Next-generation protection overview

Applies to

• Microsoft Defender Antivirus
• Microsoft Defender for Endpoint Plan 1
• Microsoft Defender for Endpoint Plan 2
• Microsoft Defender for Business

Platforms

• Windows

Microsoft Defender for Endpoint includes next-generation protection to reinforce the security perimeter of your network. Next-generation protection was designed to catch all types of emerging threats. In addition to Microsoft Defender Antivirus, your next-generation protection services include the following capabilities:

• Behavior-based, heuristic, and real-time antivirus protection, which includes always-on scanning using file and process behavior monitoring and other heuristics (also known as real-time protection). It also includes detecting and blocking apps that are deemed unsafe, but might not be detected as malware.
• Cloud-delivered protection, which includes near-instant detection and blocking of new and emerging threats.
• Dedicated protection and product updates, which includes updates related to keeping Microsoft Defender Antivirus up to date.

Tip

Next-generation protection is included in both Microsoft Defender for Endpoint Plan 1 and Plan 2. Learn more about Defender for Endpoint Plan 1 and Plan 2 Next-generation protection is also included in Microsoft Defender for Business and Microsoft 365 Business Premium. Compare security features in Microsoft 365 plans for small and medium-sized businesses.

Try a demo!

Visit the Microsoft Defender for Endpoint demo website to confirm the following protection features are working and explore them using demo scenarios:

• Cloud-delivered protection
• Block at first sight (BAFS) protection
• Potentially unwanted applications (PUA) protection

Note

The Defender for Endpoint demo site at demo.wd.microsoft.com is deprecated and will be removed in the future.

Configure next-generation protection services

For information on how to configure next-generation protection services, see Configure Microsoft Defender Antivirus features.

Note

Configuration and management is largely the same in Windows Server as in Windows clients. However, there are some differences.

Tip

If you're looking for Antivirus related information for other platforms, see:

• Set preferences for Microsoft Defender for Endpoint on macOS
• Microsoft Defender for Endpoint on Mac
• macOS Antivirus policy settings for Microsoft Defender Antivirus for Intune
• Set preferences for Microsoft Defender for Endpoint on Linux
• Microsoft Defender for Endpoint on Linux
• Configure Defender for Endpoint on Android features
• Configure Microsoft Defender for Endpoint on iOS features