> For the complete documentation index, see [llms.txt](https://docs.prismacloud.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.prismacloud.io/content-collections/runtime-security/install/deploy-defender/app-embedded/configure-app-embedded-fs-protection.md).

# Default Setting for App-Embedded Defender File System Protection

Because App-Embedded Defender’s file system protection could affect workload performance, you can enable or disable it.

This procedure is intended for security teams that want to set a global recommendation for whether file system protection should be enabled when teams deploy App-Embedded Defenders.

By default, file system protection is disabled in App-Embedded Defenders. Security teams can turn it on by default so that teams that build and manage apps will deploy Defender according to your organization’s best practices. Individual teams can optionally override the default setting at embed-time, and they may want to do so if file system protection interferes with their workload’s operation.

1. Log into Console.
2. Go to **Manage > Defenders > Manage > Defenders**.
3. Click **Advanced settings**.
4. Set **Default file system protection statefor App-Embedded Defenders** to **On** or **Off**.

   <figure><img src="/files/981OdzvKOjPR6yDS9MgM" alt="config app embedded fs protection global"><figcaption></figcaption></figure>
5. Validate the global setting has been properly applied by inspecting the Defender embed flow.
   1. Go to **Manage > Defenders > Deploy > Defenders**.
   2. In **Deployment method**, select **Single Defender**.
   3. In **Choose the Defender type**, select **Container Defender - App-Embedded**.
   4. Verify that the value for **Monitor file system events** matches the value you set in **Advanced settings**.

      <figure><img src="/files/zc8ixLXEcPJnDL9u1TSF" alt="config app embedded fs protection deploy"><figcaption></figcaption></figure>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.prismacloud.io/content-collections/runtime-security/install/deploy-defender/app-embedded/configure-app-embedded-fs-protection.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.