Forum Discussion

Copper Contributor

Aug 20, 2021

Solved

Newbie question about IPS

Hi I am looking at Microsoft Defender for Endpoint but cannot find anything that actually says that it provides IPS or IDS protection. Plus is it also possible to run this system in an on-Prem on...

Jayronn
Aug 23, 2021
Hi Bozzie-UK67,

Our attack surface reduction rules are the foundation of our host intrusion and prevention system (HIPS).

This blog may provide more insight: What’s new in Windows Defender ATP | Microsoft Security Blog as well as our public documentation: Migrating from a third-party HIPS to ASR rules | Microsoft Docs. This reference is specifically for prerequisites and troubleshooting ASR rules: Troubleshoot problems with Network protection | Microsoft Docs

To answer your last question about running on on-prem with no internet access, most ASR rules require Cloud protection to be enabled.

Please let me know if this helps answer your question.

Jayronn

Microsoft

Aug 23, 2021

Hi Bozzie-UK67,

Our attack surface reduction rules are the foundation of our host intrusion and prevention system (HIPS).

This blog may provide more insight: What’s new in Windows Defender ATP | Microsoft Security Blog as well as our public documentation: Migrating from a third-party HIPS to ASR rules | Microsoft Docs. This reference is specifically for prerequisites and troubleshooting ASR rules: Troubleshoot problems with Network protection | Microsoft Docs

To answer your last question about running on on-prem with no internet access, most ASR rules require Cloud protection to be enabled.

Please let me know if this helps answer your question.