Skip to content

Commit 167c5c7

Browse files
Merge pull request #2692 from YongRhee-MSFT/docs-editor/network-protection-1738977264
Update network-protection.md
2 parents 577b534 + f38f0dd commit 167c5c7

File tree

1 file changed

+22
-4
lines changed

1 file changed

+22
-4
lines changed

defender-endpoint/network-protection.md

Lines changed: 22 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -23,8 +23,7 @@ search.appverid: met150
2323

2424
**Applies to:**
2525

26-
- [Microsoft Defender for Endpoint Plan 1](microsoft-defender-endpoint.md)
27-
- [Microsoft Defender for Endpoint Plan 2](microsoft-defender-endpoint.md)
26+
- [Microsoft Defender for Endpoint Plan 1 and 2](microsoft-defender-endpoint.md)
2827
- [Microsoft Defender XDR](/defender-xdr)
2928
- Microsoft Defender Antivirus
3029

@@ -34,7 +33,7 @@ search.appverid: met150
3433
- macOS
3534
- Linux
3635

37-
Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial](https://signup.microsoft.com/create-account/signup?products=7f379fee-c4f9-4278-b0a1-e4c8c2fcdf7e&ru=https://aka.ms/MDEp2OpenTrial?ocid=docs-wdatp-exposedapis-abovefoldlink).
36+
Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial](https://go.microsoft.com/fwlink/p/?linkid=2225630&clcid=0x409&culture=en-us&country=us).
3837

3938
## Overview of network protection
4039

@@ -158,6 +157,26 @@ A user visits a website. If the url has an unknown or uncertain reputation, a to
158157
> [!NOTE]
159158
> The images shown in this article for both the `warn` experience and `block` experience use "blocked url" as example placeholder text. In a functioning environment, the actual url or domain is listed.
160159
160+
#### Use CSP to enable `Convert warn verdict to block`
161+
162+
[/windows/client-management/mdm/defender-csp](/windows/client-management/mdm/defender-csp#configurationenableconvertwarntoblock)
163+
164+
#### Use Group Policy to enable Convert warn verdict to block
165+
166+
By enabling this setting, network protection blocks network traffic instead of displaying a warning.
167+
168+
1. On your Group Policy management computer, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)).
169+
170+
2. Right-click the Group Policy Object you want to configure, and then select **Edit**.
171+
172+
3. In the **Group Policy Management Editor** go to **Computer configuration** and then select **Administrative templates**.
173+
174+
4. Expand the tree to **Windows components** > **Microsoft Defender Antivirus** > **Network inspection system**.
175+
176+
5. Double-click **Convert warn verdict to block** and set the option to **Enabled**.
177+
178+
6. Select **OK**.
179+
161180
#### Block experience
162181

163182
A user visits a website. If the url has a bad reputation, a toast notification presents the user with the following options:
@@ -449,7 +468,6 @@ You can disable QUIC at the web browser level. However, this method of disabling
449468
| Microsoft Edge | `edge://flags/#enable-quic` |
450469
| Google Chrome | `chrome://flags/#enable-quic` |
451470

452-
453471
## Optimizing network protection performance
454472

455473
Network protection includes performance optimization that allows `block` mode to asynchronously inspect long-lived connections, which might provide a performance improvement. This optimization can also help with app compatibility problems. This capability is on by default.

0 commit comments

Comments
 (0)