In addition to denying traffic over port 9001 and 9002 (as per Install a desktop firewall), the debugging shell that runs on port 9001 can be disabled by modifying the value of the iv.policymgmt.RuleEngine.BSH_Diagnostics_Port record in the iv_emsproperties table. To disable the port, set the value in the field called "value" = -1
.png)