Purview endpoint DLP protection

Question

Purview endpoint DLP protection

prasantc 976

Is it possible to deploy endpoint DLP protection by enabling defender in passive mode while CrowdStrike is still running as a primary AV.

Is there any article for endpoint DLP protection with CrowdStrike as primary Anti virus?

Accepted answer

0 additional answers

Your answer

Answer 1

@prasantc

Thanks for reaching out to Microsoft Q&A.

Yes, it is possible to deploy endpoint Data Loss Prevention (DLP) protection by enabling Microsoft Defender in passive mode while using CrowdStrike as the primary antivirus. This setup allows you to leverage the strengths of both solutions without conflicts.

For detailed guidance on implementing endpoint DLP protection with CrowdStrike as the primary antivirus, you can refer to the following resources:

CrowdStrike’s Data Loss Prevention Overview: This article provides an in-depth look at how CrowdStrike’s DLP solutions work and how they can be integrated with other security tools
Falcon Data Protection: This page details CrowdStrike’s unified platform for data protection and endpoint security, which can help you understand how to configure and manage DLP alongside other security measures

Additionally, you can also refer to the Microsoft documentation on Microsoft Defender Antivirus compatibility, which provides information on how to configure Microsoft Defender Antivirus to run in passive mode while using a non-Microsoft antivirus solution

Here are some key points to consider when deploying endpoint DLP protection with CrowdStrike as the primary AV:

Passive mode: Microsoft Defender Antivirus can be configured to run in passive mode, allowing CrowdStrike to function as the primary antivirus solution.
Coexistence: Microsoft Defender Antivirus and CrowdStrike can coexist on the same endpoint, with Microsoft Defender Antivirus providing additional security features and capabilities.
DLP protection: Endpoint DLP protection can be deployed using Microsoft Defender Antivirus in passive mode, providing an additional layer of protection against data loss and exfiltration.

Hope this helps. Do let us know if you any further queries.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

prasantc 976 Reputation points

2024-09-11T16:43:41.5833333+00:00

Is it possible to onboard only few device group in Intune and DLP using dynamic group?
phemanth 15,765 Reputation points Microsoft External Staff Moderator

2024-09-12T06:56:10.5466667+00:00

@prasantc Yes, it is possible to onboard only a few device groups in Intune and deploy Data Loss Prevention (DLP) using dynamic groups. Dynamic groups in Intune allow you to automatically add and remove devices based on specific criteria, making it easier to manage and deploy policies to targeted devices.

Here’s how you can do it:

Create a Dynamic Device Group in Intune:

Go to the Intune portal and navigate to Groups.

Click on New group.

Select Security as the group type.

Choose Dynamic Device as the membership type.

Click on Add dynamic query to create a rule that defines which devices should be included in the group. You can use various properties such as device type, operating system, or enrollment profile to define your criteria.

Define the Membership Rule:

Use the rule builder or custom rule syntax to specify the criteria for your dynamic group. For example, you can create a rule to include only devices enrolled with a specific profile or devices that meet certain compliance requirements.

Deploy DLP Policies:

Once your dynamic group is created, you can deploy DLP policies to this group. Navigate to the Microsoft Purview or Microsoft Defender for Cloud portal, and create or assign DLP policies to the dynamic group you created.

By using dynamic groups, you can ensure that only the devices that meet your specified criteria are onboarded and managed, allowing for more precise control and management of your endpoint security and DLP policies.

Share via

Purview endpoint DLP protection

0 additional answers

Your answer