The following is an excerpt from Deep Security 9.0 Best Practice Guide [PDF], p. 15.

Using DSA with iptables (on Linux agents) or Windows Firewall

To avoid conflict, the DSA installation will disable iptables (Linux) or Windows Firewall (Windows) by default. In situations where the DSA firewall feature is NOT used, refer to the steps below to prevent the installer from disabling iptables or make any changes to the native Windows Firewall.

For Windows:

Refer to the following article for details on how to modify the DSA MSI package to prevent it from changing the Windows Firewall:

For Linux:

Use at least Deep Security 9.0 Service Pack 1. In order to leave iptables untouched by the DSA, the user must create or touch an empty file with the following path:

If that file is present then the DSA scripts will not disable iptables.