Domain Block Indicators are not preventing connections from third party browsers or utilities

[Guest David Martin6]

We've been testing block indicators in MDE and set blocks for two url's, one with full https path and another with only "domain.com" format.Traffic to these domains are being correctly blocked in Edge browser by SmartScreen, but although alerts are generated alluding to a block indicator being in place, no action is made to block third party browsers from connecting to these domains. I've seen other discussion points where this is described as expected behavior, but Microsofts own documentation (updated just this month) has a section for "Non Microsoft Edge and Internet Explorer processes" an

 

Continue reading...