Views:
To perform file updates on endpoints, users can configure Maintenance Mode settings to define a period when StellarProtect allows all file executions and adds all files that are created, executed, or modified to the Approved List. During the maintenance period, all newly-added files can be updated accompanied with real-time virus scan for consistent security. StellarProtect can learn the newly-added applications and ensure the execution of these applications are under protection.
Note:

If users change the policy settings of Application Lockdown, OT Application Safeguard, and Real-Time Malware Scan during maintenance period, the policy settings will not be enforced until the maintenance period ends.

  1. Click the Agents tab in the top navigation bar of the StellarOne web console.
  2. Click the All group on the Agents screen. The Agents screen displays a list of agents managed by StellarOne.
  3. Select one or more endpoints (agents or groups) by clicking the checkboxes next to them.
  4. Click the Protection button from the Tool Bar at the top of the Agents screen.
  5. A pop-up window appears. Click Configure Maintenace Mode option.
  6. Click Confirm.
  7. The configuration window appears. Please read the notice and check either Enable or Disable radio button.

    • Click Enable to start the Maintenance Mode settings. Please go to Step 8 for next procedure.

    • Click Disable > OK to end Maintenance Mode. This will cancel the scheduled maintenance period on endpoints.

      1. A warning message appears. Please read carefully before proceeding to next step.
        Important:

        If the Maintenance Mode is ended, the endpoint(s) will start blocking the execution of files that are not recognized by the OT Application Safeguard.

      2. Click OK to end Maintenance Mode. A pop-up window appears showing the deployment status of stopping Maintenance Mode on endpoints.

  8. The schedule configuration window appears. Do either of the following for scheduling Maintenance Mode.

    • Click the Schedule radio button, and then click the edit icon to select the start date and specify the start time for Maintenance Mode. After that, specify the duration of the maintenance period in Maintenance Mode will be ended after.

    • Click the Start now radio button, and then specify the duration of the maintenance period in Maintenance Mode will be ended after.

  9. A toggle switch for enabling/disabling Real-Time Malware Scan is added under the Maintenance Mode option. The default setting is ON.
    Note:

    • If users disable Real-Time Malware Scan in the policy setting, it is reommended to enable the Real-Time Malware Scan toggle switch here during maintenance period to ensure seamless protection. After maintenance period ends, the system will follow the original policy setting (Real-Time Malware Scan disabled).

    • Please refer to Real-Time Malware Scan for more details about this function.

  10. Click OK to deploy the settings to the selected agents or groups.
  11. The Command Deployment window appears showing the deployment status. Click the Close button to close the window.
Parent topic: Agent Protection