How long are newly deployed computers placed in learning mode by default?

Newly deployed computers are placed in learning mode by default for an indefinite duration to facilitate the automatic tuning of security and performance parameters based on usage patterns. This means that the system can continually adapt and derive insights from the behavior of applications and users without the pressure of a specific time limit.

This approach allows organizations to gather sufficient data and understand usage behaviors over a potentially long period, ensuring that security configurations are tailored optimally to fit real-world conditions. Once the system learns adequately, administrators may choose to switch from learning mode to a more restrictive mode based on their operational needs and security policies. Other options, such as a fixed duration or a requirement for manual changes, do not align with the flexibility intended by having an indefinite learning phase.