Protect Mobile Devices: Configure Defender for Endpoint for iOS!

In this video, Dean configures Microsoft Defender for Endpoint for iOS devices through Microsoft Endpoint Manager (Microsoft Intune) and Microsoft Defender for Endpoint.
Here's the Petri post for this video:
petri.com/protect-ios-and-and...
The Cloud Management Community is YOUR community for Cloud Management, Mobile Device Management and Microsoft Endpoint Manager. Join the discussion on Twitter (@the_cmcommunity) and subscribe to be notified when we go LIVE.
Dean Ellerby is a Microsoft Enterprise Mobility MVP, Certified Trainer, Organiser at CloudManagement.Community, Contributor at Petri.com, Pluralsight Author and a Workspace Solution Architect at CDW UK. He's on Twitter @dean_ellerby. Any views or opinions expressed here are his own.
Table of Contents:
00:00 - Introduction
01:13 - Setting it up in MEM
02:42 - Deploy the app
03:35 - Configure Silent Onboarding
05:09 - The result!

[@marcmakes1725]

But what is the exact protection provided by Defender for Endpoints?

[@mariotorresherrera8921]

Great work !

[@theCMC]

Thanks Mario!

[@dennissullivan3570]

Another great and helpful video, thanks!
I have a few test users running the MDE on iOS and have found there are some apps that break because of the VPN. Is there anyway to whitelist these apps that don't play nice?
Thanks for your contributions to the community!
Mike

[@marcrodieck9038]

Thanks for the video. When deploying this to an unmanaged device (iOS), everything stops cause Defender for Mobile is not in the App Protection list to choose from. I have configured everything step by step. Any advice?

[@theCMC]

"everything stops"?! I'll admit I've not tried this in production personally but I know a few orgs that have it up and running based on my advice, so this is surprising!
Happy to help troubleshoot if you can give the exact scenario.
YT can be very picky about comments, so if you reply and it's deleted, please feel free to pick this up on twitter @the_cmcommunity or facebook.com/groups/cloudmc

[@eddiealvarez3912]

The iOS device name in Defender is completely different than actual device name. Any fix for this?
Also, do you understand how the VPN profile works? When is VPN actually used, and for what? How to implement split tunneling with the VPN profile?

[@smg84]

Thanks for the video! Do you know what licensing is required for this? I know Business Premium now includes Defender for Endpoint, which I'm hoping means this is included?

[@theCMC]

The "cross-platform support" capability within Defender for Endpoint Plan 1 (or 2), or Defender for Business, will be sufficient for this to work.
See:
m365maps.com/Microsoft%20365%20Business%20Premium.htm

[@honestsniping1]

@@theCMC will it work if i only have defender for endpoint P2 standalone license?

[@theCMC]

@@honestsniping1 yes.

[@ehabgalal9181]

Is zero touch work for both supervised and unsupervised devices

[@theCMC]

It works for Unsupervised, but Supervised devices don’t require a VPN so are Zero Touch anyway.

[@raypalomarez]

My console in 365 Defender not showing (Endpoints) in > Settings. Do I need a license first to see the setting?

[@theCMC]

Yes. You need either Defender for Endpoint or Defender for Business

[@S1mmz]

Which IOS simulator do you use? Thanks.

[@theCMC]

I use Reflector 3, but I think I need to upgrade to v4 because it doesn’t seem to support newer iPad skins!

[@S1mmz]

Thank you.