Microsoft 365 Alert : Service Degradation – Microsoft Defender – Admins may notice that the Web threat protection and Web content filtering reports are not returning data – RESOLVED

29/03/2022 08:56:00 AM (BST)

Issue Reported : 29/03/2022 01:00:00 AM (UTC)

NHSmail Reference : INC27860861

Microsoft Reference : DZ348310

Issue Status: RESTORED

Issue Description : Admins may notice that the Web threat protection and Web content filtering reports are not returning data

More info : Specifically, the Web content filtering and Web threat summary reports are not returning data for detailed views. Advanced Hunting capabilities are not impacted by this event.

For more information regarding Web protection reports, please visit this link: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/web-protection-overview?view=o365-worldwide

Scope of Impact : This issue may impact any of your admins attempting to view data within Web threat protection and Web content filtering summary reports.

Final Update : 09/05/2022 06:00:00 PM – Microsoft successfully addressed the performance issues within the previous fix and developed an alternate fix to fully resolve the issue. They have completed deployment and confirmed that the reports are returning data as expected.

Root cause : A recent change to the Microsoft Defender for Endpoint service is inadvertently preventing data from propagating as expected within Web content filtering and Web threat summary reports.

Next steps : Microsoft are reviewing our mitigation strategies utilized in this incident to reduce resolution time for similar events in the future.