I have a confusion that whether we can directly move from the disable mode to update mode.
As far as I know we have to move from disable mode to enable mode and then to update mode.
Kindly specify me clearly
Best practice is to move from disable to observe mode and then into enable mode.
The enable task facilitates that workflow.
Why would you like to go in update mode?
We have some problem on one solaris server & we changed it to disable mode from enable mode...But I have to generate some log by moving it to update mode from disable mode after that i will again move it to disable mode until the problem is solved..
So, I just want to know that i can directly move from to update mode from disable mode OR I have to go to enable mode from disable mode and then update mode????
Will moving from disable mode to update or from update mode to disable mode requires a reboot like moving from disable to enable or from enable to disable mode.
Plzzz confirm me about te same
Take a look at page 66 in the product guide http://www.intel.co.uk/content/dam/www/public/us/en/documents/guides/mcafee-application-control-prod... which explains that Update mode is used to update the Whielist in an Emergency when the machine is in Protected State.
You can go from 'disable' to 'update' mode by using the "Begin Update mode" task.
Before ending update mode, ensure that your local whitelist is complete and current.
If you want to move to update mode immediately after deploying the product, you need to push the license to the client before running the tasks.
'Enable' task takes care of all these steps in one go hence its advisable to use that.
Moving from disable to update mode does not require a reboot, but if you want to move vice versa i.e. from Update to disable, reboot is mandatory.