Policy

Set exclusions from Remote Encryption Protection

Specify IP addresses, subnets, and domain names to exclude from Remote Encryption Protection. Note that attackers can spoof excluded addresses and names to bypass protection. Enter each address or subnet on a new line as a name-value pair: - Name column: Enter an IP address or subnet name. For example, ""1.1.127.0"" will exclude this IP address from getting blocked. - Value column: Enter ""0"" for each item

Policy
Pack Microsoft Windows
Category Windows Components / Microsoft Defender Antivirus / Remediation / Behavioral Network Blocks / Remote Encryption Protection
Policy ID 7e87f04d413f
Internal name Remediation_BNB_REP_RemoteEncryptionProtectionExclusions

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Windows Defender\Remediation\Behavioral Network Blocks\Remote Encryption Protection\RemoteEncryptionProtectionExclusions\RemoteEncryptionProtection_Exclusions

Policy notes

Specify IP addresses, subnets, and domain names to exclude from Remote Encryption Protection. Note that attackers can spoof excluded addresses and names to bypass protection. Enter each address or subnet on a new line as a name-value pair: - Name column: Enter an IP address or subnet name. For example, ""1.1.127.0"" will exclude this IP address from getting blocked. - Value column: Enter ""0"" for each item

Related policies