Starting with the ENS 10.7.0 June 2021 Update, systems hosting WSL1/WSL2 can install ENS for host protection. ENS 10.6.x won't be getting WSL1/WSL2 support. Installation and use of ENS on the host of WSL1/WSL2 has been validated on all supported desktop and server platforms. No scanning occurs inside the subsystem. Installation of ENS for Linux inside a WSL1/WSL2 instance isn't supported.

The default ENS Firewall rules block the DNS name resolution and most network traffic from WSL2 and Docker instances. WSL1 isn't impacted. For instructions to create firewall rules to allow the traffic from WSL2 and Docker instances, see KB94601 - Endpoint Security Firewall blocks certain network traffic from WSL2/Docker instances.