Microsoft Defender for Business
Endpoint protectionMobile Threat Defense Capabilities in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn
In brief
Updated capitalization, wording, links, punctuation, footnote formatting, and troubleshooting instructions on the Defender for Business mobile threat defense page.
What Defender admins need to know
Admins get clearer descriptions, prerequisites, portal navigation, and provisioning guidance.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Mobile threat defense capabilitiesThreat Defense Capabilities in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn
Microsoft Defender for Business provides advanced threat protection capabilities for devices, such as Windows and Mac clients. Defender for Business also includes mobile threat defense. Mobile threat defense capabilities help protect Android and iOS devices, without requiring you to use Microsoft Intune to onboard mobile devices.
| Capability | Android | iOS |
|---|---|---|
| Web Protection Anti-phishing, blocking unsafe network connections, and support for custom indicators. Web protection is turned on by default with web content filtering. |  |
|
| Malware protection Scanning for malicious |
|
 |
| Jailbreak detection Detection of jailbroken devices. | |
|
| Microsoft Defender Vulnerability ManagementVulnerability assessment of onboarded mobile devices. Includes vulnerability assessments for operating systems and apps for Android and iOS. For more information, see Use your vulnerability management dashboard in Microsoft Defender for Business. | |
¹ |
| Network Protection Protection against rogue Wi-Fi related threats and rogue certificates. Network protection is turned on by default with next-generation protection. As part of mobile threat defense, network protection also includes the ability to allow root certification authority and private root certification authority certificates in Intune. It also establishes trust with endpoints. | ² |
² |
| Unified alerting Alerts from all platforms are listed in the unified |
|
|
| Conditional Access and conditional launchConditional Access and conditional launch block risky devices from accessing corporate resources. - Conditional Access policies require certain criteria to be met before a user can access company data on their mobile device. - Conditional launch policies enable your security team to block access or wipe devices that don't meet certain criteria. - Defender for Business risk signals can also be added to app protection policies. |
³ |
³ |
| Privacy controls Configure privacy in threat reports by controlling the data sent by Defender for Business. Privacy controls are available for admin and end users, and for both enrolled and unenrolled devices. | ³ |
³ |
| Integration with Microsoft Tunnel Integration with Microsoft Tunnel, a VPN gateway solution for Microsoft Intune. | ⁴ |
⁴ |
¹ Operating system vulnerabilities are included.
Software/Software and app vulnerabilities require Microsoft Intune.- ² You can manage an allowlist of root certification authority certificates and private root certification authority certificates in Microsoft Intune.
- ³ Requires Microsoft Intune.
- ⁴ Requires Microsoft Intune. For more information, see Prerequisites for the Microsoft Tunnel in Intune.
How to get mobile threat defense capabilities
Make sure that Defender for Business finished provisioning. In the Microsoft Defender portal, go to Assets > Devices.
- The message,
"Hang on! We're preparing new spaces for your data and connecting them"means Defender for Business isn't finished provisioning. The process can take up to 24 hours to complete. - If you see a list of devices, or you're prompted to onboard devices, it means Defender for Business provisioning is complete.
- The message,
Review, andReview and, if necessary, edit your next-generation protection policies.Review, andReview and, if necessary, edit your firewall policies and custom rules.Review, andReview and, if necessary, edit your web content filtering policy.To onboard mobile devices, see the "Use the Microsoft Defender app" procedures in Onboard devices to Microsoft Defender for Business. \ No newline at end of file
@@ -1,6 +1,6 @@ --- layout: Conceptual-title: Mobile threat defense capabilities in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn+title: Mobile Threat Defense Capabilities in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn canonicalUrl: https://learn.microsoft.com/en-us/defender-business/mdb-mtd breadcrumb_path: /defender-business/breadcrumb/toc.json feedback_system: Standard@@ -47,7 +47,7 @@ spProducts: platformId: 6c109180-aeef-69ca-e78e-5431a5ff1975 --- -# Mobile threat defense capabilities in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn+# Mobile Threat Defense Capabilities in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn Microsoft Defender for Business provides advanced threat protection capabilities for devices, such as Windows and Mac clients. Defender for Business also includes mobile threat defense. Mobile threat defense capabilities help protect Android and iOS devices, without requiring you to use Microsoft Intune to onboard mobile devices.
@@ -60,19 +60,16 @@ The following table summarizes the capabilities that are included in mobile thre | Capability | Android | iOS |
| --- | --- | --- |
| **Web Protection** Anti-phishing, blocking unsafe network connections, and support for custom indicators. Web protection is turned on by default with [web content filtering](mdb-web-content-filtering). |  |  |
-| **Malware protection** Scanning for malicious apps (system apps included). |  |  |
+| **Malware protection** Scanning for malicious apps, including system apps. |  |  |
| **Jailbreak detection** Detection of jailbroken devices. |  |  |
| **Microsoft Defender Vulnerability Management**Vulnerability assessment of onboarded mobile devices. Includes vulnerability assessments for operating systems and apps for Android and iOS. For more information, see [Use your vulnerability management dashboard in Microsoft Defender for Business](mdb-view-tvm-dashboard). |  |  ¹ |
| **Network Protection** Protection against rogue Wi-Fi related threats and rogue certificates. Network protection is turned on by default with [next-generation protection](mdb-next-generation-protection). As part of mobile threat defense, network protection also includes the ability to allow root certification authority and private root certification authority certificates in Intune. It also establishes trust with endpoints. |  ² |  ² |
-| **Unified alerting** Alerts from all platforms are listed in the unified Microsoft Defender portal (https://security.microsoft.com). In the navigation pane, choose **Incidents**). For more information, see [View and manage incidents in Microsoft Defender for Business](mdb-view-manage-incidents) |  |  |
+| **Unified alerting** Alerts from all platforms are listed in the unified [Microsoft Defender portal](https://security.microsoft.com). In the navigation pane, choose **Incidents**. For more information, see [View and manage incidents in Microsoft Defender for Business](mdb-view-manage-incidents) |  |  |
| **Conditional Access** and **conditional launch**[Conditional Access](/en-us/intune/intune-service/protect/conditional-access) and [conditional launch](/en-us/intune/intune-service/apps/app-protection-policies-access-actions) block risky devices from accessing corporate resources. <br>- Conditional Access policies require certain criteria to be met before a user can access company data on their mobile device.<br>- Conditional launch policies enable your security team to block access or wipe devices that don't meet certain criteria.<br>- Defender for Business risk signals can also be added to app protection policies. |  ³ |  ³ |
| **Privacy controls** Configure privacy in threat reports by controlling the data sent by Defender for Business. Privacy controls are available for admin and end users, and for both enrolled and unenrolled devices. |  ³ |  ³ |
| **Integration with Microsoft Tunnel** Integration with [Microsoft Tunnel](/en-us/intune/intune-service/protect/microsoft-tunnel-overview), a VPN gateway solution for Microsoft Intune. |  ⁴ |  ⁴ |
-- ¹ Operating system vulnerabilities are included. Software/app vulnerabilities require Microsoft Intune.
-- ² You can manage an allowlist of root certification authority certificates and private root certification authority certificates in Microsoft Intune.
-- ³ Requires Microsoft Intune.
-- ⁴ Requires Microsoft Intune. For more information, see [Prerequisites for the Microsoft Tunnel in Intune](/en-us/intune/intune-service/protect/microsoft-tunnel-prerequisites).
+¹ Operating system vulnerabilities are included. Software and app vulnerabilities require Microsoft Intune. ² You can manage an allowlist of root certification authority certificates and private root certification authority certificates in Microsoft Intune. ³ Requires Microsoft Intune. ⁴ Requires Microsoft Intune. For more information, see [Prerequisites for the Microsoft Tunnel in Intune](/en-us/intune/intune-service/protect/microsoft-tunnel-prerequisites).
## How to get mobile threat defense capabilities
@@ -80,9 +77,9 @@ Mobile threat defense capabilities are now generally available to [Defender for
1. Make sure that Defender for Business finished provisioning. In the [Microsoft Defender portal](https://security.microsoft.com), go to **Assets** > **Devices**.
- - The message, "Hang on! We're preparing new spaces for your data and connecting them" means Defender for Business isn't finished provisioning. The process can take up to 24 hours to complete.
+ - The message, *Hang on! We're preparing new spaces for your data and connecting them* means Defender for Business isn't finished provisioning. The process can take up to 24 hours to complete.
- If you see a list of devices, or you're prompted to onboard devices, it means Defender for Business provisioning is complete.
-2. Review, and if necessary, edit your [next-generation protection policies](mdb-next-generation-protection).
-3. Review, and if necessary, edit your [firewall policies and custom rules](mdb-firewall).
-4. Review, and if necessary, edit your [web content filtering](mdb-web-content-filtering) policy.
+2. Review and, if necessary, edit your [next-generation protection policies](mdb-next-generation-protection).
+3. Review and, if necessary, edit your [firewall policies and custom rules](mdb-firewall).
+4. Review and, if necessary, edit your [web content filtering](mdb-web-content-filtering) policy.
5. To onboard mobile devices, see the "Use the Microsoft Defender app" procedures in [Onboard devices to Microsoft Defender for Business](mdb-onboard-devices).\ No newline at end of file