Update group-policy-analytics-migrate.md

Author: aanavath

memdocs/intune/configuration/group-policy-analytics-migrate.md

@@ -8,7 +8,7 @@ author: MandiOhlinger
 
 ms.author: mandia
 manager: dougeby
-ms.date: 06/21/2022
+ms.date: 06/29/2022
 ms.topic: how-to
 ms.service: microsoft-intune
 ms.subservice: configuration
@@ -126,6 +126,12 @@ The **Migrate** feature takes the parsed data from the imported Group Policy obj
 
 When you create the Settings Catalog profile, any settings that can be included in the profile will be included. There can be some differences with the imported settings and the settings in Settings Catalog.
 
+- **Some settings have a better configuration experience in Endpoint Security**
+
+  If your imported Group Policy object contains AppLocker settings or Firewall rule settings, these are better configured in Endpoint Security rather than in the Settings Catalog. Learn more about [firewall policy in Endpoint Security](https://docs.microsoft.com/en-us/mem/intune/protect/endpoint-security-firewall-policy) and [application control policy in Endpoint Security](https://docs.microsoft.com/en-us/mem/intune/protect/endpoint-security-asr-policy).
+  
+  You will see a grayed out checkbox to migrate these settings to Settings Catalog; however, they are supported in Endpoint Security.
+
 - **Some settings don't migrate exactly, and may use a different setting**
 
   In some scenarios, some GPO settings won't migrate to the exact same setting in the Settings Catalog. Intune will show an alternate setting that has a similar effect.