Managing Active Defense on Datasets The Active Protection - Datasets page allows viewing and managing the protection and excessive file access settings of all datasets. Predefined filters exist to sort the list of datasets based on enabled properties. The filters include: Datasets - A summary of all the non-system datasets with the ability to manage and view each dataset’s Active Defense and Excessive File Access status. Trials - Blocks Disabled - Displays only datasets with the Trial status. A dataset with a Trial status will indicate that the threats will only be reported and nothing will be blocked. Temporarily Disabled - Displays only datasets with the Temporarily Disabled status. A dataset with a Temporarily Disabled status indicates threat detection is disabled until the defined time has passed. Excessive File Access - Displays table columns pertaining to Excessive File Access, allowing for complete view of the block and notify values for each dataset. To temporary disable Active Defense or enable Trial mode for a dataset, follow the steps below: Navigate to the Active Protection - Datasets page. Click the action cog () next to the desired dataset. Select Edit Security. (Optional) Check the Recursive box. This will cause changes to affect all children of the dataset being configured. Toggle the desired features. Temporarily Suspend Blocks enables Active Defense protection only reporting detected issue without blocking user or host access. Temporarily Suspend Blocks and UB Collection temporary disables Active Defense and user behavior detection. This is typically used during data migrations to prevent false notification and blocking from occurring. Click Apply to confirm.