Microsoft Defender for Endpoint uses a virtual private network (VPN) to provide Web Protection capabilities that protect users against phishing or web-based attacks. This is a local (or self-looping) VPN, and unlike traditional VPNs, it can't direct or redirect traffic off the device.