Forum Discussion
AnuragSrivastava
Dec 06, 2020Iron Contributor
ASR | Legit URL getting blocked
Hi, A legit exchange url is getting blocked by defender and showing the action type as ExploitGuardNetworkProtectionBlocked. The event info says that the URL is blocked as Custom Policy by ASR. ...
sewtom
Feb 09, 2021Copper Contributor
Thanks yes we are using that but that was only part of the issue. Disabling 'unknown' categories has helped (it's in beta apparently) but we still have other issues with explicitly allowed sites getting blocked.
It seems a combination of conflict with SmartScreen and browser cache, however.
It seems a combination of conflict with SmartScreen and browser cache, however.
DCoombe460
Jan 06, 2022Copper Contributor
Over a year later and we're seeing the same issue. Site was tagged as pornography, it wasn't. Created an exception and it is still blocked.
- Tom-irpJul 01, 2022Brass ContributorA link to the Microsoft sales team at https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Foutlook.office365.com%2Fowa%2Fcalendar........ was blocked for me today.
- DCoombe460Jan 24, 2022Copper Contributor
Jonhed Sorry, didn't see your reply until now. It was being blocked by any browser. Turns out I was just impatient. Waited until the next day and it was no longer blocked.
- Jake_MowrerJan 13, 2022
Microsoft
Allow network indicator will allow you to override however there is a delay for it to hit the endpoint (up to 2 hours) doc'd here: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/indicator-ip-domain?view=o365-worldwide#before-you-begin
Please be sure to dispute the category in the UI as doc'd here:
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/web-content-filtering?view=o365-worldwide#dispute-categories
Thanks,
Jake Mowrer - JonhedJan 12, 2022Steel ContributorWow, really?
How did you register the URL in the indicator, and what browser did this happen in?