Is Capture ATP enabled by default if a firewall is licensed for it?

Capture ATP (Advanced Threat Protection) is not enabled by default even if a SonicWall firewall is licensed for it. This design decision reflects a cautious approach to ensure that administrators have control over their security configurations. By requiring manual activation, the firewall allows network administrators to evaluate their specific security needs and decide when to enable this advanced threat detection feature, thereby minimizing the potential for any unintentional adjustments to the security posture of the network.

The requirement for manual activation also provides an opportunity for administrators to review the latest updates, configurations, and specific settings tied to the Capture ATP service before enabling it. This step ensures that organizations can optimize their security protocols based on current threat landscapes and their unique operational environments.