Starting with ENS 10.7.0 June 2021 Update, systems hosting WSL1/WSL2 can install ENS for host protection. ENS 10.6.x will not be getting WSL1/WSL2 support. Installation and use of ENS on the host of WSL1/WSL2 has been validated on all supported desktop and server platforms. No scanning occurs inside the subsystem. Installation of ENS for Linux inside a WSL1/WSL2 instance is not supported.

The default ENS Firewall rules block DNS name resolution and most network traffic from WSL2 and Docker instances. WSL1 is not impacted. For instructions to create firewall rules to allow the traffic from WSL2 and Docker instances, see: KB94601 - Endpoint Security Firewall blocks certain network traffic from WSL2/Docker instances.