Difference between duplicate Event IDs for the same event in Deep Security Agent Self-Protection

Summary

Understand why there are duplicate events about Deep Security Agent Self-Protection:

Details

The Event IDs above differ depending on where you enable or disable the Self-Protection feature.

If you activate or deactivate the Self-Protection from the Deep Security Manager (DSM) web console, the following events will show:
- EventID: 2906 Agent Self-Protection enabled
- EventID: 2907 Agent Self-Protection disabled
If you activate or deactivate the Self-Protection from the Deep Security Agent (DSA) local, the following events will show:
- EventID: 2908 Agent Self-Protection enabled
- EventID: 2909 Agent Self-Protection disabled

Rating:

Category:

SPEC

Solution Id:

1115938

Feedback

Did this article help you?

Thank you for your feedback!

What was the problem with this article?

The image(s) in the article did not display properly.

The article did not provide detailed procedure.

The article is hard to understand and follow.

The video did not play properly.

The article did not resolve my issue.

Others. Please specify.

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:

We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

Thanks for voting.

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:

We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.