title	titleSuffix	description	ms.date	ms.topic	ms.subservice	ms.service	manager	author	ms.author	ms.localizationpriority	ms.reviewer	ms.collection
Tenant attach - Deploy endpoint firewall from the Microsoft Intune admin center	Configuration Manager	Create and deploy firewall policies from the Microsoft Intune admin center and for Configuration Manager collections.	09/27/2021	conceptual	core-infra	configuration-manager	apoorvseth	gowdhamankarthikeyan	gokarthi	high	mstewart,aaroncz	tier3

Tenant attach: Create and deploy firewall policies from the admin center

Applies to: Configuration Manager (current branch)

Create Windows Firewall policies in the Microsoft Intune admin center and deploy them to Configuration Manager collections.

Assign firewall policies to a collection

Go to the Microsoft Intune admin center.
Select Endpoint security > Firewall then Create Policy.
Create a profile with the following settings:
- Platform: Windows 10 and later
  - Only Windows 10 clients can be targeted with firewall policies currently.
- Profile: Microsoft Defender Firewall (ConfigMgr)
Select Create then give the profile a Name and a Description.
On the Configuration settings page, set the firewall settings for the devices. For more information about the available settings, see Settings for firewall policy for tenant attached devices
On the Assignments page, select the collections to include for the policy assignment then choose Next.
Review the settings on the Review + Create page and select Create when you're done.

Settings for firewall policy for tenant attached devices
Create and deploy endpoint security Antivirus policy to tenant attached devices
Create and deploy endpoint security Attack surface reduction policy to tenant attached devices
Create and deploy endpoint security Endpoint Detection and Response policy to tenant attached devices