MDM Firewall and ASR reporting stays policy-level without Defender enrollment

August’s two Intune updates were documentation clarifications rather than a feature launch. The Firewall page now states that MDM-managed Firewall Rules and Attack Surface Reduction (ASR) Rules policies provide policy-level status only, while per-setting status requires devices enrolled with Defender for Endpoint security settings management. Monitor Device Profile received corrected procedure numbering.

• Intune · Device security

  Firewall and ASR MDM policies have limited reporting

  The Firewall documentation clarifies that, although per-setting reporting is available for most Endpoint Security policies, Firewall Rules and ASR Rules policies managed through MDM report policy-level status only. Per-setting status requires devices enrolled with Defender for Endpoint security settings management.

• Intune · Endpoint analytics

  Monitor Device Profile procedure steps were renumbered

  The procedure now identifies “Go back to Device and user check-in status and select View report” as step 6 instead of step 5, and the subsequent policy-property review as step 7 instead of step 6. This is a documentation correction, not evidence of changed product behavior.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.