Next-generation protection overview

Applies to

Platforms

  • Windows

Microsoft Defender for Endpoint includes next-generation protection to reinforce the security perimeter of your network. Next-generation protection was designed to catch all types of emerging threats. In addition to Microsoft Defender Antivirus, your next-generation protection services include the following capabilities:

Tip

Next-generation protection is included in both Microsoft Defender for Endpoint Plan 1 and Plan 2. Learn more about Defender for Endpoint Plan 1 and Plan 2 Next-generation protection is also included in Microsoft Defender for Business and Microsoft 365 Business Premium. Compare security features in Microsoft 365 plans for small and medium-sized businesses.

Configure next-generation protection services

For information on how to configure next-generation protection services, see Configure Microsoft Defender Antivirus features.

Note

Configuration and management is largely the same in Windows Server as in Windows clients. However, there are some differences.

Tip

Performance tip Due to a variety of factors (examples listed below) Microsoft Defender Antivirus, like other antivirus software, can cause performance issues on endpoint devices. In some cases, you might need to tune the performance of Microsoft Defender Antivirus to alleviate those performance issues. Microsoft's Performance analyzer is a PowerShell command-line tool that helps determine which files, file paths, processes, and file extensions might be causing performance issues; some examples are:

  • Top paths that impact scan time
  • Top files that impact scan time
  • Top processes that impact scan time
  • Top file extensions that impact scan time
  • Combinations – for example:
    • top files per extension
    • top paths per extension
    • top processes per path
    • top scans per file
    • top scans per file per process

You can use the information gathered using Performance analyzer to better assess performance issues and apply remediation actions. See: Performance analyzer for Microsoft Defender Antivirus.