The IPS Policy in Symantec Cloud Workload Protection restricts some processes required by VIP Enterprise Gateway LiveUpdate. Before running LiveUpdate, you must disable the IPS Policy in Symantec Cloud Workload Protection. Once LiveUpdate completes, you can enable the IPS Policy again.
This is expected behavior of Symantec Cloud Workload Protection. Refer to the appropriate guide (attached) for details on disabling and enabling the IPS service on Unix and Windows.