I'm seeing repeated 'Virtual Machine Unprotected" or "Virtual Machine Protected" events in the threat event log for our McAfee MOVE Agentless 3.5 which is protecting our VMware Horizon View VDI infrastructure.
I'm not sure what would be generating these events as every VM is an identical linked clone and the users have no administrator rights.
We do, however, use power policies to ensure machines are powered off at all times except for when they are needed - I'm wondering if the 'traffic' of machines being switched on / off is causing these events to appear.
The 'Unprotected' status messages make me nervous!
Many thanks in advance for any information anyone may be able to provide.
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.