> Look at the host details in the MC and see if the "test mode" box is checked
That's true for the group attribute for test mode. But in CSA 4.5, the rule module attribute for test mode was introduced.
At the group level, if a host is a member of one or more groups that have test mode enabled, all rules for that host will be in test mode.
With the group level set, the host page will reflect "Test Mode: On" for the status.
At the rule module level, if a host is a member of no groups in test mode, a single rule module can be st into test mode. This is an attribute on the rule module page. Much like system states are an attribute of the rule module.
With the rule module level set, the host page will reflect "Test Mode: Off" for the status. You'll need to expand the groups / policies / rule modules further down on the host page to determine what modules are in test mode. Look for the "[test mode]" tag next to the module name.
This is also covered in the CSA User's Guide.
