SOLVED

Is EDR in Block Mode also recommended when using Windows Defender as primary AV?

%3CLINGO-SUB%20id%3D%22lingo-sub-1896442%22%20slang%3D%22en-US%22%3EIs%20EDR%20in%20Block%20Mode%20also%20recommended%20when%20using%20Windows%20Defender%20as%20primary%20AV%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1896442%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20everybody%2C%3CBR%20%2F%3E%3CBR%20%2F%3Ei%20just%20wondered%20if%20the%20%22EDR%20in%20Blockmode%22%20is%20also%20recommended%20if%20Windows%20Defender%20is%20used%20as%20the%20primary%20Antimalware%20solution%20(and%20no%20other%20AV%20is%20installed).%3C%2FP%3E%3CP%3EShould%20the%20feature%20be%20turned%20on%20or%20of%20-%20and%20are%20there%20maybe%20issued%20when%20using%20both%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAll%20the%20best%3C%2FP%3E%3CP%3EStefan%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1896464%22%20slang%3D%22en-US%22%3ERe%3A%20Is%20EDR%20in%20Block%20Mode%20also%20recommended%20when%20using%20Windows%20Defender%20as%20primary%20AV%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1896464%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F670359%22%20target%3D%22_blank%22%3E%40SteBeSec%3C%2FA%3E%26nbsp%3B%20EDR%20in%20block%20mode%20is%20not%20required%20if%20Defender%20is%20the%20primary%20AV.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1896530%22%20slang%3D%22en-US%22%3ERe%3A%20Is%20EDR%20in%20Block%20Mode%20also%20recommended%20when%20using%20Windows%20Defender%20as%20primary%20AV%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1896530%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F113426%22%20target%3D%22_blank%22%3E%40SC7%3C%2FA%3E%26nbsp%3BThank%20you%20verry%20much%2C%20great%20to%20hear%20that%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1896551%22%20slang%3D%22en-US%22%3ERe%3A%20Is%20EDR%20in%20Block%20Mode%20also%20recommended%20when%20using%20Windows%20Defender%20as%20primary%20AV%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1896551%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F670359%22%20target%3D%22_blank%22%3E%40SteBeSec%3C%2FA%3E%26nbsp%3BI%20believe%20the%20feature%20can%20be%20used%20for%20Servers%2F%20or%20for%20environments%20where%20non%20MSFT%20AV%20is%20primary%2C%20but%20the%20org.%20still%20would%20like%20to%20use%20MDATP%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

Hello everybody,

i just wondered if the "EDR in Blockmode" is also recommended if Windows Defender is used as the primary Antimalware solution (and no other AV is installed).

Should the feature be turned on or of - and are there maybe issued when using both?

 

All the best

Stefan

4 Replies
best response confirmed by SteBeSec (Contributor)
Solution

@SteBeSec  EDR in block mode is not required if Defender is the primary AV.

@SC7 Thank you verry much, great to hear that :)

@SteBeSec I believe the feature can be used for Servers/ or for environments where non MSFT AV is primary, but the org. still would like to use MDATP

@Helen_Allas @YongRhee 

Could I kindly ask for an official statement from Microsoft about this question?

Thank you :smiling_face_with_smiling_eyes: 

 

All the best

Stefan

www.000webhost.com