Symantec Critical System Manuel D’Utilisation

93

Installing UNIX agents

Disabling and enabling UNIX agents

Enabling a disabled Solaris agent

You can enable a Solaris agent that was previously disabled.

To enable a disabled Solaris agent

1

Open a Terminal window and become superuser.

2

Type and run the following commands, which rename the sisipsgent 
scripts:

3

Type and run the following command to restart the computer:

Disabling and enabling Linux agents

This section describes how to disable and enable Linux agents.

Temporarily disabling the IPS driver

If you have performance issues with Linux agents, you may need to temporarily 
disable the intrusion prevention driver. You should do this only if there are 
serious performance issues that you suspect are being caused by the IPS driver, 
or if you have applied a prevention policy that is not allowing you to access the 
system in any way.

After you disable the driver, apply the Null prevention policy or a prevention 
policy in which prevention was disabled. Reboot the system.

Warning: You should perform these procedures only in emergency situations.

To temporarily disable the IPS driver 

◆

During the boot cycle, add the string SISIPSNULL to the boot options. The 
agent and kernel mode driver do not load, and the policy is not enforced.

Permanently disabling Linux agents

If you have performance issues with Linux agents, you may need to permanently 
disable them.

The following procedure disables an agent, not the driver. The driver will still be 
running.