Undiscovered IP addresses will not be trusted by default, but admins will be able to change the settings at any time.

Microsoft is testing a new Defender for Endpoint capability that will block traffic to and from undiscovered endpoints to thwart attackers' lateral network movement attempts.