Skip to content

Commit d45a9f2

Browse files
authored
Update enable-network-protection.md
1 parent 6c2d7d7 commit d45a9f2

File tree

1 file changed

+2
-4
lines changed

1 file changed

+2
-4
lines changed

defender-endpoint/enable-network-protection.md

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -75,7 +75,7 @@ To enable network protection, you can use any of the methods described in this a
7575
- Optional Network Protection settings for Windows and Windows Server:
7676

7777
> [!WARNING]
78-
> For Domain Controllers, Windows DNS servers, Windows File Servers, Microsoft SQL servers, Microsoft Exchange servers, and others, set the **Allow Datagram Processing On WinServer** to **disabled**. These roles often generate high volumes of UDP traffic, which can affect network performance and reliability when datagram processing is enabled. Disabling this setting helps maintain network stability and optimize resource usage in demanding environments.
78+
> For Domain Controllers, Windows DNS servers, Windows File Servers, Microsoft SQL servers, Microsoft Exchange servers, and others, set the `Allow Datagram Processing On WinServer` to `disabled`. These roles often generate high volumes of UDP traffic, which can affect network performance and reliability when datagram processing is enabled. Disabling this setting helps maintain network stability and optimize resource usage in demanding environments.
7979
8080
|Description| Setting|
8181
| -------- | -------- |
@@ -220,9 +220,7 @@ Use the following procedure to enable network protection on domain-joined comput
220220
|Windows Server 2016 <br/>Windows Server 2012 R2 with the [unified agent for Microsoft Defender for Endpoint](/defender-endpoint/enable-network-protection) | `set-MpPreference -AllowNetworkProtectionDownLevel $true` <br/> `set-MpPreference -AllowNetworkProtectionOnWinServer $true` <br/>|
221221

222222
> [!IMPORTANT]
223-
> or Domain Controllers, Windows DNS servers Windows File Servers, Microsoft SQL servers, Microsoft Exchange servers, and others, set the `AllowDatagramProcessingOnWinServer` parameter to `$false`. These roles often generate high volumes of UDP traffic, which can affect network performance and reliability when datagram processing is enabled. Disabling this setting helps maintain network stability and optimize resource usage in demanding environments.
224-
225-
223+
> For Domain Controllers, Windows DNS servers, Windows File Servers, Microsoft SQL servers, Microsoft Exchange servers, and others, set the `AllowDatagramProcessingOnWinServer` parameter to `$false`. These roles often generate high volumes of UDP traffic, which can affect network performance and reliability when datagram processing is enabled. Disabling this setting helps maintain network stability and optimize resource usage in demanding environments.
226224
227225
4. (This step is optional.) To set network protection to audit mode, use the following cmdlet:
228226

0 commit comments

Comments
 (0)