Application control and Web filtering

%3CLINGO-SUB%20id%3D%22lingo-sub-1847901%22%20slang%3D%22en-US%22%3EApplication%20control%20and%20Web%20filtering%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1847901%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%20class%3D%22markbk5ivzmmh%22%3ECan%20anyone%20help%20me%20with%20this.%20Please%20find%20below%20requirements.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3COL%3E%3CLI%3E%3CSPAN%20class%3D%22markbk5ivzmmh%22%3EApplication%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22mark52mb65q1v%22%3EControl%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%E2%80%93%20Allow%20only%20whitelisted%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22markbk5ivzmmh%22%3Eapplication%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Efor%20installation%20and%20running%20into%20User%20system%20(Windows%20as%20well%20as%20Mac)%20OR%20block%20unauthorised%20risk%20prone%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22markbk5ivzmmh%22%3Eapplication%3C%2FSPAN%3Es%20like%20torrent%20etc.%3C%2FLI%3E%3CLI%3EWeb%20filtering%2Fcontent%20filtering%3A%20Malicious%20websites%2C%20tor%20sites%2C%20torrent%20sites%2C%20tor%20Sites%2C%20proxy%20sites%2C%20crypto%20mining%20etc.%20sites%20should%20be%20blocked.%20We%20should%20have%20provision%20to%20block%20Facebook%2C%20gmail%2C%20yahoo%20etc.%20as%20well.%3C%2FLI%3E%3C%2FOL%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1847901%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1848452%22%20slang%3D%22en-US%22%3ERe%3A%20Application%20control%20and%20Web%20filtering%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1848452%22%20slang%3D%22en-US%22%3E%3CP%3EFor%20application%20control%20you%20can%20use%20two%20technologies%3A%20either%20Applocker%20or%20Windows%20Defender%20Application%20Control.%20Please%20check%20out%20this%20article%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fsecurity%2Fthreat-protection%2Fwindows-defender-application-control%2Fwindows-defender-application-control%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fsecurity%2Fthreat-protection%2Fwindows-defender-application-control%2Fwindows-defender-application-control%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFor%20web%20filtering%20you%20need%20Defender%20ATP%2C%20Intune%20itself%20does%20not%20provide%20this.%20You%20can%20find%20more%20about%20web%20content%20filtering%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fsecurity%2Fthreat-protection%2Fmicrosoft-defender-atp%2Fweb-content-filtering%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fsecurity%2Fthreat-protection%2Fmicrosoft-defender-atp%2Fweb-content-filtering%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

Can anyone help me with this. Please find below requirements. 

  1. Application Control – Allow only whitelisted application for installation and running into User system (Windows as well as Mac) OR block unauthorised risk prone applications like torrent etc.
  2. Web filtering/content filtering: Malicious websites, tor sites, torrent sites, tor Sites, proxy sites, crypto mining etc. sites should be blocked. We should have provision to block Facebook, gmail, yahoo etc. as well.
1 Reply

For application control you can use two technologies: either Applocker or Windows Defender Application Control. Please check out this article: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-con...

 

For web filtering you need Defender ATP, Intune itself does not provide this. You can find more about web content filtering here: https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/web-conte...