Forum Discussion
indicators for URLs not blocking any longer
Hi, is there a known issue with Indicators for URLs/domains? we recognised that blocking rules stop working for non-edge browsers and edge browser smart screen needs a refresh of the site in order ...
Hi,
Simply marked Zoom as unsanctioned in MCAS, worked for ~3 week and the just stopped.
Allowed the integration between MCAS and Defender ATP to automatically create the indicator.
Scott650 Hi - determined that someone unlinked a GPO that enforced network protection. The reason Edge worked was due to smartscreen. The Key HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection\EnableNetworkProtection=1 did not exist.
that was our root cause - hope this helps others
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/enable-network-protection