Sep 11 client config changed, causing issues with applications

My Sep 11 client has been updated with "Proactive Network Protetion" which caused high utilization.  The client is managed by a Sep management server I want to know when the Client decided to add this function.

Is there a log on the local client that shows when the client adds a new service like "Proactive Netowk Protection" on the local client?

Thanks,

Andy