3 ms·
the balkan state of microsoft casts its shadow over this. if you flip the coin it looks like lets blacklist linux devices from using services or resources that
by rolph 4y ago
the balkan state of microsoft casts its shadow over this.
if you flip the coin it looks like lets blacklist linux devices from using services or resources that hop through a Defender firewall.
why would this be limited to enterprise LAN and not eventually be adopted to blacklist linux based devices over home internet connections?
how does this not disable intentional honeypots, or holes, critical to threat response?
- jonathantf2 4y agoIt's a feature of EDR products, it lets IT isolate a device from the network to stop malware hitting other devices on the network. If you so wanted you could build a firewall that blocked all Linux devices based on something like Nmap's OS detection.
- waste_monk 4y agoOur corporate overlords IT folk have turned on conditional access in our shared tenancy and only allow domain-joined Win10 devices to access M365 resources, so our Linux users are already blacklisted from many useful things. If this could eventually allow Linux devices secured by defender to become "blessed" and pass conditional access it would make my life a lot easier.