Views:

The Event IDs above differ depending on where you enable or disable the Self-Protection feature.

  • If you activate or deactivate the Self-Protection from the Deep Security Manager (DSM) web console, the following events will show:
    • EventID: 2906 Agent Self-Protection enabled
    • EventID: 2907 Agent Self-Protection disabled
  • If you activate or deactivate the Self-Protection from the Deep Security Agent (DSA) local, the following events will show:
    • EventID: 2908 Agent Self-Protection enabled
    • EventID: 2909 Agent Self-Protection disabled
Keywords: event id,self protection feature,dsa self protection