Enabling and disabling Adaptive Anomaly Control

Adaptive Anomaly Control is enabled by default.

To enable or disable Adaptive Anomaly Control:

1. In the main application window, click the button.
2. In the application settings window, select Security Controls → Adaptive Anomaly Control.
3. Use the Adaptive Anomaly Control toggle to enable or disable the component.
4. Save your changes.

As a result, the Adaptive Anomaly Control will switch to the training mode. During training, Adaptive Anomaly Control monitors rule triggering. When training is complete, Adaptive Anomaly Control starts to block actions that are not typical of the computers in a company's network.

If your organization has started to use some new tools, and Adaptive Anomaly Control blocks the actions of those tools, you can reset the results of the training mode and repeat the training. To do this, you need to change the action that is taken when the rule is triggered (for example, set it to Notify). Then you need to re-enable the training mode (set the Smart value).

Page top