Configure how aggressively Remote Encryption Protection blocks threats

Supported on: At least Windows Server 2016, Windows 10 Version 1607

Registry

HKLM Software\Policies\Microsoft\Windows Defender\Remediation\Behavioral Network Blocks\Remote Encryption Protection

Value name: RemoteEncryptionProtectionAggressiveness

Options

RemoteEncryptionProtectionAggressiveness enum
  • Low -> 0
  • Medium -> 1
  • High -> 2

Description

Set the criteria for when remote encryption preventionprotection blocks IP addresses. Supported settings: *0 - Low: Block only when confidence level is 100% (Default) *1 - Medium: Use cloud aggregation and block when confidence level is above 99% *2 - High: Use cloud intel and context, and block when confidence level is above 90%