Installing UNIX agents
Disabling and enabling UNIX agents
93
Enabling a disabled Solaris agent
You can enable a Solaris agent that was previously disabled.
To enable a disabled Solaris agent
1Open a Terminal window and become superuser.
2Type and run the following commands, which rename the sisipsgent scripts:
mv /etc/init.d/sisipsagentOFF /etc/init.d/sisipsagent mv /etc/init.d/sisidsagentOFF /etc/init.d/sisidsagent
3Type and run the following command to restart the computer: init 6
Disabling and enabling Linux agents
This section describes how to disable and enable Linux agents.
Temporarily disabling the IPS driver
If you have performance issues with Linux agents, you may need to temporarily disable the intrusion prevention driver. You should do this only if there are serious performance issues that you suspect are being caused by the IPS driver, or if you have applied a prevention policy that is not allowing you to access the system in any way.
After you disable the driver, apply the Null prevention policy or a prevention policy in which prevention was disabled. Reboot the system.
Warning: You should perform these procedures only in emergency situations.
To temporarily disable the IPS driver
◆During the boot cycle, add the string SISIPSNULL to the boot options. The agent and kernel mode driver do not load, and the policy is not enforced.
Permanently disabling Linux agents
If you have performance issues with Linux agents, you may need to permanently disable them.
The following procedure disables an agent, not the driver. The driver will still be running.
