MDM Firewall and ASR policies expose policy-level, not per-setting, status

The week’s substantive Intune update clarified Endpoint Security reporting: Firewall Rules and Attack Surface Reduction (ASR) Rules policies managed through MDM show policy-level status only, while per-setting status requires devices enrolled with Defender for Endpoint security settings management. The other update corrected procedure numbering in Monitor Device Profile. The supplied evidence indicates documentation clarification rather than a feature launch, preview, general-availability change, retirement, or product behavior change.

• Intune · Device security

  Firewall and ASR per-setting reporting limitation clarified

  The Firewall documentation states that per-setting reporting is available for most Endpoint Security policies, but MDM-managed Firewall Rules and ASR Rules policies are limited to policy-level status. Per-setting status for those policies requires enrollment with Defender for Endpoint security settings management.

• Intune · Endpoint analytics

  Monitor Device Profile procedure steps were renumbered

  The reporting procedure now labels “Go back to Device and user check-in status and select View report” as step 6 instead of step 5, and the following policy-property information step as 7 instead of 6. This is a documentation procedure correction, not evidence of a functional change.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.