deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-13 13:57:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Merge pull request #8283 from MaratMussabekov/patch-202

Browse Source 
Added note about ranges
This commit is contained in:
jcaparas 2020-09-15 13:32:56 -07:00 committed by GitHub
commit 54ce5a7278
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md
View File

@ -1,4 +1,4 @@
--- ---
title: Create indicators for IPs and URLs/domains title: Create indicators for IPs and URLs/domains
ms.reviewer: ms.reviewer:
description: Create indicators for IPs and URLs/domains that define the detection, prevention, and exclusion of entities. description: Create indicators for IPs and URLs/domains that define the detection, prevention, and exclusion of entities.
@ -46,6 +46,7 @@ It's important to understand the following prerequisites prior to creating indic
> For web protection scenarios, we recommend using the built-in capabilities in Microsoft Edge. Microsoft Edge leverages [Network Protection](network-protection.md) to inspect network traffic and allows blocks for TCP, HTTP, and HTTPS (TLS). For all other processes, web protection scenarios leverage Network Protection for inspection and enforcement: <br> > For web protection scenarios, we recommend using the built-in capabilities in Microsoft Edge. Microsoft Edge leverages [Network Protection](network-protection.md) to inspect network traffic and allows blocks for TCP, HTTP, and HTTPS (TLS). For all other processes, web protection scenarios leverage Network Protection for inspection and enforcement: <br>
> NOTE: > NOTE:
>- IP is supported for all three protocols >- IP is supported for all three protocols
>- Only single IP addresses are supported (no CIDR blocks or IP ranges)
>- Encrypted URLs (full path) can only be blocked on first party browsers >- Encrypted URLs (full path) can only be blocked on first party browsers
>- Encrypted URLS (FQDN only) can be blocked outside of first party browsers >- Encrypted URLS (FQDN only) can be blocked outside of first party browsers
>- Full URL path blocks can be applied on the domain level and all unencrypted URLs >- Full URL path blocks can be applied on the domain level and all unencrypted URLs
@ -59,7 +60,7 @@ It's important to understand the following prerequisites prior to creating indic
2. Select the **IP addresses or URLs/Domains** tab. 2. Select the **IP addresses or URLs/Domains** tab.
3. Select **Add indicator**. 3. Select **Add item**.
4. Specify the following details: 4. Specify the following details:
- Indicator - Specify the entity details and define the expiration of the indicator. - Indicator - Specify the entity details and define the expiration of the indicator.
@ -72,4 +73,4 @@ It's important to understand the following prerequisites prior to creating indic
- [Create indicators](manage-indicators.md) - [Create indicators](manage-indicators.md)
- [Create indicators for files](indicator-file.md) - [Create indicators for files](indicator-file.md)
- [Create indicators based on certificates](indicator-certificates.md) - [Create indicators based on certificates](indicator-certificates.md)
- [Manage indicators](indicator-manage.md) - [Manage indicators](indicator-manage.md)