diff --git a/windows/keep-secure/configure-proxy-internet-windows-defender-advanced-threat-protection.md b/windows/keep-secure/configure-proxy-internet-windows-defender-advanced-threat-protection.md index 526c3cf5d9..2480dc88e5 100644 --- a/windows/keep-secure/configure-proxy-internet-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/configure-proxy-internet-windows-defender-advanced-threat-protection.md @@ -47,7 +47,6 @@ For example: 10.0.0.6:8080 If the static proxy settings are configured after onboarding, then you must restart the PC to apply the proxy settings. ## Enable access to Windows Defender ATP service URLs in the proxy server - If a proxy or firewall is blocking all traffic by default and allowing only specific domains through, make sure that the following URLs are white-listed to permit communication with Windows Defender ATP service in port 80 and 443: Primary Domain Controller | .Microsoft.com DNS record @@ -60,6 +59,10 @@ Primary Domain Controller | .Microsoft.com DNS record
If a proxy or firewall is blocking anonymous traffic, as Windows Defender ATP sensor is connecting from system context, make sure anonymous traffic is permitted in the above listed URLs. + If you selected US as your region, you should permit anonymous traffic for URLs listed in both Central US and East US (2). + + If you selected EU as your region, you should permit anonymous traffic for URLs listed in both West Europe and North Europe. + ## Verify client connectivity to Windows Defender ATP service URLs