Users also can be blocked from accessing Web sites based on blocking categories that get set up by organizations. Organizations also can use Web Protection capabilities to set up Allow, Block and Warn policies. Web Protection capabilities are used for alerts and investigations. It has three elements, namely ' Web threat protection, Web content filtering and Custom indicators,' according to Microsoft's document. The Web Protection capability is designed to secure devices against Web-based threats and address unwanted content. 'Currently, the integration for macOS and Linux only supports endpoint enforcement capabilities,' the announcement noted, without elaboration, regarding Microsoft Defender for Cloud Apps integration.

However, that integration is limited for Linux and macOS devices at present. The Network Protection capabilities for Windows devices works 'natively' with Microsoft Defender for Cloud Apps, which is Microsoft's solution for protecting software-as-a-service apps. To get that kind of information, Network Protection needs to be used with the 'Endpoint detection and response capabilities in Defender for Endpoint,' Microsoft's document explained. It's also possible to use Network Protection to show indicators of compromise, which might be used by security analysts hunting for advanced attacks. Machine learning is used with Network Protection as well to detect the use of software or services for command-and-control attack activities. Organizations get protection against malicious URLs across various applications, and not just for browsers, with Network Protection.

Microsoft defender for mac download