Edit

Share via

Protect your organization against web threats

  • Applies to: Microsoft Defender for Endpoint Plan 1, Microsoft Defender for Endpoint Plan 2

Web threat protection is part of Web protection in Defender for Endpoint. It uses network protection to secure your devices against web threats. By integrating with Microsoft Edge and popular third-party browsers like Chrome and Firefox, web threat protection stops web threats without a web proxy and can protect devices while they're away or on premises. Web threat protection stops access to phishing sites, malware vectors, exploit sites, untrusted or low-reputation sites, and sites that you've blocked because they're in your custom indicator list.

Note

It might take up to two hours for devices to receive new custom indicators.

Prerequisites

Web threat protection uses network protection to provide web browsing security in Edge (excepting Windows devices), non-Microsoft web browsers and nonbrowser processes. On Windows devices, web threat protection in Edge uses Microsoft Defender SmartScreen and network protection isn't required to be enabled.

To turn on Microsoft Defender SmartScreen in Edge: Configure Microsoft Defender SmartScreen.

To turn on network protection on your devices:

Note

If you set network protection to Audit only, blocking is unavailable. Also, you are able to detect and log attempts to access malicious and unwanted websites on Microsoft Edge only.

Configure web threat protection

The legacy Web protection policy in Intune has been deprecated and web threat protection will be enabled if the prerequisites are met.

Tip

Do you want to learn more? Engage with the Microsoft Security community in our Tech Community: Microsoft Defender for Endpoint Tech Community.