Endpoint Security AV and FW Policies for Servers using Endpoint Manager

As part of their security policies, many companies require their employees to run specific types of antivirus software and firewalls on their computers. However, what about servers? Do you have any policies in place to ensure that your servers are protected from viruses and other malicious threats? If not, my answer will help you create the endpoint security policies you need to protect your servers from threats by using Endpoint Manager's advanced deployment options and automated processes.

Endpoint Protection is expected in the coming months. You can configure the Windows Firewall for each Windows Server as part of an operating system configuration. You can also configure the firewall on a Linux Server as part of an operating system configuration. For more information about how to configure these firewalls, see Configure the Windows Firewall on a Server.

You can read more about MSE Endpoint at Manage Microsoft Defender for Endpoint configuration settings on devices with Microsoft Endpoint Manager | Microsoft Learn. Natively, MSE Endpoint cannot be configured by using the Intune console or by using the Intune API. Instead, you have to use a PowerShell script. The script invokes the MSE Endpoint PowerShell Module and uses it to configure the security settings. The script can either be run on the servers or can be run from the Intune management server, depending on certain requirements.