Microsoft Defender for Business
Endpoint protectionSet up Web Content Filtering in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn
In brief
The article title and headings were updated, browser enforcement wording was clarified, setup examples and policy instructions were streamlined, and two ontology links were added.
What Defender admins need to know
Use the revised guidance to identify browser coverage and configure filtering categories and policy scope.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Set up web content filteringWeb Content Filtering in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn
Web content filtering enables your security team to track and regulate access to websites based on content categories. When you set up your web content filtering policy, you enable web protection for your organization.
Web content filtering is available on the major web browsers, with blocks performed by WindowsMicrosoft Defender SmartScreen (Microsoft Edge)for Microsoft Edge and Network Protection (Chrome,for Chrome, Firefox, Brave, and Opera).Opera. For more information, see Prerequisites for web content filtering.
In Defender for Business, you can have one web content filtering policy applied to all users.
In the Microsoft Defender portal, go to Settings > Endpoints > Rules > Web content filtering, and then select + Add policy.
Specify a name and description for your policy.
Select the web content filtering categories to
block (for example,block, such as Adult content, High bandwidth, Legal liability, or Leisure). Don't select Uncategorized. Use the expand icon to fully expand each parent category, and then select specific web content categories.To set up an audit-only policy that doesn't block any websites, don't select any categories.
Apply the policy to all users.
(ScopingScoping to specific devices isn't available in Defender for Business.)Review the summary and save the policy. The policy refresh might take up to two hours to apply to your organization's devices.
Tip
To learn more about web content filtering, see Web content filtering.
Categories for web content filtering
Not all websites in the following categories are malicious. However, theseThese websites might cause problems for your company due to compliance regulations, bandwidth usage, or other concerns.
You can startStart with an audit-only policy to better understand whether your security team should block any website categories. You can edit your policy later.
The following table describes web content categories you can choose for your web content filtering policy:
@@ -1,6 +1,6 @@ --- layout: Conceptual-title: Set up web content filtering in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn+title: Set up Web Content Filtering in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn canonicalUrl: https://learn.microsoft.com/en-us/defender-business/mdb-web-content-filtering breadcrumb_path: /defender-business/breadcrumb/toc.json feedback_system: Standard@@ -39,18 +39,20 @@ item_type: Content source_path: defender-business/mdb-web-content-filtering.md cmProducts: - https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/b11ae577-8d18-47ab-998c-ea182a941e71+- https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/c671beaa-a830-4c9f-aceb-97379ee031ca - https://authoring-docs-microsoft.poolparty.biz/devrel/63959238-cb90-4871-a33d-4a5519097e47 spProducts: - https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/87b1d24d-826d-4337-90a0-b6c35e4561f2+- https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/8921374c-4dbe-4ed0-b011-a39e18bfbd98 - https://authoring-docs-microsoft.poolparty.biz/devrel/78d87f42-5582-4a6b-90be-7db2f12b34e6 platformId: 4d5dd7bb-eebc-f2bf-cac2-6acbaea7a235 --- -# Set up web content filtering in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn+# Set up Web Content Filtering in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn Web content filtering enables your security team to track and regulate access to websites based on content categories. When you set up your web content filtering policy, you enable web protection for your organization.
-Web content filtering is available on the major web browsers, with blocks performed by Windows Defender SmartScreen (Microsoft Edge) and Network Protection (Chrome, Firefox, Brave, and Opera). For more information, see [Prerequisites for web content filtering](/en-us/defender-endpoint/web-content-filtering#prerequisites).
+Web content filtering is available on the major web browsers, with blocks performed by Microsoft Defender SmartScreen for Microsoft Edge and Network Protection for Chrome, Firefox, Brave, and Opera. For more information, see [Prerequisites for web content filtering](/en-us/defender-endpoint/web-content-filtering#prerequisites).
In Defender for Business, you can have one web content filtering policy applied to all users.
@@ -62,21 +64,19 @@ Use the following steps to create a web content filtering policy:
1. In the [Microsoft Defender portal](https://security.microsoft.com), go to **Settings** > **Endpoints** > **Rules** > **Web content filtering**, and then select **+ Add policy**.
2. Specify a name and description for your policy.
-3. Select the web content filtering categories to block (for example, **Adult content**, **High bandwidth**, **Legal liability**, or **Leisure**). Don't select **Uncategorized**. Use the expand icon to fully expand each parent category, and then select specific web content categories.
+3. Select the web content filtering categories to block, such as **Adult content**, **High bandwidth**, **Legal liability**, or **Leisure**. Don't select **Uncategorized**. Use the expand icon to fully expand each parent category, and then select specific web content categories.
To set up an audit-only policy that doesn't block any websites, don't select any categories.
-4. Apply the policy to all users. (Scoping to specific devices isn't available in Defender for Business.)
+4. Apply the policy to all users. Scoping to specific devices isn't available in Defender for Business.
5. Review the summary and save the policy. The policy refresh might take up to two hours to apply to your organization's devices.
-Tip
-
To learn more about web content filtering, see [Web content filtering](/en-us/defender-endpoint/web-content-filtering).
## Categories for web content filtering
-Not all websites in the following categories are malicious. However, these websites might cause problems for your company due to compliance regulations, bandwidth usage, or other concerns.
+Not all websites in the following categories are malicious. These websites might cause problems for your company due to compliance regulations, bandwidth usage, or other concerns.
-You can start with an audit-only policy to better understand whether your security team should block any website categories. You can edit your policy later.
+Start with an audit-only policy to better understand whether your security team should block any website categories. You can edit your policy later.
The following table describes web content categories you can choose for your web content filtering policy: