Manage Defender Web Filter

Use this operation to manage web filter categories and URLs/domains in Microsoft Defender to control web access.

Role Requirements

Procedure Scope: Administrators

Required Group Membership: Admin.Security

Handbook Reference

Package: Device Security

Domain: TBD

Modifies: TBD

2024-12-17_9-49-52

When to Perform this Operation

As Needed: Proactive or in Response to User/Security

Technical Description and Importance

Managing unsanctioned web filter categories and URLs/domains is critical for enforcing organizational policies and reducing risks from accessing harmful or non-compliant web content. By implementing or adjusting these filters, you maintain a secure browsing environment while allowing necessary access for business operations. Regular management helps to prevent exposure to phishing, malware, and inappropriate content, while ensuring that legitimate websites remain accessible. This process supports compliance with organizational internet use policies and contributes to a controlled, safe online experience.

Management Options

2024-12-17_10-15-21

Block a Category:

Purpose
Block a web filter category to prevent access to associated types of websites.
Use Case
Blocking the "Social Media" category to reduce distractions and prevent data leaks.

Allow a Category:

Purpose
Allow a previously blocked category to enable access to specific types of websites.
Use Case
Allowing the "Education" category to support training programs for employees.

Block a URL/Domain:

Purpose
Block a specific URL or domain to prevent access to a targeted website.
Use Case
Blocking a known malicious domain identified through threat intelligence.

Allow a URL/Domain:

Purpose
Allow a specific URL or domain previously blocked to restore access.
Use Case
Allowing a business partner’s domain to enable access to their portal for collaboration.

2024-12-17_10-15-21-1

Operation Action Target
Block a Category Addition Unsanctioned Web Filter Categories
Allow a Category Removal Sanctioned Web Filter Categories
Block a URL/Domain Addition Unsanctioned URLs/Domain
Allow a URL/Domain Removal  Sanctioned URLs/Domain

Block a Category

This operation blocks a web filter category to restrict access to websites grouped under that category.

       1. Defender Web Filter Category Block

Allow a Category

This operation removes a previously blocked category to restore access to associated websites.

       1. Defender Web Filter Category Allowance

Block a URL/Domain

This operation blocks a specific URL or domain to prevent access.

       1. Defender Web Filter URL/Domain Block

Allow a URL/Domain

This operation removes a previously blocked URL or domain to restore access.

       1. Defender Web Filter URL/Domain Allowance

Need Assistance?

Reach out to your Customer Success Manager to discuss how a Sittadel cybersecurity analyst can assist in managing these tasks for you. New to our services? Inquire about arranging a consultation to explore optimizing your Azure environment for painless management.