This is a known Microsoft issue with Windows 10 and Server 2016
From the Defender Release Notes:
Use the Microsoft CMAK (Connection Manager Administration Kit) to create a VPN connection. Then deploy and use this CMAK created connection with Windows 10 machines.
To create a CMAK profile on Windows 10
Use the EAP Agent installed on a computer running an operating system other than Windows 10.