How to block a domain or url with intune MDM firewall rules

Question

I m looking for a way to block a domain or an URL via intune mdm firewall rule.
As you can see from the attached screenshot, the intune Firewall rule creation wizard is not accepting domain names

Answer 1

Hello Salah Ghalloussi,

If you are using Microsoft Defender for Endpoint, I would suggest to you to take a look of web protection and content filtering capabilities, for more details:

• Defender for Endpoint - Web protection
• Defender for Endpoint - Web content filtering

Regards,

Youssef Saad | Blog: https://youssef-saad.blogspot.com/ | LinkedIn

Answer 2

@Salah Ghalloussi, Thanks for posting in Q&A. For the Remote address setting, it only accepts some specific format value. If you want to block the inbound or outbound from one domain, you can enter the IP address or range of the domain you want to block.

https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-protection-windows-10#ip-address-settings

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 3

What if. I wanted to block https://gemini.google.com/app but not google.com. Does it stay granular to the subdomain only? I want to stop people from using Bar/Gemini on office PCs.

Thanks all! I hope someone will answer soon.

Answer 4

If you have Defender for Endpoint deployed you could add a url via a custom IoC and block the subdomain only. (gemini.google.com)