Managing Defender Exploit Guard Network Protection

• Windows Defender Exploit Guard Network Protection helps protect devices from malware.
• The best Exploit Guard Network Protection management options likely require Windows Enterprise E5 licenses.
• Exploit Guard Network Protection requires significant ongoing monitoring because it may inadvertently block useful Web sites and services.

Windows Defender Exploit Guard Network Protection (Network Protection) prevents users from accessing dangerous domains that may host phishing scams, exploits, and other malicious content, regardless of the application they are using on Windows 10. Windows Defender Exploit Guard (Exploit Guard) is a set of security-related components built into Windows 10 Enterprise and Education editions. Prior to Windows 10 version 1709, Exploit Guard was named Device Guard. (For an overview of where Exploit Guard fits in the Windows Defender software suite, see “Understanding Defender Device, Exploit, and Credential Guard and Application Control.”)