In which mode does ENS prompt the user for action upon intercepting unknown network traffic?

The choice "Learn Mode" refers to a specific operational setting of the Endpoint Security (ENS) solution where the system is designed to evaluate and understand network traffic that is not previously recognized or classified. In this mode, the ENS software actively monitors unknown traffic and engages users by prompting them for decisions on how to handle that traffic. This interaction helps the security system to learn user preferences and adapt its behavior in the future, ultimately enhancing its ability to identify and filter out potentially harmful or unwanted network activities.

The focus on user involvement in "Learn Mode" distinguishes it from other operational modes that may either passively monitor traffic or apply more stringent security rules without user input, thus allowing for a more customized security experience. This creates an opportunity for the ENS to gradually adjust its policies based on real user choices, reducing false positives and improving overall security effectiveness.