mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-22 22:03:46 +00:00
99 lines
3.8 KiB
Markdown
99 lines
3.8 KiB
Markdown
---
|
|
title: Turn Network protection on
|
|
description: Enable Network protection with Group Policy, PowerShell, or MDM CSPs
|
|
keywords: ANetwork protection, exploits, malicious website, ip, domain, domains, enable, turn on
|
|
search.product: eADQiWindows 10XVcnh
|
|
ms.pagetype: security
|
|
ms.prod: w10
|
|
ms.mktglfcycl: manage
|
|
ms.sitesec: library
|
|
ms.pagetype: security
|
|
ms.localizationpriority: medium
|
|
author: andreabichsel
|
|
ms.author: v-anbic
|
|
ms.date: 05/30/2018
|
|
---
|
|
|
|
|
|
# Enable Network protection
|
|
|
|
|
|
**Applies to:**
|
|
|
|
- Windows 10, version 1709 and later
|
|
- Windows Server 2016
|
|
|
|
|
|
**Audience**
|
|
|
|
- Enterprise security administrators
|
|
|
|
|
|
**Manageability available with**
|
|
|
|
- Group Policy
|
|
- PowerShell
|
|
- Configuration service providers for mobile device management
|
|
|
|
|
|
Supported in Windows 10 Enterprise, Network protection is a feature that is part of [Windows Defender Exploit Guard](windows-defender-exploit-guard.md). It helps to prevent employees from using any application to access dangerous domains that may host phishing scams, exploits, and other malicious content on the Internet.
|
|
|
|
This topic describes how to enable Network protection with Group Policy, PowerShell cmdlets, and configuration service providers (CSPs) for mobile device management (MDM).
|
|
|
|
|
|
## Enable and audit Network protection
|
|
|
|
You can enable Network protection in either audit or block mode with Group Policy, PowerShell, or MDM settings with CSP.
|
|
|
|
For background information on how audit mode works, and when you might want to use it, see the [audit Windows Defender Exploit Guard topic](audit-windows-defender-exploit-guard.md).
|
|
|
|
|
|
### Use Group Policy to enable or audit Network protection
|
|
|
|
|
|
1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**.
|
|
|
|
3. In the **Group Policy Management Editor** go to **Computer configuration** and click **Administrative templates**.
|
|
|
|
5. Expand the tree to **Windows components > Windows Defender Antivirus > Windows Defender Exploit Guard > Network protection**.
|
|
|
|
6. Double-click the **Prevent users and apps from accessing dangerous websites** setting and set the option to **Enabled**. In the options section you must specify one of the following:
|
|
- **Block** - Users will not be able to access malicious IP addresses and domains
|
|
- **Disable (Default)** - The Network protection feature will not work. Users will not be blocked from accessing malicious domains
|
|
- **Audit Mode** - If a user visits a malicious IP address or domain, an event will be recorded in the Windows event log but the user will not be blocked from visiting the address.
|
|
|
|
|
|
>[!IMPORTANT]
|
|
>To fully enable the Network protection feature, you must set the Group Policy option to **Enabled** and also select **Block** in the options drop-down menu.
|
|
|
|
|
|
### Use PowerShell to enable or audit Network protection
|
|
|
|
1. Type **powershell** in the Start menu, right click **Windows PowerShell** and click **Run as administrator**
|
|
2. Enter the following cmdlet:
|
|
|
|
```
|
|
Set-MpPreference -EnableNetworkProtection Enabled
|
|
```
|
|
|
|
You can enable the feauting in audit mode using the following cmdlet:
|
|
|
|
```
|
|
Set-MpPreference -EnableNetworkProtection AuditMode
|
|
```
|
|
|
|
Use `Disabled` insead of `AuditMode` or `Enabled` to turn the feature off.
|
|
|
|
|
|
|
|
### Use MDM CSPs to enable or audit Network protection
|
|
|
|
|
|
Use the [./Vendor/MSFT/Policy/Config/Defender/EnableNetworkProtection](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender#defender-enablenetworkprotection) configuration service provider (CSP) to enable and configure Network protection.
|
|
|
|
|
|
## Related topics
|
|
|
|
- [Protect your network with Windows Defender Exploit Guard](network-protection-exploit-guard.md)
|
|
- [Evaluate Network protection](evaluate-network-protection.md)
|