...
After you install WSO2 IS, it is recommended to change the default security settings according to the requirements of your production environment. As IS is built on top of the WSO2 Carbon Kernel (version 4.4.6), the main security configurations applicable to IS are inherited from the Carbon kernel.
...