To switch between different modes:
- Navigate to the page with Live Shield module
- Click Administrator tab
- Apply mode either Prevention, Detection or Disabled
In Detection mode:
In Detection Mode, Live Shield monitors and logs all identified threats. Email notifications are also sent if enabled.
Live Shield DOES NOT BLOCK any threats when it’s operating in Detection Mode. A common use case is for administrators to run in Detection Mode to observe logs for false positives and tweak necessary settings. Turn on Prevention Mode once an administrator has created necessary exceptions for false positives.
In Prevention mode:
In Prevention Mode, Live Shield monitors, logs, and blocks all identified threats. Email notifications are immediately sent if enabled.
Live Shield holistically protects your site and DOES NOT FACTOR the source of the change. For example, it will monitor and block any file intrusion or modification regardless of if it was introduced through a core or 3rd party vulnerability or a legitimate source such as FTP. Similarly, it will block ALL new grants of Superuser privileges regardless of whether it was through a SQL Injection attack or legitimately via Persona Bar. Therefore, it’s imperative to DISABLE or SWITCH to Detection Mode before installing any new extensions, upgrading your DNN or Evoq Site, or granting new Superuser privileges.