Updated manage-allowed-blocked-list-windows-defender-advanced-threat-protection.md

This commit is contained in:
Joey Caparas
2019-04-03 20:42:04 +00:00
parent 892e1f412a
commit 4f60ac58c4

View File

@ -57,7 +57,9 @@ On the top navigation you can:
>[!NOTE]
>Blocking IPs, domains, or URLs is currently available on limited preview only. This requires sending your custom list to [network protection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/enable-network-protection) to be enforeced. While the option is not yet generally available, it will only be used when identified during an investigation.
>Blocking IPs, domains, or URLs is currently available on limited preview only.
>This requires sending your custom list to [network protection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-exploit-guard/enable-network-protection) to be enforeced.
>When Automated investigations finds this indicator during an investigation, it will use the allowed/block list as the basis of its decision to automatically remdiate (blocked list) or skip (allowed list) the entity.
## Manage indicators