After being successfully licensed, Capture ATP must be enabled before it will begin analyzing files for malicious behavior.
To enable Capture ATP
In the AMC, navigate to User Access > Capture ATP.
On the Capture ATP page, select Enable Capture Advanced Threat Protection.
To verify the connection to the Capture ATP service, click the Test connection button.