Thursday, 6 August 2026

Firewall and ASR policy reports require security settings management for per-setting status

The period contained two Intune documentation updates. The substantive clarification concerns reporting for Firewall Rules and Attack Surface Reduction (ASR) Rules policies managed through MDM; the other change only renumbers steps in the Monitor Device Profile procedure.

• Intune · Device security

  MDM Firewall and ASR reporting scope is clarified

  Per-setting reporting is available for most Endpoint Security policies, but Firewall Rules and ASR Rules policies managed through MDM report only policy-level status and omit per-setting statuses. The documentation states that devices must be enrolled with Defender for Endpoint security settings management to view per-setting status.

• Intune · Endpoint analytics

  Monitor Device Profile procedure steps are renumbered

  The documented step directing admins to return to Device and user check-in status and select View report changes from step 5 to step 6, while the subsequent policy-property step changes from 6 to 7. The supplied diff shows a procedural numbering correction, not a product-behavior change.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.