft Exchange servers, set the "Allow Datagram Processing On WinServer" to . These roles often generate high volumes of UDP traffic, which can affect network performance and reliability when datagram processing is enabled. Disabling this setting helps maintain network stability and optimize resource usage in demanding environments.
85+
> For Domain Controllers, Windows DNS servers and Microsoft Exchange servers, set the "Allow Datagram Processing On WinServer" to **"Datagram processing on Windows Server is disabled"**. These roles often generate high volumes of UDP traffic, which can affect network performance and reliability when datagram processing is enabled. Disabling this setting helps maintain network stability and optimize resource usage in demanding environments.
8886
8987
|Description| Setting|
9088
| -------- | -------- |
91-
|Allow Datagram Processing On Win Server|Datagram processing on Windows Server is enabled. <br> Datagram processing on Windows Server is disabled (Default). <br> Not configured|
92-
|Disable DNS over TCP parsing|DNS over TCP parsing is disabled. <br> DNS over TCP parsing is enabled (Default). <br> Not configured|
93-
|Disable HTTP parsing| HTTP parsing is disabled. <br> HTTP parsing is enabled (Default). <br> Not configured|
94-
|Disable SSH parsing| SSH parsing is disabled. <br> SSH parsing is enabled (Default). <br> Not configured|
95-
|Disable TLS parsing | TLS parsing is disabled. <br> TLS parsing is enabled (Default). <br> Not configured|
96-
|[Deprecated]Enable DNS Sinkhole| DNS Sinkhole is disabled. <br> DNS Sinkhole is enabled. (Default) <br> Not configured|
89+
|Allow Datagram Processing On Win Server|Datagram processing on Windows Server is enabled. <br>Datagram processing on Windows Server is disabled (Default). <br>Not configured|
90+
|Disable DNS over TCP parsing|DNS over TCP parsing is disabled. <br>DNS over TCP parsing is enabled (Default). <br>Not configured|
91+
|Disable HTTP parsing|HTTP parsing is disabled. <br>HTTP parsing is enabled (Default). <br>Not configured|
92+
|Disable SSH parsing|SSH parsing is disabled. <br>SSH parsing is enabled (Default). <br>Not configured|
93+
|Disable TLS parsing |TLS parsing is disabled. <br>TLS parsing is enabled (Default). <br>Not configured|
94+
|[Deprecated]Enable DNS Sinkhole|DNS Sinkhole is disabled. <br>DNS Sinkhole is enabled. (Default) <br>Not configured|
9795

9896
- When you're done configuring settings, select Next.
9997

0 commit comments

Comments
 (0)