Symantec Critical System - Manual (Page 93)

93 Installing UNIX agents
Disabling and enabling UNIX agents
Enabling a disabled Solaris agent
You can enable a Solaris agent that was previously disabled.
To enable a disabled Solaris agent
1 Open a Terminal window and become superuser.
2 Type and run the following commands, which rename the sisipsgent
scripts:
mv /etc/init.d/sisipsagentOFF /etc/init.d/sisipsagent
mv /etc/init.d/sisidsagentOFF /etc/init.d/sisidsagent
3 Type and run the following command to restart the computer:
init 6
Disabling and enabling Linux agents
This section describes how to disable and enable Linux agents.
Temporarily disabling the IPS driver
If you have performance issues with Linux agents, you may need to temporarily
disable the intrusion prevention driver. You should do this only if there are
serious performance issues that you suspect are being caused by the IPS driver,
or if you have applied a prevention policy that is not allowing you to access the
system in any way.
After you disable the driver, apply the Null prevention policy or a prevention
policy in which prevention was disabled. Reboot the system.
Warning: You should perform these procedures only in emergency situations.
To temporarily disable the IPS driver
◆ During the boot cycle, add the string SISIPSNULL to the boot options. The
agent and kernel mode driver do not load, and the policy is not enforced.
Permanently disabling Linux agents
If you have performance issues with Linux agents, you may need to permanently
disable them.
The following procedure disables an agent, not the driver. The driver will still be
running.