Text edits

Author: MandiOhlinger

memdocs/intune/configuration/group-policy-analytics-migrate.md

@@ -8,7 +8,7 @@ author: MandiOhlinger
 
 ms.author: mandia
 manager: dougeby
-ms.date: 06/29/2022
+ms.date: 07/13/2022
 ms.topic: how-to
 ms.service: microsoft-intune
 ms.subservice: configuration
@@ -128,9 +128,15 @@ When you create the Settings Catalog profile, any settings that can be included
 
 - **Some settings have a better configuration experience in Endpoint Security**
 
-  If your imported Group Policy object contains AppLocker settings or Firewall rule settings, these are better configured in Endpoint Security rather than in the Settings Catalog. Learn more about [firewall policy in Endpoint Security](https://docs.microsoft.com/en-us/mem/intune/protect/endpoint-security-firewall-policy) and [application control policy in Endpoint Security](https://docs.microsoft.com/en-us/mem/intune/protect/endpoint-security-asr-policy).
+  If you import AppLocker settings or Firewall rule settings, then the **Migrate** option is disabled and grayed out. Instead, configure these settings using the Endpoint Security workload in the Endpoint Manager admin center.
+
+  For more information, go to:
 
-  You will see a grayed out checkbox to migrate these settings to Settings Catalog; however, they are supported in Endpoint Security.
+  - [Firewall policy in Endpoint Security](../protect/endpoint-security-firewall-policy.md)
+  - [Endpoint security firewall rule migration tool overview](../protect/endpoint-security-firewall-rule-tool.md)
+  - [Application control policy in Endpoint Security](../protect/endpoint-security-asr-policy.md).
+
+  If you have GPOs that focus on endpoint security, then you should look at the features available in [Endpoint Security](../protect/endpoint-security.md), including Security Baselines and mobile threat defense.
 
 - **Some settings don't migrate exactly, and may use a different setting**