sourcefire.immunet/CLIENT_DATA/local.xml

 <config>
  <agent>
   <initialscan>0</initialscan>
   <agent_registered>0</agent_registered>
   <scansettings>
    <clamav>
     <defInit>0</defInit>
     <enable>0</enable>
     <updater>
      <enable>0</enable>
     </updater>
     <options>
      <ondemand>
       <scanarchives>0</scanarchives>
       <scanpacked>0</scanpacked>
      </ondemand>
     </options>
    </clamav>
    <tetra>
     <options>
      <ondemand>
       <scanarchives>0</scanarchives>
       <scanpacked>0</scanpacked>
      </ondemand>
     </options>
    </tetra>
    <ethos>
     <enable>0</enable>
    </ethos>
    <spero>
     <enable>0</enable>
    </spero>
    <action>
     <malware>0</malware>
     <suspicious>0</suspicious>
    </action>
   </scansettings>
   <driver>
    <protmode>
     <active>0</active>
     <file>0</file>
     <process>0</process>
    </protmode>
   </driver>
   <cloud>
    <upload>
     <enabled>0</enabled>
    </upload>
   </cloud>
  </agent>
  <ui>
   <notification>
    <verbose>0</verbose>
    <gaming>0</gaming>
    <cloud>0</cloud>
   </notification>
  </ui>
 </config>