Is there any settings or configurations in M365 Defender for Endpoints/Intune which does network/Wi-Fi monitoring which is being used by end users while they are working remotely or from locations with open network and not corporate or VPN and Identify wh

Question

Is there any settings or configurations in M365 Defender for Endpoints/Intune which does network/Wi-Fi monitoring which is being used by end users while they are working remotely or from locations with open network and not corporate or VPN and Identify whether it is safe and block or recommend any steps to take in order to be safe and not something malicious or which can lead into unwanted situations?

Answer 1

Based on my reasearch, Yes, M365 Defender for Endpoints provides network protection features. Microsoft Defender for Endpoint can monitor network communications and detect suspicious behavior. It can also prevent connections to known malicious sites and domains, as well as prevent communication with command-and-control (C2) servers. Intune also provides network protection features. Intune can block risky Wi-Fi networks, and it can also enforce VPN policies to ensure that devices only connect to trusted networks. Here is the link to the docs for more details https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/network-protection?view=o365-worldwide