About the Access Appliance intrusion prevention system
The appliance intrusion prevention system (IPS) consists of a custom Symantec Data Center Security (SDCS) policy that runs automatically at startup. The IPS policy can proactively block unwanted resource access behaviors.
The following list contains some of the IPS policy features:
Restricted access to the root account by maintenance user.
Self-protection for the SDCS agent itself to ensure that the security features and monitoring features of SDCS are not compromised.
The IPS policy is automatically enabled on the appliance with factory-installed image. You do not require to manually deploy the policy from an SDCS server. As a part of the IPS policy, the elevate command for the maintenance user is blocked by default. The maintenance user must override the policy to run the elevate command.