Firewall
Device security
Updated Microsoft Intune documentation in intune/device-configuration/endpoint-security/firewall.md.
Cross-product topic
Device security
A cross-product view of Microsoft Intune changes related to Device security.
Latest Device security changes
Prerequisites
Device security
Updated Microsoft Intune documentation in intune/device-security/microsoft-tunnel/prerequisites.md.
Upgrade
Device security
Updated Microsoft Intune documentation in intune/device-security/microsoft-tunnel/upgrade.md.
Endpoint Security Policies
Device security
Updated Microsoft Intune documentation in intune/device-security/endpoint-security-policies.md.
Manage antivirus settings with endpoint security policies in Microsoft Intune
Device security
Updated Microsoft Intune documentation in intune/device-configuration/endpoint-security/antivirus.md.
Overview
Device security
Updated Microsoft Intune documentation in intune/device-security/overview.md.
Connect BlackBerry Protect Mobile MTD connector in Microsoft Intune
Device security
Updated Microsoft Intune documentation in intune/device-security/mobile-threat-defense/setup-blackberry.md.
<a name="bkmk_atp"></a> Get started: Create and deploy endpoint security policies from the admin center
Device security
Updated Microsoft Intune documentation in intune/configmgr/tenant-attach/endpoint-security-get-started.md.
<a name="bkmk_atp"></a> Tenant attach: Create and deploy Antivirus policies from the admin center
Device security
Updated Microsoft Intune documentation in intune/configmgr/tenant-attach/deploy-antivirus-policy.md.
<a name="bkmk_atp"></a> Tenant attach: Create and deploy Attack surface reduction policies from the admin center
Device security
Updated Microsoft Intune documentation in intune/configmgr/tenant-attach/deploy-asr-policy.md.
<a name="bkmk_atp"></a> Tenant attach: Create and deploy firewall policies from the admin center
Device security
Updated Microsoft Intune documentation in intune/configmgr/tenant-attach/deploy-firewall-policy.md.
About the BitLocker recovery service
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/bitlocker/recovery-service.md.
AllowThreat Method in Class SMS_ClientOperation
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/protect/allowthreat-method-in-class-sms_clientoperation.md.
Antivirus exclusions
Device security
Updated Microsoft Intune documentation in intune/configmgr/core/plan-design/hierarchy/antivirus-exclusions.md.
BitLocker administration and monitoring website
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/bitlocker/helpdesk-portal.md.
BitLocker event logs
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/tech-ref/bitlocker/about-event-logs.md.
BitLocker self-service portal
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/bitlocker/self-service-portal.md.
BitLocker settings reference
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/tech-ref/bitlocker/settings.md.
CancelClientOperation Method in Class SMS_ClientOperation
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/protect/cancelclientoperation-method-in-class-sms_clientoperation.md.
Client event logs
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/tech-ref/bitlocker/client-event-logs.md.
Configure Alerts for Endpoint Protection in Configuration Manager
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/endpoint-configure-alerts.md.
Configure certificate infrastructure
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/certificate-infrastructure.md.
Configure custom client settings for Endpoint Protection
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/endpoint-protection-configure-client.md.
Configure definition updates for Endpoint Protection
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/endpoint-definition-updates.md.
Configure Endpoint Protection
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/endpoint-protection-configure.md.
Configure Endpoint Protection on a standalone client
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/endpoint-protection-configure-standalone-client.md.
Create an Endpoint Protection point site system role
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/endpoint-protection-site-role.md.
Create and deploy an Exploit Guard policy
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/create-deploy-exploit-guard-policy.md.
Create and deploy Microsoft Defender Application Guard policy
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/create-deploy-application-guard-policy.md.
Create and deploy Windows Firewall policies for Endpoint Protection in Configuration Manager
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/create-windows-firewall-policies.md.
Create certificate profiles
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/create-certificate-profiles.md.
Create Wi-Fi profiles
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/create-wifi-profiles.md.
Customize the self-service portal
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/bitlocker/customize-self-service-portal.md.
DeleteClientOperation Method in Class SMS_ClientOperation
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/protect/deleteclientoperation-method-in-class-sms_clientoperation.md.
Deploy BitLocker management
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/bitlocker/deploy-management-agent.md.
Deploy resource access profiles in Configuration Manager
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/deploy-wifi-vpn-email-cert-profiles.md.
Enable Endpoint Protection malware definitions to download from a network share
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/endpoint-definitions-network.md.
Enable Endpoint Protection malware definitions to download from Microsoft Updates
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/endpoint-definitions-microsoft-updates.md.
Enable Endpoint Protection malware definitions to download from WSUS for Configuration Manager
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/endpoint-definitions-wsus.md.
Encrypt recovery data in the database
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/bitlocker/encrypt-recovery-data.md.
Encrypt recovery data over the network
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/bitlocker/encrypt-recovery-data-transit.md.
Endpoint Protection
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/endpoint-protection.md.
Endpoint Protection Client Help
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/endpoint-protection-client-help.md.
Example scenario: Use Endpoint Protection to protect computers from malware
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/scenarios-endpoint-protection.md.
ExcludeScanPaths Method in Class SMS_ClientOperation
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/protect/excludescanpaths-method-in-class-sms_clientoperation.md.
Find a package family name (PFN) for per-app VPN
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/find-a-pfn-for-per-app-vpn.md.
How to create and deploy antimalware policies for Endpoint Protection in Configuration Manager
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/endpoint-antimalware-policies.md.
How to create VPN profiles in Configuration Manager
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/create-vpn-profiles.md.
How to monitor certificate profiles in Configuration Manager
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/monitor-certificate-profiles.md.
How to monitor Endpoint Protection status
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/monitor-endpoint-protection.md.
InitiateClientOperation Method in Class SMS_ClientOperation
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/protect/initiateclientoperation-method-in-class-sms_clientoperation.md.
Introduction to certificate profiles in Configuration Manager
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/introduction-to-certificate-profiles.md.
IsClientOperationAllowed Method in Class SMS_ClientOperation
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/protect/isclientoperationallowed-method-in-class-sms_clientoperation.md.
IsClientOperationUpdateAllowed Method in Class SMS_ClientOperation
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/protect/isclientoperationupdateallowed-method-in-class-sms_clientoperation.md.
Manage antimalware policies and firewall settings
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/endpoint-antimalware-firewall.md.
Microsoft Defender for Endpoint
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/defender-advanced-threat-protection.md.
Migrate from MBAM
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/bitlocker/migration-considerations.md.
Monitor Email, Wi-Fi and VPN profiles in Configuration Manager
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/monitor-wifi-email-vpn-profiles.md.
Network infrastructure
Device security
Updated Microsoft Intune documentation in intune/configmgr/core/plan-design/network/configure-firewalls-ports-domains.md.
Non-compliance codes
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/tech-ref/bitlocker/non-compliance-codes.md.
Plan for BitLocker management
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/plan-design/bitlocker-management.md.
Planning for certificate template permissions for certificate profiles in Configuration Manager
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/plan-design/planning-for-certificate-template-permissions.md.
Prerequisites for certificate profiles in Configuration Manager
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/plan-design/prerequisites-for-certificate-profiles.md.
Prerequisites for Wi-Fi and VPN profiles in Configuration Manager
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/plan-design/prerequisites-for-wifi-vpn-profiles.md.
Protect data and site infrastructure
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/understand/protect-data-and-site-infrastructure.md.
Ref Macos Settings
Device security
Updated Microsoft Intune documentation in intune/device-security/compliance/ref-macos-settings.md.
RestoreQuarantinedItem Method in Class SMS_ClientOperation
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/protect/restorequarantineditem-method-in-class-sms_clientoperation.md.
Security and privacy for certificate profiles in Configuration Manager
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/plan-design/security-and-privacy-for-certificate-profiles.md.
Security and privacy for Wi-Fi and VPN profiles in Configuration Manager
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/plan-design/security-and-privacy-for-wifi-vpn-profiles.md.
Server event logs
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/tech-ref/bitlocker/server-event-logs.md.
Set up BitLocker portals
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/bitlocker/setup-websites.md.
SMS_AmPolicySummary Server WMI Class
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/protect/sms_ampolicysummary-server-wmi-class.md.
SMS_ClientAction Server WMI Class
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/protect/sms_clientaction-server-wmi-class.md.
SMS_ClientActionStatus Server WMI Class
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/protect/sms_clientactionstatus-server-wmi-class.md.
SMS_ClientOperation Server WMI Class
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/protect/sms_clientoperation-server-wmi-class.md.
SMS_ClientOperationStatus Server WMI Class
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/protect/sms_clientoperationstatus-server-wmi-class.md.
SMS_CMSiteConfiguration Server WMI Class
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/core/servers/configure/sms_cmsiteconfiguration-server-wmi-class.md.
SMS_ConfigurationPolicy Server WMI Class
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/compliance/sms_configurationpolicy-server-wmi-class.md.
SMS_EndpointProtectionDashboardBucket Server WMI Class
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/protect/sms_endpointprotectiondashboardbucket-server-wmi-class.md.
SMS_EndpointProtectionHealthStatus Server WMI Class
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/protect/sms_endpointprotectionhealthstatus-server-wmi-class.md.
SMS_EndpointProtectionThreatData Server WMI Class
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/protect/sms_endpointprotectionthreatdata-server-wmi-class.md.
SMS_FirewallPolicy Server WMI Class
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/protect/sms_firewallpolicy-server-wmi-class.md.
SMS_FirewallSettings Server WMI Class
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/protect/sms_firewallsettings-server-wmi-class.md.
SMS_G_SYSTEM_AmPolicyStatus Server WMI Class
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/protect/sms_g_system_ampolicystatus-server-wmi-class.md.
SMS_G_System_EndpointProtectionStatus Server WMI Class
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/protect/sms_g_system_endpointprotectionstatus-server-wmi-class.md.
SMS_TopThreatPath Server WMI Class
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/protect/sms_topthreatpath-server-wmi-class.md.
SMS_TopThreatsDetected Server WMI Class
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/protect/sms_topthreatsdetected-server-wmi-class.md.
SMS_TopThreatSummary Server WMI Class
Device security
Updated Microsoft Intune documentation in intune/configmgr/develop/reference/protect/sms_topthreatsummary-server-wmi-class.md.
SQL Always On when BitLocker recovery data is encrypted in the database
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/bitlocker/bitlocker-keys-sql-always-on.md.
Troubleshoot BitLocker
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/tech-ref/bitlocker/troubleshoot.md.
Troubleshoot Windows Defender or Endpoint Protection client
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/troubleshoot-endpoint-client.md.
Use Configuration Manager to deliver definition updates
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/endpoint-definitions-configmgr.md.
Use Group Policy settings to manage Endpoint Protection in previous versions of Windows
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/endpoint-protection-group-policies.md.
Use the Microsoft Malware Protection Center to download definitions
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/endpoint-definitions-protection-center.md.
View BitLocker reports
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/bitlocker/view-reports.md.
VPN profiles in Configuration Manager
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/vpn-profiles.md.
Windows client firewall and port settings
Device security
Updated Microsoft Intune documentation in intune/configmgr/core/clients/deploy/windows-firewall-and-port-settings-for-clients.md.
Windows Defender Application Control management with Configuration Manager
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/use-device-guard-with-configuration-manager.md.
Windows Hello for Business settings in Configuration Manager
Device security
Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/windows-hello-for-business-settings.md.
Create device compliance policies in Microsoft Intune
Device security
Updated Microsoft Intune documentation in intune/device-security/compliance/create-policy.md.
Device compliance policies in Microsoft Intune
Device security
Updated Microsoft Intune documentation in intune/device-security/compliance/overview.md.
Monitor results of your device compliance policies in Microsoft Intune
Device security
Updated Microsoft Intune documentation in intune/device-security/compliance/monitor-policy.md.
Create Custom Json
Device security
Updated Microsoft Intune documentation in intune/device-security/compliance/create-custom-json.md.
Create discovery scripts for custom compliance policy in Microsoft Intune
Device security
Updated Microsoft Intune documentation in intune/device-security/compliance/create-custom-script.md.
Create Policy
Device security
Updated Microsoft Intune documentation in intune/device-security/compliance/create-policy.md.
Overview
Device security
Updated Microsoft Intune documentation in intune/device-security/compliance/overview.md.
Use custom compliance settings in Microsoft Intune
Device security
Updated Microsoft Intune documentation in intune/device-security/compliance/custom-settings.md.
Account Protection
Device security
Updated Microsoft Intune documentation in intune/device-configuration/endpoint-security/account-protection.md.
Antivirus
Device security
Updated Microsoft Intune documentation in intune/device-configuration/endpoint-security/antivirus.md.
Attack Surface Reduction
Device security
Updated Microsoft Intune documentation in intune/device-configuration/endpoint-security/attack-surface-reduction.md.
Command-line Reference for Microsoft Tunnel Gateway
Device security
Updated Microsoft Intune documentation in intune/device-security/microsoft-tunnel/ref-file-commands.md.
Common ways to use Conditional Access with Intune
Device security
Updated Microsoft Intune documentation in intune/device-security/conditional-access-integration/scenarios.md.
Configure Microsoft Defender for Endpoint web protection on Android devices managed by Intune
Device security
Updated Microsoft Intune documentation in intune/device-security/microsoft-defender/configure-web-protection-android.md.
Configure Microsoft Defender for Endpoint with Intune and onboard devices
Device security
Updated Microsoft Intune documentation in intune/device-security/microsoft-defender/configure-integration.md.
Configure Microsoft Tunnel for Intune
Device security
Updated Microsoft Intune documentation in intune/device-security/microsoft-tunnel/install.md.
Configure support for macOS ADE local account configuration with LAPS in Microsoft Intune
Device security
Updated Microsoft Intune documentation in intune/device-security/laps/setup-macos.md.
Configure the Jamf Cloud Connector to integrate with Microsoft Intune
Device security
Updated Microsoft Intune documentation in intune/device-security/conditional-access-integration/configure-jamf-cloud-connector.md.
Create a compliance policy in Microsoft Intune
Device security
Updated Microsoft Intune documentation in intune/device-security/compliance/create-policy.md.
Creating elevation rules with Endpoint Privilege Management
Device security
Updated Microsoft Intune documentation in intune/epm/create-elevation-rules.md.
Custom compliance discovery scripts for Microsoft Intune
Device security
Updated Microsoft Intune documentation in intune/device-security/compliance/create-custom-script.md.