Defender for Endpoint ATP question

Question

Hi All ,

Is Defender for ATP have the capability IDS/IPS ?

Thank You

Answer 1

Hi,

Thank you for coming Microsoft Q&A.

As Microsoft have another special forum for Windows Defender ATP, so please create a thread in that forum, they should have more resources for you.

Microsoft Security and Compliance

If my redirection is useful for you, please accept it as answer. So that other customers could find right direction more effectively.

Bests,

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi,

Microsoft Defender ATP is NOT IDS or IPS or protection application. It is a product to help you to investigate threats and it is for post-breach and let say if there was an attack in your network and even it has been blocked , it gives you details and information for you to investigate and based on those data you may create strategy to protect your network in future. In other word it is more like analyze tools rather than defense product.

Answer 3

So what is that ? https://www.microsoft.com/security/blog/2018/11/15/whats-new-in-windows-defender-atp/

If i configure it to block so it is a defense product