Tenant attach: Create and deploy firewall policies from the admin center (preview)

Applies to: Configuration Manager (current branch)

Important

This information relates to a preview feature which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.

Create Windows Firewall policies in the Microsoft Endpoint Manager console and deploy them to Configuration Manager collections.

Prerequisites

• Access to the Microsoft Endpoint Manager admin center.
• An environment that's tenant attached with uploaded devices.
• A supported version of Configuration Manager and the corresponding version of the console installed.
  • Upgrade the target devices to the latest version of the Configuration Manager client.
• At least one Configuration Manager collection that's available for assigning Endpoint security policies
• Windows Devices that support this profile for tenant attached devices

Assign firewall policies to a collection

1. Go to the Microsoft Endpoint Manager admin center.

2. Select Endpoint security > Firewall then Create Policy.

3. Create a profile with the following settings:

   • Platform: Windows 10 and later
     • Only Windows 10 clients can be targeted with firewall policies currently.
   • Profile: Microsoft Defender Firewall (ConfigMgr) (preview)

4. Select Create then give the profile a Name and a Description.

5. On the Configuration settings page, set the firewall settings for the devices. For more information about the available settings, see Settings for firewall policy for tenant attached devices

6. On the Assignments page, select the collections to include for the policy assignment then choose Next.

7. Review the settings on the Review + Create page and select Create when you're done.

Device Status (preview)

You can review the status of endpoint security policies for tenant attached devices. The Device Status page can be accessed for all endpoint security policy types for tenant-attached clients. To display the Device Status page:

1. Select a policy that's targeted to ConfigMgr devices to display the Overview page for the policy.
2. Select Device Status to display a list of devices targeted by the policy.
3. The Device Name, Compliance State, and SMS ID are displayed for each of the devices on the Device Status page.

Next steps

• Settings for firewall policy for tenant attached devices
• Create and deploy endpoint security Antivirus policy to tenant attached devices
• Create and deploy endpoint security Attack surface reduction policy to tenant attached devices
• Create and deploy endpoint security Endpoint Detection and Response policy to tenant attached devices