From 31070ff1e86757df0664853db2b39347ef0a04e6 Mon Sep 17 00:00:00 2001 From: MokumaPM <105771503+MokumaPM@users.noreply.github.com> Date: Mon, 1 Jul 2024 00:49:49 -0700 Subject: [PATCH] Update --- .../application-security-application-isolation.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/windows/security/book/application-security-application-isolation.md b/windows/security/book/application-security-application-isolation.md index 589481a1e8..f8e08c4cdf 100644 --- a/windows/security/book/application-security-application-isolation.md +++ b/windows/security/book/application-security-application-isolation.md @@ -44,6 +44,18 @@ Once Windows Sandbox is closed, nothing persists on the device. All the software - [Windows Sandbox is a new lightweight desktop environment tailored for safely running applications in isolation](https://techcommunity.microsoft.com/t5/windows-os-platform-blog/windows-sandbox/ba-p/301849) +##Windows Subsystem for Linux (WSL) +Windows Subsystem for Linux (WSL) is a feature of Windows that allows you to run a Linux environment on your Windows machine, without the need for a separate virtual machine or dual booting. WSL is designed to provide a seamless and productive experience for developers who want to use both Windows and Linux at the same time. In Ge, we added 3 networking security features and Intune/MDM integration in WSL on Windows 11 (SV2 and Ge) for Enterprises: +- Hyper-V Firewall: This new firewall setting is a network firewall solution that enables filtering of inbound and outbound traffic to/from WSL containers hosted by Windows. +:::image type="icon" source="images/learn-more.svg" border="false"::: **Learn more:** + +- [Hyper-V Firewall](windows/security/operating-system-security/network-security/windows-firewall/hyper-v-firewall) + +- DNS Tunneling: This new networking setting improves compatibility in different networking environments and makes use of virtualization features to obtain DNS information rather than a networking packet. +- Auto proxy: This new networking setting enforces WSL to use Windows' HTTP proxy information. Turn on when using a proxy on Windows, as it will make that proxy automatically apply to WSL distributions. +- Intune/MDM setting in WSL: Microsoft Defender for Endpoint (MDE) now integrates with WSL, providing the ability to monitor what’s running inside of your WSL distros and report them to your online MDE dashboards. + + ## App containers In addition to Windows Sandbox for Win32 apps, Universal Windows Platform (UWP) applications run in Windows containers known as *app containers*. App containers act as process and resource isolation boundaries, but unlike Docker containers, these are special containers designed to run Windows applications.