Microsoft Defender Application guard deployment issue

Question

Microsoft Defender Application Guard.

For MDAG edge-I deployed MDAG edge to pilot uses. Can we inherit web content filtering policy to MDAG edge? The particular URLS/website which are blocked by an organization is opening in an MDAG edge isolated environment if that site is not whitelisted. For example, if WhatsApp or Facebook is not opening in simple edge due to company policy, but it opens in an isolated environment of MDAG Edge. In the Edge browser, it's blocked by Microsoft Defender smart screen.

It appears that the all the Web content filtering rules are being bypassed and everything is being whitelisted because of Application guard for Edge.

Is there a way around?

Answer 1

Hi @Mansha Irfan,

Can we inherit web content filtering policy to MDAG edge?

I've tried searching for documentation on this but failed, so I'm afraid this isn't possible. Just like the answer mentioned in this same question.

The particular URLS/website which are blocked by an organization is opening in an MDAG edge isolated environment if that site is not whitelisted.

In my opinion, this is by design. Because in Application Guard you need to define trusted access resources, anything not in the list are untrusted resources. And these untrusted parts will be opened in an isolated environment.

As mentioned in this doc: What is Application Guard and how does it work?

Best regards,

Xudong Peng

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.