Network Protection should be enabled
Why This Matters
Network protection is a critical defense layer in Microsoft Defender Antivirus that blocks outbound connections to known malicious domains and IP addresses. Without network protection enabled, devices are vulnerable to internet-based attacks including phishing sites, drive-by downloads, and command and control communications. Enabling network protection in block mode ensures your endpoints can proactively stop network-based threats before they reach users.
What Aether365 Checks
Aether365 verifies that network protection is enabled in block mode on your managed Windows devices. This check appears in the Aether365 dashboard under the Defender security controls section.