To enable or disable the capture of network events:
Log in to the Web UI as an administrator.
From the Admin menu, select Policies to access the Policies page.
From the Policies table, select the Agent Default Policy and click the policy link to access the Edit Policy page.
Select the Real-Time Indicator Detection tab.
In the Events section, toggle the Capture Network Connection Events switch to ON to enable network event capture. Toggle the Capture Network Connection Events switch to OFF to disable network event capture.
Click Save.