Evaluate network protection (Microsoft)

Network protection helps prevent employees from using any application to access dangerous domains that may host phishing scams, exploits, and other malicious content on the Internet.

This article helps you evaluate network protection by enabling the feature and guiding you to a testing site. The sites in this evaluation article aren’t malicious. They’re specially created websites that pretend to be malicious. The site will replicate the behavior that would happen if a user visited a malicious site or domain.

Enable network protection in audit mode

Enable network protection in audit mode to see which IP addresses and domains would have been blocked. You can make sure it doesn’t affect line-of-business apps, or get an idea of how often blocks occur.

1. Type powershell in the Start menu, right-click Windows PowerShell and select Run as administrator
2. Enter the following cmdlet:
   PowerShellCopy

   Set-MpPreference -EnableNetworkProtection AuditMode
   

Visit a (fake) malicious domain

1. Open Internet Explorer, Google Chrome, or any other browser of your choice.
2. Go to https://smartscreentestratings2.net.

   The network connection will be allowed and a test message will be displayed.

   

Review network protection events in Windows Event Viewer

To review apps that would have been blocked, open Event Viewer and filter for Event ID 1125 in the Microsoft-Windows-Windows Defender/Operational log. The following table lists all network protection events.

Source : Official Microsoft Brand
Editor by : BEST Antivirus KBS Team