This hidden Windows feature protects it from dangerous web malware

Windows is generally quite safe, but the Internet is a dangerous place full of malware that will infect its devices if you are not careful. One thing you can do to stay safe is to make sure you are using the Windows built -in antivirus featuresThey are better than anything.

Probably already know SmartScreen, which verifies websites and download and warns of suspicious or malicious content. But with smartscreen mainly integrated in Edge, their defensive abilities are somewhat limited when you do other things.

That is why you also need to know Network protectionA Windows function integrated at the system level. Monitor network traffic in all applications and processes, verifying all Internet data against Microsoft reputation database for websites and files that are suspicious and malicious. It is like the smart but wider screen.

Do you have network protection?

By default, network protection is deactivated in Windows and there is no configuration page in which you can easily activate it, so you must use Powershell with the rights of the administrator. In addition, network protection is only available if the following conditions are met:

• It has the pro or Enterprise versions of Windows 10 or 11. It is not available in Windows 10 or 11 Home.
• The Microsoft defender must be active in his system.
• You must register in Windows with a Microsoft account.
• You must be able to access websites through the Internet.

If these four conditions are met, you can begin.

How to enable network protection

Start right clicking on the start menu and selecting Terminal (Administrator) To launch Powershell with the rights of the administrator.

Checking

Then, verify the status of network protection by entering the following command: Get-MpPreference | Select-Object EnableNetworkProtection. You will see an answer with the current state of network protection as 0 (disabled), 1 (enabled) or 2 (audit mode). If you see 0Continue.

Enabling

To enable network protection, enter the following command: Set-MpPreference -EnableNetworkProtection Enabled. You will not receive any response. However, if the previous command enters again to verify the status of network protection, I should now say 1.

Disabling

To disable network protection, enter the following command: Set-MpPreference -EnableNetworkProtection Disabled.

Other settings

When using network protection, some anonymous data will be transmitted back to Microsoft for several purposes. (It is one of the many Way that Windows collects data about you.) If you oppose that, you can disable anonymous performance data with the following command: Set-Mp Preference -DisableNetworkProtectionPerfTelemetry $true

Network protection settings

To further configure network protection, you must use the group policy editor. Open the start menu and write gpeditThen click Edit group policy To launch the policy editor.

In the group’s policy editor, you will find two configurations related to network protection sailing on the left side panel for Local Group Policy> Computer settings> Administrative templates> Windows components> Microsoft Defense Antivirus.

The first configuration is called “These adjustments control whether network protection can be configured in block mode or audit on the Windows server.” This is only relevant for the versions of the Windows server. Don’t you know what that is? Then you can ignore it safely.

The other configuration is called “prevent users and applications from accessing dangerous websites.” Double click on the configuration to edit it. In the upper left, change to Activated. That will give you access to three configurations in the options panel below: deactivate (predetermined), block and audit mode.

In audit mode, access to dangerous websites and network protection is not avoided only generates Windows event registration inputs every time it detects suspicious or malicious traffic. You have to configure it Block If you really want to make dangerous websites inaccessible. Confirm by clicking Applyso OKThen close the policy editor.

Warning: Network protection can cause some applications to stop working properly. If you are worried about that, consider trying the audit mode first and verify the Windows events record to obtain messages about potentially failed connections. If everything looks good after a while, you can change to block to enable the function.

Additional reading: Windows Security vs. Microsoft Defender, explained