Web content filtering in Microsoft Defender for Business
Web content filtering enables your security team to track and regulate access to websites based on content categories. When you set up your web content filtering policy, you enable web protection for your organization.
Web content filtering is available on the major web browsers, with blocks performed by Windows Defender SmartScreen (Microsoft Edge) and Network Protection (Chrome, Firefox, Brave, and Opera). For more information, see Prerequisites for web content filtering.
In Defender for Business, you can have one web content filtering policy and it's applied to all users.
Set up web content filtering
In the Microsoft Defender portal (https://security.microsoft.com), go to Settings > Endpoints > Rules > Web content filtering, and then select + Add policy.
Specify a name and description for your policy.
Select the categories to block (do not select Uncategorized). Use the expand icon to fully expand each parent category, and then select specific web content categories.
To set up an audit-only policy that doesn't block any websites, don't select any categories.
Apply the policy to all users. (Scoping to specific devices is not available in Defender for Business.)
Review the summary and save the policy. The policy refresh might take up to two hours to apply to your selected devices.
Tip
To learn more about web content filtering, see Web content filtering.
Categories for web content filtering
Not all websites in the categories that are listed below are malicious; however, these websites could be problematic for your company because of compliance regulations, bandwidth usage, or other concerns.
You can start with an audit-only policy to get a better understanding of whether your security team should block any website categories, and edit your policy later.
The following table describes web content categories you can choose for your web content filtering policy:
| Category | Description |
|---|---|
| Adult content | Sites that are related to cults, gambling, nudity, pornography, sexually explicit material, or violence |
| High bandwidth | Download sites, image sharing sites, or peer-to-peer hosts |
| Legal liability | Sites that include child abuse images, promote illegal activities, foster plagiarism or school cheating, or that promote harmful activities |
| Leisure | Sites that provide web-based chat rooms, online gaming, web-based email, or social networking |
| Uncategorized | Sites that have no content or that are newly registered. As a best practice, do not select Uncategorized. |