Understand why there are duplicate events about Deep Security Agent Self-Protection:
- EventID: 2906 Agent Self-Protection enabled
- EventID: 2908 Agent Self-Protection enabled
- EventID: 2907 Agent Self-Protection disabled
- EventID: 2909 Agent Self-Protection disabled
The Event IDs above differ depending on where you enable or disable the Self-Protection feature.
- If you activate or deactivate the Self-Protection from the Deep Security Manager (DSM) web console, the following events will show:
- EventID: 2906 Agent Self-Protection enabled
- EventID: 2907 Agent Self-Protection disabled
- If you activate or deactivate the Self-Protection from the Deep Security Agent (DSA) local, the following events will show:
- EventID: 2908 Agent Self-Protection enabled
- EventID: 2909 Agent Self-Protection disabled