Forum Discussion
Testing of web content filtering policy from M365 Defender
How to test web content filtering policy from M365 Defender as I am not able to see the option to target a specific group for testing purposes?
See below snap
Also I am seeing below on the link here:
https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/web-content-filtering?view=o365-worldwide#:%7E:text=To%20add%20a,the%20selected%20categories.
14 Replies
Hello,
I have recreated the environment in the dev environment. Finally, WCF is working as expected. Please find the summarization below:1. Users and Admin must have appropriate MDE licenses. (MDE 2 in my case)
2. Device group must be created with role assignment. (create an Entra ID security group and then create a role under settings> endpoint> permissions> roles. Post that create the group and apply changes)
3. Cloud and network protection must be enabled on end-user devices.
4. WCF must be enabled from settings> endpoint> advanced features (security.microsoft.com)
5. Re-create the WCF policy, this time your device group will be visible for assignment.Please let me know if you have any questions.
Thanks
MoMCT
- I would also like to see Microsoft adding various test categories URLs to https://demo.wd.microsoft.com/ portal.
I worked with multiple SWG (Secure Web Gateway) URL filtering products before, and most of the vendors offer a list of "safe" test URLs pretending to be in certain categories.
It has been few years since URL filtering has been in GA but https://demo.wd.microsoft.com/ section for Web protections has not been updated - Adding to VinodS2020: we have MDE plan 2 licensed assigned to users and devices on-boarded successfully but can not see any specific group just like above.
Also do we need to create MDE device groups to apply web content filtering policies?
Any help will be appreciated!- It can take couple of minutes if not hrs for the new groups to show up. Also, what permissions do you have in Defender? And yes, you should look at creating device groups for the purpose of assigning WCF, IoC at a granular level.
