In SMA100012.4.3 configuring Shell Access settings allows to configure the shell access settings to allow or prevent all shell access via the serial console and SSH. By default the Shell access is always enabled.
Refer to the Enabling SSH Access from Remote Hosts section.