If I understand correctly:

Deciphering the market speak: a computer with defender installed on a corporate network will ignore other computers on the same network unless they also have defender installed. Ignored computers are ‘contained’ by IP address