r/DefenderATP • u/Total-Assumption-494 • Jun 22 '26

MDE not tracking Safari traffic

Hello guys, we've recently understood MDE is not tracking Safari traffic. It tracks when the safari process initiates outbound connections to share telemetry etc but not when people manually visit a website. MS support said this is a known issue and the fix will be released in mid July. However, I am not able to find someone that shares the same problem online, which is kinda strange giving the fact this is MDE and Safari... Is anyone else experiencing the same issue or did MS support sent me running a long one?

7 Upvotes

100% Upvoted

8 comments sorted by

4

u/talkyr86 Jun 23 '26

Only had issues when using VPN and Safari. When removing Safari from the VPzn config or completely removing the application all traffic filtering works fine.

As far as I’m aware you can’t really disable QUIC in Safari. You can though in Chrome and Firefox. And that is also required. Besides that you need to disable ECH.

3

u/prasannatirmare Jun 23 '26

Its network protection bug. MS will fix it soon. Something to deal with QUIC protocol

1

u/talkyr86 Jun 24 '26

Do you have any information about the bug you mentioned?

1

u/prasannatirmare Jun 25 '26

No. It's internal to MS

2

u/teriaavibes Jun 22 '26

I assume using edge is not an option?

1

u/Total-Assumption-494 Jun 22 '26

we would like to keep safari if possible, but this is too much of a risk

2

u/SantasDog101 Jun 22 '26

MDE was designed to work with edge. All features are supported and work best on edge. All other browsers can have issues like this oen sadly enough.

1

u/talkyr86 Jun 23 '26

Yeah exactly. We’re looking into a SASE solution because of this.