1. To end Maintenance Mode, select the required hosts and click Maintenance


  2. There are two options to end Maintenance Mode. Select the appropriate option:

    1. Stop

      1. This indicates that the Maintenance is complete and a scan is initiated on the selected hosts in Maintenance Mode. This is indicated by the below icon


      2. Once the scan is complete, the allowlist is published and all the newly installed processes/libraries are auto-allowlisted

      3. Only the ones with the file reputation “Threat” are not allowlisted and reported as incidents

      4. The profile is published to all the hosts automatically

      5. Click YES on the confirmation screen

    2. Cancel

      1. This cancels the Maintenance Mode and a scan is not initiated on the hosts

      2. Click YES on the confirmation screen

  3. The original Protection Mode is enabled on the respective hosts

  4. Process/library search can be performed based on the maintenance window


  5. Ensure that Maintenance Mode is not active during CMS and/or Probe upgrade