diff --git a/docs/hss/umn/ALL_META.TXT.json b/docs/hss/umn/ALL_META.TXT.json
new file mode 100644
index 00000000..987ac078
--- /dev/null
+++ b/docs/hss/umn/ALL_META.TXT.json
@@ -0,0 +1,4457 @@
+[
+	{
+		"dockw":"User Guide"
+	},
+	{
+		"uri":"hss_01_0042.html",
+		"node_id":"hss_01_0042.xml",
+		"product_code":"hss",
+		"code":"1",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Introduction",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Introduction",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0001.html",
+		"node_id":"hss_01_0001.xml",
+		"product_code":"hss",
+		"code":"2",
+		"des":"HSS is designed to protect server workloads in hybrid clouds and multi-cloud data centers. It provides host security functions, Container Guard Service (CGS), and Web Tam",
+		"doc_type":"usermanual",
+		"kw":"What Is HSS?,Introduction,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"What Is HSS?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0002.html",
+		"node_id":"hss_01_0002.xml",
+		"product_code":"hss",
+		"code":"3",
+		"des":"HSS helps you manage and maintain the security of all your servers and reduce common risks.You can check for and fix a range of security issues on a single console, easil",
+		"doc_type":"usermanual",
+		"kw":"Advantages,Introduction,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Advantages",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0226.html",
+		"node_id":"hss_01_0226.xml",
+		"product_code":"hss",
+		"code":"4",
+		"des":"Centralized security managementWith HSS, you can manage the security configurations and events of all your cloud servers on the console, reducing risks and management cos",
+		"doc_type":"usermanual",
+		"kw":"Scenarios,Introduction,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Scenarios",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0590.html",
+		"node_id":"hss_01_0590.xml",
+		"product_code":"hss",
+		"code":"5",
+		"des":"HSS comes in the enterprise, premium, Web Tamper Protection (WTP), and container editions, providing asset management, vulnerability management, baseline check, intrusion",
+		"doc_type":"usermanual",
+		"kw":"Editions and Features,Introduction,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Editions and Features",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0130.html",
+		"node_id":"hss_01_0130.xml",
+		"product_code":"hss",
+		"code":"6",
+		"des":"If you need to assign different permissions to employees in your enterprise to access your HSS resources, IAM is a good choice for fine-grained permissions management. IA",
+		"doc_type":"usermanual",
+		"kw":"user management,resource management,HSS Permissions Management,Introduction,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"HSS Permissions Management",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0137.html",
+		"node_id":"hss_01_0137.xml",
+		"product_code":"hss",
+		"code":"7",
+		"des":"Elastic Cloud Server (ECS)HSS can run on Linux servers (such as CentOS and EulerOS) and Windows servers (such as Windows 2012 and Windows 2016).The agent is probably inco",
+		"doc_type":"usermanual",
+		"kw":"Constraints and Limitations,Introduction,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Constraints and Limitations",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0015.html",
+		"node_id":"hss_01_0015.xml",
+		"product_code":"hss",
+		"code":"8",
+		"des":"The HSS agent can be installed on ECS.For details about ECS, see the Elastic Cloud Server User Guide.CCE can rapidly build a highly reliable container cluster based on cl",
+		"doc_type":"usermanual",
+		"kw":"Related Services,Introduction,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Related Services",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0004.html",
+		"node_id":"hss_01_0004.xml",
+		"product_code":"hss",
+		"code":"9",
+		"des":"Account cracking refers to the intruder behavior of guessing or cracking the password of an account.A weak password can be easily cracked.A malicious program, such as a w",
+		"doc_type":"usermanual",
+		"kw":"Account cracking,weak password,malicious program,Web Tamper Protection (WTP),Basic Concepts,Introduc",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Basic Concepts",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0292.html",
+		"node_id":"hss_01_0292.xml",
+		"product_code":"hss",
+		"code":"10",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Enabling HSS",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Enabling HSS",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0233.html",
+		"node_id":"hss_01_0233.xml",
+		"product_code":"hss",
+		"code":"11",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Installing an Agent",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Installing an Agent",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0571.html",
+		"node_id":"hss_01_0571.xml",
+		"product_code":"hss",
+		"code":"12",
+		"des":"To enable workload protection for cloud servers, install the agent first.This topic describes how to install the agent on a server running Linux.CentOS 6.x is no longer u",
+		"doc_type":"usermanual",
+		"kw":"Installing an Agent on Linux,Installing an Agent,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Installing an Agent on Linux",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0236.html",
+		"node_id":"hss_01_0236.xml",
+		"product_code":"hss",
+		"code":"13",
+		"des":"You can enable HSS only after the agent is installed on your servers. This topic describes how to install the agent on a server running a Windows OS. For details about ho",
+		"doc_type":"usermanual",
+		"kw":"Installing the Agent for Windows,Installing an Agent,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Installing the Agent for Windows",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0260.html",
+		"node_id":"hss_01_0260.xml",
+		"product_code":"hss",
+		"code":"14",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Enabling Protection",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Enabling Protection",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0230.html",
+		"node_id":"hss_01_0230.xml",
+		"product_code":"hss",
+		"code":"15",
+		"des":"Before enabling protection on servers, you need to allocate quota to a specified server. If the protection is disabled or the server is deleted, the quota can be allocate",
+		"doc_type":"usermanual",
+		"kw":"Enabling the Enterprise, or Premium Edition,Enabling Protection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Enabling the Enterprise, or Premium Edition",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0214.html",
+		"node_id":"hss_01_0214.xml",
+		"product_code":"hss",
+		"code":"16",
+		"des":"Before enabling WTP, you need to allocate a quota to a specified server. If the service is disabled or the server is deleted, the quota can be allocated to other servers.",
+		"doc_type":"usermanual",
+		"kw":"Enabling Web Tamper Protection,Enabling Protection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Enabling Web Tamper Protection",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0293.html",
+		"node_id":"hss_01_0293.xml",
+		"product_code":"hss",
+		"code":"17",
+		"des":"Before enabling protection for a container node, you need to allocate quota to a specified node. If the protection is disabled or the node is deleted, the quota can be al",
+		"doc_type":"usermanual",
+		"kw":"Enabling Container Protection,Enabling Protection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Enabling Container Protection",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0241.html",
+		"node_id":"hss_01_0241.xml",
+		"product_code":"hss",
+		"code":"18",
+		"des":"After alarm notification is enabled, you can receive alarm notifications sent by HSS to learn about security risks facing your servers and web pages. Without this functio",
+		"doc_type":"usermanual",
+		"kw":"Enabling Alarm Notifications,Enabling HSS,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Enabling Alarm Notifications",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0051.html",
+		"node_id":"hss_01_0051.xml",
+		"product_code":"hss",
+		"code":"19",
+		"des":"After protection is enabled, you can configure the common login locations, common login IP addresses, and the SSH login IP address whitelist. You can also enable automati",
+		"doc_type":"usermanual",
+		"kw":"Common Security Configuration,Enabling HSS,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Common Security Configuration",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0410.html",
+		"node_id":"hss_01_0410.xml",
+		"product_code":"hss",
+		"code":"20",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Server Security Dashboard",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Server Security Dashboard",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0546.html",
+		"node_id":"hss_01_0546.xml",
+		"product_code":"hss",
+		"code":"21",
+		"des":"On the dashboard page of the HSS console, you can learn the security status and risks of all your servers and containers in real time, including the risk index, risk tren",
+		"doc_type":"usermanual",
+		"kw":"Risk Statistics,Risk Statistics,Server Security Dashboard,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Risk Statistics",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0558.html",
+		"node_id":"hss_01_0558.xml",
+		"product_code":"hss",
+		"code":"22",
+		"des":"Servers that are not protected by HSS are scanned for free. A security report on their vulnerabilities, unsafe passwords, and asset risks will be generated.If you need to",
+		"doc_type":"usermanual",
+		"kw":"Free Scan on Unprotected Servers,Server Security Dashboard,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Free Scan on Unprotected Servers",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0294.html",
+		"node_id":"hss_01_0294.xml",
+		"product_code":"hss",
+		"code":"23",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Asset Management",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Asset Management",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0387.html",
+		"node_id":"hss_01_0387.xml",
+		"product_code":"hss",
+		"code":"24",
+		"des":"You can count all your assets and check their statistics, including the agent status, protection status, quota, account, port, process, software, and auto-started items.S",
+		"doc_type":"usermanual",
+		"kw":"Asset Management,Asset Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Asset Management",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0463.html",
+		"node_id":"hss_01_0463.xml",
+		"product_code":"hss",
+		"code":"25",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Server Fingerprints",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Server Fingerprints",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0477.html",
+		"node_id":"hss_01_0477.xml",
+		"product_code":"hss",
+		"code":"26",
+		"des":"HSS can collect server asset fingerprints, including information about ports, processes, web applications, web services, web frameworks, and auto-started items. You can c",
+		"doc_type":"usermanual",
+		"kw":"Collecting Server Asset Fingerprints,Server Fingerprints,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Collecting Server Asset Fingerprints",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0383.html",
+		"node_id":"hss_01_0383.xml",
+		"product_code":"hss",
+		"code":"27",
+		"des":"HSS can collect server asset fingerprints, including information about ports, processes, web applications, web services, web frameworks, and auto-started items. You can c",
+		"doc_type":"usermanual",
+		"kw":"Viewing Server Asset Fingerprints,Server Fingerprints,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Viewing Server Asset Fingerprints",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0384.html",
+		"node_id":"hss_01_0384.xml",
+		"product_code":"hss",
+		"code":"28",
+		"des":"HSS proactively records the changes on account information, software information, and auto-started items. You can check the change details according to different dimensio",
+		"doc_type":"usermanual",
+		"kw":"Viewing the Operation History of Server Assets,Server Fingerprints,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Viewing the Operation History of Server Assets",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0464.html",
+		"node_id":"hss_01_0464.xml",
+		"product_code":"hss",
+		"code":"29",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Container Fingerprints",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Container Fingerprints",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0478.html",
+		"node_id":"hss_01_0478.xml",
+		"product_code":"hss",
+		"code":"30",
+		"des":"HSS can collect container asset fingerprints, including container accounts, ports, and processes. You can centrally check container asset information and detect risky ass",
+		"doc_type":"usermanual",
+		"kw":"Collecting Container Asset Fingerprints,Container Fingerprints,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Collecting Container Asset Fingerprints",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0465.html",
+		"node_id":"hss_01_0465.xml",
+		"product_code":"hss",
+		"code":"31",
+		"des":"HSS can collect container asset fingerprints, including container accounts, ports, and processes. You can centrally check container asset information and detect risky ass",
+		"doc_type":"usermanual",
+		"kw":"Viewing Container Asset Fingerprints,Container Fingerprints,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Viewing Container Asset Fingerprints",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0397.html",
+		"node_id":"hss_01_0397.xml",
+		"product_code":"hss",
+		"code":"32",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Server Management",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Server Management",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0003.html",
+		"node_id":"hss_01_0003.xml",
+		"product_code":"hss",
+		"code":"33",
+		"des":"The server list on the Servers page displays the protection status of only the servers used in the selected region.If your servers are managed by enterprise projects, you",
+		"doc_type":"usermanual",
+		"kw":"Viewing Server Protection Status,Server Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Viewing Server Protection Status",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0377.html",
+		"node_id":"hss_01_0377.xml",
+		"product_code":"hss",
+		"code":"34",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Enabling Protection",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Enabling Protection",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0396.html",
+		"node_id":"hss_01_0396.xml",
+		"product_code":"hss",
+		"code":"35",
+		"des":"The professional, enterprise, and premium editions provides different levels of protection for your servers. You can apply for and enable them as needed.HSS performs a fu",
+		"doc_type":"usermanual",
+		"kw":"Enterprise/Premium Edition,Enabling Protection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Enterprise/Premium Edition",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0021.html",
+		"node_id":"hss_01_0021.xml",
+		"product_code":"hss",
+		"code":"36",
+		"des":"The WTP edition provides web tamper protection capabilities for your servers.The agent has been installed on the servers to be protected, the agent status is Online, and ",
+		"doc_type":"usermanual",
+		"kw":"WTP Edition,Enabling Protection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"WTP Edition",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0395.html",
+		"node_id":"hss_01_0395.xml",
+		"product_code":"hss",
+		"code":"37",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Disabling Protection",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Disabling Protection",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0399.html",
+		"node_id":"hss_01_0399.xml",
+		"product_code":"hss",
+		"code":"38",
+		"des":"You can disable protection for a server. A quota that has been unbound from a server can be bound to another one.Disabling protection does not affect services, but will i",
+		"doc_type":"usermanual",
+		"kw":"Disabling the Enterprise/Premium Edition,Disabling Protection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Disabling the Enterprise/Premium Edition",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0400.html",
+		"node_id":"hss_01_0400.xml",
+		"product_code":"hss",
+		"code":"39",
+		"des":"You can disable the WTP edition for a server. A quota that has been unbound from a server can be bound to another one.Disabling protection does not affect services, but w",
+		"doc_type":"usermanual",
+		"kw":"Disabling WTP,Disabling Protection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Disabling WTP",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0573.html",
+		"node_id":"hss_01_0573.xml",
+		"product_code":"hss",
+		"code":"40",
+		"des":"This section describes how to export the server protection list to your local PC.The details of up to 1,000 servers can be exported at a time.",
+		"doc_type":"usermanual",
+		"kw":"Exporting the Server List,Server Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Exporting the Server List",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0174.html",
+		"node_id":"hss_01_0174.xml",
+		"product_code":"hss",
+		"code":"41",
+		"des":"You can switch the quota edition of a server to the enterprise or premium edition as needed.You can switch to the enterprise or premium edition.The server whose protectio",
+		"doc_type":"usermanual",
+		"kw":"Switching the HSS Quota Edition,Server Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Switching the HSS Quota Edition",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0024.html",
+		"node_id":"hss_01_0024.xml",
+		"product_code":"hss",
+		"code":"42",
+		"des":"You can quickly configure and start server scans by using policy groups. Simply create a group, add policies to it, and apply this group to servers. The agents deployed o",
+		"doc_type":"usermanual",
+		"kw":"Deploying a Policy,Server Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Deploying a Policy",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0023.html",
+		"node_id":"hss_01_0023.xml",
+		"product_code":"hss",
+		"code":"43",
+		"des":"To manage servers by group, you can create a server group and add servers to it.You can check the numbers of servers, unsafe servers, and unprotected servers in a group.A",
+		"doc_type":"usermanual",
+		"kw":"Managing Server Groups,Server Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Managing Server Groups",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0381.html",
+		"node_id":"hss_01_0381.xml",
+		"product_code":"hss",
+		"code":"44",
+		"des":"By default, HSS considers all servers as general assets. You can configure the asset importance levels of servers and manage servers accordingly.Assets are classified int",
+		"doc_type":"usermanual",
+		"kw":"Servers Importance Management,Server Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Servers Importance Management",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0295.html",
+		"node_id":"hss_01_0295.xml",
+		"product_code":"hss",
+		"code":"45",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Container Management",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Container Management",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0296.html",
+		"node_id":"hss_01_0296.xml",
+		"product_code":"hss",
+		"code":"46",
+		"des":"The Container Nodes page displays the protection, node, and Agent status of clusters in Cloud Container Engine (CCE), helping you learn the security status of clusters in",
+		"doc_type":"usermanual",
+		"kw":"Viewing the Container Node Protection List,Container Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Viewing the Container Node Protection List",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0398.html",
+		"node_id":"hss_01_0398.xml",
+		"product_code":"hss",
+		"code":"47",
+		"des":"You can enable the container security edition for your containers.To enable protection for a container node, you need to allocate a quota to the node. If the protection i",
+		"doc_type":"usermanual",
+		"kw":"Enabling Container Security Protection,Container Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Enabling Container Security Protection",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0401.html",
+		"node_id":"hss_01_0401.xml",
+		"product_code":"hss",
+		"code":"48",
+		"des":"You can disable the container edition for a server. A quota that has been unbound from a server can be bound to another one.Disabling protection does not affect services,",
+		"doc_type":"usermanual",
+		"kw":"Disabling Protection for Container Edition,Container Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Disabling Protection for Container Edition",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0297.html",
+		"node_id":"hss_01_0297.xml",
+		"product_code":"hss",
+		"code":"49",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Container Images",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Container Images",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0298.html",
+		"node_id":"hss_01_0298.xml",
+		"product_code":"hss",
+		"code":"50",
+		"des":"You can manually scan local images for vulnerabilities and software information and provides scan reports. This section describes how to perform security scans on local i",
+		"doc_type":"usermanual",
+		"kw":"Local Images,Container Images,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Local Images",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0299.html",
+		"node_id":"hss_01_0299.xml",
+		"product_code":"hss",
+		"code":"51",
+		"des":"Images in the private image repository come from SWR images. You can manually scan for and check reports on vulnerabilities, malicious files, software information, file i",
+		"doc_type":"usermanual",
+		"kw":"Managing SWR Private Images,Container Images,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Managing SWR Private Images",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0088.html",
+		"node_id":"hss_01_0088.xml",
+		"product_code":"hss",
+		"code":"52",
+		"des":"The images in the shared image repository are from SWR. You can view details about all shared images.Only the HSS container edition supports this function.Security scans ",
+		"doc_type":"usermanual",
+		"kw":"Managing SWR Shared Images,Container Images,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Managing SWR Shared Images",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0025.html",
+		"node_id":"hss_01_0025.xml",
+		"product_code":"hss",
+		"code":"53",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Risk Prevention",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Risk Prevention",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0140.html",
+		"node_id":"hss_01_0140.xml",
+		"product_code":"hss",
+		"code":"54",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Vulnerability Management",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Vulnerability Management",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0302.html",
+		"node_id":"hss_01_0302.xml",
+		"product_code":"hss",
+		"code":"55",
+		"des":"Vulnerability management can detect Linux, Windows, Web-CMS, and application vulnerabilities and provide suggestions, helping you learn about server vulnerabilities in re",
+		"doc_type":"usermanual",
+		"kw":"Vulnerability Management Overview,Vulnerability Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Vulnerability Management Overview",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0412.html",
+		"node_id":"hss_01_0412.xml",
+		"product_code":"hss",
+		"code":"56",
+		"des":"HSS can scan for Linux, Windows, Web-CMS, and application vulnerabilities. Automatic, scheduled (vulnerability policy configuration), and manual scans are supported.Autom",
+		"doc_type":"usermanual",
+		"kw":"Vulnerability Scan,Vulnerability Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Vulnerability Scan",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0063.html",
+		"node_id":"hss_01_0063.xml",
+		"product_code":"hss",
+		"code":"57",
+		"des":"You can view vulnerabilities of your assets on the Vulnerabilities page. The Vulnerabilities page contains two tabs: Vulnerabilities view and Server view, helping you ana",
+		"doc_type":"usermanual",
+		"kw":"Viewing Vulnerability Details,Vulnerability Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Viewing Vulnerability Details",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0574.html",
+		"node_id":"hss_01_0574.xml",
+		"product_code":"hss",
+		"code":"58",
+		"des":"You can refer to this section to export the vulnerability list.HSS enterprise or later edition has been enabled for the server.The Server Status is Running, Agent Status ",
+		"doc_type":"usermanual",
+		"kw":"Exporting the vulnerability list,Vulnerability Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Exporting the vulnerability list",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0141.html",
+		"node_id":"hss_01_0141.xml",
+		"product_code":"hss",
+		"code":"59",
+		"des":"If HSS detects a vulnerability on a server, you need to handle the vulnerability in a timely manner based on its severity and your business conditions to prevent the vuln",
+		"doc_type":"usermanual",
+		"kw":"Handling Vulnerabilities,Vulnerability Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Handling Vulnerabilities",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0509.html",
+		"node_id":"hss_01_0509.xml",
+		"product_code":"hss",
+		"code":"60",
+		"des":"If you evaluate that some vulnerabilities do not affect your services and do not want to view the vulnerabilities in the vulnerability list, you can whitelist the vulnera",
+		"doc_type":"usermanual",
+		"kw":"Managing the Vulnerability Whitelist,Vulnerability Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Managing the Vulnerability Whitelist",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0503.html",
+		"node_id":"hss_01_0503.xml",
+		"product_code":"hss",
+		"code":"61",
+		"des":"For vulnerabilities that have been handled, you can refer to this section to view the vulnerability handling history (handler and handling time).",
+		"doc_type":"usermanual",
+		"kw":"Viewing Vulnerability Handling History,Vulnerability Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Viewing Vulnerability Handling History",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0145.html",
+		"node_id":"hss_01_0145.xml",
+		"product_code":"hss",
+		"code":"62",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Baseline Inspection",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Baseline Inspection",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0303.html",
+		"node_id":"hss_01_0303.xml",
+		"product_code":"hss",
+		"code":"63",
+		"des":"Baseline Inspection includes password complexity policy detection, common weak password detection, and configuration check. It can detect insecure password configurations",
+		"doc_type":"usermanual",
+		"kw":"Baseline Inspection Overview,Baseline Inspection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Baseline Inspection Overview",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0146.html",
+		"node_id":"hss_01_0146.xml",
+		"product_code":"hss",
+		"code":"64",
+		"des":"The baseline check supports automatic and manual baseline checks.Automatic baseline check: checks server configurations and common weak passwords.Manual baseline check: T",
+		"doc_type":"usermanual",
+		"kw":"Performing Baseline Inspection,Baseline Inspection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Performing Baseline Inspection",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0147.html",
+		"node_id":"hss_01_0147.xml",
+		"product_code":"hss",
+		"code":"65",
+		"des":"This topic provides suggestions on how to fix baseline configuration risks on the server.Only enterprise edition, premium edition, web tamper protection edition, and cont",
+		"doc_type":"usermanual",
+		"kw":"Viewing and Processing Baseline Check Results,Baseline Inspection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Viewing and Processing Baseline Check Results",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0597.html",
+		"node_id":"hss_01_0597.xml",
+		"product_code":"hss",
+		"code":"66",
+		"des":"This section describes how to export a baseline check report.Only enterprise edition, premium edition, web tamper protection edition, and container edition are supported.",
+		"doc_type":"usermanual",
+		"kw":"Exporting the Baseline Check Report,Baseline Inspection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Exporting the Baseline Check Report",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0393.html",
+		"node_id":"hss_01_0393.xml",
+		"product_code":"hss",
+		"code":"67",
+		"des":"This section describes how to modify a created manual baseline check policy.If you select Linux for OS, you can select any checks included in Baseline and edit rules. Thi",
+		"doc_type":"usermanual",
+		"kw":"Managing Manual Baseline Check Policies,Baseline Inspection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Managing Manual Baseline Check Policies",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0304.html",
+		"node_id":"hss_01_0304.xml",
+		"product_code":"hss",
+		"code":"68",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Container Image Security",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Container Image Security",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0305.html",
+		"node_id":"hss_01_0305.xml",
+		"product_code":"hss",
+		"code":"69",
+		"des":"This section describes how to check the vulnerabilities on the private image and determine whether to ignore the vulnerabilities.Container node protection has been enable",
+		"doc_type":"usermanual",
+		"kw":"Image Vulnerabilities,Container Image Security,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Image Vulnerabilities",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0306.html",
+		"node_id":"hss_01_0306.xml",
+		"product_code":"hss",
+		"code":"70",
+		"des":"Malicious files in the private images can be automatically detected, helping you discover and eliminate the security threats in your assets.A comprehensive check is autom",
+		"doc_type":"usermanual",
+		"kw":"Viewing Malicious File Detection Results,Container Image Security,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Viewing Malicious File Detection Results",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0307.html",
+		"node_id":"hss_01_0307.xml",
+		"product_code":"hss",
+		"code":"71",
+		"des":"Your private image repository is scanned for unsafe configurations and provides suggestions for modifying the configurations, helping you fight intrusions and meet compli",
+		"doc_type":"usermanual",
+		"kw":"Image Baseline Check,Container Image Security,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Image Baseline Check",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0142.html",
+		"node_id":"hss_01_0142.xml",
+		"product_code":"hss",
+		"code":"72",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Prevention",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Prevention",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0388.html",
+		"node_id":"hss_01_0388.xml",
+		"product_code":"hss",
+		"code":"73",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Application Protection",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Application Protection",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0390.html",
+		"node_id":"hss_01_0390.xml",
+		"product_code":"hss",
+		"code":"74",
+		"des":"You have enabled HSS premium, WTP, or container edition.Currently, only Linux servers are supported.So far, only Java applications can be protected.The premium, WTP, and ",
+		"doc_type":"usermanual",
+		"kw":"Enabling Application Protection,Application Protection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Enabling Application Protection",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0389.html",
+		"node_id":"hss_01_0389.xml",
+		"product_code":"hss",
+		"code":"75",
+		"des":"To protect your applications with RASP, you simply need to add probes to them, without having to modify application files.Probes (monitoring and protection code) are adde",
+		"doc_type":"usermanual",
+		"kw":"Viewing Application Protection,Application Protection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Viewing Application Protection",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0459.html",
+		"node_id":"hss_01_0459.xml",
+		"product_code":"hss",
+		"code":"76",
+		"des":"You can add, edit, and delete application protection policies, and select and configure detection rules for the policies.Currently, only Linux servers are supported.So fa",
+		"doc_type":"usermanual",
+		"kw":"Managing Application Protection Policies,Application Protection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Managing Application Protection Policies",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0392.html",
+		"node_id":"hss_01_0392.xml",
+		"product_code":"hss",
+		"code":"77",
+		"des":"This section describes how to disable application protection.If your servers are managed by enterprise projects, you can select an enterprise project to view or operate t",
+		"doc_type":"usermanual",
+		"kw":"Disabling Application Protection,Application Protection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Disabling Application Protection",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0153.html",
+		"node_id":"hss_01_0153.xml",
+		"product_code":"hss",
+		"code":"78",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"WTP",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"WTP",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0216.html",
+		"node_id":"hss_01_0216.xml",
+		"product_code":"hss",
+		"code":"79",
+		"des":"WTP monitors website directories in real time, backs up files, and restores tampered files using the backup, protecting websites from Trojans, illegal links, and tamperin",
+		"doc_type":"usermanual",
+		"kw":"Adding a Protected Directory,WTP,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Adding a Protected Directory",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0106.html",
+		"node_id":"hss_01_0106.xml",
+		"product_code":"hss",
+		"code":"80",
+		"des":"By default, HSS backs up the files from the protected directories (excluding specified subdirectories and file types) to the local backup directory you specified when add",
+		"doc_type":"usermanual",
+		"kw":"Configuring Remote Backup,WTP,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Configuring Remote Backup",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0466.html",
+		"node_id":"hss_01_0466.xml",
+		"product_code":"hss",
+		"code":"81",
+		"des":"If WTP is enabled, the content in the protected directories is read-only. To allow certain processes to modify files in the directories, add them to the privileged proces",
+		"doc_type":"usermanual",
+		"kw":"Adding a Privileged Process,WTP,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Adding a Privileged Process",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0217.html",
+		"node_id":"hss_01_0217.xml",
+		"product_code":"hss",
+		"code":"82",
+		"des":"You can schedule WTP protection to allow website updates in specific periods.Exercise caution when you set the periods to disable WTP, because files will not be protected",
+		"doc_type":"usermanual",
+		"kw":"Enabling/Disabling Scheduled Static WTP,WTP,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Enabling/Disabling Scheduled Static WTP",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0218.html",
+		"node_id":"hss_01_0218.xml",
+		"product_code":"hss",
+		"code":"83",
+		"des":"Dynamic WTP protects your web pages while Tomcat applications are running, and can detect tampering of dynamic data, such as database data. It can be enabled with static ",
+		"doc_type":"usermanual",
+		"kw":"Enabling Dynamic WTP,WTP,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Enabling Dynamic WTP",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0576.html",
+		"node_id":"hss_01_0576.xml",
+		"product_code":"hss",
+		"code":"84",
+		"des":"Once WTP is enabled, HSS will comprehensively check protected directories you specified. You can check records about detected tampering attacks.Only the servers that are ",
+		"doc_type":"usermanual",
+		"kw":"Viewing WTP Reports,WTP,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Viewing WTP Reports",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0087.html",
+		"node_id":"hss_01_0087.xml",
+		"product_code":"hss",
+		"code":"85",
+		"des":"Once static WTP is enabled, the HSS service will comprehensively check protected directories you specified. You can check records about detected tampering of host protect",
+		"doc_type":"usermanual",
+		"kw":"Viewing WTP Events,WTP,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Viewing WTP Events",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0346.html",
+		"node_id":"hss_01_0346.xml",
+		"product_code":"hss",
+		"code":"86",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Ransomware Prevention",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Ransomware Prevention",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0348.html",
+		"node_id":"hss_01_0348.xml",
+		"product_code":"hss",
+		"code":"87",
+		"des":"You have enabled HSS premium, WTP, or container edition.Only premium, WTP, and container editions support ransomware protection.If your servers are managed by enterprise ",
+		"doc_type":"usermanual",
+		"kw":"Enabling Ransomware Prevention,Ransomware Prevention,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Enabling Ransomware Prevention",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0347.html",
+		"node_id":"hss_01_0347.xml",
+		"product_code":"hss",
+		"code":"88",
+		"des":"You have enabled HSS premium, WTP, or container edition.After ransomware protection is enabled, you need to handle ransomware alarms and fix the vulnerabilities in your s",
+		"doc_type":"usermanual",
+		"kw":"Viewing Ransomware Protection,Ransomware Prevention,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Viewing Ransomware Protection",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0349.html",
+		"node_id":"hss_01_0349.xml",
+		"product_code":"hss",
+		"code":"89",
+		"des":"Currently, you can create a ransomware prevention policy only when enabling ransomware prevention.Only premium, WTP, and container editions support ransomware protection.",
+		"doc_type":"usermanual",
+		"kw":"Managing Ransomware Prevention Policies,Ransomware Prevention,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Managing Ransomware Prevention Policies",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0350.html",
+		"node_id":"hss_01_0350.xml",
+		"product_code":"hss",
+		"code":"90",
+		"des":"You can disable ransomware protection as needed. After protection is disabled, your server may be intruded by ransomware. Exercise caution when performing this operation.",
+		"doc_type":"usermanual",
+		"kw":"Disabling Ransomware Prevention,Ransomware Prevention,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Disabling Ransomware Prevention",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0360.html",
+		"node_id":"hss_01_0360.xml",
+		"product_code":"hss",
+		"code":"91",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"File Integrity Monitoring",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"File Integrity Monitoring",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0359.html",
+		"node_id":"hss_01_0359.xml",
+		"product_code":"hss",
+		"code":"92",
+		"des":"Check the files in the Linux OS, applications, and other components to detect tampering.Only premium, WTP, and container editions support file integrity-related operation",
+		"doc_type":"usermanual",
+		"kw":"Viewing File Integrity Management,File Integrity Monitoring,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Viewing File Integrity Management",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0361.html",
+		"node_id":"hss_01_0361.xml",
+		"product_code":"hss",
+		"code":"93",
+		"des":"Only premium, WTP, and container editions support file integrity-related operations.",
+		"doc_type":"usermanual",
+		"kw":"Checking Change Details,File Integrity Monitoring,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Checking Change Details",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0362.html",
+		"node_id":"hss_01_0362.xml",
+		"product_code":"hss",
+		"code":"94",
+		"des":"Only premium, WTP, and container editions support file integrity-related operations.",
+		"doc_type":"usermanual",
+		"kw":"Checking Modified Files,File Integrity Monitoring,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Checking Modified Files",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0030.html",
+		"node_id":"hss_01_0030.xml",
+		"product_code":"hss",
+		"code":"95",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Intrusion Detection",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Intrusion Detection",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0277.html",
+		"node_id":"hss_01_0277.xml",
+		"product_code":"hss",
+		"code":"96",
+		"des":"HSS generates alarms on a range of intrusion events, including brute-force attacks, abnormal process behaviors, web shells, abnormal logins, and malicious processes. You ",
+		"doc_type":"usermanual",
+		"kw":"Server Alarms,Intrusion Detection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Server Alarms",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0026.html",
+		"node_id":"hss_01_0026.xml",
+		"product_code":"hss",
+		"code":"97",
+		"des":"The Events page displays the alarm events generated in the last 30 days. You can manually handle the alarmed items.The status of a handled event changes from Unhandled to",
+		"doc_type":"usermanual",
+		"kw":"Viewing Server Alarms,Intrusion Detection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Viewing Server Alarms",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0413.html",
+		"node_id":"hss_01_0413.xml",
+		"product_code":"hss",
+		"code":"98",
+		"des":"The Events page displays the alarms generated in the last 30 days.The status of a handled alarm changes from Unhandled to Handled.To skip the checks on high-risk command ",
+		"doc_type":"usermanual",
+		"kw":"Handling Server Alarms,Intrusion Detection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Handling Server Alarms",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0331.html",
+		"node_id":"hss_01_0331.xml",
+		"product_code":"hss",
+		"code":"99",
+		"des":"HSS can isolate detected threat files. Files that have been isolated are displayed on a slide-out panel on the Server Alarms page. You can click Isolated Files on the upp",
+		"doc_type":"usermanual",
+		"kw":"Managing Isolated Files,Intrusion Detection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Managing Isolated Files",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0312.html",
+		"node_id":"hss_01_0312.xml",
+		"product_code":"hss",
+		"code":"100",
+		"des":"After node protection is enabled, an agent is deployed on each container host to monitor the running status of containers in real time. The agents support escape detectio",
+		"doc_type":"usermanual",
+		"kw":"Container Alarm Events,Intrusion Detection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Container Alarm Events",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0313.html",
+		"node_id":"hss_01_0313.xml",
+		"product_code":"hss",
+		"code":"101",
+		"des":"HSS displays alarm and event statistics and their summary all on one page. You can have a quick overview of alarms, including the numbers of containers with alarms, handl",
+		"doc_type":"usermanual",
+		"kw":"Viewing Container Alarms,Intrusion Detection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Viewing Container Alarms",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0414.html",
+		"node_id":"hss_01_0414.xml",
+		"product_code":"hss",
+		"code":"102",
+		"des":"HSS displays alarm and event statistics and their summary all on one page. You can have a quick overview of alarms, including the numbers of containers with alarms, handl",
+		"doc_type":"usermanual",
+		"kw":"Handling Container Alarms,Intrusion Detection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Handling Container Alarms",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0367.html",
+		"node_id":"hss_01_0367.xml",
+		"product_code":"hss",
+		"code":"103",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Whitelist Management",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Whitelist Management",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0029.html",
+		"node_id":"hss_01_0029.xml",
+		"product_code":"hss",
+		"code":"104",
+		"des":"You can configure the IP addresses of destination servers, login IP addresses, login usernames, and user behaviors in the Login Whitelist.If the destination server IP add",
+		"doc_type":"usermanual",
+		"kw":"Managing Login Whitelist,Whitelist Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Managing Login Whitelist",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0028.html",
+		"node_id":"hss_01_0028.xml",
+		"product_code":"hss",
+		"code":"105",
+		"des":"You can configure the alarm whitelist to reduce false alarms. Events can be deleted from the whitelist.Whitelisted events will not trigger alarms.On the Alarms page, you ",
+		"doc_type":"usermanual",
+		"kw":"Managing the Alarm Whitelist,Whitelist Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Managing the Alarm Whitelist",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0496.html",
+		"node_id":"hss_01_0496.xml",
+		"product_code":"hss",
+		"code":"106",
+		"des":"HSS generates risky account alarms when non-root users are added to the root user group. You can add the trusted non-root users to the system user whitelist. HSS does not",
+		"doc_type":"usermanual",
+		"kw":"Managing the System User Whitelist,Whitelist Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Managing the System User Whitelist",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0041.html",
+		"node_id":"hss_01_0041.xml",
+		"product_code":"hss",
+		"code":"107",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Security Operations",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Security Operations",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0314.html",
+		"node_id":"hss_01_0314.xml",
+		"product_code":"hss",
+		"code":"108",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Policy Management",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Policy Management",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0045.html",
+		"node_id":"hss_01_0045.xml",
+		"product_code":"hss",
+		"code":"109",
+		"des":"If policies such as asset collection, baseline check, and intrusion detection do not meet your server protection requirements, you can manage these policies.Table 1 lists",
+		"doc_type":"usermanual",
+		"kw":"Overview,Policy Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Overview",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0368.html",
+		"node_id":"hss_01_0368.xml",
+		"product_code":"hss",
+		"code":"110",
+		"des":"For premium and container editions, you can copy a policy group and customize it as required to meet server security requirements in different application scenarios.If yo",
+		"doc_type":"usermanual",
+		"kw":"Creating a Policy Group,Policy Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Creating a Policy Group",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0044.html",
+		"node_id":"hss_01_0044.xml",
+		"product_code":"hss",
+		"code":"111",
+		"des":"After HSS is enabled, you can configure HSS policies based on your service requirements.The enterprise, premium, WTP, or container edition is enabled.For the default poli",
+		"doc_type":"usermanual",
+		"kw":"Configuring Policies,Policy Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Configuring Policies",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0596.html",
+		"node_id":"hss_01_0596.xml",
+		"product_code":"hss",
+		"code":"112",
+		"des":"Preset policy groups cannot be deleted. You can delete custom policy groups of premium edition and container edition.After a policy group is deleted, the Policy Group col",
+		"doc_type":"usermanual",
+		"kw":"Deleting a Policy Group,Policy Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Deleting a Policy Group",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0553.html",
+		"node_id":"hss_01_0553.xml",
+		"product_code":"hss",
+		"code":"113",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Security Report",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Security Report",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0554.html",
+		"node_id":"hss_01_0554.xml",
+		"product_code":"hss",
+		"code":"114",
+		"des":"You can subscribe to daily, weekly, monthly, and custom reports. The reports show your server security trends and key security events and risks.If you have enabled the en",
+		"doc_type":"usermanual",
+		"kw":"Checking a Security Report,Security Report,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Checking a Security Report",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0555.html",
+		"node_id":"hss_01_0555.xml",
+		"product_code":"hss",
+		"code":"115",
+		"des":"This section provides guidance for you to quickly subscribe to weekly or monthly security reports using preset templates on the console. For details about how to customiz",
+		"doc_type":"usermanual",
+		"kw":"Subscribing to a Security Report,Security Report,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Subscribing to a Security Report",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0556.html",
+		"node_id":"hss_01_0556.xml",
+		"product_code":"hss",
+		"code":"116",
+		"des":"If the type and content of the existing report template cannot meet your requirements, you can customize a report.The enterprise, premium, WTP, or container edition is en",
+		"doc_type":"usermanual",
+		"kw":"Creating a Security Report,Security Report,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Creating a Security Report",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0557.html",
+		"node_id":"hss_01_0557.xml",
+		"product_code":"hss",
+		"code":"117",
+		"des":"This section describes how to modify, cancel, or disable a subscribed report.The enterprise, premium, WTP, or container edition is enabled.You can use default security re",
+		"doc_type":"usermanual",
+		"kw":"Managing Security Reports,Security Report,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Managing Security Reports",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0373.html",
+		"node_id":"hss_01_0373.xml",
+		"product_code":"hss",
+		"code":"118",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Installation & Configuration",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Installation & Configuration",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0317.html",
+		"node_id":"hss_01_0317.xml",
+		"product_code":"hss",
+		"code":"119",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Agent Management",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Agent Management",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0374.html",
+		"node_id":"hss_01_0374.xml",
+		"product_code":"hss",
+		"code":"120",
+		"des":"You can sort servers, check whether the agent is installed on them, and can install or uninstall the agent. On the console, you can find the agent installation instructio",
+		"doc_type":"usermanual",
+		"kw":"Viewing Agent Status,Agent Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Viewing Agent Status",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0570.html",
+		"node_id":"hss_01_0570.xml",
+		"product_code":"hss",
+		"code":"121",
+		"des":"Install the agent on a server. Only then can the server be protected by HSS.If your servers are managed by enterprise projects, you can select an enterprise project to vi",
+		"doc_type":"usermanual",
+		"kw":"Installing an Agent,Agent Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Installing an Agent",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0462.html",
+		"node_id":"hss_01_0462.xml",
+		"product_code":"hss",
+		"code":"122",
+		"des":"HSS keeps improving its service capabilities, including but not limited to new features and defect fixes. Please upgrade your agent to the latest version in a timely mann",
+		"doc_type":"usermanual",
+		"kw":"Upgrading the Agent,Agent Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Upgrading the Agent",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0376.html",
+		"node_id":"hss_01_0376.xml",
+		"product_code":"hss",
+		"code":"123",
+		"des":"If you no longer need to use HSS, uninstall the agent by following the instructions provided in this section. If the agent is uninstalled, HSS will stop protecting your s",
+		"doc_type":"usermanual",
+		"kw":"Uninstalling an Agent,Agent Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Uninstalling an Agent",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0385.html",
+		"node_id":"hss_01_0385.xml",
+		"product_code":"hss",
+		"code":"124",
+		"des":"You can add common login locations, common IP addresses, and whitelist IP addresses, and enable malicious program isolation and killing to enhance server security.For det",
+		"doc_type":"usermanual",
+		"kw":"Security Configurations,Installation & Configuration,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Security Configurations",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0070.html",
+		"node_id":"hss_01_0070.xml",
+		"product_code":"hss",
+		"code":"125",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Audit",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Audit",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0071.html",
+		"node_id":"hss_01_0071.xml",
+		"product_code":"hss",
+		"code":"126",
+		"des":"Cloud Trace Service (CTS) records all operations on HSS, including requests initiated from the management console or open APIs and responses to the requests, for tenants ",
+		"doc_type":"usermanual",
+		"kw":"HSS Operations Supported by CTS,Audit,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"HSS Operations Supported by CTS",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0603.html",
+		"node_id":"hss_01_0603.xml",
+		"product_code":"hss",
+		"code":"127",
+		"des":"After you enable CTS and the management tracker is created, CTS starts recording operations on cloud resources. CTS stores operation records generated in the last seven d",
+		"doc_type":"usermanual",
+		"kw":"Querying Real-Time Traces,Audit,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Querying Real-Time Traces",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0131.html",
+		"node_id":"hss_01_0131.xml",
+		"product_code":"hss",
+		"code":"128",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Permissions Management",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Permissions Management",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0133.html",
+		"node_id":"hss_01_0133.xml",
+		"product_code":"hss",
+		"code":"129",
+		"des":"This section describes IAM's fine-grained permissions management for your HSS resources. With IAM, you can:Create IAM users for employees based on the organizational stru",
+		"doc_type":"usermanual",
+		"kw":"Creating a User and Granting Permissions,Permissions Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Creating a User and Granting Permissions",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0005.html",
+		"node_id":"hss_01_0005.xml",
+		"product_code":"hss",
+		"code":"130",
+		"des":"Custom policies can be created to supplement the system-defined policies of HSS.You can create custom policies using one of the following methods:Visual editor: Select cl",
+		"doc_type":"usermanual",
+		"kw":"HSS Custom Policies,Permissions Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"HSS Custom Policies",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0006.html",
+		"node_id":"hss_01_0006.xml",
+		"product_code":"hss",
+		"code":"131",
+		"des":"This section describes fine-grained permissions management for your HSS instances. If your account does not need individual IAM users, then you may skip over this section",
+		"doc_type":"usermanual",
+		"kw":"HSS Actions,Permissions Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"HSS Actions",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0032.html",
+		"node_id":"hss_01_0032.xml",
+		"product_code":"hss",
+		"code":"132",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"FAQs",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"FAQs",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0258.html",
+		"node_id":"hss_01_0258.xml",
+		"product_code":"hss",
+		"code":"133",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"About HSS",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"About HSS",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0033.html",
+		"node_id":"hss_01_0033.xml",
+		"product_code":"hss",
+		"code":"134",
+		"des":"Host Security Service (HSS) helps you identify and manage the assets on your servers, eliminate risks, and defend against intrusions and web page tampering. There are als",
+		"doc_type":"usermanual",
+		"kw":"What Is Host Security?,About HSS,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"What Is Host Security?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0318.html",
+		"node_id":"hss_01_0318.xml",
+		"product_code":"hss",
+		"code":"135",
+		"des":"Container Security Service (CGS) scans vulnerabilities and configuration information in images, helping enterprises detect container risks that cannot be found using conv",
+		"doc_type":"usermanual",
+		"kw":"What Is Container Security?,About HSS,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"What Is Container Security?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0319.html",
+		"node_id":"hss_01_0319.xml",
+		"product_code":"hss",
+		"code":"136",
+		"des":"Web Tamper Protection (WTP) monitors website directories in real time, backs up files, and restores tampered files using the backup. WTP protects your websites from Troja",
+		"doc_type":"usermanual",
+		"kw":"What Is Web Tamper Protection?,About HSS,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"What Is Web Tamper Protection?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0320.html",
+		"node_id":"hss_01_0320.xml",
+		"product_code":"hss",
+		"code":"137",
+		"des":"An image is a special file system. It provides programs, libraries, resources, configuration files and other files required for a running container. An image also contain",
+		"doc_type":"usermanual",
+		"kw":"What Are the Relationships Between Images, Containers, and Applications?,About HSS,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"What Are the Relationships Between Images, Containers, and Applications?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0245.html",
+		"node_id":"hss_01_0245.xml",
+		"product_code":"hss",
+		"code":"138",
+		"des":"The HSS agent is used to scan all servers and containers, monitor their status in real time, and collect their information and report to the cloud protection center.The a",
+		"doc_type":"usermanual",
+		"kw":"What Is the HSS Agent?,About HSS,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"What Is the HSS Agent?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0321.html",
+		"node_id":"hss_01_0321.xml",
+		"product_code":"hss",
+		"code":"139",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Agent FAQs",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Agent FAQs",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0037.html",
+		"node_id":"hss_01_0037.xml",
+		"product_code":"hss",
+		"code":"140",
+		"des":"Yes, it may be in conflict with DenyHosts.Symptom: The IP address of the login host is identified as an attack IP address but can not be unblocked.Cause: HSS and DenyHost",
+		"doc_type":"usermanual",
+		"kw":"Is the Agent in Conflict with Any Other Security Software?,Agent FAQs,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Is the Agent in Conflict with Any Other Security Software?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0119.html",
+		"node_id":"hss_01_0119.xml",
+		"product_code":"hss",
+		"code":"141",
+		"des":"Two uninstallation methods are available: one-click uninstallation and manual local uninstallation.The agent was installed using an incorrect package and you need to unin",
+		"doc_type":"usermanual",
+		"kw":"How Do I Uninstall the Agent?,Agent FAQs,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Uninstall the Agent?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0069.html",
+		"node_id":"hss_01_0069.xml",
+		"product_code":"hss",
+		"code":"142",
+		"des":"The agent fails to be installed by running commands. The server list page on the console still indicates that the agent is not installed.The SELinux firewall has not been",
+		"doc_type":"usermanual",
+		"kw":"What Should I Do If Agent Installation Failed?,Agent FAQs,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"What Should I Do If Agent Installation Failed?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0036.html",
+		"node_id":"hss_01_0036.xml",
+		"product_code":"hss",
+		"code":"143",
+		"des":"Your agent is probably abnormal if it is in Not installed or Offline state. Agent statuses and their meaning are as follows:Uninstalled: No agent has been installed on th",
+		"doc_type":"usermanual",
+		"kw":"How Do I Fix an Abnormal Agent?,Agent FAQs,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Fix an Abnormal Agent?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0096.html",
+		"node_id":"hss_01_0096.xml",
+		"product_code":"hss",
+		"code":"144",
+		"des":"The agent installation paths on servers running the Linux or Windows OS cannot be customized. Table 1 describes the default paths.",
+		"doc_type":"usermanual",
+		"kw":"What Is the Default Agent Installation Path?,Agent FAQs,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"What Is the Default Agent Installation Path?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0116.html",
+		"node_id":"hss_01_0116.xml",
+		"product_code":"hss",
+		"code":"145",
+		"des":"HSS uses lightweight agents, which occupy only a few resources and do not affect your services.The CPU and memory usage is as follows.A running agent occupies a maximum o",
+		"doc_type":"usermanual",
+		"kw":"How Many CPU and Memory Resources Are Occupied by the Agent When It Performs Scans?,Agent FAQs,User ",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Many CPU and Memory Resources Are Occupied by the Agent When It Performs Scans?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0195.html",
+		"node_id":"hss_01_0195.xml",
+		"product_code":"hss",
+		"code":"146",
+		"des":"Yes.All HSS editions can use the same agent installed on a server.",
+		"doc_type":"usermanual",
+		"kw":"Do WTP and HSS Use the Same Agent?,Agent FAQs,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Do WTP and HSS Use the Same Agent?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0007.html",
+		"node_id":"hss_01_0007.xml",
+		"product_code":"hss",
+		"code":"147",
+		"des":"Possible agent statuses are:Not installed: The agent has not been installed or successfully started.Online: The agent is running properly.Offline: The communication betwe",
+		"doc_type":"usermanual",
+		"kw":"How Do I View Servers Where No Agents Have Been Installed?,Agent FAQs,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I View Servers Where No Agents Have Been Installed?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0394.html",
+		"node_id":"hss_01_0394.xml",
+		"product_code":"hss",
+		"code":"148",
+		"des":"On a server, you only need to install the agent once.After the installation, you are advised to restart the servers before enabling HSS and binding quotas.Now both the HS",
+		"doc_type":"usermanual",
+		"kw":"What Can I Do If the Agent Status Is Still \"Not installed\" After Installation?,Agent FAQs,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"What Can I Do If the Agent Status Is Still \"Not installed\" After Installation?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0409.html",
+		"node_id":"hss_01_0409.xml",
+		"product_code":"hss",
+		"code":"149",
+		"des":"Servers are displayed on both the old and new console of HSS, regardless of whether their agents have been upgraded. The server statuses are properly displayed on the con",
+		"doc_type":"usermanual",
+		"kw":"What Do I Do If the  Upgrade Fails?,Agent FAQs,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"What Do I Do If the  Upgrade Fails?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0038.html",
+		"node_id":"hss_01_0038.xml",
+		"product_code":"hss",
+		"code":"150",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Brute-force Attack Defense",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Brute-force Attack Defense",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0008.html",
+		"node_id":"hss_01_0008.xml",
+		"product_code":"hss",
+		"code":"151",
+		"des":"HSS can detect the following types of brute force attacks:Windows: SqlServer (automatic interception is not supported currently) and RdpLinux: MySQL, vfstp, and SSHIf MyS",
+		"doc_type":"usermanual",
+		"kw":"How Does HSS Intercept Brute Force Attacks?,Brute-force Attack Defense,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Does HSS Intercept Brute Force Attacks?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0183.html",
+		"node_id":"hss_01_0183.xml",
+		"product_code":"hss",
+		"code":"152",
+		"des":"If a brute-force attack succeeded, take immediate measures to prevent attackers from further actions, such as breaching data, performing DDoS attacks, or implanting ranso",
+		"doc_type":"usermanual",
+		"kw":"How Do I Handle a Brute-force Attack Alarm?,Brute-force Attack Defense,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Handle a Brute-force Attack Alarm?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0256.html",
+		"node_id":"hss_01_0256.xml",
+		"product_code":"hss",
+		"code":"153",
+		"des":"Intruders who cracked server accounts can exploit permissions to steal or tamper with data on servers, interrupting enterprise services and causing great loss.Configure t",
+		"doc_type":"usermanual",
+		"kw":"How Do I Defend Against Brute-force Attacks?,Brute-force Attack Defense,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Defend Against Brute-force Attacks?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0097.html",
+		"node_id":"hss_01_0097.xml",
+		"product_code":"hss",
+		"code":"154",
+		"des":"The SSHD service in the host system does not depend on libwrap.so.As a free software library, libwrap implements the universal TCP Wrapper function. Any daemon that conta",
+		"doc_type":"usermanual",
+		"kw":"What Do I Do If the Account Cracking Prevention Function Does Not Take Effect on Some Accounts for L",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"What Do I Do If the Account Cracking Prevention Function Does Not Take Effect on Some Accounts for Linux Servers?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0287.html",
+		"node_id":"hss_01_0287.xml",
+		"product_code":"hss",
+		"code":"155",
+		"des":"HSS will block an IP address if it has five or more brute-force attack attempts detected within 30 seconds, or 15 or more brute-force attack attempts detected within 3600",
+		"doc_type":"usermanual",
+		"kw":"How Do I Unblock an IP Address?,Brute-force Attack Defense,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Unblock an IP Address?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0418.html",
+		"node_id":"hss_01_0418.xml",
+		"product_code":"hss",
+		"code":"156",
+		"des":"An alarm indicates that an attack was detected. It does not mean your cloud servers have been intruded. If you receive an alarm, handle it and take countermeasures in a t",
+		"doc_type":"usermanual",
+		"kw":"What Do I Do If HSS Frequently Reports Brute-force Alarms?,Brute-force Attack Defense,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"What Do I Do If HSS Frequently Reports Brute-force Alarms?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0512.html",
+		"node_id":"hss_01_0512.xml",
+		"product_code":"hss",
+		"code":"157",
+		"des":"The remote port of a server has been changed, but the brute-force attack records still displays the old port.The remote port configuration is synchronized to HSS through ",
+		"doc_type":"usermanual",
+		"kw":"What Do I Do If My Remote Server Port Is Not Updated in Brute-force Attack Records?,Brute-force Atta",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"What Do I Do If My Remote Server Port Is Not Updated in Brute-force Attack Records?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0196.html",
+		"node_id":"hss_01_0196.xml",
+		"product_code":"hss",
+		"code":"158",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Weak Passwords and Unsafe Accounts",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Weak Passwords and Unsafe Accounts",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0197.html",
+		"node_id":"hss_01_0197.xml",
+		"product_code":"hss",
+		"code":"159",
+		"des":"Servers using weak passwords are exposed to intrusions. If a weak password alarm is reported, you are advised to change the alarmed password immediately.If simple passwor",
+		"doc_type":"usermanual",
+		"kw":"How Do I Handle a Weak Password Alarm?,Weak Passwords and Unsafe Accounts,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Handle a Weak Password Alarm?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0166.html",
+		"node_id":"hss_01_0166.xml",
+		"product_code":"hss",
+		"code":"160",
+		"des":"Comply with the following rules:Use a password with high complexity.The password must meet the following requirements:Contains at least eight characters.Contain at least ",
+		"doc_type":"usermanual",
+		"kw":"How Do I Set a Secure Password?,Weak Passwords and Unsafe Accounts,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Set a Secure Password?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0274.html",
+		"node_id":"hss_01_0274.xml",
+		"product_code":"hss",
+		"code":"161",
+		"des":"If you have enhanced passwords before disabling the weak password policy, the weak password alarm will not be reported again.If you do not enhance passwords before disabl",
+		"doc_type":"usermanual",
+		"kw":"Why Are the Weak Password Alarms Still Reported After the Weak Password Policy Is Disabled?,Weak Pas",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Why Are the Weak Password Alarms Still Reported After the Weak Password Policy Is Disabled?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0164.html",
+		"node_id":"hss_01_0164.xml",
+		"product_code":"hss",
+		"code":"162",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Intrusions",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Intrusions",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0206.html",
+		"node_id":"hss_01_0206.xml",
+		"product_code":"hss",
+		"code":"163",
+		"des":"Take immediate measures to contain the attack, preventing miners from occupying CPU or affecting other applications. If a server is intruded by a mining program, the mini",
+		"doc_type":"usermanual",
+		"kw":"What Do I Do If My Servers Are Subjected to a Mining Attack?,Intrusions,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"What Do I Do If My Servers Are Subjected to a Mining Attack?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0207.html",
+		"node_id":"hss_01_0207.xml",
+		"product_code":"hss",
+		"code":"164",
+		"des":"After you add a process to the whitelist, it will no longer trigger certain alarms, but its isolation will not be automatically canceled.Choose Installation & Configurati",
+		"doc_type":"usermanual",
+		"kw":"Why a Process Is Still Isolated After It Was Whitelisted?,Intrusions,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Why a Process Is Still Isolated After It Was Whitelisted?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0243.html",
+		"node_id":"hss_01_0243.xml",
+		"product_code":"hss",
+		"code":"165",
+		"des":"You are advised to:Back up data and disable unnecessary ports.Set a stronger server password.Enable HSS. Your servers will be protected from mining processes by its intru",
+		"doc_type":"usermanual",
+		"kw":"What Do I Do If a Mining Process Is Detected on a Server?,Intrusions,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"What Do I Do If a Mining Process Is Detected on a Server?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0193.html",
+		"node_id":"hss_01_0193.xml",
+		"product_code":"hss",
+		"code":"166",
+		"des":"Intrusions to your servers before HSS is enabled cannot be detected.If you have applied for HSS, remember to enable it to detect intrusions.Web attacks cannot be detected",
+		"doc_type":"usermanual",
+		"kw":"Why Some Attacks on Servers Are Not Detected?,Intrusions,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Why Some Attacks on Servers Are Not Detected?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0013.html",
+		"node_id":"hss_01_0013.xml",
+		"product_code":"hss",
+		"code":"167",
+		"des":"Whether you can unblock an IP address depends on why it was blocked. An IP address will be blocked if it is regarded as the source of a brute-force attack, listed in the ",
+		"doc_type":"usermanual",
+		"kw":"Can I Unblock an IP Address Blocked by HSS, and How?,Intrusions,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Can I Unblock an IP Address Blocked by HSS, and How?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0204.html",
+		"node_id":"hss_01_0204.xml",
+		"product_code":"hss",
+		"code":"168",
+		"des":"If a blocked IP address does not perform brute-force attacks in the next 12 hours, the IP address will be automatically unblocked.",
+		"doc_type":"usermanual",
+		"kw":"Why a Blocked IP Address Is Automatically Unblocked?,Intrusions,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Why a Blocked IP Address Is Automatically Unblocked?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0427.html",
+		"node_id":"hss_01_0427.xml",
+		"product_code":"hss",
+		"code":"169",
+		"des":"Detection period: real-time detectionIsolation and killing period:If you have enabled automatic isolation and killing, the system will scan and kill viruses in real time.",
+		"doc_type":"usermanual",
+		"kw":"How Often Does HSS Detect, Isolate, and Kill Malicious Programs?,Intrusions,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Often Does HSS Detect, Isolate, and Kill Malicious Programs?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0429.html",
+		"node_id":"hss_01_0429.xml",
+		"product_code":"hss",
+		"code":"170",
+		"des":"Check whether the blocked IP address is a malicious IP address or a normal one.If it is normal, add it to the whitelist.If it is malicious, no further operations are requ",
+		"doc_type":"usermanual",
+		"kw":"What Do I Do If an IP Address Is Blocked by HSS?,Intrusions,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"What Do I Do If an IP Address Is Blocked by HSS?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0430.html",
+		"node_id":"hss_01_0430.xml",
+		"product_code":"hss",
+		"code":"171",
+		"des":"Generally, ransomware is spread through Trojan implantation, emails, files, vulnerabilities, bundles, and storage media.To defend against ransomware intrusions, prevent b",
+		"doc_type":"usermanual",
+		"kw":"How Do I Defend Against Ransomware Attacks?,Intrusions,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Defend Against Ransomware Attacks?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0188.html",
+		"node_id":"hss_01_0188.xml",
+		"product_code":"hss",
+		"code":"172",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Abnormal Logins",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Abnormal Logins",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0189.html",
+		"node_id":"hss_01_0189.xml",
+		"product_code":"hss",
+		"code":"173",
+		"des":"Even whitelisted IP addresses can certain trigger alarms. The SSH login IP address whitelist, Login Whitelist, and remote login functions focus on different aspects of se",
+		"doc_type":"usermanual",
+		"kw":"Why Do I Still Receive Remote Login Alarms After Configuring the Login IP Whitelist?,Abnormal Logins",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Why Do I Still Receive Remote Login Alarms After Configuring the Login IP Whitelist?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0091.html",
+		"node_id":"hss_01_0091.xml",
+		"product_code":"hss",
+		"code":"174",
+		"des":"The remote login detection function checks for remote logins into your servers in real time. HSS generates an alarm if it detects logins from locations other than the com",
+		"doc_type":"usermanual",
+		"kw":"How Do I Check the User IP address of a Remote Login?,Abnormal Logins,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Check the User IP address of a Remote Login?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0113.html",
+		"node_id":"hss_01_0113.xml",
+		"product_code":"hss",
+		"code":"175",
+		"des":"If you select Successful Logins in the Real-Time Alarm Notifications area, HSS will send alarms when detecting any successful logins.If all the accounts on your ECSs are ",
+		"doc_type":"usermanual",
+		"kw":"What Can I Do If an Alarm Indicating Successful Login Is Reported?,Abnormal Logins,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"What Can I Do If an Alarm Indicating Successful Login Is Reported?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0120.html",
+		"node_id":"hss_01_0120.xml",
+		"product_code":"hss",
+		"code":"176",
+		"des":"No.If you do not want to receive remote login alarm notifications, add alarmed locations as common login locations, or deselect the remote login attempt item in alarm not",
+		"doc_type":"usermanual",
+		"kw":"Can I Disable Remote Login Detection?,Abnormal Logins,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Can I Disable Remote Login Detection?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0192.html",
+		"node_id":"hss_01_0192.xml",
+		"product_code":"hss",
+		"code":"177",
+		"des":"If you have enabled alarm notifications for intrusion detection, you will be notified immediately when an account is cracked or may be cracked.You can also check whether ",
+		"doc_type":"usermanual",
+		"kw":"How Do I Know Whether an Intrusion Succeeded?,Abnormal Logins,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Know Whether an Intrusion Succeeded?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0165.html",
+		"node_id":"hss_01_0165.xml",
+		"product_code":"hss",
+		"code":"178",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Unsafe Settings",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Unsafe Settings",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0043.html",
+		"node_id":"hss_01_0043.xml",
+		"product_code":"hss",
+		"code":"179",
+		"des":"Your password complexity policy cannot be checked if no pluggable authentication module (PAM) is running in your system.For Debian or Ubuntu, run the apt-get install libp",
+		"doc_type":"usermanual",
+		"kw":"How Do I Install a PAM and Set a Proper Password Complexity Policy in a Linux OS?,Unsafe Settings,Us",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Install a PAM and Set a Proper Password Complexity Policy in a Linux OS?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0095.html",
+		"node_id":"hss_01_0095.xml",
+		"product_code":"hss",
+		"code":"180",
+		"des":"A proper password complexity policy would be: eight characters for the length of a password and at least three types of the following characters used: uppercase letters, ",
+		"doc_type":"usermanual",
+		"kw":"How Do I Set a Proper Password Complexity Policy in a Windows OS?,Unsafe Settings,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Set a Proper Password Complexity Policy in a Windows OS?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0198.html",
+		"node_id":"hss_01_0198.xml",
+		"product_code":"hss",
+		"code":"181",
+		"des":"HSS automatically performs a configuration detection for servers. You can repair unsafe configuration items or ignore the configuration items you trust based on the detec",
+		"doc_type":"usermanual",
+		"kw":"How Do I Handle Unsafe Configurations?,Unsafe Settings,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Handle Unsafe Configurations?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0149.html",
+		"node_id":"hss_01_0149.xml",
+		"product_code":"hss",
+		"code":"182",
+		"des":"You can view the configuration check details online.",
+		"doc_type":"usermanual",
+		"kw":"How Do I View Configuration Check Reports?,Unsafe Settings,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I View Configuration Check Reports?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0246.html",
+		"node_id":"hss_01_0246.xml",
+		"product_code":"hss",
+		"code":"183",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Vulnerability Management",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Vulnerability Management",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0209.html",
+		"node_id":"hss_01_0209.xml",
+		"product_code":"hss",
+		"code":"184",
+		"des":"Restart the Windows OS after you fix its vulnerabilities.Restart the Linux OS after you fix its kernel vulnerabilities.",
+		"doc_type":"usermanual",
+		"kw":"How Do I Fix Vulnerabilities?,Vulnerability Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Fix Vulnerabilities?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0176.html",
+		"node_id":"hss_01_0176.xml",
+		"product_code":"hss",
+		"code":"185",
+		"des":"Perform the following operations to locate the cause and fix the problems.For more information, see the section \"Handling Vulnerabilities\".No yum sources have been config",
+		"doc_type":"usermanual",
+		"kw":"What Do I Do If an Alarm Still Exists After I Fixed a Vulnerability?,Vulnerability Management,User G",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"What Do I Do If an Alarm Still Exists After I Fixed a Vulnerability?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0247.html",
+		"node_id":"hss_01_0247.xml",
+		"product_code":"hss",
+		"code":"186",
+		"des":"The vulnerability list displays vulnerabilities detected in the last seven days. After a vulnerability is detected for a server, if you change the server name and do not ",
+		"doc_type":"usermanual",
+		"kw":"Why a Server Displayed in Vulnerability Information Does Not Exist?,Vulnerability Management,User Gu",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Why a Server Displayed in Vulnerability Information Does Not Exist?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0114.html",
+		"node_id":"hss_01_0114.xml",
+		"product_code":"hss",
+		"code":"187",
+		"des":"After you fixed Windows OS vulnerabilities or Linux kernel vulnerabilities, you need to restart servers for the fix to take effect, or HSS will continue to warn you of th",
+		"doc_type":"usermanual",
+		"kw":"Do I Need to Restart a Server After Fixing its Vulnerabilities?,Vulnerability Management,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Do I Need to Restart a Server After Fixing its Vulnerabilities?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0250.html",
+		"node_id":"hss_01_0250.xml",
+		"product_code":"hss",
+		"code":"188",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Web Tamper Protection",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Web Tamper Protection",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0199.html",
+		"node_id":"hss_01_0199.xml",
+		"product_code":"hss",
+		"code":"189",
+		"des":"WTP protects files in directories. If no directories are specified, WTP cannot take effect even if it is enabled.",
+		"doc_type":"usermanual",
+		"kw":"Why Do I Need to Add a Protected Directory?,Web Tamper Protection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Why Do I Need to Add a Protected Directory?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0185.html",
+		"node_id":"hss_01_0185.xml",
+		"product_code":"hss",
+		"code":"190",
+		"des":"If you need to modify files in the protected directory, stop protection for the protected directory first.After the files are modified, resume protection for the director",
+		"doc_type":"usermanual",
+		"kw":"How Do I Modify a Protected Directory?,Web Tamper Protection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Modify a Protected Directory?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0202.html",
+		"node_id":"hss_01_0202.xml",
+		"product_code":"hss",
+		"code":"191",
+		"des":"The causes of this problem vary by scenarios.SymptomThe agent status is Offline or Not installed in the server list on the Web Tamper Protection page.The agent status is ",
+		"doc_type":"usermanual",
+		"kw":"What Should I Do If WTP Cannot Be Enabled?,Web Tamper Protection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"What Should I Do If WTP Cannot Be Enabled?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0255.html",
+		"node_id":"hss_01_0255.xml",
+		"product_code":"hss",
+		"code":"192",
+		"des":"Protected directories are read-only. To modify files or update the website, perform any of the following operations.Disable WTP while you modify files in protected direct",
+		"doc_type":"usermanual",
+		"kw":"How Do I Modify a File After WTP Is Enabled?,Web Tamper Protection,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Modify a File After WTP Is Enabled?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0014.html",
+		"node_id":"hss_01_0014.xml",
+		"product_code":"hss",
+		"code":"193",
+		"des":"Dynamic WTP protects your Tomcat applications.For this function to take effect, ensure that:There are Tomcat applications running on your servers.Your servers run the Lin",
+		"doc_type":"usermanual",
+		"kw":"What Can I Do If I Enabled Dynamic WTP But Its Status Is Enabled but not in effect?,Web Tamper Prote",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"What Can I Do If I Enabled Dynamic WTP But Its Status Is Enabled but not in effect?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0017.html",
+		"node_id":"hss_01_0017.xml",
+		"product_code":"hss",
+		"code":"194",
+		"des":"The web tamper protection function of HSS monitors website directories in real time, backs up files, and restores tampered files using the backup, protecting websites fro",
+		"doc_type":"usermanual",
+		"kw":"What Are the Differences Between the Web Tamper Protection Functions of HSS and WAF?,Web Tamper Prot",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"What Are the Differences Between the Web Tamper Protection Functions of HSS and WAF?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0323.html",
+		"node_id":"hss_01_0323.xml",
+		"product_code":"hss",
+		"code":"195",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Container Guard Service",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Container Guard Service",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0325.html",
+		"node_id":"hss_01_0325.xml",
+		"product_code":"hss",
+		"code":"196",
+		"des":"Disabling protection does not affect services, but will increase security risks. You are advised to keep your servers protected.If your servers are managed by enterprise ",
+		"doc_type":"usermanual",
+		"kw":"How Do I Disable Node Protection?,Container Guard Service,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Disable Node Protection?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0324.html",
+		"node_id":"hss_01_0324.xml",
+		"product_code":"hss",
+		"code":"197",
+		"des":"When you enable node protection, the system automatically installs the CGS plug-in on the node.An HSS quota protects one cluster node.",
+		"doc_type":"usermanual",
+		"kw":"How Do I Enable Node Protection?,Container Guard Service,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Enable Node Protection?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0404.html",
+		"node_id":"hss_01_0404.xml",
+		"product_code":"hss",
+		"code":"198",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Ransomware Protection",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Ransomware Protection",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0405.html",
+		"node_id":"hss_01_0405.xml",
+		"product_code":"hss",
+		"code":"199",
+		"des":"The backup mechanism of ransomware protection inherits that of CBR (Cloud Backup and Restoration). Backup files of ransomware protection can be centrally managed and view",
+		"doc_type":"usermanual",
+		"kw":"What Are the Differences Between Ransomware Protection Backup and Cloud Backup?,Ransomware Protectio",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"What Are the Differences Between Ransomware Protection Backup and Cloud Backup?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0426.html",
+		"node_id":"hss_01_0426.xml",
+		"product_code":"hss",
+		"code":"200",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Security Configurations",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Security Configurations",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0436.html",
+		"node_id":"hss_01_0436.xml",
+		"product_code":"hss",
+		"code":"201",
+		"des":"You can log in to a server via the console but not via SSH.A server will be blocked if it is regarded as a suspicious server performing brute-force attacks (for example, ",
+		"doc_type":"usermanual",
+		"kw":"What Can I Do If I Cannot Remotely Log In to a Server via SSH?,Security Configurations,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"What Can I Do If I Cannot Remotely Log In to a Server via SSH?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0437.html",
+		"node_id":"hss_01_0437.xml",
+		"product_code":"hss",
+		"code":"202",
+		"des":"This FAQ shows you how to use 2FA.Logging in to a Linux serverUse PuTTY or Xshell to log in to your server.Select Keyboard Interactive and enter the user identity informa",
+		"doc_type":"usermanual",
+		"kw":"2FA,How Do I Use 2FA?,Security Configurations,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Use 2FA?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0439.html",
+		"node_id":"hss_01_0439.xml",
+		"product_code":"hss",
+		"code":"203",
+		"des":"The two-factor authentication function does not take effect immediately after being enabled.Wait for 5 minutes and try again.Wait for 5 minutes and try again.To enable tw",
+		"doc_type":"usermanual",
+		"kw":"Why Can't I Receive a Verification Code After 2FA Is Enabled?,Security Configurations,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Why Can't I Receive a Verification Code After 2FA Is Enabled?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0440.html",
+		"node_id":"hss_01_0440.xml",
+		"product_code":"hss",
+		"code":"204",
+		"des":"The login failed probably because file configurations or the login mode was incorrect.Check whether the configuration file is correct.Configuration file path: /etc/ssh/ss",
+		"doc_type":"usermanual",
+		"kw":"Why Does My Login Fail After I Enable 2FA?,Security Configurations,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Why Does My Login Fail After I Enable 2FA?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0441.html",
+		"node_id":"hss_01_0441.xml",
+		"product_code":"hss",
+		"code":"205",
+		"des":"You can set your mobile phone number only if you have selected SMS/Email for Method. Set your mobile phone number in the SMN topic you choose.In the SMN Topic drop-down l",
+		"doc_type":"usermanual",
+		"kw":"How Do I Add a Mobile Phone Number or Email Address for Receiving 2FA Verification Notifications?,Se",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Add a Mobile Phone Number or Email Address for Receiving 2FA Verification Notifications?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0472.html",
+		"node_id":"hss_01_0472.xml",
+		"product_code":"hss",
+		"code":"206",
+		"des":"Security-Enhanced Linux (SELinux) is a kernel module and security subsystem of Linux.SELinux minimizes the resources that can be accessed by service processes in the syst",
+		"doc_type":"usermanual",
+		"kw":"How Do I Disable the SELinux Firewall?,Security Configurations,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Disable the SELinux Firewall?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0101.html",
+		"node_id":"hss_01_0101.xml",
+		"product_code":"hss",
+		"code":"207",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Others",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Others",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0269.html",
+		"node_id":"hss_01_0269.xml",
+		"product_code":"hss",
+		"code":"208",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"How Do I Use the Windows Remote Desktop Connection Tool to Connect to a Server?,Others,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Use the Windows Remote Desktop Connection Tool to Connect to a Server?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0099.html",
+		"node_id":"hss_01_0099.xml",
+		"product_code":"hss",
+		"code":"209",
+		"des":"The following table describes log files and their paths.",
+		"doc_type":"usermanual",
+		"kw":"How Do I Check HSS Log Files?,Others,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Check HSS Log Files?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0103.html",
+		"node_id":"hss_01_0103.xml",
+		"product_code":"hss",
+		"code":"210",
+		"des":"The account hacking prevention function for Linux supports MySQL 5.6 and 5.7. Perform the following steps to enable logging for login failure:show global variables like '",
+		"doc_type":"usermanual",
+		"kw":"How Do I Enable Logging for Login Failures?,Others,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Enable Logging for Login Failures?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0117.html",
+		"node_id":"hss_01_0117.xml",
+		"product_code":"hss",
+		"code":"211",
+		"des":"If you are sure the changes on your critical files are safe, you do not need to handle the alarm. It will be automatically cleared in seven days.",
+		"doc_type":"usermanual",
+		"kw":"How Do I Clear an Alarm on Critical File Changes?,Others,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"How Do I Clear an Alarm on Critical File Changes?",
+		"githuburl":""
+	},
+	{
+		"uri":"hss_01_0417.html",
+		"node_id":"hss_01_0417.xml",
+		"product_code":"hss",
+		"code":"212",
+		"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"doc_type":"usermanual",
+		"kw":"Change History,User Guide",
+		"search_title":"",
+		"metedata":[
+			{
+				"opensource":"true",
+				"prodname":"hss",
+				"IsBot":"Yes",
+				"IsMulti":"Yes",
+				"documenttype":"usermanual"
+			}
+		],
+		"title":"Change History",
+		"githuburl":""
+	}
+]
\ No newline at end of file
diff --git a/docs/hss/umn/CLASS.TXT.json b/docs/hss/umn/CLASS.TXT.json
new file mode 100644
index 00000000..687a0020
--- /dev/null
+++ b/docs/hss/umn/CLASS.TXT.json
@@ -0,0 +1,1910 @@
+[
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Introduction",
+		"uri":"hss_01_0042.html",
+		"doc_type":"usermanual",
+		"p_code":"",
+		"code":"1"
+	},
+	{
+		"desc":"HSS is designed to protect server workloads in hybrid clouds and multi-cloud data centers. It provides host security functions, Container Guard Service (CGS), and Web Tam",
+		"product_code":"hss",
+		"title":"What Is HSS?",
+		"uri":"hss_01_0001.html",
+		"doc_type":"usermanual",
+		"p_code":"1",
+		"code":"2"
+	},
+	{
+		"desc":"HSS helps you manage and maintain the security of all your servers and reduce common risks.You can check for and fix a range of security issues on a single console, easil",
+		"product_code":"hss",
+		"title":"Advantages",
+		"uri":"hss_01_0002.html",
+		"doc_type":"usermanual",
+		"p_code":"1",
+		"code":"3"
+	},
+	{
+		"desc":"Centralized security managementWith HSS, you can manage the security configurations and events of all your cloud servers on the console, reducing risks and management cos",
+		"product_code":"hss",
+		"title":"Scenarios",
+		"uri":"hss_01_0226.html",
+		"doc_type":"usermanual",
+		"p_code":"1",
+		"code":"4"
+	},
+	{
+		"desc":"HSS comes in the enterprise, premium, Web Tamper Protection (WTP), and container editions, providing asset management, vulnerability management, baseline check, intrusion",
+		"product_code":"hss",
+		"title":"Editions and Features",
+		"uri":"hss_01_0590.html",
+		"doc_type":"usermanual",
+		"p_code":"1",
+		"code":"5"
+	},
+	{
+		"desc":"If you need to assign different permissions to employees in your enterprise to access your HSS resources, IAM is a good choice for fine-grained permissions management. IA",
+		"product_code":"hss",
+		"title":"HSS Permissions Management",
+		"uri":"hss_01_0130.html",
+		"doc_type":"usermanual",
+		"p_code":"1",
+		"code":"6"
+	},
+	{
+		"desc":"Elastic Cloud Server (ECS)HSS can run on Linux servers (such as CentOS and EulerOS) and Windows servers (such as Windows 2012 and Windows 2016).The agent is probably inco",
+		"product_code":"hss",
+		"title":"Constraints and Limitations",
+		"uri":"hss_01_0137.html",
+		"doc_type":"usermanual",
+		"p_code":"1",
+		"code":"7"
+	},
+	{
+		"desc":"The HSS agent can be installed on ECS.For details about ECS, see the Elastic Cloud Server User Guide.CCE can rapidly build a highly reliable container cluster based on cl",
+		"product_code":"hss",
+		"title":"Related Services",
+		"uri":"hss_01_0015.html",
+		"doc_type":"usermanual",
+		"p_code":"1",
+		"code":"8"
+	},
+	{
+		"desc":"Account cracking refers to the intruder behavior of guessing or cracking the password of an account.A weak password can be easily cracked.A malicious program, such as a w",
+		"product_code":"hss",
+		"title":"Basic Concepts",
+		"uri":"hss_01_0004.html",
+		"doc_type":"usermanual",
+		"p_code":"1",
+		"code":"9"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Enabling HSS",
+		"uri":"hss_01_0292.html",
+		"doc_type":"usermanual",
+		"p_code":"",
+		"code":"10"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Installing an Agent",
+		"uri":"hss_01_0233.html",
+		"doc_type":"usermanual",
+		"p_code":"10",
+		"code":"11"
+	},
+	{
+		"desc":"To enable workload protection for cloud servers, install the agent first.This topic describes how to install the agent on a server running Linux.CentOS 6.x is no longer u",
+		"product_code":"hss",
+		"title":"Installing an Agent on Linux",
+		"uri":"hss_01_0571.html",
+		"doc_type":"usermanual",
+		"p_code":"11",
+		"code":"12"
+	},
+	{
+		"desc":"You can enable HSS only after the agent is installed on your servers. This topic describes how to install the agent on a server running a Windows OS. For details about ho",
+		"product_code":"hss",
+		"title":"Installing the Agent for Windows",
+		"uri":"hss_01_0236.html",
+		"doc_type":"usermanual",
+		"p_code":"11",
+		"code":"13"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Enabling Protection",
+		"uri":"hss_01_0260.html",
+		"doc_type":"usermanual",
+		"p_code":"10",
+		"code":"14"
+	},
+	{
+		"desc":"Before enabling protection on servers, you need to allocate quota to a specified server. If the protection is disabled or the server is deleted, the quota can be allocate",
+		"product_code":"hss",
+		"title":"Enabling the Enterprise, or Premium Edition",
+		"uri":"hss_01_0230.html",
+		"doc_type":"usermanual",
+		"p_code":"14",
+		"code":"15"
+	},
+	{
+		"desc":"Before enabling WTP, you need to allocate a quota to a specified server. If the service is disabled or the server is deleted, the quota can be allocated to other servers.",
+		"product_code":"hss",
+		"title":"Enabling Web Tamper Protection",
+		"uri":"hss_01_0214.html",
+		"doc_type":"usermanual",
+		"p_code":"14",
+		"code":"16"
+	},
+	{
+		"desc":"Before enabling protection for a container node, you need to allocate quota to a specified node. If the protection is disabled or the node is deleted, the quota can be al",
+		"product_code":"hss",
+		"title":"Enabling Container Protection",
+		"uri":"hss_01_0293.html",
+		"doc_type":"usermanual",
+		"p_code":"14",
+		"code":"17"
+	},
+	{
+		"desc":"After alarm notification is enabled, you can receive alarm notifications sent by HSS to learn about security risks facing your servers and web pages. Without this functio",
+		"product_code":"hss",
+		"title":"Enabling Alarm Notifications",
+		"uri":"hss_01_0241.html",
+		"doc_type":"usermanual",
+		"p_code":"10",
+		"code":"18"
+	},
+	{
+		"desc":"After protection is enabled, you can configure the common login locations, common login IP addresses, and the SSH login IP address whitelist. You can also enable automati",
+		"product_code":"hss",
+		"title":"Common Security Configuration",
+		"uri":"hss_01_0051.html",
+		"doc_type":"usermanual",
+		"p_code":"10",
+		"code":"19"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Server Security Dashboard",
+		"uri":"hss_01_0410.html",
+		"doc_type":"usermanual",
+		"p_code":"",
+		"code":"20"
+	},
+	{
+		"desc":"On the dashboard page of the HSS console, you can learn the security status and risks of all your servers and containers in real time, including the risk index, risk tren",
+		"product_code":"hss",
+		"title":"Risk Statistics",
+		"uri":"hss_01_0546.html",
+		"doc_type":"usermanual",
+		"p_code":"20",
+		"code":"21"
+	},
+	{
+		"desc":"Servers that are not protected by HSS are scanned for free. A security report on their vulnerabilities, unsafe passwords, and asset risks will be generated.If you need to",
+		"product_code":"hss",
+		"title":"Free Scan on Unprotected Servers",
+		"uri":"hss_01_0558.html",
+		"doc_type":"usermanual",
+		"p_code":"20",
+		"code":"22"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Asset Management",
+		"uri":"hss_01_0294.html",
+		"doc_type":"usermanual",
+		"p_code":"",
+		"code":"23"
+	},
+	{
+		"desc":"You can count all your assets and check their statistics, including the agent status, protection status, quota, account, port, process, software, and auto-started items.S",
+		"product_code":"hss",
+		"title":"Asset Management",
+		"uri":"hss_01_0387.html",
+		"doc_type":"usermanual",
+		"p_code":"23",
+		"code":"24"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Server Fingerprints",
+		"uri":"hss_01_0463.html",
+		"doc_type":"usermanual",
+		"p_code":"23",
+		"code":"25"
+	},
+	{
+		"desc":"HSS can collect server asset fingerprints, including information about ports, processes, web applications, web services, web frameworks, and auto-started items. You can c",
+		"product_code":"hss",
+		"title":"Collecting Server Asset Fingerprints",
+		"uri":"hss_01_0477.html",
+		"doc_type":"usermanual",
+		"p_code":"25",
+		"code":"26"
+	},
+	{
+		"desc":"HSS can collect server asset fingerprints, including information about ports, processes, web applications, web services, web frameworks, and auto-started items. You can c",
+		"product_code":"hss",
+		"title":"Viewing Server Asset Fingerprints",
+		"uri":"hss_01_0383.html",
+		"doc_type":"usermanual",
+		"p_code":"25",
+		"code":"27"
+	},
+	{
+		"desc":"HSS proactively records the changes on account information, software information, and auto-started items. You can check the change details according to different dimensio",
+		"product_code":"hss",
+		"title":"Viewing the Operation History of Server Assets",
+		"uri":"hss_01_0384.html",
+		"doc_type":"usermanual",
+		"p_code":"25",
+		"code":"28"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Container Fingerprints",
+		"uri":"hss_01_0464.html",
+		"doc_type":"usermanual",
+		"p_code":"23",
+		"code":"29"
+	},
+	{
+		"desc":"HSS can collect container asset fingerprints, including container accounts, ports, and processes. You can centrally check container asset information and detect risky ass",
+		"product_code":"hss",
+		"title":"Collecting Container Asset Fingerprints",
+		"uri":"hss_01_0478.html",
+		"doc_type":"usermanual",
+		"p_code":"29",
+		"code":"30"
+	},
+	{
+		"desc":"HSS can collect container asset fingerprints, including container accounts, ports, and processes. You can centrally check container asset information and detect risky ass",
+		"product_code":"hss",
+		"title":"Viewing Container Asset Fingerprints",
+		"uri":"hss_01_0465.html",
+		"doc_type":"usermanual",
+		"p_code":"29",
+		"code":"31"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Server Management",
+		"uri":"hss_01_0397.html",
+		"doc_type":"usermanual",
+		"p_code":"23",
+		"code":"32"
+	},
+	{
+		"desc":"The server list on the Servers page displays the protection status of only the servers used in the selected region.If your servers are managed by enterprise projects, you",
+		"product_code":"hss",
+		"title":"Viewing Server Protection Status",
+		"uri":"hss_01_0003.html",
+		"doc_type":"usermanual",
+		"p_code":"32",
+		"code":"33"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Enabling Protection",
+		"uri":"hss_01_0377.html",
+		"doc_type":"usermanual",
+		"p_code":"32",
+		"code":"34"
+	},
+	{
+		"desc":"The professional, enterprise, and premium editions provides different levels of protection for your servers. You can apply for and enable them as needed.HSS performs a fu",
+		"product_code":"hss",
+		"title":"Enterprise/Premium Edition",
+		"uri":"hss_01_0396.html",
+		"doc_type":"usermanual",
+		"p_code":"34",
+		"code":"35"
+	},
+	{
+		"desc":"The WTP edition provides web tamper protection capabilities for your servers.The agent has been installed on the servers to be protected, the agent status is Online, and ",
+		"product_code":"hss",
+		"title":"WTP Edition",
+		"uri":"hss_01_0021.html",
+		"doc_type":"usermanual",
+		"p_code":"34",
+		"code":"36"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Disabling Protection",
+		"uri":"hss_01_0395.html",
+		"doc_type":"usermanual",
+		"p_code":"32",
+		"code":"37"
+	},
+	{
+		"desc":"You can disable protection for a server. A quota that has been unbound from a server can be bound to another one.Disabling protection does not affect services, but will i",
+		"product_code":"hss",
+		"title":"Disabling the Enterprise/Premium Edition",
+		"uri":"hss_01_0399.html",
+		"doc_type":"usermanual",
+		"p_code":"37",
+		"code":"38"
+	},
+	{
+		"desc":"You can disable the WTP edition for a server. A quota that has been unbound from a server can be bound to another one.Disabling protection does not affect services, but w",
+		"product_code":"hss",
+		"title":"Disabling WTP",
+		"uri":"hss_01_0400.html",
+		"doc_type":"usermanual",
+		"p_code":"37",
+		"code":"39"
+	},
+	{
+		"desc":"This section describes how to export the server protection list to your local PC.The details of up to 1,000 servers can be exported at a time.",
+		"product_code":"hss",
+		"title":"Exporting the Server List",
+		"uri":"hss_01_0573.html",
+		"doc_type":"usermanual",
+		"p_code":"32",
+		"code":"40"
+	},
+	{
+		"desc":"You can switch the quota edition of a server to the enterprise or premium edition as needed.You can switch to the enterprise or premium edition.The server whose protectio",
+		"product_code":"hss",
+		"title":"Switching the HSS Quota Edition",
+		"uri":"hss_01_0174.html",
+		"doc_type":"usermanual",
+		"p_code":"32",
+		"code":"41"
+	},
+	{
+		"desc":"You can quickly configure and start server scans by using policy groups. Simply create a group, add policies to it, and apply this group to servers. The agents deployed o",
+		"product_code":"hss",
+		"title":"Deploying a Policy",
+		"uri":"hss_01_0024.html",
+		"doc_type":"usermanual",
+		"p_code":"32",
+		"code":"42"
+	},
+	{
+		"desc":"To manage servers by group, you can create a server group and add servers to it.You can check the numbers of servers, unsafe servers, and unprotected servers in a group.A",
+		"product_code":"hss",
+		"title":"Managing Server Groups",
+		"uri":"hss_01_0023.html",
+		"doc_type":"usermanual",
+		"p_code":"32",
+		"code":"43"
+	},
+	{
+		"desc":"By default, HSS considers all servers as general assets. You can configure the asset importance levels of servers and manage servers accordingly.Assets are classified int",
+		"product_code":"hss",
+		"title":"Servers Importance Management",
+		"uri":"hss_01_0381.html",
+		"doc_type":"usermanual",
+		"p_code":"32",
+		"code":"44"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Container Management",
+		"uri":"hss_01_0295.html",
+		"doc_type":"usermanual",
+		"p_code":"23",
+		"code":"45"
+	},
+	{
+		"desc":"The Container Nodes page displays the protection, node, and Agent status of clusters in Cloud Container Engine (CCE), helping you learn the security status of clusters in",
+		"product_code":"hss",
+		"title":"Viewing the Container Node Protection List",
+		"uri":"hss_01_0296.html",
+		"doc_type":"usermanual",
+		"p_code":"45",
+		"code":"46"
+	},
+	{
+		"desc":"You can enable the container security edition for your containers.To enable protection for a container node, you need to allocate a quota to the node. If the protection i",
+		"product_code":"hss",
+		"title":"Enabling Container Security Protection",
+		"uri":"hss_01_0398.html",
+		"doc_type":"usermanual",
+		"p_code":"45",
+		"code":"47"
+	},
+	{
+		"desc":"You can disable the container edition for a server. A quota that has been unbound from a server can be bound to another one.Disabling protection does not affect services,",
+		"product_code":"hss",
+		"title":"Disabling Protection for Container Edition",
+		"uri":"hss_01_0401.html",
+		"doc_type":"usermanual",
+		"p_code":"45",
+		"code":"48"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Container Images",
+		"uri":"hss_01_0297.html",
+		"doc_type":"usermanual",
+		"p_code":"45",
+		"code":"49"
+	},
+	{
+		"desc":"You can manually scan local images for vulnerabilities and software information and provides scan reports. This section describes how to perform security scans on local i",
+		"product_code":"hss",
+		"title":"Local Images",
+		"uri":"hss_01_0298.html",
+		"doc_type":"usermanual",
+		"p_code":"49",
+		"code":"50"
+	},
+	{
+		"desc":"Images in the private image repository come from SWR images. You can manually scan for and check reports on vulnerabilities, malicious files, software information, file i",
+		"product_code":"hss",
+		"title":"Managing SWR Private Images",
+		"uri":"hss_01_0299.html",
+		"doc_type":"usermanual",
+		"p_code":"49",
+		"code":"51"
+	},
+	{
+		"desc":"The images in the shared image repository are from SWR. You can view details about all shared images.Only the HSS container edition supports this function.Security scans ",
+		"product_code":"hss",
+		"title":"Managing SWR Shared Images",
+		"uri":"hss_01_0088.html",
+		"doc_type":"usermanual",
+		"p_code":"49",
+		"code":"52"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Risk Prevention",
+		"uri":"hss_01_0025.html",
+		"doc_type":"usermanual",
+		"p_code":"",
+		"code":"53"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Vulnerability Management",
+		"uri":"hss_01_0140.html",
+		"doc_type":"usermanual",
+		"p_code":"53",
+		"code":"54"
+	},
+	{
+		"desc":"Vulnerability management can detect Linux, Windows, Web-CMS, and application vulnerabilities and provide suggestions, helping you learn about server vulnerabilities in re",
+		"product_code":"hss",
+		"title":"Vulnerability Management Overview",
+		"uri":"hss_01_0302.html",
+		"doc_type":"usermanual",
+		"p_code":"54",
+		"code":"55"
+	},
+	{
+		"desc":"HSS can scan for Linux, Windows, Web-CMS, and application vulnerabilities. Automatic, scheduled (vulnerability policy configuration), and manual scans are supported.Autom",
+		"product_code":"hss",
+		"title":"Vulnerability Scan",
+		"uri":"hss_01_0412.html",
+		"doc_type":"usermanual",
+		"p_code":"54",
+		"code":"56"
+	},
+	{
+		"desc":"You can view vulnerabilities of your assets on the Vulnerabilities page. The Vulnerabilities page contains two tabs: Vulnerabilities view and Server view, helping you ana",
+		"product_code":"hss",
+		"title":"Viewing Vulnerability Details",
+		"uri":"hss_01_0063.html",
+		"doc_type":"usermanual",
+		"p_code":"54",
+		"code":"57"
+	},
+	{
+		"desc":"You can refer to this section to export the vulnerability list.HSS enterprise or later edition has been enabled for the server.The Server Status is Running, Agent Status ",
+		"product_code":"hss",
+		"title":"Exporting the vulnerability list",
+		"uri":"hss_01_0574.html",
+		"doc_type":"usermanual",
+		"p_code":"54",
+		"code":"58"
+	},
+	{
+		"desc":"If HSS detects a vulnerability on a server, you need to handle the vulnerability in a timely manner based on its severity and your business conditions to prevent the vuln",
+		"product_code":"hss",
+		"title":"Handling Vulnerabilities",
+		"uri":"hss_01_0141.html",
+		"doc_type":"usermanual",
+		"p_code":"54",
+		"code":"59"
+	},
+	{
+		"desc":"If you evaluate that some vulnerabilities do not affect your services and do not want to view the vulnerabilities in the vulnerability list, you can whitelist the vulnera",
+		"product_code":"hss",
+		"title":"Managing the Vulnerability Whitelist",
+		"uri":"hss_01_0509.html",
+		"doc_type":"usermanual",
+		"p_code":"54",
+		"code":"60"
+	},
+	{
+		"desc":"For vulnerabilities that have been handled, you can refer to this section to view the vulnerability handling history (handler and handling time).",
+		"product_code":"hss",
+		"title":"Viewing Vulnerability Handling History",
+		"uri":"hss_01_0503.html",
+		"doc_type":"usermanual",
+		"p_code":"54",
+		"code":"61"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Baseline Inspection",
+		"uri":"hss_01_0145.html",
+		"doc_type":"usermanual",
+		"p_code":"53",
+		"code":"62"
+	},
+	{
+		"desc":"Baseline Inspection includes password complexity policy detection, common weak password detection, and configuration check. It can detect insecure password configurations",
+		"product_code":"hss",
+		"title":"Baseline Inspection Overview",
+		"uri":"hss_01_0303.html",
+		"doc_type":"usermanual",
+		"p_code":"62",
+		"code":"63"
+	},
+	{
+		"desc":"The baseline check supports automatic and manual baseline checks.Automatic baseline check: checks server configurations and common weak passwords.Manual baseline check: T",
+		"product_code":"hss",
+		"title":"Performing Baseline Inspection",
+		"uri":"hss_01_0146.html",
+		"doc_type":"usermanual",
+		"p_code":"62",
+		"code":"64"
+	},
+	{
+		"desc":"This topic provides suggestions on how to fix baseline configuration risks on the server.Only enterprise edition, premium edition, web tamper protection edition, and cont",
+		"product_code":"hss",
+		"title":"Viewing and Processing Baseline Check Results",
+		"uri":"hss_01_0147.html",
+		"doc_type":"usermanual",
+		"p_code":"62",
+		"code":"65"
+	},
+	{
+		"desc":"This section describes how to export a baseline check report.Only enterprise edition, premium edition, web tamper protection edition, and container edition are supported.",
+		"product_code":"hss",
+		"title":"Exporting the Baseline Check Report",
+		"uri":"hss_01_0597.html",
+		"doc_type":"usermanual",
+		"p_code":"62",
+		"code":"66"
+	},
+	{
+		"desc":"This section describes how to modify a created manual baseline check policy.If you select Linux for OS, you can select any checks included in Baseline and edit rules. Thi",
+		"product_code":"hss",
+		"title":"Managing Manual Baseline Check Policies",
+		"uri":"hss_01_0393.html",
+		"doc_type":"usermanual",
+		"p_code":"62",
+		"code":"67"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Container Image Security",
+		"uri":"hss_01_0304.html",
+		"doc_type":"usermanual",
+		"p_code":"53",
+		"code":"68"
+	},
+	{
+		"desc":"This section describes how to check the vulnerabilities on the private image and determine whether to ignore the vulnerabilities.Container node protection has been enable",
+		"product_code":"hss",
+		"title":"Image Vulnerabilities",
+		"uri":"hss_01_0305.html",
+		"doc_type":"usermanual",
+		"p_code":"68",
+		"code":"69"
+	},
+	{
+		"desc":"Malicious files in the private images can be automatically detected, helping you discover and eliminate the security threats in your assets.A comprehensive check is autom",
+		"product_code":"hss",
+		"title":"Viewing Malicious File Detection Results",
+		"uri":"hss_01_0306.html",
+		"doc_type":"usermanual",
+		"p_code":"68",
+		"code":"70"
+	},
+	{
+		"desc":"Your private image repository is scanned for unsafe configurations and provides suggestions for modifying the configurations, helping you fight intrusions and meet compli",
+		"product_code":"hss",
+		"title":"Image Baseline Check",
+		"uri":"hss_01_0307.html",
+		"doc_type":"usermanual",
+		"p_code":"68",
+		"code":"71"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Prevention",
+		"uri":"hss_01_0142.html",
+		"doc_type":"usermanual",
+		"p_code":"",
+		"code":"72"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Application Protection",
+		"uri":"hss_01_0388.html",
+		"doc_type":"usermanual",
+		"p_code":"72",
+		"code":"73"
+	},
+	{
+		"desc":"You have enabled HSS premium, WTP, or container edition.Currently, only Linux servers are supported.So far, only Java applications can be protected.The premium, WTP, and ",
+		"product_code":"hss",
+		"title":"Enabling Application Protection",
+		"uri":"hss_01_0390.html",
+		"doc_type":"usermanual",
+		"p_code":"73",
+		"code":"74"
+	},
+	{
+		"desc":"To protect your applications with RASP, you simply need to add probes to them, without having to modify application files.Probes (monitoring and protection code) are adde",
+		"product_code":"hss",
+		"title":"Viewing Application Protection",
+		"uri":"hss_01_0389.html",
+		"doc_type":"usermanual",
+		"p_code":"73",
+		"code":"75"
+	},
+	{
+		"desc":"You can add, edit, and delete application protection policies, and select and configure detection rules for the policies.Currently, only Linux servers are supported.So fa",
+		"product_code":"hss",
+		"title":"Managing Application Protection Policies",
+		"uri":"hss_01_0459.html",
+		"doc_type":"usermanual",
+		"p_code":"73",
+		"code":"76"
+	},
+	{
+		"desc":"This section describes how to disable application protection.If your servers are managed by enterprise projects, you can select an enterprise project to view or operate t",
+		"product_code":"hss",
+		"title":"Disabling Application Protection",
+		"uri":"hss_01_0392.html",
+		"doc_type":"usermanual",
+		"p_code":"73",
+		"code":"77"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"WTP",
+		"uri":"hss_01_0153.html",
+		"doc_type":"usermanual",
+		"p_code":"72",
+		"code":"78"
+	},
+	{
+		"desc":"WTP monitors website directories in real time, backs up files, and restores tampered files using the backup, protecting websites from Trojans, illegal links, and tamperin",
+		"product_code":"hss",
+		"title":"Adding a Protected Directory",
+		"uri":"hss_01_0216.html",
+		"doc_type":"usermanual",
+		"p_code":"78",
+		"code":"79"
+	},
+	{
+		"desc":"By default, HSS backs up the files from the protected directories (excluding specified subdirectories and file types) to the local backup directory you specified when add",
+		"product_code":"hss",
+		"title":"Configuring Remote Backup",
+		"uri":"hss_01_0106.html",
+		"doc_type":"usermanual",
+		"p_code":"78",
+		"code":"80"
+	},
+	{
+		"desc":"If WTP is enabled, the content in the protected directories is read-only. To allow certain processes to modify files in the directories, add them to the privileged proces",
+		"product_code":"hss",
+		"title":"Adding a Privileged Process",
+		"uri":"hss_01_0466.html",
+		"doc_type":"usermanual",
+		"p_code":"78",
+		"code":"81"
+	},
+	{
+		"desc":"You can schedule WTP protection to allow website updates in specific periods.Exercise caution when you set the periods to disable WTP, because files will not be protected",
+		"product_code":"hss",
+		"title":"Enabling/Disabling Scheduled Static WTP",
+		"uri":"hss_01_0217.html",
+		"doc_type":"usermanual",
+		"p_code":"78",
+		"code":"82"
+	},
+	{
+		"desc":"Dynamic WTP protects your web pages while Tomcat applications are running, and can detect tampering of dynamic data, such as database data. It can be enabled with static ",
+		"product_code":"hss",
+		"title":"Enabling Dynamic WTP",
+		"uri":"hss_01_0218.html",
+		"doc_type":"usermanual",
+		"p_code":"78",
+		"code":"83"
+	},
+	{
+		"desc":"Once WTP is enabled, HSS will comprehensively check protected directories you specified. You can check records about detected tampering attacks.Only the servers that are ",
+		"product_code":"hss",
+		"title":"Viewing WTP Reports",
+		"uri":"hss_01_0576.html",
+		"doc_type":"usermanual",
+		"p_code":"78",
+		"code":"84"
+	},
+	{
+		"desc":"Once static WTP is enabled, the HSS service will comprehensively check protected directories you specified. You can check records about detected tampering of host protect",
+		"product_code":"hss",
+		"title":"Viewing WTP Events",
+		"uri":"hss_01_0087.html",
+		"doc_type":"usermanual",
+		"p_code":"78",
+		"code":"85"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Ransomware Prevention",
+		"uri":"hss_01_0346.html",
+		"doc_type":"usermanual",
+		"p_code":"72",
+		"code":"86"
+	},
+	{
+		"desc":"You have enabled HSS premium, WTP, or container edition.Only premium, WTP, and container editions support ransomware protection.If your servers are managed by enterprise ",
+		"product_code":"hss",
+		"title":"Enabling Ransomware Prevention",
+		"uri":"hss_01_0348.html",
+		"doc_type":"usermanual",
+		"p_code":"86",
+		"code":"87"
+	},
+	{
+		"desc":"You have enabled HSS premium, WTP, or container edition.After ransomware protection is enabled, you need to handle ransomware alarms and fix the vulnerabilities in your s",
+		"product_code":"hss",
+		"title":"Viewing Ransomware Protection",
+		"uri":"hss_01_0347.html",
+		"doc_type":"usermanual",
+		"p_code":"86",
+		"code":"88"
+	},
+	{
+		"desc":"Currently, you can create a ransomware prevention policy only when enabling ransomware prevention.Only premium, WTP, and container editions support ransomware protection.",
+		"product_code":"hss",
+		"title":"Managing Ransomware Prevention Policies",
+		"uri":"hss_01_0349.html",
+		"doc_type":"usermanual",
+		"p_code":"86",
+		"code":"89"
+	},
+	{
+		"desc":"You can disable ransomware protection as needed. After protection is disabled, your server may be intruded by ransomware. Exercise caution when performing this operation.",
+		"product_code":"hss",
+		"title":"Disabling Ransomware Prevention",
+		"uri":"hss_01_0350.html",
+		"doc_type":"usermanual",
+		"p_code":"86",
+		"code":"90"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"File Integrity Monitoring",
+		"uri":"hss_01_0360.html",
+		"doc_type":"usermanual",
+		"p_code":"72",
+		"code":"91"
+	},
+	{
+		"desc":"Check the files in the Linux OS, applications, and other components to detect tampering.Only premium, WTP, and container editions support file integrity-related operation",
+		"product_code":"hss",
+		"title":"Viewing File Integrity Management",
+		"uri":"hss_01_0359.html",
+		"doc_type":"usermanual",
+		"p_code":"91",
+		"code":"92"
+	},
+	{
+		"desc":"Only premium, WTP, and container editions support file integrity-related operations.",
+		"product_code":"hss",
+		"title":"Checking Change Details",
+		"uri":"hss_01_0361.html",
+		"doc_type":"usermanual",
+		"p_code":"91",
+		"code":"93"
+	},
+	{
+		"desc":"Only premium, WTP, and container editions support file integrity-related operations.",
+		"product_code":"hss",
+		"title":"Checking Modified Files",
+		"uri":"hss_01_0362.html",
+		"doc_type":"usermanual",
+		"p_code":"91",
+		"code":"94"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Intrusion Detection",
+		"uri":"hss_01_0030.html",
+		"doc_type":"usermanual",
+		"p_code":"",
+		"code":"95"
+	},
+	{
+		"desc":"HSS generates alarms on a range of intrusion events, including brute-force attacks, abnormal process behaviors, web shells, abnormal logins, and malicious processes. You ",
+		"product_code":"hss",
+		"title":"Server Alarms",
+		"uri":"hss_01_0277.html",
+		"doc_type":"usermanual",
+		"p_code":"95",
+		"code":"96"
+	},
+	{
+		"desc":"The Events page displays the alarm events generated in the last 30 days. You can manually handle the alarmed items.The status of a handled event changes from Unhandled to",
+		"product_code":"hss",
+		"title":"Viewing Server Alarms",
+		"uri":"hss_01_0026.html",
+		"doc_type":"usermanual",
+		"p_code":"95",
+		"code":"97"
+	},
+	{
+		"desc":"The Events page displays the alarms generated in the last 30 days.The status of a handled alarm changes from Unhandled to Handled.To skip the checks on high-risk command ",
+		"product_code":"hss",
+		"title":"Handling Server Alarms",
+		"uri":"hss_01_0413.html",
+		"doc_type":"usermanual",
+		"p_code":"95",
+		"code":"98"
+	},
+	{
+		"desc":"HSS can isolate detected threat files. Files that have been isolated are displayed on a slide-out panel on the Server Alarms page. You can click Isolated Files on the upp",
+		"product_code":"hss",
+		"title":"Managing Isolated Files",
+		"uri":"hss_01_0331.html",
+		"doc_type":"usermanual",
+		"p_code":"95",
+		"code":"99"
+	},
+	{
+		"desc":"After node protection is enabled, an agent is deployed on each container host to monitor the running status of containers in real time. The agents support escape detectio",
+		"product_code":"hss",
+		"title":"Container Alarm Events",
+		"uri":"hss_01_0312.html",
+		"doc_type":"usermanual",
+		"p_code":"95",
+		"code":"100"
+	},
+	{
+		"desc":"HSS displays alarm and event statistics and their summary all on one page. You can have a quick overview of alarms, including the numbers of containers with alarms, handl",
+		"product_code":"hss",
+		"title":"Viewing Container Alarms",
+		"uri":"hss_01_0313.html",
+		"doc_type":"usermanual",
+		"p_code":"95",
+		"code":"101"
+	},
+	{
+		"desc":"HSS displays alarm and event statistics and their summary all on one page. You can have a quick overview of alarms, including the numbers of containers with alarms, handl",
+		"product_code":"hss",
+		"title":"Handling Container Alarms",
+		"uri":"hss_01_0414.html",
+		"doc_type":"usermanual",
+		"p_code":"95",
+		"code":"102"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Whitelist Management",
+		"uri":"hss_01_0367.html",
+		"doc_type":"usermanual",
+		"p_code":"95",
+		"code":"103"
+	},
+	{
+		"desc":"You can configure the IP addresses of destination servers, login IP addresses, login usernames, and user behaviors in the Login Whitelist.If the destination server IP add",
+		"product_code":"hss",
+		"title":"Managing Login Whitelist",
+		"uri":"hss_01_0029.html",
+		"doc_type":"usermanual",
+		"p_code":"103",
+		"code":"104"
+	},
+	{
+		"desc":"You can configure the alarm whitelist to reduce false alarms. Events can be deleted from the whitelist.Whitelisted events will not trigger alarms.On the Alarms page, you ",
+		"product_code":"hss",
+		"title":"Managing the Alarm Whitelist",
+		"uri":"hss_01_0028.html",
+		"doc_type":"usermanual",
+		"p_code":"103",
+		"code":"105"
+	},
+	{
+		"desc":"HSS generates risky account alarms when non-root users are added to the root user group. You can add the trusted non-root users to the system user whitelist. HSS does not",
+		"product_code":"hss",
+		"title":"Managing the System User Whitelist",
+		"uri":"hss_01_0496.html",
+		"doc_type":"usermanual",
+		"p_code":"103",
+		"code":"106"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Security Operations",
+		"uri":"hss_01_0041.html",
+		"doc_type":"usermanual",
+		"p_code":"",
+		"code":"107"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Policy Management",
+		"uri":"hss_01_0314.html",
+		"doc_type":"usermanual",
+		"p_code":"107",
+		"code":"108"
+	},
+	{
+		"desc":"If policies such as asset collection, baseline check, and intrusion detection do not meet your server protection requirements, you can manage these policies.Table 1 lists",
+		"product_code":"hss",
+		"title":"Overview",
+		"uri":"hss_01_0045.html",
+		"doc_type":"usermanual",
+		"p_code":"108",
+		"code":"109"
+	},
+	{
+		"desc":"For premium and container editions, you can copy a policy group and customize it as required to meet server security requirements in different application scenarios.If yo",
+		"product_code":"hss",
+		"title":"Creating a Policy Group",
+		"uri":"hss_01_0368.html",
+		"doc_type":"usermanual",
+		"p_code":"108",
+		"code":"110"
+	},
+	{
+		"desc":"After HSS is enabled, you can configure HSS policies based on your service requirements.The enterprise, premium, WTP, or container edition is enabled.For the default poli",
+		"product_code":"hss",
+		"title":"Configuring Policies",
+		"uri":"hss_01_0044.html",
+		"doc_type":"usermanual",
+		"p_code":"108",
+		"code":"111"
+	},
+	{
+		"desc":"Preset policy groups cannot be deleted. You can delete custom policy groups of premium edition and container edition.After a policy group is deleted, the Policy Group col",
+		"product_code":"hss",
+		"title":"Deleting a Policy Group",
+		"uri":"hss_01_0596.html",
+		"doc_type":"usermanual",
+		"p_code":"108",
+		"code":"112"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Security Report",
+		"uri":"hss_01_0553.html",
+		"doc_type":"usermanual",
+		"p_code":"",
+		"code":"113"
+	},
+	{
+		"desc":"You can subscribe to daily, weekly, monthly, and custom reports. The reports show your server security trends and key security events and risks.If you have enabled the en",
+		"product_code":"hss",
+		"title":"Checking a Security Report",
+		"uri":"hss_01_0554.html",
+		"doc_type":"usermanual",
+		"p_code":"113",
+		"code":"114"
+	},
+	{
+		"desc":"This section provides guidance for you to quickly subscribe to weekly or monthly security reports using preset templates on the console. For details about how to customiz",
+		"product_code":"hss",
+		"title":"Subscribing to a Security Report",
+		"uri":"hss_01_0555.html",
+		"doc_type":"usermanual",
+		"p_code":"113",
+		"code":"115"
+	},
+	{
+		"desc":"If the type and content of the existing report template cannot meet your requirements, you can customize a report.The enterprise, premium, WTP, or container edition is en",
+		"product_code":"hss",
+		"title":"Creating a Security Report",
+		"uri":"hss_01_0556.html",
+		"doc_type":"usermanual",
+		"p_code":"113",
+		"code":"116"
+	},
+	{
+		"desc":"This section describes how to modify, cancel, or disable a subscribed report.The enterprise, premium, WTP, or container edition is enabled.You can use default security re",
+		"product_code":"hss",
+		"title":"Managing Security Reports",
+		"uri":"hss_01_0557.html",
+		"doc_type":"usermanual",
+		"p_code":"113",
+		"code":"117"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Installation & Configuration",
+		"uri":"hss_01_0373.html",
+		"doc_type":"usermanual",
+		"p_code":"",
+		"code":"118"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Agent Management",
+		"uri":"hss_01_0317.html",
+		"doc_type":"usermanual",
+		"p_code":"118",
+		"code":"119"
+	},
+	{
+		"desc":"You can sort servers, check whether the agent is installed on them, and can install or uninstall the agent. On the console, you can find the agent installation instructio",
+		"product_code":"hss",
+		"title":"Viewing Agent Status",
+		"uri":"hss_01_0374.html",
+		"doc_type":"usermanual",
+		"p_code":"119",
+		"code":"120"
+	},
+	{
+		"desc":"Install the agent on a server. Only then can the server be protected by HSS.If your servers are managed by enterprise projects, you can select an enterprise project to vi",
+		"product_code":"hss",
+		"title":"Installing an Agent",
+		"uri":"hss_01_0570.html",
+		"doc_type":"usermanual",
+		"p_code":"119",
+		"code":"121"
+	},
+	{
+		"desc":"HSS keeps improving its service capabilities, including but not limited to new features and defect fixes. Please upgrade your agent to the latest version in a timely mann",
+		"product_code":"hss",
+		"title":"Upgrading the Agent",
+		"uri":"hss_01_0462.html",
+		"doc_type":"usermanual",
+		"p_code":"119",
+		"code":"122"
+	},
+	{
+		"desc":"If you no longer need to use HSS, uninstall the agent by following the instructions provided in this section. If the agent is uninstalled, HSS will stop protecting your s",
+		"product_code":"hss",
+		"title":"Uninstalling an Agent",
+		"uri":"hss_01_0376.html",
+		"doc_type":"usermanual",
+		"p_code":"119",
+		"code":"123"
+	},
+	{
+		"desc":"You can add common login locations, common IP addresses, and whitelist IP addresses, and enable malicious program isolation and killing to enhance server security.For det",
+		"product_code":"hss",
+		"title":"Security Configurations",
+		"uri":"hss_01_0385.html",
+		"doc_type":"usermanual",
+		"p_code":"118",
+		"code":"124"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Audit",
+		"uri":"hss_01_0070.html",
+		"doc_type":"usermanual",
+		"p_code":"",
+		"code":"125"
+	},
+	{
+		"desc":"Cloud Trace Service (CTS) records all operations on HSS, including requests initiated from the management console or open APIs and responses to the requests, for tenants ",
+		"product_code":"hss",
+		"title":"HSS Operations Supported by CTS",
+		"uri":"hss_01_0071.html",
+		"doc_type":"usermanual",
+		"p_code":"125",
+		"code":"126"
+	},
+	{
+		"desc":"After you enable CTS and the management tracker is created, CTS starts recording operations on cloud resources. CTS stores operation records generated in the last seven d",
+		"product_code":"hss",
+		"title":"Querying Real-Time Traces",
+		"uri":"hss_01_0603.html",
+		"doc_type":"usermanual",
+		"p_code":"125",
+		"code":"127"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Permissions Management",
+		"uri":"hss_01_0131.html",
+		"doc_type":"usermanual",
+		"p_code":"",
+		"code":"128"
+	},
+	{
+		"desc":"This section describes IAM's fine-grained permissions management for your HSS resources. With IAM, you can:Create IAM users for employees based on the organizational stru",
+		"product_code":"hss",
+		"title":"Creating a User and Granting Permissions",
+		"uri":"hss_01_0133.html",
+		"doc_type":"usermanual",
+		"p_code":"128",
+		"code":"129"
+	},
+	{
+		"desc":"Custom policies can be created to supplement the system-defined policies of HSS.You can create custom policies using one of the following methods:Visual editor: Select cl",
+		"product_code":"hss",
+		"title":"HSS Custom Policies",
+		"uri":"hss_01_0005.html",
+		"doc_type":"usermanual",
+		"p_code":"128",
+		"code":"130"
+	},
+	{
+		"desc":"This section describes fine-grained permissions management for your HSS instances. If your account does not need individual IAM users, then you may skip over this section",
+		"product_code":"hss",
+		"title":"HSS Actions",
+		"uri":"hss_01_0006.html",
+		"doc_type":"usermanual",
+		"p_code":"128",
+		"code":"131"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"FAQs",
+		"uri":"hss_01_0032.html",
+		"doc_type":"usermanual",
+		"p_code":"",
+		"code":"132"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"About HSS",
+		"uri":"hss_01_0258.html",
+		"doc_type":"usermanual",
+		"p_code":"132",
+		"code":"133"
+	},
+	{
+		"desc":"Host Security Service (HSS) helps you identify and manage the assets on your servers, eliminate risks, and defend against intrusions and web page tampering. There are als",
+		"product_code":"hss",
+		"title":"What Is Host Security?",
+		"uri":"hss_01_0033.html",
+		"doc_type":"usermanual",
+		"p_code":"133",
+		"code":"134"
+	},
+	{
+		"desc":"Container Security Service (CGS) scans vulnerabilities and configuration information in images, helping enterprises detect container risks that cannot be found using conv",
+		"product_code":"hss",
+		"title":"What Is Container Security?",
+		"uri":"hss_01_0318.html",
+		"doc_type":"usermanual",
+		"p_code":"133",
+		"code":"135"
+	},
+	{
+		"desc":"Web Tamper Protection (WTP) monitors website directories in real time, backs up files, and restores tampered files using the backup. WTP protects your websites from Troja",
+		"product_code":"hss",
+		"title":"What Is Web Tamper Protection?",
+		"uri":"hss_01_0319.html",
+		"doc_type":"usermanual",
+		"p_code":"133",
+		"code":"136"
+	},
+	{
+		"desc":"An image is a special file system. It provides programs, libraries, resources, configuration files and other files required for a running container. An image also contain",
+		"product_code":"hss",
+		"title":"What Are the Relationships Between Images, Containers, and Applications?",
+		"uri":"hss_01_0320.html",
+		"doc_type":"usermanual",
+		"p_code":"133",
+		"code":"137"
+	},
+	{
+		"desc":"The HSS agent is used to scan all servers and containers, monitor their status in real time, and collect their information and report to the cloud protection center.The a",
+		"product_code":"hss",
+		"title":"What Is the HSS Agent?",
+		"uri":"hss_01_0245.html",
+		"doc_type":"usermanual",
+		"p_code":"133",
+		"code":"138"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Agent FAQs",
+		"uri":"hss_01_0321.html",
+		"doc_type":"usermanual",
+		"p_code":"132",
+		"code":"139"
+	},
+	{
+		"desc":"Yes, it may be in conflict with DenyHosts.Symptom: The IP address of the login host is identified as an attack IP address but can not be unblocked.Cause: HSS and DenyHost",
+		"product_code":"hss",
+		"title":"Is the Agent in Conflict with Any Other Security Software?",
+		"uri":"hss_01_0037.html",
+		"doc_type":"usermanual",
+		"p_code":"139",
+		"code":"140"
+	},
+	{
+		"desc":"Two uninstallation methods are available: one-click uninstallation and manual local uninstallation.The agent was installed using an incorrect package and you need to unin",
+		"product_code":"hss",
+		"title":"How Do I Uninstall the Agent?",
+		"uri":"hss_01_0119.html",
+		"doc_type":"usermanual",
+		"p_code":"139",
+		"code":"141"
+	},
+	{
+		"desc":"The agent fails to be installed by running commands. The server list page on the console still indicates that the agent is not installed.The SELinux firewall has not been",
+		"product_code":"hss",
+		"title":"What Should I Do If Agent Installation Failed?",
+		"uri":"hss_01_0069.html",
+		"doc_type":"usermanual",
+		"p_code":"139",
+		"code":"142"
+	},
+	{
+		"desc":"Your agent is probably abnormal if it is in Not installed or Offline state. Agent statuses and their meaning are as follows:Uninstalled: No agent has been installed on th",
+		"product_code":"hss",
+		"title":"How Do I Fix an Abnormal Agent?",
+		"uri":"hss_01_0036.html",
+		"doc_type":"usermanual",
+		"p_code":"139",
+		"code":"143"
+	},
+	{
+		"desc":"The agent installation paths on servers running the Linux or Windows OS cannot be customized. Table 1 describes the default paths.",
+		"product_code":"hss",
+		"title":"What Is the Default Agent Installation Path?",
+		"uri":"hss_01_0096.html",
+		"doc_type":"usermanual",
+		"p_code":"139",
+		"code":"144"
+	},
+	{
+		"desc":"HSS uses lightweight agents, which occupy only a few resources and do not affect your services.The CPU and memory usage is as follows.A running agent occupies a maximum o",
+		"product_code":"hss",
+		"title":"How Many CPU and Memory Resources Are Occupied by the Agent When It Performs Scans?",
+		"uri":"hss_01_0116.html",
+		"doc_type":"usermanual",
+		"p_code":"139",
+		"code":"145"
+	},
+	{
+		"desc":"Yes.All HSS editions can use the same agent installed on a server.",
+		"product_code":"hss",
+		"title":"Do WTP and HSS Use the Same Agent?",
+		"uri":"hss_01_0195.html",
+		"doc_type":"usermanual",
+		"p_code":"139",
+		"code":"146"
+	},
+	{
+		"desc":"Possible agent statuses are:Not installed: The agent has not been installed or successfully started.Online: The agent is running properly.Offline: The communication betwe",
+		"product_code":"hss",
+		"title":"How Do I View Servers Where No Agents Have Been Installed?",
+		"uri":"hss_01_0007.html",
+		"doc_type":"usermanual",
+		"p_code":"139",
+		"code":"147"
+	},
+	{
+		"desc":"On a server, you only need to install the agent once.After the installation, you are advised to restart the servers before enabling HSS and binding quotas.Now both the HS",
+		"product_code":"hss",
+		"title":"What Can I Do If the Agent Status Is Still \"Not installed\" After Installation?",
+		"uri":"hss_01_0394.html",
+		"doc_type":"usermanual",
+		"p_code":"139",
+		"code":"148"
+	},
+	{
+		"desc":"Servers are displayed on both the old and new console of HSS, regardless of whether their agents have been upgraded. The server statuses are properly displayed on the con",
+		"product_code":"hss",
+		"title":"What Do I Do If the  Upgrade Fails?",
+		"uri":"hss_01_0409.html",
+		"doc_type":"usermanual",
+		"p_code":"139",
+		"code":"149"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Brute-force Attack Defense",
+		"uri":"hss_01_0038.html",
+		"doc_type":"usermanual",
+		"p_code":"132",
+		"code":"150"
+	},
+	{
+		"desc":"HSS can detect the following types of brute force attacks:Windows: SqlServer (automatic interception is not supported currently) and RdpLinux: MySQL, vfstp, and SSHIf MyS",
+		"product_code":"hss",
+		"title":"How Does HSS Intercept Brute Force Attacks?",
+		"uri":"hss_01_0008.html",
+		"doc_type":"usermanual",
+		"p_code":"150",
+		"code":"151"
+	},
+	{
+		"desc":"If a brute-force attack succeeded, take immediate measures to prevent attackers from further actions, such as breaching data, performing DDoS attacks, or implanting ranso",
+		"product_code":"hss",
+		"title":"How Do I Handle a Brute-force Attack Alarm?",
+		"uri":"hss_01_0183.html",
+		"doc_type":"usermanual",
+		"p_code":"150",
+		"code":"152"
+	},
+	{
+		"desc":"Intruders who cracked server accounts can exploit permissions to steal or tamper with data on servers, interrupting enterprise services and causing great loss.Configure t",
+		"product_code":"hss",
+		"title":"How Do I Defend Against Brute-force Attacks?",
+		"uri":"hss_01_0256.html",
+		"doc_type":"usermanual",
+		"p_code":"150",
+		"code":"153"
+	},
+	{
+		"desc":"The SSHD service in the host system does not depend on libwrap.so.As a free software library, libwrap implements the universal TCP Wrapper function. Any daemon that conta",
+		"product_code":"hss",
+		"title":"What Do I Do If the Account Cracking Prevention Function Does Not Take Effect on Some Accounts for Linux Servers?",
+		"uri":"hss_01_0097.html",
+		"doc_type":"usermanual",
+		"p_code":"150",
+		"code":"154"
+	},
+	{
+		"desc":"HSS will block an IP address if it has five or more brute-force attack attempts detected within 30 seconds, or 15 or more brute-force attack attempts detected within 3600",
+		"product_code":"hss",
+		"title":"How Do I Unblock an IP Address?",
+		"uri":"hss_01_0287.html",
+		"doc_type":"usermanual",
+		"p_code":"150",
+		"code":"155"
+	},
+	{
+		"desc":"An alarm indicates that an attack was detected. It does not mean your cloud servers have been intruded. If you receive an alarm, handle it and take countermeasures in a t",
+		"product_code":"hss",
+		"title":"What Do I Do If HSS Frequently Reports Brute-force Alarms?",
+		"uri":"hss_01_0418.html",
+		"doc_type":"usermanual",
+		"p_code":"150",
+		"code":"156"
+	},
+	{
+		"desc":"The remote port of a server has been changed, but the brute-force attack records still displays the old port.The remote port configuration is synchronized to HSS through ",
+		"product_code":"hss",
+		"title":"What Do I Do If My Remote Server Port Is Not Updated in Brute-force Attack Records?",
+		"uri":"hss_01_0512.html",
+		"doc_type":"usermanual",
+		"p_code":"150",
+		"code":"157"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Weak Passwords and Unsafe Accounts",
+		"uri":"hss_01_0196.html",
+		"doc_type":"usermanual",
+		"p_code":"132",
+		"code":"158"
+	},
+	{
+		"desc":"Servers using weak passwords are exposed to intrusions. If a weak password alarm is reported, you are advised to change the alarmed password immediately.If simple passwor",
+		"product_code":"hss",
+		"title":"How Do I Handle a Weak Password Alarm?",
+		"uri":"hss_01_0197.html",
+		"doc_type":"usermanual",
+		"p_code":"158",
+		"code":"159"
+	},
+	{
+		"desc":"Comply with the following rules:Use a password with high complexity.The password must meet the following requirements:Contains at least eight characters.Contain at least ",
+		"product_code":"hss",
+		"title":"How Do I Set a Secure Password?",
+		"uri":"hss_01_0166.html",
+		"doc_type":"usermanual",
+		"p_code":"158",
+		"code":"160"
+	},
+	{
+		"desc":"If you have enhanced passwords before disabling the weak password policy, the weak password alarm will not be reported again.If you do not enhance passwords before disabl",
+		"product_code":"hss",
+		"title":"Why Are the Weak Password Alarms Still Reported After the Weak Password Policy Is Disabled?",
+		"uri":"hss_01_0274.html",
+		"doc_type":"usermanual",
+		"p_code":"158",
+		"code":"161"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Intrusions",
+		"uri":"hss_01_0164.html",
+		"doc_type":"usermanual",
+		"p_code":"132",
+		"code":"162"
+	},
+	{
+		"desc":"Take immediate measures to contain the attack, preventing miners from occupying CPU or affecting other applications. If a server is intruded by a mining program, the mini",
+		"product_code":"hss",
+		"title":"What Do I Do If My Servers Are Subjected to a Mining Attack?",
+		"uri":"hss_01_0206.html",
+		"doc_type":"usermanual",
+		"p_code":"162",
+		"code":"163"
+	},
+	{
+		"desc":"After you add a process to the whitelist, it will no longer trigger certain alarms, but its isolation will not be automatically canceled.Choose Installation & Configurati",
+		"product_code":"hss",
+		"title":"Why a Process Is Still Isolated After It Was Whitelisted?",
+		"uri":"hss_01_0207.html",
+		"doc_type":"usermanual",
+		"p_code":"162",
+		"code":"164"
+	},
+	{
+		"desc":"You are advised to:Back up data and disable unnecessary ports.Set a stronger server password.Enable HSS. Your servers will be protected from mining processes by its intru",
+		"product_code":"hss",
+		"title":"What Do I Do If a Mining Process Is Detected on a Server?",
+		"uri":"hss_01_0243.html",
+		"doc_type":"usermanual",
+		"p_code":"162",
+		"code":"165"
+	},
+	{
+		"desc":"Intrusions to your servers before HSS is enabled cannot be detected.If you have applied for HSS, remember to enable it to detect intrusions.Web attacks cannot be detected",
+		"product_code":"hss",
+		"title":"Why Some Attacks on Servers Are Not Detected?",
+		"uri":"hss_01_0193.html",
+		"doc_type":"usermanual",
+		"p_code":"162",
+		"code":"166"
+	},
+	{
+		"desc":"Whether you can unblock an IP address depends on why it was blocked. An IP address will be blocked if it is regarded as the source of a brute-force attack, listed in the ",
+		"product_code":"hss",
+		"title":"Can I Unblock an IP Address Blocked by HSS, and How?",
+		"uri":"hss_01_0013.html",
+		"doc_type":"usermanual",
+		"p_code":"162",
+		"code":"167"
+	},
+	{
+		"desc":"If a blocked IP address does not perform brute-force attacks in the next 12 hours, the IP address will be automatically unblocked.",
+		"product_code":"hss",
+		"title":"Why a Blocked IP Address Is Automatically Unblocked?",
+		"uri":"hss_01_0204.html",
+		"doc_type":"usermanual",
+		"p_code":"162",
+		"code":"168"
+	},
+	{
+		"desc":"Detection period: real-time detectionIsolation and killing period:If you have enabled automatic isolation and killing, the system will scan and kill viruses in real time.",
+		"product_code":"hss",
+		"title":"How Often Does HSS Detect, Isolate, and Kill Malicious Programs?",
+		"uri":"hss_01_0427.html",
+		"doc_type":"usermanual",
+		"p_code":"162",
+		"code":"169"
+	},
+	{
+		"desc":"Check whether the blocked IP address is a malicious IP address or a normal one.If it is normal, add it to the whitelist.If it is malicious, no further operations are requ",
+		"product_code":"hss",
+		"title":"What Do I Do If an IP Address Is Blocked by HSS?",
+		"uri":"hss_01_0429.html",
+		"doc_type":"usermanual",
+		"p_code":"162",
+		"code":"170"
+	},
+	{
+		"desc":"Generally, ransomware is spread through Trojan implantation, emails, files, vulnerabilities, bundles, and storage media.To defend against ransomware intrusions, prevent b",
+		"product_code":"hss",
+		"title":"How Do I Defend Against Ransomware Attacks?",
+		"uri":"hss_01_0430.html",
+		"doc_type":"usermanual",
+		"p_code":"162",
+		"code":"171"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Abnormal Logins",
+		"uri":"hss_01_0188.html",
+		"doc_type":"usermanual",
+		"p_code":"132",
+		"code":"172"
+	},
+	{
+		"desc":"Even whitelisted IP addresses can certain trigger alarms. The SSH login IP address whitelist, Login Whitelist, and remote login functions focus on different aspects of se",
+		"product_code":"hss",
+		"title":"Why Do I Still Receive Remote Login Alarms After Configuring the Login IP Whitelist?",
+		"uri":"hss_01_0189.html",
+		"doc_type":"usermanual",
+		"p_code":"172",
+		"code":"173"
+	},
+	{
+		"desc":"The remote login detection function checks for remote logins into your servers in real time. HSS generates an alarm if it detects logins from locations other than the com",
+		"product_code":"hss",
+		"title":"How Do I Check the User IP address of a Remote Login?",
+		"uri":"hss_01_0091.html",
+		"doc_type":"usermanual",
+		"p_code":"172",
+		"code":"174"
+	},
+	{
+		"desc":"If you select Successful Logins in the Real-Time Alarm Notifications area, HSS will send alarms when detecting any successful logins.If all the accounts on your ECSs are ",
+		"product_code":"hss",
+		"title":"What Can I Do If an Alarm Indicating Successful Login Is Reported?",
+		"uri":"hss_01_0113.html",
+		"doc_type":"usermanual",
+		"p_code":"172",
+		"code":"175"
+	},
+	{
+		"desc":"No.If you do not want to receive remote login alarm notifications, add alarmed locations as common login locations, or deselect the remote login attempt item in alarm not",
+		"product_code":"hss",
+		"title":"Can I Disable Remote Login Detection?",
+		"uri":"hss_01_0120.html",
+		"doc_type":"usermanual",
+		"p_code":"172",
+		"code":"176"
+	},
+	{
+		"desc":"If you have enabled alarm notifications for intrusion detection, you will be notified immediately when an account is cracked or may be cracked.You can also check whether ",
+		"product_code":"hss",
+		"title":"How Do I Know Whether an Intrusion Succeeded?",
+		"uri":"hss_01_0192.html",
+		"doc_type":"usermanual",
+		"p_code":"172",
+		"code":"177"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Unsafe Settings",
+		"uri":"hss_01_0165.html",
+		"doc_type":"usermanual",
+		"p_code":"132",
+		"code":"178"
+	},
+	{
+		"desc":"Your password complexity policy cannot be checked if no pluggable authentication module (PAM) is running in your system.For Debian or Ubuntu, run the apt-get install libp",
+		"product_code":"hss",
+		"title":"How Do I Install a PAM and Set a Proper Password Complexity Policy in a Linux OS?",
+		"uri":"hss_01_0043.html",
+		"doc_type":"usermanual",
+		"p_code":"178",
+		"code":"179"
+	},
+	{
+		"desc":"A proper password complexity policy would be: eight characters for the length of a password and at least three types of the following characters used: uppercase letters, ",
+		"product_code":"hss",
+		"title":"How Do I Set a Proper Password Complexity Policy in a Windows OS?",
+		"uri":"hss_01_0095.html",
+		"doc_type":"usermanual",
+		"p_code":"178",
+		"code":"180"
+	},
+	{
+		"desc":"HSS automatically performs a configuration detection for servers. You can repair unsafe configuration items or ignore the configuration items you trust based on the detec",
+		"product_code":"hss",
+		"title":"How Do I Handle Unsafe Configurations?",
+		"uri":"hss_01_0198.html",
+		"doc_type":"usermanual",
+		"p_code":"178",
+		"code":"181"
+	},
+	{
+		"desc":"You can view the configuration check details online.",
+		"product_code":"hss",
+		"title":"How Do I View Configuration Check Reports?",
+		"uri":"hss_01_0149.html",
+		"doc_type":"usermanual",
+		"p_code":"178",
+		"code":"182"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Vulnerability Management",
+		"uri":"hss_01_0246.html",
+		"doc_type":"usermanual",
+		"p_code":"132",
+		"code":"183"
+	},
+	{
+		"desc":"Restart the Windows OS after you fix its vulnerabilities.Restart the Linux OS after you fix its kernel vulnerabilities.",
+		"product_code":"hss",
+		"title":"How Do I Fix Vulnerabilities?",
+		"uri":"hss_01_0209.html",
+		"doc_type":"usermanual",
+		"p_code":"183",
+		"code":"184"
+	},
+	{
+		"desc":"Perform the following operations to locate the cause and fix the problems.For more information, see the section \"Handling Vulnerabilities\".No yum sources have been config",
+		"product_code":"hss",
+		"title":"What Do I Do If an Alarm Still Exists After I Fixed a Vulnerability?",
+		"uri":"hss_01_0176.html",
+		"doc_type":"usermanual",
+		"p_code":"183",
+		"code":"185"
+	},
+	{
+		"desc":"The vulnerability list displays vulnerabilities detected in the last seven days. After a vulnerability is detected for a server, if you change the server name and do not ",
+		"product_code":"hss",
+		"title":"Why a Server Displayed in Vulnerability Information Does Not Exist?",
+		"uri":"hss_01_0247.html",
+		"doc_type":"usermanual",
+		"p_code":"183",
+		"code":"186"
+	},
+	{
+		"desc":"After you fixed Windows OS vulnerabilities or Linux kernel vulnerabilities, you need to restart servers for the fix to take effect, or HSS will continue to warn you of th",
+		"product_code":"hss",
+		"title":"Do I Need to Restart a Server After Fixing its Vulnerabilities?",
+		"uri":"hss_01_0114.html",
+		"doc_type":"usermanual",
+		"p_code":"183",
+		"code":"187"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Web Tamper Protection",
+		"uri":"hss_01_0250.html",
+		"doc_type":"usermanual",
+		"p_code":"132",
+		"code":"188"
+	},
+	{
+		"desc":"WTP protects files in directories. If no directories are specified, WTP cannot take effect even if it is enabled.",
+		"product_code":"hss",
+		"title":"Why Do I Need to Add a Protected Directory?",
+		"uri":"hss_01_0199.html",
+		"doc_type":"usermanual",
+		"p_code":"188",
+		"code":"189"
+	},
+	{
+		"desc":"If you need to modify files in the protected directory, stop protection for the protected directory first.After the files are modified, resume protection for the director",
+		"product_code":"hss",
+		"title":"How Do I Modify a Protected Directory?",
+		"uri":"hss_01_0185.html",
+		"doc_type":"usermanual",
+		"p_code":"188",
+		"code":"190"
+	},
+	{
+		"desc":"The causes of this problem vary by scenarios.SymptomThe agent status is Offline or Not installed in the server list on the Web Tamper Protection page.The agent status is ",
+		"product_code":"hss",
+		"title":"What Should I Do If WTP Cannot Be Enabled?",
+		"uri":"hss_01_0202.html",
+		"doc_type":"usermanual",
+		"p_code":"188",
+		"code":"191"
+	},
+	{
+		"desc":"Protected directories are read-only. To modify files or update the website, perform any of the following operations.Disable WTP while you modify files in protected direct",
+		"product_code":"hss",
+		"title":"How Do I Modify a File After WTP Is Enabled?",
+		"uri":"hss_01_0255.html",
+		"doc_type":"usermanual",
+		"p_code":"188",
+		"code":"192"
+	},
+	{
+		"desc":"Dynamic WTP protects your Tomcat applications.For this function to take effect, ensure that:There are Tomcat applications running on your servers.Your servers run the Lin",
+		"product_code":"hss",
+		"title":"What Can I Do If I Enabled Dynamic WTP But Its Status Is Enabled but not in effect?",
+		"uri":"hss_01_0014.html",
+		"doc_type":"usermanual",
+		"p_code":"188",
+		"code":"193"
+	},
+	{
+		"desc":"The web tamper protection function of HSS monitors website directories in real time, backs up files, and restores tampered files using the backup, protecting websites fro",
+		"product_code":"hss",
+		"title":"What Are the Differences Between the Web Tamper Protection Functions of HSS and WAF?",
+		"uri":"hss_01_0017.html",
+		"doc_type":"usermanual",
+		"p_code":"188",
+		"code":"194"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Container Guard Service",
+		"uri":"hss_01_0323.html",
+		"doc_type":"usermanual",
+		"p_code":"132",
+		"code":"195"
+	},
+	{
+		"desc":"Disabling protection does not affect services, but will increase security risks. You are advised to keep your servers protected.If your servers are managed by enterprise ",
+		"product_code":"hss",
+		"title":"How Do I Disable Node Protection?",
+		"uri":"hss_01_0325.html",
+		"doc_type":"usermanual",
+		"p_code":"195",
+		"code":"196"
+	},
+	{
+		"desc":"When you enable node protection, the system automatically installs the CGS plug-in on the node.An HSS quota protects one cluster node.",
+		"product_code":"hss",
+		"title":"How Do I Enable Node Protection?",
+		"uri":"hss_01_0324.html",
+		"doc_type":"usermanual",
+		"p_code":"195",
+		"code":"197"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Ransomware Protection",
+		"uri":"hss_01_0404.html",
+		"doc_type":"usermanual",
+		"p_code":"132",
+		"code":"198"
+	},
+	{
+		"desc":"The backup mechanism of ransomware protection inherits that of CBR (Cloud Backup and Restoration). Backup files of ransomware protection can be centrally managed and view",
+		"product_code":"hss",
+		"title":"What Are the Differences Between Ransomware Protection Backup and Cloud Backup?",
+		"uri":"hss_01_0405.html",
+		"doc_type":"usermanual",
+		"p_code":"198",
+		"code":"199"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Security Configurations",
+		"uri":"hss_01_0426.html",
+		"doc_type":"usermanual",
+		"p_code":"132",
+		"code":"200"
+	},
+	{
+		"desc":"You can log in to a server via the console but not via SSH.A server will be blocked if it is regarded as a suspicious server performing brute-force attacks (for example, ",
+		"product_code":"hss",
+		"title":"What Can I Do If I Cannot Remotely Log In to a Server via SSH?",
+		"uri":"hss_01_0436.html",
+		"doc_type":"usermanual",
+		"p_code":"200",
+		"code":"201"
+	},
+	{
+		"desc":"This FAQ shows you how to use 2FA.Logging in to a Linux serverUse PuTTY or Xshell to log in to your server.Select Keyboard Interactive and enter the user identity informa",
+		"product_code":"hss",
+		"title":"How Do I Use 2FA?",
+		"uri":"hss_01_0437.html",
+		"doc_type":"usermanual",
+		"p_code":"200",
+		"code":"202"
+	},
+	{
+		"desc":"The two-factor authentication function does not take effect immediately after being enabled.Wait for 5 minutes and try again.Wait for 5 minutes and try again.To enable tw",
+		"product_code":"hss",
+		"title":"Why Can't I Receive a Verification Code After 2FA Is Enabled?",
+		"uri":"hss_01_0439.html",
+		"doc_type":"usermanual",
+		"p_code":"200",
+		"code":"203"
+	},
+	{
+		"desc":"The login failed probably because file configurations or the login mode was incorrect.Check whether the configuration file is correct.Configuration file path: /etc/ssh/ss",
+		"product_code":"hss",
+		"title":"Why Does My Login Fail After I Enable 2FA?",
+		"uri":"hss_01_0440.html",
+		"doc_type":"usermanual",
+		"p_code":"200",
+		"code":"204"
+	},
+	{
+		"desc":"You can set your mobile phone number only if you have selected SMS/Email for Method. Set your mobile phone number in the SMN topic you choose.In the SMN Topic drop-down l",
+		"product_code":"hss",
+		"title":"How Do I Add a Mobile Phone Number or Email Address for Receiving 2FA Verification Notifications?",
+		"uri":"hss_01_0441.html",
+		"doc_type":"usermanual",
+		"p_code":"200",
+		"code":"205"
+	},
+	{
+		"desc":"Security-Enhanced Linux (SELinux) is a kernel module and security subsystem of Linux.SELinux minimizes the resources that can be accessed by service processes in the syst",
+		"product_code":"hss",
+		"title":"How Do I Disable the SELinux Firewall?",
+		"uri":"hss_01_0472.html",
+		"doc_type":"usermanual",
+		"p_code":"200",
+		"code":"206"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Others",
+		"uri":"hss_01_0101.html",
+		"doc_type":"usermanual",
+		"p_code":"132",
+		"code":"207"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"How Do I Use the Windows Remote Desktop Connection Tool to Connect to a Server?",
+		"uri":"hss_01_0269.html",
+		"doc_type":"usermanual",
+		"p_code":"207",
+		"code":"208"
+	},
+	{
+		"desc":"The following table describes log files and their paths.",
+		"product_code":"hss",
+		"title":"How Do I Check HSS Log Files?",
+		"uri":"hss_01_0099.html",
+		"doc_type":"usermanual",
+		"p_code":"207",
+		"code":"209"
+	},
+	{
+		"desc":"The account hacking prevention function for Linux supports MySQL 5.6 and 5.7. Perform the following steps to enable logging for login failure:show global variables like '",
+		"product_code":"hss",
+		"title":"How Do I Enable Logging for Login Failures?",
+		"uri":"hss_01_0103.html",
+		"doc_type":"usermanual",
+		"p_code":"207",
+		"code":"210"
+	},
+	{
+		"desc":"If you are sure the changes on your critical files are safe, you do not need to handle the alarm. It will be automatically cleared in seven days.",
+		"product_code":"hss",
+		"title":"How Do I Clear an Alarm on Critical File Changes?",
+		"uri":"hss_01_0117.html",
+		"doc_type":"usermanual",
+		"p_code":"207",
+		"code":"211"
+	},
+	{
+		"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+		"product_code":"hss",
+		"title":"Change History",
+		"uri":"hss_01_0417.html",
+		"doc_type":"usermanual",
+		"p_code":"",
+		"code":"212"
+	}
+]
\ No newline at end of file
diff --git a/docs/hss/umn/PARAMETERS.txt b/docs/hss/umn/PARAMETERS.txt
new file mode 100644
index 00000000..6da8d5f0
--- /dev/null
+++ b/docs/hss/umn/PARAMETERS.txt
@@ -0,0 +1,3 @@
+version=""
+language="en-us"
+type=""
\ No newline at end of file
diff --git a/docs/hss/umn/en-us_image_0000001517158254.png b/docs/hss/umn/en-us_image_0000001517158254.png
new file mode 100644
index 00000000..2c9147cd
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001517158254.png differ
diff --git a/docs/hss/umn/en-us_image_0000001517317850.png b/docs/hss/umn/en-us_image_0000001517317850.png
new file mode 100644
index 00000000..5bca19f0
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001517317850.png differ
diff --git a/docs/hss/umn/en-us_image_0000001517477398.png b/docs/hss/umn/en-us_image_0000001517477398.png
new file mode 100644
index 00000000..6ecee2c2
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001517477398.png differ
diff --git a/docs/hss/umn/en-us_image_0000001517477582.png b/docs/hss/umn/en-us_image_0000001517477582.png
new file mode 100644
index 00000000..90c33e81
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001517477582.png differ
diff --git a/docs/hss/umn/en-us_image_0000001517477602.jpg b/docs/hss/umn/en-us_image_0000001517477602.jpg
new file mode 100644
index 00000000..74edbf67
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001517477602.jpg differ
diff --git a/docs/hss/umn/en-us_image_0000001517637370.png b/docs/hss/umn/en-us_image_0000001517637370.png
new file mode 100644
index 00000000..d071e29e
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001517637370.png differ
diff --git a/docs/hss/umn/en-us_image_0000001517637374.png b/docs/hss/umn/en-us_image_0000001517637374.png
new file mode 100644
index 00000000..28807ed3
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001517637374.png differ
diff --git a/docs/hss/umn/en-us_image_0000001517637478.png b/docs/hss/umn/en-us_image_0000001517637478.png
new file mode 100644
index 00000000..cb4776fa
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001517637478.png differ
diff --git a/docs/hss/umn/en-us_image_0000001517637590.png b/docs/hss/umn/en-us_image_0000001517637590.png
new file mode 100644
index 00000000..f5b140fb
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001517637590.png differ
diff --git a/docs/hss/umn/en-us_image_0000001558495162.png b/docs/hss/umn/en-us_image_0000001558495162.png
new file mode 100644
index 00000000..5b7e8213
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001558495162.png differ
diff --git a/docs/hss/umn/en-us_image_0000001563116264.png b/docs/hss/umn/en-us_image_0000001563116264.png
new file mode 100644
index 00000000..dbc1f75e
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001563116264.png differ
diff --git a/docs/hss/umn/en-us_image_0000001563224758.png b/docs/hss/umn/en-us_image_0000001563224758.png
new file mode 100644
index 00000000..4b50a3d7
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001563224758.png differ
diff --git a/docs/hss/umn/en-us_image_0000001563247778.png b/docs/hss/umn/en-us_image_0000001563247778.png
new file mode 100644
index 00000000..e7354558
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001563247778.png differ
diff --git a/docs/hss/umn/en-us_image_0000001563252390.png b/docs/hss/umn/en-us_image_0000001563252390.png
new file mode 100644
index 00000000..d8bee4fb
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001563252390.png differ
diff --git a/docs/hss/umn/en-us_image_0000001563395342.png b/docs/hss/umn/en-us_image_0000001563395342.png
new file mode 100644
index 00000000..09b79b8a
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001563395342.png differ
diff --git a/docs/hss/umn/en-us_image_0000001563539818.png b/docs/hss/umn/en-us_image_0000001563539818.png
new file mode 100644
index 00000000..2735230e
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001563539818.png differ
diff --git a/docs/hss/umn/en-us_image_0000001563713322.png b/docs/hss/umn/en-us_image_0000001563713322.png
new file mode 100644
index 00000000..062e982d
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001563713322.png differ
diff --git a/docs/hss/umn/en-us_image_0000001563731138.png b/docs/hss/umn/en-us_image_0000001563731138.png
new file mode 100644
index 00000000..cb9cbb28
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001563731138.png differ
diff --git a/docs/hss/umn/en-us_image_0000001563791430.png b/docs/hss/umn/en-us_image_0000001563791430.png
new file mode 100644
index 00000000..19f81e01
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001563791430.png differ
diff --git a/docs/hss/umn/en-us_image_0000001563800218.png b/docs/hss/umn/en-us_image_0000001563800218.png
new file mode 100644
index 00000000..c5febdbd
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001563800218.png differ
diff --git a/docs/hss/umn/en-us_image_0000001563952546.png b/docs/hss/umn/en-us_image_0000001563952546.png
new file mode 100644
index 00000000..164e04dc
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001563952546.png differ
diff --git a/docs/hss/umn/en-us_image_0000001563953746.png b/docs/hss/umn/en-us_image_0000001563953746.png
new file mode 100644
index 00000000..1ad91c14
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001563953746.png differ
diff --git a/docs/hss/umn/en-us_image_0000001564103542.png b/docs/hss/umn/en-us_image_0000001564103542.png
new file mode 100644
index 00000000..ae5f0004
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001564103542.png differ
diff --git a/docs/hss/umn/en-us_image_0000001564104674.png b/docs/hss/umn/en-us_image_0000001564104674.png
new file mode 100644
index 00000000..ba8896f8
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001564104674.png differ
diff --git a/docs/hss/umn/en-us_image_0000001564275346.png b/docs/hss/umn/en-us_image_0000001564275346.png
new file mode 100644
index 00000000..e01df20d
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001564275346.png differ
diff --git a/docs/hss/umn/en-us_image_0000001564547244.png b/docs/hss/umn/en-us_image_0000001564547244.png
new file mode 100644
index 00000000..e3bfe788
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001564547244.png differ
diff --git a/docs/hss/umn/en-us_image_0000001567973464.png b/docs/hss/umn/en-us_image_0000001567973464.png
new file mode 100644
index 00000000..fd8a1704
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001567973464.png differ
diff --git a/docs/hss/umn/en-us_image_0000001568317625.png b/docs/hss/umn/en-us_image_0000001568317625.png
new file mode 100644
index 00000000..cb4776fa
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001568317625.png differ
diff --git a/docs/hss/umn/en-us_image_0000001568317649.png b/docs/hss/umn/en-us_image_0000001568317649.png
new file mode 100644
index 00000000..08e39c44
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001568317649.png differ
diff --git a/docs/hss/umn/en-us_image_0000001568317673.png b/docs/hss/umn/en-us_image_0000001568317673.png
new file mode 100644
index 00000000..2da9f527
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001568317673.png differ
diff --git a/docs/hss/umn/en-us_image_0000001568317677.png b/docs/hss/umn/en-us_image_0000001568317677.png
new file mode 100644
index 00000000..b587616a
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001568317677.png differ
diff --git a/docs/hss/umn/en-us_image_0000001568317709.png b/docs/hss/umn/en-us_image_0000001568317709.png
new file mode 100644
index 00000000..77583563
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001568317709.png differ
diff --git a/docs/hss/umn/en-us_image_0000001568317737.png b/docs/hss/umn/en-us_image_0000001568317737.png
new file mode 100644
index 00000000..e2c5d84e
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001568317737.png differ
diff --git a/docs/hss/umn/en-us_image_0000001568437337.png b/docs/hss/umn/en-us_image_0000001568437337.png
new file mode 100644
index 00000000..40b0feae
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001568437337.png differ
diff --git a/docs/hss/umn/en-us_image_0000001568437401.png b/docs/hss/umn/en-us_image_0000001568437401.png
new file mode 100644
index 00000000..f8d6460e
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001568437401.png differ
diff --git a/docs/hss/umn/en-us_image_0000001568517685.png b/docs/hss/umn/en-us_image_0000001568517685.png
new file mode 100644
index 00000000..e5b96c31
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001568517685.png differ
diff --git a/docs/hss/umn/en-us_image_0000001568517705.png b/docs/hss/umn/en-us_image_0000001568517705.png
new file mode 100644
index 00000000..6ecee2c2
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001568517705.png differ
diff --git a/docs/hss/umn/en-us_image_0000001568637409.png b/docs/hss/umn/en-us_image_0000001568637409.png
new file mode 100644
index 00000000..6ce03300
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001568637409.png differ
diff --git a/docs/hss/umn/en-us_image_0000001568637417.png b/docs/hss/umn/en-us_image_0000001568637417.png
new file mode 100644
index 00000000..e291d65e
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001568637417.png differ
diff --git a/docs/hss/umn/en-us_image_0000001568637593.png b/docs/hss/umn/en-us_image_0000001568637593.png
new file mode 100644
index 00000000..350cea3f
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001568637593.png differ
diff --git a/docs/hss/umn/en-us_image_0000001568637685.png b/docs/hss/umn/en-us_image_0000001568637685.png
new file mode 100644
index 00000000..5514234c
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001568637685.png differ
diff --git a/docs/hss/umn/en-us_image_0000001568637701.png b/docs/hss/umn/en-us_image_0000001568637701.png
new file mode 100644
index 00000000..64906454
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001568637701.png differ
diff --git a/docs/hss/umn/en-us_image_0000001585737324.png b/docs/hss/umn/en-us_image_0000001585737324.png
new file mode 100644
index 00000000..06db5719
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001585737324.png differ
diff --git a/docs/hss/umn/en-us_image_0000001586056592.png b/docs/hss/umn/en-us_image_0000001586056592.png
new file mode 100644
index 00000000..3b1db499
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001586056592.png differ
diff --git a/docs/hss/umn/en-us_image_0000001606804308.png b/docs/hss/umn/en-us_image_0000001606804308.png
new file mode 100644
index 00000000..14f09278
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001606804308.png differ
diff --git a/docs/hss/umn/en-us_image_0000001606964064.png b/docs/hss/umn/en-us_image_0000001606964064.png
new file mode 100644
index 00000000..f6718f34
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001606964064.png differ
diff --git a/docs/hss/umn/en-us_image_0000001613689505.png b/docs/hss/umn/en-us_image_0000001613689505.png
new file mode 100644
index 00000000..af4fa1e2
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001613689505.png differ
diff --git a/docs/hss/umn/en-us_image_0000001613967749.png b/docs/hss/umn/en-us_image_0000001613967749.png
new file mode 100644
index 00000000..06b3046c
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001613967749.png differ
diff --git a/docs/hss/umn/en-us_image_0000001613970477.png b/docs/hss/umn/en-us_image_0000001613970477.png
new file mode 100644
index 00000000..0a509ad8
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001613970477.png differ
diff --git a/docs/hss/umn/en-us_image_0000001614183089.png b/docs/hss/umn/en-us_image_0000001614183089.png
new file mode 100644
index 00000000..adb3a43b
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001614183089.png differ
diff --git a/docs/hss/umn/en-us_image_0000001614383481.png b/docs/hss/umn/en-us_image_0000001614383481.png
new file mode 100644
index 00000000..b2a41c27
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001614383481.png differ
diff --git a/docs/hss/umn/en-us_image_0000001614384633.png b/docs/hss/umn/en-us_image_0000001614384633.png
new file mode 100644
index 00000000..c3368eed
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001614384633.png differ
diff --git a/docs/hss/umn/en-us_image_0000001618050385.png b/docs/hss/umn/en-us_image_0000001618050385.png
new file mode 100644
index 00000000..9133a067
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001618050385.png differ
diff --git a/docs/hss/umn/en-us_image_0000001618285045.png b/docs/hss/umn/en-us_image_0000001618285045.png
new file mode 100644
index 00000000..e09aeb36
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001618285045.png differ
diff --git a/docs/hss/umn/en-us_image_0000001618324457.png b/docs/hss/umn/en-us_image_0000001618324457.png
new file mode 100644
index 00000000..2184d6ca
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001618324457.png differ
diff --git a/docs/hss/umn/en-us_image_0000001618325933.png b/docs/hss/umn/en-us_image_0000001618325933.png
new file mode 100644
index 00000000..1255d7bc
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001618325933.png differ
diff --git a/docs/hss/umn/en-us_image_0000001619472165.png b/docs/hss/umn/en-us_image_0000001619472165.png
new file mode 100644
index 00000000..cf1b6b3c
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001619472165.png differ
diff --git a/docs/hss/umn/en-us_image_0000001620839122.png b/docs/hss/umn/en-us_image_0000001620839122.png
new file mode 100644
index 00000000..443af5be
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001620839122.png differ
diff --git a/docs/hss/umn/en-us_image_0000001620842718.png b/docs/hss/umn/en-us_image_0000001620842718.png
new file mode 100644
index 00000000..3deb3f4c
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001620842718.png differ
diff --git a/docs/hss/umn/en-us_image_0000001620847478.png b/docs/hss/umn/en-us_image_0000001620847478.png
new file mode 100644
index 00000000..a1ea2d7b
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001620847478.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621122554.png b/docs/hss/umn/en-us_image_0000001621122554.png
new file mode 100644
index 00000000..7eb0206a
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621122554.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621154510.png b/docs/hss/umn/en-us_image_0000001621154510.png
new file mode 100644
index 00000000..1b12e04a
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621154510.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621162450.png b/docs/hss/umn/en-us_image_0000001621162450.png
new file mode 100644
index 00000000..630b79b5
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621162450.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621167210.png b/docs/hss/umn/en-us_image_0000001621167210.png
new file mode 100644
index 00000000..d273559b
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621167210.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621219284.png b/docs/hss/umn/en-us_image_0000001621219284.png
new file mode 100644
index 00000000..a79107d1
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621219284.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621322446.png b/docs/hss/umn/en-us_image_0000001621322446.png
new file mode 100644
index 00000000..85f0836d
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621322446.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621339160.png b/docs/hss/umn/en-us_image_0000001621339160.png
new file mode 100644
index 00000000..8104f930
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621339160.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621479770.png b/docs/hss/umn/en-us_image_0000001621479770.png
new file mode 100644
index 00000000..dfabf286
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621479770.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621479774.png b/docs/hss/umn/en-us_image_0000001621479774.png
new file mode 100644
index 00000000..14f09278
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621479774.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621479778.png b/docs/hss/umn/en-us_image_0000001621479778.png
new file mode 100644
index 00000000..5d5f6991
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621479778.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621479782.png b/docs/hss/umn/en-us_image_0000001621479782.png
new file mode 100644
index 00000000..afecccbd
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621479782.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621480454.png b/docs/hss/umn/en-us_image_0000001621480454.png
new file mode 100644
index 00000000..fc724e8e
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621480454.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621481094.png b/docs/hss/umn/en-us_image_0000001621481094.png
new file mode 100644
index 00000000..e5c568c9
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621481094.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621634874.png b/docs/hss/umn/en-us_image_0000001621634874.png
new file mode 100644
index 00000000..6e3337de
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621634874.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621639582.png b/docs/hss/umn/en-us_image_0000001621639582.png
new file mode 100644
index 00000000..f6718f34
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621639582.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621639586.png b/docs/hss/umn/en-us_image_0000001621639586.png
new file mode 100644
index 00000000..f6718f34
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621639586.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621639590.png b/docs/hss/umn/en-us_image_0000001621639590.png
new file mode 100644
index 00000000..f6718f34
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621639590.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621640278.png b/docs/hss/umn/en-us_image_0000001621640278.png
new file mode 100644
index 00000000..64c6d24b
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621640278.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621640914.png b/docs/hss/umn/en-us_image_0000001621640914.png
new file mode 100644
index 00000000..2a78f983
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621640914.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621799506.png b/docs/hss/umn/en-us_image_0000001621799506.png
new file mode 100644
index 00000000..fa5b274d
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621799506.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621799510.png b/docs/hss/umn/en-us_image_0000001621799510.png
new file mode 100644
index 00000000..14f09278
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621799510.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621799514.png b/docs/hss/umn/en-us_image_0000001621799514.png
new file mode 100644
index 00000000..f6718f34
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621799514.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621799518.png b/docs/hss/umn/en-us_image_0000001621799518.png
new file mode 100644
index 00000000..14f09278
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621799518.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621827002.png b/docs/hss/umn/en-us_image_0000001621827002.png
new file mode 100644
index 00000000..f8c10104
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621827002.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621959478.png b/docs/hss/umn/en-us_image_0000001621959478.png
new file mode 100644
index 00000000..14f09278
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621959478.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621959482.png b/docs/hss/umn/en-us_image_0000001621959482.png
new file mode 100644
index 00000000..14f09278
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621959482.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621959486.png b/docs/hss/umn/en-us_image_0000001621959486.png
new file mode 100644
index 00000000..14f09278
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621959486.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621959490.png b/docs/hss/umn/en-us_image_0000001621959490.png
new file mode 100644
index 00000000..9ea1175c
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621959490.png differ
diff --git a/docs/hss/umn/en-us_image_0000001621960166.png b/docs/hss/umn/en-us_image_0000001621960166.png
new file mode 100644
index 00000000..676e91ea
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001621960166.png differ
diff --git a/docs/hss/umn/en-us_image_0000001622044122.png b/docs/hss/umn/en-us_image_0000001622044122.png
new file mode 100644
index 00000000..5182221e
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001622044122.png differ
diff --git a/docs/hss/umn/en-us_image_0000001622204562.png b/docs/hss/umn/en-us_image_0000001622204562.png
new file mode 100644
index 00000000..4a3b552e
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001622204562.png differ
diff --git a/docs/hss/umn/en-us_image_0000001622361502.png b/docs/hss/umn/en-us_image_0000001622361502.png
new file mode 100644
index 00000000..62d5aabf
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001622361502.png differ
diff --git a/docs/hss/umn/en-us_image_0000001622521482.png b/docs/hss/umn/en-us_image_0000001622521482.png
new file mode 100644
index 00000000..36d58313
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001622521482.png differ
diff --git a/docs/hss/umn/en-us_image_0000001629357728.png b/docs/hss/umn/en-us_image_0000001629357728.png
new file mode 100644
index 00000000..2716cbf4
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001629357728.png differ
diff --git a/docs/hss/umn/en-us_image_0000001630021161.png b/docs/hss/umn/en-us_image_0000001630021161.png
new file mode 100644
index 00000000..e112e7f4
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001630021161.png differ
diff --git a/docs/hss/umn/en-us_image_0000001630512626.png b/docs/hss/umn/en-us_image_0000001630512626.png
new file mode 100644
index 00000000..94968363
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001630512626.png differ
diff --git a/docs/hss/umn/en-us_image_0000001635697117.png b/docs/hss/umn/en-us_image_0000001635697117.png
new file mode 100644
index 00000000..5a244971
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001635697117.png differ
diff --git a/docs/hss/umn/en-us_image_0000001669602353.png b/docs/hss/umn/en-us_image_0000001669602353.png
new file mode 100644
index 00000000..17befca9
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001669602353.png differ
diff --git a/docs/hss/umn/en-us_image_0000001669682473.png b/docs/hss/umn/en-us_image_0000001669682473.png
new file mode 100644
index 00000000..a8d991a1
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001669682473.png differ
diff --git a/docs/hss/umn/en-us_image_0000001669828885.png b/docs/hss/umn/en-us_image_0000001669828885.png
new file mode 100644
index 00000000..b1d95226
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001669828885.png differ
diff --git a/docs/hss/umn/en-us_image_0000001669838757.png b/docs/hss/umn/en-us_image_0000001669838757.png
new file mode 100644
index 00000000..7cc98d2a
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001669838757.png differ
diff --git a/docs/hss/umn/en-us_image_0000001669998725.png b/docs/hss/umn/en-us_image_0000001669998725.png
new file mode 100644
index 00000000..a0cecec1
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001669998725.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670234665.png b/docs/hss/umn/en-us_image_0000001670234665.png
new file mode 100644
index 00000000..bb951a35
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670234665.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670239397.png b/docs/hss/umn/en-us_image_0000001670239397.png
new file mode 100644
index 00000000..9c847df8
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670239397.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670239401.png b/docs/hss/umn/en-us_image_0000001670239401.png
new file mode 100644
index 00000000..f6718f34
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670239401.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670239405.png b/docs/hss/umn/en-us_image_0000001670239405.png
new file mode 100644
index 00000000..14f09278
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670239405.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670239409.png b/docs/hss/umn/en-us_image_0000001670239409.png
new file mode 100644
index 00000000..f6718f34
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670239409.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670239413.png b/docs/hss/umn/en-us_image_0000001670239413.png
new file mode 100644
index 00000000..14f09278
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670239413.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670240065.png b/docs/hss/umn/en-us_image_0000001670240065.png
new file mode 100644
index 00000000..2eb851a5
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670240065.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670240689.png b/docs/hss/umn/en-us_image_0000001670240689.png
new file mode 100644
index 00000000..b35d6159
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670240689.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670319513.png b/docs/hss/umn/en-us_image_0000001670319513.png
new file mode 100644
index 00000000..bce1c33a
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670319513.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670319517.png b/docs/hss/umn/en-us_image_0000001670319517.png
new file mode 100644
index 00000000..f6718f34
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670319517.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670319521.png b/docs/hss/umn/en-us_image_0000001670319521.png
new file mode 100644
index 00000000..14f09278
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670319521.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670319525.png b/docs/hss/umn/en-us_image_0000001670319525.png
new file mode 100644
index 00000000..d420c453
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670319525.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670320201.png b/docs/hss/umn/en-us_image_0000001670320201.png
new file mode 100644
index 00000000..7611369d
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670320201.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670375709.png b/docs/hss/umn/en-us_image_0000001670375709.png
new file mode 100644
index 00000000..0be9758d
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670375709.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670401553.png b/docs/hss/umn/en-us_image_0000001670401553.png
new file mode 100644
index 00000000..c82a4996
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670401553.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670439437.png b/docs/hss/umn/en-us_image_0000001670439437.png
new file mode 100644
index 00000000..6f071632
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670439437.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670439441.png b/docs/hss/umn/en-us_image_0000001670439441.png
new file mode 100644
index 00000000..14f09278
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670439441.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670439445.png b/docs/hss/umn/en-us_image_0000001670439445.png
new file mode 100644
index 00000000..f6718f34
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670439445.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670439449.png b/docs/hss/umn/en-us_image_0000001670439449.png
new file mode 100644
index 00000000..14f09278
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670439449.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670439453.png b/docs/hss/umn/en-us_image_0000001670439453.png
new file mode 100644
index 00000000..f6718f34
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670439453.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670440105.png b/docs/hss/umn/en-us_image_0000001670440105.png
new file mode 100644
index 00000000..5315978a
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670440105.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670554661.png b/docs/hss/umn/en-us_image_0000001670554661.png
new file mode 100644
index 00000000..bb951a35
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670554661.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670559389.png b/docs/hss/umn/en-us_image_0000001670559389.png
new file mode 100644
index 00000000..f6718f34
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670559389.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670559393.png b/docs/hss/umn/en-us_image_0000001670559393.png
new file mode 100644
index 00000000..07667143
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670559393.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670559397.png b/docs/hss/umn/en-us_image_0000001670559397.png
new file mode 100644
index 00000000..f6718f34
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670559397.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670559401.png b/docs/hss/umn/en-us_image_0000001670559401.png
new file mode 100644
index 00000000..8e288774
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670559401.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670681377.png b/docs/hss/umn/en-us_image_0000001670681377.png
new file mode 100644
index 00000000..d4bdc941
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670681377.png differ
diff --git a/docs/hss/umn/en-us_image_0000001670681801.png b/docs/hss/umn/en-us_image_0000001670681801.png
new file mode 100644
index 00000000..a63b4f13
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001670681801.png differ
diff --git a/docs/hss/umn/en-us_image_0000001676837385.png b/docs/hss/umn/en-us_image_0000001676837385.png
new file mode 100644
index 00000000..1a362263
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001676837385.png differ
diff --git a/docs/hss/umn/en-us_image_0000001686938868.png b/docs/hss/umn/en-us_image_0000001686938868.png
new file mode 100644
index 00000000..14f09278
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001686938868.png differ
diff --git a/docs/hss/umn/en-us_image_0000001686938876.png b/docs/hss/umn/en-us_image_0000001686938876.png
new file mode 100644
index 00000000..f6718f34
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001686938876.png differ
diff --git a/docs/hss/umn/en-us_image_0000001686938880.png b/docs/hss/umn/en-us_image_0000001686938880.png
new file mode 100644
index 00000000..f6718f34
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001686938880.png differ
diff --git a/docs/hss/umn/en-us_image_0000001686939532.png b/docs/hss/umn/en-us_image_0000001686939532.png
new file mode 100644
index 00000000..f6718f34
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001686939532.png differ
diff --git a/docs/hss/umn/en-us_image_0000001687084998.png b/docs/hss/umn/en-us_image_0000001687084998.png
new file mode 100644
index 00000000..46371520
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001687084998.png differ
diff --git a/docs/hss/umn/en-us_image_0000001696678850.png b/docs/hss/umn/en-us_image_0000001696678850.png
new file mode 100644
index 00000000..6b11888b
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001696678850.png differ
diff --git a/docs/hss/umn/en-us_image_0000001696838310.png b/docs/hss/umn/en-us_image_0000001696838310.png
new file mode 100644
index 00000000..582b1618
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001696838310.png differ
diff --git a/docs/hss/umn/en-us_image_0000001696838318.png b/docs/hss/umn/en-us_image_0000001696838318.png
new file mode 100644
index 00000000..e4fcbfa9
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001696838318.png differ
diff --git a/docs/hss/umn/en-us_image_0000001703888418.png b/docs/hss/umn/en-us_image_0000001703888418.png
new file mode 100644
index 00000000..6ecee2c2
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001703888418.png differ
diff --git a/docs/hss/umn/en-us_image_0000001711689404.png b/docs/hss/umn/en-us_image_0000001711689404.png
new file mode 100644
index 00000000..c7353b57
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001711689404.png differ
diff --git a/docs/hss/umn/en-us_image_0000001711848916.png b/docs/hss/umn/en-us_image_0000001711848916.png
new file mode 100644
index 00000000..c9a2b427
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001711848916.png differ
diff --git a/docs/hss/umn/en-us_image_0000001734778037.png b/docs/hss/umn/en-us_image_0000001734778037.png
new file mode 100644
index 00000000..14f09278
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001734778037.png differ
diff --git a/docs/hss/umn/en-us_image_0000001734937857.png b/docs/hss/umn/en-us_image_0000001734937857.png
new file mode 100644
index 00000000..f6718f34
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001734937857.png differ
diff --git a/docs/hss/umn/en-us_image_0000001734937861.png b/docs/hss/umn/en-us_image_0000001734937861.png
new file mode 100644
index 00000000..f6718f34
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001734937861.png differ
diff --git a/docs/hss/umn/en-us_image_0000001735417828.png b/docs/hss/umn/en-us_image_0000001735417828.png
new file mode 100644
index 00000000..67b2184b
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001735417828.png differ
diff --git a/docs/hss/umn/en-us_image_0000001735433736.png b/docs/hss/umn/en-us_image_0000001735433736.png
new file mode 100644
index 00000000..09013e6f
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001735433736.png differ
diff --git a/docs/hss/umn/en-us_image_0000001735433752.png b/docs/hss/umn/en-us_image_0000001735433752.png
new file mode 100644
index 00000000..0fc5789e
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001735433752.png differ
diff --git a/docs/hss/umn/en-us_image_0000001735433768.png b/docs/hss/umn/en-us_image_0000001735433768.png
new file mode 100644
index 00000000..eb947fec
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001735433768.png differ
diff --git a/docs/hss/umn/en-us_image_0000001735474790.png b/docs/hss/umn/en-us_image_0000001735474790.png
new file mode 100644
index 00000000..e7af2391
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001735474790.png differ
diff --git a/docs/hss/umn/en-us_image_0000001735544818.png b/docs/hss/umn/en-us_image_0000001735544818.png
new file mode 100644
index 00000000..19f81e01
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001735544818.png differ
diff --git a/docs/hss/umn/en-us_image_0000001735576968.png b/docs/hss/umn/en-us_image_0000001735576968.png
new file mode 100644
index 00000000..d05c38bf
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001735576968.png differ
diff --git a/docs/hss/umn/en-us_image_0000001735592904.png b/docs/hss/umn/en-us_image_0000001735592904.png
new file mode 100644
index 00000000..962dd170
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001735592904.png differ
diff --git a/docs/hss/umn/en-us_image_0000001735592920.png b/docs/hss/umn/en-us_image_0000001735592920.png
new file mode 100644
index 00000000..29a3ae3a
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001735592920.png differ
diff --git a/docs/hss/umn/en-us_image_0000001735592936.png b/docs/hss/umn/en-us_image_0000001735592936.png
new file mode 100644
index 00000000..f3c35744
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001735592936.png differ
diff --git a/docs/hss/umn/en-us_image_0000001735592956.png b/docs/hss/umn/en-us_image_0000001735592956.png
new file mode 100644
index 00000000..7ebdbbad
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001735592956.png differ
diff --git a/docs/hss/umn/en-us_image_0000001743828960.png b/docs/hss/umn/en-us_image_0000001743828960.png
new file mode 100644
index 00000000..423298c3
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001743828960.png differ
diff --git a/docs/hss/umn/en-us_image_0000001744598325.png b/docs/hss/umn/en-us_image_0000001744598325.png
new file mode 100644
index 00000000..3e15dbf9
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001744598325.png differ
diff --git a/docs/hss/umn/en-us_image_0000001744678489.jpg b/docs/hss/umn/en-us_image_0000001744678489.jpg
new file mode 100644
index 00000000..fac6892b
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001744678489.jpg differ
diff --git a/docs/hss/umn/en-us_image_0000001745048576.png b/docs/hss/umn/en-us_image_0000001745048576.png
new file mode 100644
index 00000000..1b48a002
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001745048576.png differ
diff --git a/docs/hss/umn/en-us_image_0000001752813641.png b/docs/hss/umn/en-us_image_0000001752813641.png
new file mode 100644
index 00000000..bff32baf
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001752813641.png differ
diff --git a/docs/hss/umn/en-us_image_0000001752813769.png b/docs/hss/umn/en-us_image_0000001752813769.png
new file mode 100644
index 00000000..8e22d53e
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001752813769.png differ
diff --git a/docs/hss/umn/en-us_image_0000001757768557.png b/docs/hss/umn/en-us_image_0000001757768557.png
new file mode 100644
index 00000000..f0cba033
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001757768557.png differ
diff --git a/docs/hss/umn/en-us_image_0000001758618249.png b/docs/hss/umn/en-us_image_0000001758618249.png
new file mode 100644
index 00000000..0d21733f
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001758618249.png differ
diff --git a/docs/hss/umn/en-us_image_0000001759449225.png b/docs/hss/umn/en-us_image_0000001759449225.png
new file mode 100644
index 00000000..9d8df773
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001759449225.png differ
diff --git a/docs/hss/umn/en-us_image_0000001759608337.png b/docs/hss/umn/en-us_image_0000001759608337.png
new file mode 100644
index 00000000..a0996407
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001759608337.png differ
diff --git a/docs/hss/umn/en-us_image_0000001782400597.png b/docs/hss/umn/en-us_image_0000001782400597.png
new file mode 100644
index 00000000..86863be3
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001782400597.png differ
diff --git a/docs/hss/umn/en-us_image_0000001782537133.png b/docs/hss/umn/en-us_image_0000001782537133.png
new file mode 100644
index 00000000..ebe648a7
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001782537133.png differ
diff --git a/docs/hss/umn/en-us_image_0000001782537137.png b/docs/hss/umn/en-us_image_0000001782537137.png
new file mode 100644
index 00000000..7f806c24
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001782537137.png differ
diff --git a/docs/hss/umn/en-us_image_0000001782558509.png b/docs/hss/umn/en-us_image_0000001782558509.png
new file mode 100644
index 00000000..9c5417ea
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001782558509.png differ
diff --git a/docs/hss/umn/en-us_image_0000001782616881.png b/docs/hss/umn/en-us_image_0000001782616881.png
new file mode 100644
index 00000000..21312167
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001782616881.png differ
diff --git a/docs/hss/umn/en-us_image_0000001785666064.png b/docs/hss/umn/en-us_image_0000001785666064.png
new file mode 100644
index 00000000..423298c3
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001785666064.png differ
diff --git a/docs/hss/umn/en-us_image_0000001785825720.png b/docs/hss/umn/en-us_image_0000001785825720.png
new file mode 100644
index 00000000..b2bbbd33
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001785825720.png differ
diff --git a/docs/hss/umn/en-us_image_0000001798383608.png b/docs/hss/umn/en-us_image_0000001798383608.png
new file mode 100644
index 00000000..28e1f79c
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001798383608.png differ
diff --git a/docs/hss/umn/en-us_image_0000001801549361.png b/docs/hss/umn/en-us_image_0000001801549361.png
new file mode 100644
index 00000000..19c746d5
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001801549361.png differ
diff --git a/docs/hss/umn/en-us_image_0000001802080893.png b/docs/hss/umn/en-us_image_0000001802080893.png
new file mode 100644
index 00000000..8c2a6765
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001802080893.png differ
diff --git a/docs/hss/umn/en-us_image_0000001806095454.png b/docs/hss/umn/en-us_image_0000001806095454.png
new file mode 100644
index 00000000..b5efb406
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001806095454.png differ
diff --git a/docs/hss/umn/en-us_image_0000001807098924.png b/docs/hss/umn/en-us_image_0000001807098924.png
new file mode 100644
index 00000000..4492e581
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001807098924.png differ
diff --git a/docs/hss/umn/en-us_image_0000001807101012.png b/docs/hss/umn/en-us_image_0000001807101012.png
new file mode 100644
index 00000000..7809142c
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001807101012.png differ
diff --git a/docs/hss/umn/en-us_image_0000001807108040.png b/docs/hss/umn/en-us_image_0000001807108040.png
new file mode 100644
index 00000000..f5bd44af
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001807108040.png differ
diff --git a/docs/hss/umn/en-us_image_0000001807123476.png b/docs/hss/umn/en-us_image_0000001807123476.png
new file mode 100644
index 00000000..e842c818
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001807123476.png differ
diff --git a/docs/hss/umn/en-us_image_0000001807238698.png b/docs/hss/umn/en-us_image_0000001807238698.png
new file mode 100644
index 00000000..f0fafdea
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001807238698.png differ
diff --git a/docs/hss/umn/en-us_image_0000001807932576.png b/docs/hss/umn/en-us_image_0000001807932576.png
new file mode 100644
index 00000000..37bfb76f
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001807932576.png differ
diff --git a/docs/hss/umn/en-us_image_0000001808126138.png b/docs/hss/umn/en-us_image_0000001808126138.png
new file mode 100644
index 00000000..aa667393
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001808126138.png differ
diff --git a/docs/hss/umn/en-us_image_0000001808223252.png b/docs/hss/umn/en-us_image_0000001808223252.png
new file mode 100644
index 00000000..8ce8e756
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001808223252.png differ
diff --git a/docs/hss/umn/en-us_image_0000001808243728.png b/docs/hss/umn/en-us_image_0000001808243728.png
new file mode 100644
index 00000000..8a098267
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001808243728.png differ
diff --git a/docs/hss/umn/en-us_image_0000001816051597.png b/docs/hss/umn/en-us_image_0000001816051597.png
new file mode 100644
index 00000000..5094d2ef
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001816051597.png differ
diff --git a/docs/hss/umn/en-us_image_0000001830849746.png b/docs/hss/umn/en-us_image_0000001830849746.png
new file mode 100644
index 00000000..063af086
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001830849746.png differ
diff --git a/docs/hss/umn/en-us_image_0000001831694242.png b/docs/hss/umn/en-us_image_0000001831694242.png
new file mode 100644
index 00000000..4a7e417f
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001831694242.png differ
diff --git a/docs/hss/umn/en-us_image_0000001832628561.png b/docs/hss/umn/en-us_image_0000001832628561.png
new file mode 100644
index 00000000..81bc7531
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001832628561.png differ
diff --git a/docs/hss/umn/en-us_image_0000001852172057.png b/docs/hss/umn/en-us_image_0000001852172057.png
new file mode 100644
index 00000000..b3c4dae6
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001852172057.png differ
diff --git a/docs/hss/umn/en-us_image_0000001853711513.png b/docs/hss/umn/en-us_image_0000001853711513.png
new file mode 100644
index 00000000..a5e88766
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001853711513.png differ
diff --git a/docs/hss/umn/en-us_image_0000001853723125.png b/docs/hss/umn/en-us_image_0000001853723125.png
new file mode 100644
index 00000000..52fbad73
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001853723125.png differ
diff --git a/docs/hss/umn/en-us_image_0000001853795117.png b/docs/hss/umn/en-us_image_0000001853795117.png
new file mode 100644
index 00000000..88fbf698
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001853795117.png differ
diff --git a/docs/hss/umn/en-us_image_0000001853881857.png b/docs/hss/umn/en-us_image_0000001853881857.png
new file mode 100644
index 00000000..00d5033b
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001853881857.png differ
diff --git a/docs/hss/umn/en-us_image_0000001853897085.png b/docs/hss/umn/en-us_image_0000001853897085.png
new file mode 100644
index 00000000..430b8d08
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001853897085.png differ
diff --git a/docs/hss/umn/en-us_image_0000001853899257.png b/docs/hss/umn/en-us_image_0000001853899257.png
new file mode 100644
index 00000000..df0fbef3
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001853899257.png differ
diff --git a/docs/hss/umn/en-us_image_0000001853976253.png b/docs/hss/umn/en-us_image_0000001853976253.png
new file mode 100644
index 00000000..aabd7220
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001853976253.png differ
diff --git a/docs/hss/umn/en-us_image_0000001854003221.png b/docs/hss/umn/en-us_image_0000001854003221.png
new file mode 100644
index 00000000..3f775696
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001854003221.png differ
diff --git a/docs/hss/umn/en-us_image_0000001854004617.png b/docs/hss/umn/en-us_image_0000001854004617.png
new file mode 100644
index 00000000..85aecdb4
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001854004617.png differ
diff --git a/docs/hss/umn/en-us_image_0000001854854673.png b/docs/hss/umn/en-us_image_0000001854854673.png
new file mode 100644
index 00000000..2bbc8cbb
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001854854673.png differ
diff --git a/docs/hss/umn/en-us_image_0000001854995385.png b/docs/hss/umn/en-us_image_0000001854995385.png
new file mode 100644
index 00000000..8acbcdcd
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001854995385.png differ
diff --git a/docs/hss/umn/en-us_image_0000001855042505.png b/docs/hss/umn/en-us_image_0000001855042505.png
new file mode 100644
index 00000000..83a0bfee
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001855042505.png differ
diff --git a/docs/hss/umn/en-us_image_0000001862372558.png b/docs/hss/umn/en-us_image_0000001862372558.png
new file mode 100644
index 00000000..13297450
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001862372558.png differ
diff --git a/docs/hss/umn/en-us_image_0000001862551832.png b/docs/hss/umn/en-us_image_0000001862551832.png
new file mode 100644
index 00000000..7d124f9f
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001862551832.png differ
diff --git a/docs/hss/umn/en-us_image_0000001908410077.png b/docs/hss/umn/en-us_image_0000001908410077.png
new file mode 100644
index 00000000..87eb51e9
Binary files /dev/null and b/docs/hss/umn/en-us_image_0000001908410077.png differ
diff --git a/docs/hss/umn/hss_01_0001.html b/docs/hss/umn/hss_01_0001.html
new file mode 100644
index 00000000..0cbc83ac
--- /dev/null
+++ b/docs/hss/umn/hss_01_0001.html
@@ -0,0 +1,52 @@
+<a name="hss_01_0001"></a><a name="hss_01_0001"></a>
+
+<h1 class="topictitle1">What Is <span id="text548492235411">HSS</span>?</h1>
+<div id="body1566301166159"><p id="hss_01_0001__p1783612208189"><span id="hss_01_0001__text798861125519">HSS</span> is designed to protect server workloads in hybrid clouds and multi-cloud data centers. It provides host security functions, Container Guard Service (CGS), and Web Tamper Protection (WTP).</p>
+<p id="hss_01_0001__p1579531817201">HSS can help you remotely check and manage your servers and containers in a unified manner.</p>
+<p id="hss_01_0001__p8060118">HSS protects your system integrity, enhances application security, monitors user operations, and detects intrusions.</p>
+<div class="section" id="hss_01_0001__section1527613319249"><h4 class="sectiontitle">Host Security</h4><p id="hss_01_0001__p77091829162213">Host Security Service (HSS) helps you identify and manage the assets on your servers, eliminate risks, and defend against intrusions and web page tampering. There are also advanced protection and security operations functions available to help you easily detect and handle threats.</p>
+<p id="hss_01_0001__p14791512104913">Install the HSS agent on your servers, and you will be able to check the server protection status and risks in a region on the HSS console.</p>
+<div class="p" id="hss_01_0001__p3005474310717"><a href="#hss_01_0001__fig350352519269">Figure 1</a> illustrates how HSS works.<div class="fignone" id="hss_01_0001__fig350352519269"><a name="hss_01_0001__fig350352519269"></a><a name="fig350352519269"></a><span class="figcap"><b>Figure 1 </b>Working principles</span><br><span><img id="hss_01_0001__image14460634145515" src="en-us_image_0000001687084998.png"></span></div>
+</div>
+</div>
+<p id="hss_01_0001__p3938144410413"></p>
+<div class="p" id="hss_01_0001__p23543393183651">The following table describes the HSS components.
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0001__table1458723513812" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Components</caption><thead align="left"><tr id="hss_01_0001__row858817356384"><th align="left" class="cellrowborder" valign="top" width="24.47%" id="mcps1.3.6.1.2.3.1.1"><p id="hss_01_0001__p205881735133814">Component</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="75.53%" id="mcps1.3.6.1.2.3.1.2"><p id="hss_01_0001__p15588435203813">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0001__row16588735123818"><td class="cellrowborder" valign="top" width="24.47%" headers="mcps1.3.6.1.2.3.1.1 "><p id="hss_01_0001__p5588153512388">Management console</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.53%" headers="mcps1.3.6.1.2.3.1.2 "><p id="hss_01_0001__p195881835143817">A visualized management platform, where you can apply configurations in a centralized manner and view the protection status and scan results of servers in a region.</p>
+</td>
+</tr>
+<tr id="hss_01_0001__row4588235113812"><td class="cellrowborder" valign="top" width="24.47%" headers="mcps1.3.6.1.2.3.1.1 "><p id="hss_01_0001__p9588173511385">HSS cloud protection center</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.53%" headers="mcps1.3.6.1.2.3.1.2 "><ul id="hss_01_0001__ul12405636133920"><li id="hss_01_0001__li640553616397">Analyzes security risks in servers using AI, machine learning, and deep learning algorithms.</li><li id="hss_01_0001__li12405103617394">Integrates multiple antivirus engines to detect and kill malicious programs in servers.</li><li id="hss_01_0001__li34251459183317">Receives configurations and scan tasks sent from the console and forwards them to agents on the servers.</li><li id="hss_01_0001__li104051836183919">Receives server information reported by agents, analyzes security risks and exceptions on servers, and displays the analysis results on the console.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0001__row6122814113917"><td class="cellrowborder" valign="top" width="24.47%" headers="mcps1.3.6.1.2.3.1.1 "><p id="hss_01_0001__p1512491463915">Agent</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.53%" headers="mcps1.3.6.1.2.3.1.2 "><ul id="hss_01_0001__ul21822043103919"><li id="hss_01_0001__li11908182174011">Communicates with the HSS cloud protection center via HTTPS and WSS. Port 10180 is used by default.</li><li id="hss_01_0001__li340415215411">Scans all servers every early morning; monitors the security status of servers; and reports the collected server information (including non-compliant configurations, insecure configurations, intrusion traces, software list, port list, and process list) to the cloud protection center.</li><li id="hss_01_0001__li3183134310391">Blocks server attacks based on the security policies you configured.</li></ul>
+<div class="note" id="hss_01_0001__note1132261064312"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="hss_01_0001__ul5575101218424"><li id="hss_01_0001__li962225104217">If no agent is installed or the agent installed is abnormal, the <span id="hss_01_0001__text337403735511">HSS</span> is unavailable.</li><li id="hss_01_0001__li16260105882814">Select the agent and installation command suitable for your OS.</li><li id="hss_01_0001__li10419113415452">The HSS agent can be used for all editions, including container security and Web Tamper Protection (WTP). You only need to install the agent once on the same server.</li></ul>
+</div></div>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+<div class="section" id="hss_01_0001__section683376203010"><h4 class="sectiontitle">Container Security</h4><p id="hss_01_0001__p214311331392">HSS provides container security capabilities. The agent deployed on a server can scan the container images on the server, checking configurations, detecting vulnerabilities, and uncovering runtime issues that cannot be detected by traditional security software. Container security also provides functions such as process whitelist, read-only file protection, and container escape detection to minimize the security risks for a running container.</p>
+</div>
+<div class="section" id="hss_01_0001__section56171257183119"><h4 class="sectiontitle">Web Tamper Protection</h4><p id="hss_01_0001__p147230843210">Web Tamper Protection (WTP) monitors website directories in real time and restores tampered files and directories using their backups. It protects website information, such as web pages, electronic documents, and images, from being tampered with or damaged by hackers.</p>
+<div class="fignone" id="hss_01_0001__fig65821435185714"><span class="figcap"><b>Figure 2 </b>How WTP works</span><br><span><img id="hss_01_0001__image195821035165712" src="en-us_image_0000001517477602.jpg"></span></div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0042.html">Introduction</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0002.html b/docs/hss/umn/hss_01_0002.html
new file mode 100644
index 00000000..36ff156b
--- /dev/null
+++ b/docs/hss/umn/hss_01_0002.html
@@ -0,0 +1,20 @@
+<a name="hss_01_0002"></a><a name="hss_01_0002"></a>
+
+<h1 class="topictitle1">Advantages</h1>
+<div id="body1566301166166"><p id="hss_01_0002__p789601112100"><span id="hss_01_0002__text548492235411">HSS</span> helps you manage and maintain the security of all your servers and reduce common risks.</p>
+<div class="section" id="hss_01_0002__section11883165220487"><h4 class="sectiontitle">Centralized Management</h4><p id="hss_01_0002__p1138220153010">You can check for and fix a range of security issues on a single console, easily managing your servers.</p>
+<ul id="hss_01_0002__ul72661614144916"><li id="hss_01_0002__li11764191612316">You can install the agent on ECSs in the same region to manage them all on a single console.</li><li id="hss_01_0002__li922193105515">On the security console, you can view the sources of server risks in a region, handle them according to displayed suggestions, and use filter, search, and batch processing functions to quickly analyze the risks of all servers in the region.</li></ul>
+</div>
+<div class="section" id="hss_01_0002__section1849515391327"><h4 class="sectiontitle">All-Round Protection</h4><p id="hss_01_0002__p4442154393218">HSS protects servers against intrusions by prevention, defense, and post-intrusion scan.</p>
+</div>
+<div class="section" id="hss_01_0002__section1110146133318"><h4 class="sectiontitle">Lightweight Agent</h4><p id="hss_01_0002__p6642154918337">The agent occupies only a few resources, not affecting server system performance.</p>
+</div>
+<div class="section" id="hss_01_0002__section47836118276"><h4 class="sectiontitle">WTP</h4><ul id="hss_01_0002__ul157771715681"><li id="hss_01_0002__li47771151584">The third-generation web anti-tampering technology and kernel-level event triggering technology are used. Files in user directories can be locked to prevent unauthorized tampering.</li><li id="hss_01_0002__li3777915388">The tampering detection and recovery technologies are used. Files modified only by authorized users are backed up on local and remote servers in real time, and will be used to recover tampered websites (if any) detected by <span id="hss_01_0002__text4575192211571">HSS</span>.</li></ul>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0042.html">Introduction</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0003.html b/docs/hss/umn/hss_01_0003.html
new file mode 100644
index 00000000..182c028d
--- /dev/null
+++ b/docs/hss/umn/hss_01_0003.html
@@ -0,0 +1,85 @@
+<a name="hss_01_0003"></a><a name="hss_01_0003"></a>
+
+<h1 class="topictitle1">Viewing Server Protection Status</h1>
+<div id="body1508484620677"><p id="hss_01_0003__p1380221615532">The server list on the <strong id="hss_01_0003__b10969185961211">Servers</strong> page displays the protection status of only the servers used in the selected region.</p>
+<div class="section" id="hss_01_0003__section56589211134"><h4 class="sectiontitle">Viewing Server Protection Status</h4><ol id="hss_01_0003__ol193635073915"><li id="hss_01_0003__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0003__li830314169200"><span>Click <span><img id="hss_01_0003__hss_01_0571_image9939115511526" src="en-us_image_0000001703888418.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0003__b539616536243">Security</strong> &gt; <strong id="hss_01_0003__b0397253182410"><span id="hss_01_0003__hss_01_0571_text183524516304"></span></strong>. The <span id="hss_01_0003__hss_01_0571_text48831520173018"></span> page is displayed.</span></li><li id="hss_01_0003__li5139101712527"><span>In the navigation pane, choose <strong id="hss_01_0003__b15449122820426">Asset Management</strong> &gt; <strong id="hss_01_0003__b344913285428">Servers &amp; Quota</strong>. On the <strong id="hss_01_0003__b16450192814428">Servers</strong> tab, view the protection status of the server. For more information, see <a href="#hss_01_0003__table10943651111514">Table 1</a>.</span><p><div class="note" id="hss_01_0003__note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0003__p35607617137">If your servers are managed by enterprise projects, you can select the target enterprise project to view or operate the asset and detection information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0003__fig11850181155815"><span class="figcap"><b>Figure 1 </b>Server protection status</span><br><span><img id="hss_01_0003__image101391232587" src="en-us_image_0000001830849746.png"></span></div>
+<div class="p" id="hss_01_0003__p810412314447"><ul id="hss_01_0003__ul218318181920"><li id="hss_01_0003__li136571993290">To check the protection status of a server, enter a server name, server ID, or IP address in the search box above the server protection list.</li><li id="hss_01_0003__li9827112208">On the left of the server protection list, select a server protection edition or an asset importance category to view the protection status of each type of servers.</li></ul>
+
+<div class="tablenoborder"><a name="hss_01_0003__table10943651111514"></a><a name="table10943651111514"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0003__table10943651111514" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Protection status description</caption><thead align="left"><tr id="hss_01_0003__row189411151111512"><th align="left" class="cellrowborder" valign="top" width="15.18%" id="mcps1.3.2.2.3.2.3.2.2.3.1.1"><p id="hss_01_0003__p994118515158">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="84.82%" id="mcps1.3.2.2.3.2.3.2.2.3.1.2"><p id="hss_01_0003__p1194115116154">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0003__row39429519157"><td class="cellrowborder" valign="top" width="15.18%" headers="mcps1.3.2.2.3.2.3.2.2.3.1.1 "><p id="hss_01_0003__p794255119156">Agent Status</p>
+</td>
+<td class="cellrowborder" valign="top" width="84.82%" headers="mcps1.3.2.2.3.2.3.2.2.3.1.2 "><ul id="hss_01_0003__ul17942125131510"><li id="hss_01_0003__li12942185111155"><strong id="hss_01_0003__b11229192875314">Not installed</strong>: The agent has not been installed or successfully started.<p id="hss_01_0003__p894295115159">Click <strong id="hss_01_0003__b422731152212">Install Agent</strong> and install the agent as prompted. </p>
+</li><li id="hss_01_0003__li8942185117154"><strong id="hss_01_0003__b14700575364">Online</strong>: The agent is running properly.</li><li id="hss_01_0003__li169423514159"><strong id="hss_01_0003__b1876861919370">Offline</strong>: The communication between the agent and the HSS server is abnormal, and HSS cannot protect your servers.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0003__row994320516156"><td class="cellrowborder" valign="top" width="15.18%" headers="mcps1.3.2.2.3.2.3.2.2.3.1.1 "><p id="hss_01_0003__p894225114152">Protection Status</p>
+</td>
+<td class="cellrowborder" valign="top" width="84.82%" headers="mcps1.3.2.2.3.2.3.2.2.3.1.2 "><ul id="hss_01_0003__ul1394310517157"><li id="hss_01_0003__li1294320519150"><strong id="hss_01_0003__b658311371694">Enabled</strong>: The server is fully protected by HSS.</li><li id="hss_01_0003__li2943185111157"><strong id="hss_01_0003__b113631712108">Unprotected</strong>: HSS is disabled for the server. After the agent is installed, click <strong id="hss_01_0003__b658614311118">Enable</strong> in the <strong id="hss_01_0003__b459216621119">Operation</strong> column to enable protection.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0003__row1394315519156"><td class="cellrowborder" valign="top" width="15.18%" headers="mcps1.3.2.2.3.2.3.2.2.3.1.1 "><p id="hss_01_0003__p5943115141515">Scan Results</p>
+</td>
+<td class="cellrowborder" valign="top" width="84.82%" headers="mcps1.3.2.2.3.2.3.2.2.3.1.2 "><ul id="hss_01_0003__ul1594375131513"><li id="hss_01_0003__li14943105171516"><strong id="hss_01_0003__b878819561636">Risky</strong>: The host has risks.</li><li id="hss_01_0003__li0943155111158"><strong id="hss_01_0003__b10585022417">Safe</strong>: No risks are found.</li><li id="hss_01_0003__li10943135141511"><strong id="hss_01_0003__b0350102716212">Pending risk detection</strong>: HSS is not enabled for the server.</li></ul>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0003__section13310124113310"><h4 class="sectiontitle">Viewing the WTP Status</h4><ol id="hss_01_0003__ol20373371114520"><li id="hss_01_0003__li13209256914"><span>Log in to the management console and go to the <span id="hss_01_0003__text183524516304">HSS</span> page.</span></li><li id="hss_01_0003__li5858326415513"><span>Choose <strong id="hss_01_0003__b821335844916">Prevention</strong> &gt; <strong id="hss_01_0003__b17521202509">Web Tamper Protection</strong> and click <strong id="hss_01_0003__b1692813213501">Servers</strong> to view the protection status of the servers.</span><p><p id="hss_01_0003__p181381628131612">To check the protection status of a target server, enter a server name, server ID, or IP address in the search box above the protection list, and click <span><img id="hss_01_0003__image128141925161618" src="en-us_image_0000001630021161.png"></span>.</p>
+<div class="fignone" id="hss_01_0003__fig150837175715"><span class="figcap"><b>Figure 2 </b>Servers protected by WTP</span><br><span><img id="hss_01_0003__image9961112805" src="en-us_image_0000001757768557.png"></span></div>
+<div class="p" id="hss_01_0003__p12649336135713">
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0003__table244111264375" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Statuses</caption><thead align="left"><tr id="hss_01_0003__row043442613375"><th align="left" class="cellrowborder" valign="top" width="24.68%" id="mcps1.3.3.2.2.2.3.1.2.3.1.1"><p id="hss_01_0003__p14341826163719">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="75.32%" id="mcps1.3.3.2.2.2.3.1.2.3.1.2"><p id="hss_01_0003__p1643422612376">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0003__row5435162612379"><td class="cellrowborder" valign="top" width="24.68%" headers="mcps1.3.3.2.2.2.3.1.2.3.1.1 "><p id="hss_01_0003__p443414264373">Protection Status</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.32%" headers="mcps1.3.3.2.2.2.3.1.2.3.1.2 "><p id="hss_01_0003__p1289543522014"><strong id="hss_01_0003__b14325373597">Protected</strong>: HSS provides static web tamper protection (WTP) for the server.</p>
+</td>
+</tr>
+<tr id="hss_01_0003__row17441126103717"><td class="cellrowborder" valign="top" width="24.68%" headers="mcps1.3.3.2.2.2.3.1.2.3.1.1 "><p id="hss_01_0003__p10440162653713">Dynamic WTP</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.32%" headers="mcps1.3.3.2.2.2.3.1.2.3.1.2 "><div class="p" id="hss_01_0003__p10441226123711">Status of dynamic WTP, which can be:<ul id="hss_01_0003__ul12441172619373"><li id="hss_01_0003__li960655117386"><span><img id="hss_01_0003__image977132411397" src="en-us_image_0000001606964064.png"></span>: Dynamic WTP is enabled.</li><li id="hss_01_0003__li860675173810"><span><img id="hss_01_0003__image149741318111517" src="en-us_image_0000001606804308.png"></span>: Dynamic WTP is disabled. After enabling dynamic WTP, restart Tomcat to make this setting take effect.</li></ul>
+</div>
+</td>
+</tr>
+<tr id="hss_01_0003__row1934365013146"><td class="cellrowborder" valign="top" width="24.68%" headers="mcps1.3.3.2.2.2.3.1.2.3.1.1 "><p id="hss_01_0003__p1434385051417">Static Tampering Attacks</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.32%" headers="mcps1.3.3.2.2.2.3.1.2.3.1.2 "><p id="hss_01_0003__p8343175020141">Number of times that static web page files are attacked and tampered with.</p>
+</td>
+</tr>
+<tr id="hss_01_0003__row7504154771419"><td class="cellrowborder" valign="top" width="24.68%" headers="mcps1.3.3.2.2.2.3.1.2.3.1.1 "><p id="hss_01_0003__p550514771419">Dynamic Tampering Attacks</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.32%" headers="mcps1.3.3.2.2.2.3.1.2.3.1.2 "><p id="hss_01_0003__p05812816368">Number of web application vulnerability exploits and injection attacks.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0003__section958122551320"><h4 class="sectiontitle">Exporting the Server List</h4><ol id="hss_01_0003__ol141891818113517"><li id="hss_01_0003__li721881413714"><span>Log in to the management console and go to the <span id="hss_01_0003__hss_01_0003_text183524516304">HSS</span> page.</span></li><li id="hss_01_0003__li1519121833514"><span>Choose <span class="menucascade" id="hss_01_0003__menucascade18191131863518"><b><span class="uicontrol" id="hss_01_0003__uicontrol181921218123510">Asset Management</span></b> &gt; <b><span class="uicontrol" id="hss_01_0003__uicontrol619201883519">Servers &amp; Quota</span></b></span>. The <strong id="hss_01_0003__b1187915072715">Servers</strong> tab page is displayed.</span></li><li id="hss_01_0003__li172019317367"><span>Click <span><img id="hss_01_0003__image11392193712386" src="en-us_image_0000001568437401.png"></span> in the upper right corner of the <strong id="hss_01_0003__b168161622182815">Server</strong> tab page to export the details of the server list.</span><p><div class="note" id="hss_01_0003__note1678919147399"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0003__p127901914113913">The details of up to 1000 servers can be exported at a time.</p>
+</div></div>
+<div class="fignone" id="hss_01_0003__fig15808142617810"><span class="figcap"><b>Figure 3 </b>Exporting the server list</span><br><span><img id="hss_01_0003__en-us_topic_0000001517162750_image943915455317" src="en-us_image_0000001735544818.png"></span></div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0397.html">Server Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0004.html b/docs/hss/umn/hss_01_0004.html
new file mode 100644
index 00000000..88767879
--- /dev/null
+++ b/docs/hss/umn/hss_01_0004.html
@@ -0,0 +1,42 @@
+<a name="hss_01_0004"></a><a name="hss_01_0004"></a>
+
+<h1 class="topictitle1">Basic Concepts</h1>
+<div id="body1566301166176"><div class="section" id="hss_01_0004__section20791936104114"><h4 class="sectiontitle">Account Cracking</h4><p id="hss_01_0004__p2016173874112"><span class="keyword" id="hss_01_0004__keyword166644361120">Account cracking</span> refers to the intruder behavior of guessing or cracking the password of an account.</p>
+</div>
+<div class="section" id="hss_01_0004__section1692394219426"><h4 class="sectiontitle">Weak Password</h4><p id="hss_01_0004__p1597324411428">A <span class="keyword" id="hss_01_0004__keyword3764151191210">weak password</span> can be easily cracked.</p>
+</div>
+<div class="section" id="hss_01_0004__section1651114124432"><h4 class="sectiontitle">Malicious Program</h4><p id="hss_01_0004__p1651111214432">A <span class="keyword" id="hss_01_0004__keyword8511151214311">malicious program</span>, such as a web shell, Trojan, worm, or virus, is developed with attack or illegal remote control intents.</p>
+<p id="hss_01_0004__p178250012242">Malware covertly inlays code into another program to run intrusive or disruptive programs and damage the security and integrity of the data on an infected server. Malware includes viruses, Trojans, and worms, classified by their ways of transmission.</p>
+<p id="hss_01_0004__p5453117175212">HSS reports both identified and suspicious malware.</p>
+</div>
+<div class="section" id="hss_01_0004__section1161518411479"><h4 class="sectiontitle">Ransomware</h4><p id="hss_01_0004__p4987433124815">Ransomware emerged with the Bitcoin economy. It is a Trojan that is disguised as a legitimate email attachment or bundled software and tricks you into opening or installing it. It can also arrive on your servers through website or server intrusion.</p>
+<p id="hss_01_0004__p16180752144718">Ransomware often uses a range of algorithms to encrypt the victim's files and demand a ransom payment to get the decryption key. Digital currencies such as Bitcoin are typically used for the ransoms, making tracing and prosecuting the attackers difficult.</p>
+<p id="hss_01_0004__p114732494919">Ransomware interrupts businesses and can cause serious economic losses. We need to know how it works and how we can prevent it.</p>
+</div>
+<div class="section" id="hss_01_0004__section117321597432"><h4 class="sectiontitle">Web Tamper Protection</h4><p id="hss_01_0004__p07321359144320"><span class="keyword" id="hss_01_0004__keyword3731759164313">Web Tamper Protection (WTP)</span> is an HSS edition that protects your files, such as web pages, documents, and images, in specific directories against tampering and sabotage from hackers and viruses.</p>
+</div>
+<div class="section" id="hss_01_0004__section639813507105"><h4 class="sectiontitle">Cluster</h4><p id="hss_01_0004__p094014510353">A cluster consists of one or more ECSs (also known as nodes) in the same subnet. It provides a computing resource pool for running containers. </p>
+</div>
+<div class="section" id="hss_01_0004__section674541210114"><h4 class="sectiontitle">Node</h4><p id="hss_01_0004__p3407141110">In CGS, each node corresponds to an ECS. Containers run on nodes.</p>
+</div>
+<div class="section" id="hss_01_0004__section11594112412113"><h4 class="sectiontitle">Image</h4><p id="hss_01_0004__p37381925131116">An image is a special file system. It provides not only programs, libraries, resources, configuration files but also some configuration parameters required for a running container. A Docker image does not contain any dynamic data, and its content remains unchanged after being built.</p>
+</div>
+<div class="section" id="hss_01_0004__section1821323491115"><h4 class="sectiontitle">Container</h4><p id="hss_01_0004__p217617474315">A container is the instance of an image and can be created, started, stopped, deleted, and suspended.</p>
+</div>
+<div class="section" id="hss_01_0004__section359734341116"><h4 class="sectiontitle">Security Policy</h4><p id="hss_01_0004__p58961344201111">A security policy indicates the security rule that must be followed for a running container. If a container violates a security policy, a container exception is displayed on the <span class="wintitle" id="hss_01_0004__wintitle163612222109"><b>Runtime Security</b></span> page of the CGS management console.</p>
+</div>
+<div class="section" id="hss_01_0004__section20195122164515"><h4 class="sectiontitle">Project</h4><p id="hss_01_0004__p219520216458">Projects are used to group and isolate OpenStack resources, including computing, storage, and network resources. A project can be a department or a project team.</p>
+<p id="hss_01_0004__p1819552164514">Multiple projects can be created for one account.</p>
+</div>
+<div class="section" id="hss_01_0004__section1631595916151"><h4 class="sectiontitle">Protection Quota</h4><p id="hss_01_0004__p8375623102811">To protect a server, bind it to an HSS quota.</p>
+<p id="hss_01_0004__p10687313102216">The quotas of different <span id="hss_01_0004__text798861125519">HSS</span> editions you applied for are displayed on the console.</p>
+<p id="hss_01_0004__p6273113162513">Example:</p>
+<ul id="hss_01_0004__ul103068173416"><li id="hss_01_0004__li6968183314252">If you have applied for an HSS enterprise edition quota, you can bind it to a server.</li><li id="hss_01_0004__li43061319342">If you have applied for 10 HSS enterprise edition quotas, you can bind them to 10 servers.</li></ul>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0042.html">Introduction</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0005.html b/docs/hss/umn/hss_01_0005.html
new file mode 100644
index 00000000..afaaa224
--- /dev/null
+++ b/docs/hss/umn/hss_01_0005.html
@@ -0,0 +1,61 @@
+<a name="hss_01_0005"></a><a name="hss_01_0005"></a>
+
+<h1 class="topictitle1">HSS Custom Policies</h1>
+<div id="body0000001174014547"><p id="hss_01_0005__p57510619287">Custom policies can be created to supplement the system-defined policies of HSS. </p>
+<div class="p" id="hss_01_0005__p276691522817">You can create custom policies using one of the following methods:<ul id="hss_01_0005__ul3766101542817"><li id="hss_01_0005__li19766915202816">Visual editor: Select cloud services, actions, resources, and request conditions. You do not need to have knowledge of the policy syntax.</li><li id="hss_01_0005__li197661815152811">JSON: Create a policy in JSON format or edit the JSON strings of an existing policy.</li></ul>
+</div>
+<p id="hss_01_0005__p177325297413">For details, see "Creating a Custom Policy" in <em id="hss_01_0005__i7404112520373">Identity and Access Management User Guide</em>. The following section contains examples of common HSS custom policies.</p>
+<div class="section" id="hss_01_0005__section8786220155718"><h4 class="sectiontitle">Example Custom Policies</h4><ul id="hss_01_0005__ul26235595114"><li id="hss_01_0005__li1062315591711">Example 1: Allowing users to query the protected server list<pre class="screen" id="hss_01_0005__screen4895143612113">{
+        "Version": "1.1",
+        "Statement": [
+                {
+                        "Effect": "Allow",
+                        "Action": [
+                                "hss:hosts:list"
+                                                       ]
+                }
+        ]
+}</pre>
+</li></ul>
+<ul id="hss_01_0005__en-us_topic_0195548199_ul129051927419"><li id="hss_01_0005__en-us_topic_0195548199_li139051021414">Example 2: Denying agent uninstallation<p id="hss_01_0005__en-us_topic_0195548199_p181402408551"><a name="hss_01_0005__en-us_topic_0195548199_li139051021414"></a><a name="en-us_topic_0195548199_li139051021414"></a>A deny policy must be used together with other policies. If the policies assigned to a user contain both "Allow" and "Deny", the "Deny" permissions take precedence over the "Allow" permissions.</p>
+<p id="hss_01_0005__en-us_topic_0195548199_p11409403554">The following method can be used if you need to assign permissions of the <strong id="hss_01_0005__b116372039191414">HSS Administrator</strong> policy to a user but also forbid the user from deleting key pairs (<strong id="hss_01_0005__b964323918147">hss:agent:uninstall</strong>). Create a custom policy with the action to delete key pairs, set its <strong id="hss_01_0005__b76439398149">Effect</strong> to <strong id="hss_01_0005__b1664314393141">Deny</strong>, and assign both this and the <strong id="hss_01_0005__b8643639111414">HSS Administrator</strong> policies to the group the user belongs to. Then the user can perform all operations on HSS except uninstalling it. The following is an example policy that denies agent uninstallation.</p>
+<pre class="screen" id="hss_01_0005__en-us_topic_0195548199_screen13671437802">{
+        "Version": "1.1",
+        "Statement": [
+                {
+                        "Effect": "Deny",
+                        "Action": [
+                                "hss:agent:uninstall"                                
+                        ]
+                },
+        ]
+}</pre>
+</li><li id="hss_01_0005__li15528818102116">Multi-action policies<p id="hss_01_0005__en-us_topic_0195107214_p158662027183215"><a name="hss_01_0005__li15528818102116"></a><a name="li15528818102116"></a>A custom policy can contain the actions of multiple services that are of the project-level type. The following is a policy with multiple statements:</p>
+<pre class="screen" id="hss_01_0005__screen1276474052213">{
+        "Version": "1.1",
+        "Statement": [
+                {
+                        "Effect": "Allow",
+                        "Action": [
+                                "hss:hosts:list"
+                        ]
+                },
+               {
+                        "Effect": "Allow",
+                        "Action": [
+                                "hss:hosts:switchVersion",
+                                "hss:hosts:manualDetect",
+                                "hss:manualDetectStatus:get"
+                        ]
+                }
+        ]
+}</pre>
+</li></ul>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0131.html">Permissions Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0006.html b/docs/hss/umn/hss_01_0006.html
new file mode 100644
index 00000000..64cc8e32
--- /dev/null
+++ b/docs/hss/umn/hss_01_0006.html
@@ -0,0 +1,531 @@
+<a name="hss_01_0006"></a><a name="hss_01_0006"></a>
+
+<h1 class="topictitle1">HSS Actions</h1>
+<div id="body0000001128134784"><p id="hss_01_0006__p14916165712532">This section describes fine-grained permissions management for your HSS instances. If your account does not need individual IAM users, then you may skip over this section.</p>
+<p id="hss_01_0006__p1125520376292">By default, new IAM users do not have any permissions assigned. You need to add a user to one or more groups, and assign policies or roles to these groups. The user then inherits permissions from the groups it is a member of. This process is called authorization. After authorization, the user can perform specified operations on cloud services based on the permissions.</p>
+<p id="hss_01_0006__p182554370291">You can grant users permissions by using roles and policies. Roles are provided by IAM to define service-based permissions depending on user's job responsibilities. IAM uses policies to perform fine-grained authorization. A policy defines permissions required to perform operations on specific cloud resources under certain conditions.</p>
+<div class="section" id="hss_01_0006__section677212217497"><h4 class="sectiontitle">Supported Actions</h4><p id="hss_01_0006__p187062194916">HSS provides system-defined policies that can be directly used in IAM. You can also create custom policies and use them to supplement system-defined policies, implementing more refined access control. The following are related concepts:</p>
+<ul id="hss_01_0006__ul1487018213498"><li id="hss_01_0006__li8870122134910">Permissions: Allow or deny certain operations.</li><li id="hss_01_0006__li118703217498">Actions: Specific operations that are allowed or denied.</li><li id="hss_01_0006__li48931742195711">Dependent actions: When assigning permissions for an action, you also need to assign permissions for the dependent actions.</li></ul>
+<p id="hss_01_0006__p20870102118497"><span id="hss_01_0006__text2897154921710">HSS</span> supports the following actions that can be defined in custom policies:</p>
+</div>
+<div class="section" id="hss_01_0006__section15113173595712"><h4 class="sectiontitle">Actions</h4>
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0006__table8211143315354" frame="border" border="1" rules="all"><thead align="left"><tr id="hss_01_0006__row144381133183517"><th align="left" class="cellrowborder" valign="top" width="29.93%" id="mcps1.3.5.2.1.4.1.1"><p id="hss_01_0006__p1443820332357">Permission</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="37.580000000000005%" id="mcps1.3.5.2.1.4.1.2"><p id="hss_01_0006__p19438733133512">Action</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="32.49%" id="mcps1.3.5.2.1.4.1.3"><p id="hss_01_0006__p10212221012">Related Action</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0006__row84382333355"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p94384333351">Query the protected server list</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p1543833320356">hss:hosts:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p114779181502">vpc:ports:get</p>
+<p id="hss_01_0006__p378516477505">vpc:publicIps:list</p>
+<p id="hss_01_0006__p1943858115019">ecs:cloudServers:list</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row3438233163513"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p143893353510">Enable or disable protection on servers</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p1843833313350">hss:hosts:switchVersion</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p1213142504">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row843813332359"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p243853313517">Manual scan</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p5438103313515">hss:hosts:manualDetect</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p195581455926">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row15438333173516"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p184381733133513">Check the status of a manual scan</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p5438203317353">hss:manualDetectStatus:get</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p1760211552219">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row2438833113519"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p14439183316351">Query weak password scan reports</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p1343918338356">hss:weakPwds:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p96532551822">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row44391033103510"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p9439153316352">Query account cracking protection reports</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p5439123318357">hss:accountCracks:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p16758551024">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row2439203317357"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p154397332352">Unblock an IP address that was blocked during account cracking prevention</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p243953312353">hss:accountCracks:unblock</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p17700125511219">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row19439203313511"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p043963383517">Query malicious program scan results</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p194391433183510">hss:maliciousPrograms:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p177251555323">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row13439733173510"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p10439133311357">Query remote login scan results</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p24396335354">hss:abnorLogins:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p177496558214">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row843963383520"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p143913303513">Query important file change reports</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p84391533123518">hss:keyfiles:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p57701655225">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row94391333123511"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p174396335354">Query the open port list</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p1743920337358">hss:ports:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p197955551326">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row1943993316358"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p0439153315356">Query the vulnerability list</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p13439173383512">hss:vuls:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p1681711551210">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row144398331352"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p1243903317358">Perform batch operations on vulnerabilities</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p11439113383518">hss:vuls:operate</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p484115511216">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row16439113313515"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p043903333518">Query the account list</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p6439123373515">hss:accounts:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p108661755828">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row1843917337353"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p1443963333514">Query the software list</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p243973343517">hss:softwares:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p58911755223">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row3439123393518"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p9439173373512">Query the web path list</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p18439203311356">hss:webdirs:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p1491355515213">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row1843916332353"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p84391233153516">Query the process list</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p134391033133516">hss:processes:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p169375554213">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row44401133203520"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p11440123317357">Query configuration scan reports</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p11440153333516">hss:configDetects:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p1795705516213">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row84402033143518"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p17440103343516">Query web shell scan results</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p19440733113516">hss:Webshells:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p1497816551422">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row844013323511"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p164408335355">Query risky account scan reports</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p1644083353511">hss:riskyAccounts:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p899914551829">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row12440633173515"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p14440203317351">Obtain server risk statistics</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p18440833123517">hss:riskyDashboard:get</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p11914562026">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row744033312355"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p1044017332353">Query password complexity policy scan reports</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p94401033133513">hss:complexityPolicys:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p13418560214">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row444016335358"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p1442133173511">Perform batch operations on malicious programs</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p13442033143515">hss:maliciousPrograms:operate</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p46575616216">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row144213313518"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p4442173393519">Perform batch operations on open ports</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p104421833183515">hss:ports:operate</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p178505617215">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row174429333353"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p18442833113515">Perform operations on detected unsafe settings</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p1244243343516">hss:configDetects:operate</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p2107195610219">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row124421633103516"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p134429333355">Perform batch operations on web shells</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p1442193314352">hss:Webshells:operate</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p61294562028">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row1644243313359"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p144263393514">Configure common login locations</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p544212334357">hss:commonLocations:set</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p6151856625">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row1544263333510"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p4442203311355">Query common login locations</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p144283314359">hss:commonLocations:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p1217314564216">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row13442033133516"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p1944213373515">Configure common login IP addresses</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p2442143393519">hss:commonIPs:set</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p101969564220">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row124425337354"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p1844383319354">Query common login IP addresses</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p24421233203512">hss:commonIPs:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p621875620218">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row1144314339358"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p1644314332351">Configure the login IP address whitelist</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p7443533163516">hss:whiteIps:set</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p202411856624">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row5443833143516"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p2044313318357">Query the login IP address whitelist</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p144431433153511">hss:whiteIps:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p1026410561021">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row4443533123510"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p944319331350">Configure weak passwords</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p7443433163512">hss:weakPwds:set</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p1528611563219">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row3443933173516"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p1443633133516">Query weak passwords</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p1644333323511">hss:weakPwds:get</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p15312856626">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row11443633193518"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p20443533173515">Configure web paths</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p12443133383511">hss:webDirs:set</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p634065610215">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row15443123313351"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p444333315353">Query web paths</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p15443133173515">hss:webDirs:get</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p13623561323">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row184432336357"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p54439338352">Obtain the list of servers where 2FA is enabled</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p16443103316354">hss:twofactorAuth:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p1138514561221">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row1344363313510"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p74435331354">Enable 2FA</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p44437331351">hss:twofactorAuth:set</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p164071656527">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row24438333351"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p544343315359">Enable or disable automatic isolation and killing of malicious programs</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p244393313352">hss:automaticKillMp:set</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p1643035614213">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row544353318352"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p744383311357">Query the programs that have been automatically isolated and killed</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p5443103312356">hss:automaticKillMp:get</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p1845575611211">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row444443315353"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p19444143343514">Query the agent download address</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p5444633173516">hss:installAgent:get</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p12575175611219">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row844403313353"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p54441533133513">Uninstall an agent</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p104441933133515">hss:agent:uninstall</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p195969564212">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row1044433323512"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p1444412332355">Query HSS alarms</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p18444183333513">hss:alertConfig:get</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p1861815561023">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row1344453314359"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p17444933173510">Configure HSS alarms</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p1544403363510">hss:alertConfig:set</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p564110562215">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row444419332355"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p944433316352">Query the WTP list</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p8444133323518">hss:wtpHosts:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p88546448515">vpc:ports:get</p>
+<p id="hss_01_0006__p248215541513">vpc:publicIps:list</p>
+<p id="hss_01_0006__p15206122710214">ecs:cloudServers:list</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row944513336351"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p4445133323512">Enable or disable WTP</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p15445733123513">hss:wtpProtect:switch</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p1586716210317">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row1444593303520"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p04455339351">Configure backup servers</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p144451933143519">hss:wtpBackup:set</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p9890429317">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row1445833173516"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p1244514339356">Query backup servers</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p134454338359">hss:wtpBackup:get</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p1912621732">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row244563323515"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p1044583383518">Configure protected directories</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p94451533113516">hss:wtpDirectorys:set</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p11935182733">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row8445173313352"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p154451033173515">Query the protected directory list</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p1344520335356">hss:wtpDirectorys:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p179571621437">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row1344563313350"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p34451336350">Query WTP records</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p13445933163511">hss:wtpReports:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p16981728315">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row1445203315358"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p1445183311357">Configure privileged processes</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p04451533133518">hss:wtpPrivilegedProcess:set</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p10310314312">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row1244553316355"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p14451533143510">Query the privileged process list</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p4445103353512">hss:wtpPrivilegedProcesses:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p14281539314">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row244543393516"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p134451933103514">Configure a protection mode</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p174451133183514">hss:wtpProtectMode:set</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p145310313311">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row204450337354"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p14451033183514">Query the protection mode</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p4445133143518">hss:wtpProtectMode:get</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p6801731239">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row54452033193511"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p154450332355">Configure a protected file system</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p244533315354">hss:wtpFilesystems:set</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p61071231317">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row8445533103510"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p1844519336355">Query the protected file system list</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p64457337351">hss:wtpFilesystems:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p19131133335">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row16445233153514"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p444553353511">Configure scheduled protection</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p54451332351">hss:wtpScheduledProtections:set</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p191561431837">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row1444593383516"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p114463336356">Query scheduled protection</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p11445133333512">hss:wtpScheduledProtections:get</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p5178231338">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row15446113318355"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p144615331351">Configure WTP alarms</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p20446233183516">hss:wtpAlertConfig:set</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p14202931334">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row164464336355"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p84461133173515">Query WTP alarms</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p10446173323518">hss:wtpAlertConfig:get</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p9226234313">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row44469330356"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p144469336355">Query WTP statistics</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p1344643312357">hss:wtpDashboard:get</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p15249631739">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row282115810214"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p20424165372313">Query policy group</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p68212822114">hss:policy:get</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p1527111313312">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row201609155211"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p12424553182318">Configure a policy group</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p1116091514219">hss:policy:set</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p13295153539">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row8222445210"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p9424155314238">Query the detected intrusion list</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p32234462110">hss:event:get</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p1036816318319">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row77501646182116"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p7424175316238">Perform operations on intrusions</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p16750144662120">hss:event:set</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p93901033311">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row033383714222"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p18424145372318">Query server groups</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p73338371223">hss:hostGroup:get</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p124141232314">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row1996665314227"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p11424105322319">Configure server groups</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p99661153202212">hss:hostGroup:set</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p18443331316">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row14326194122319"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p11424145311233">Monitor file integrity</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p1326104122317">hss:keyfiles:set</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p10469123536">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row17511313192313"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p3424753102317">Query important file change reports</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p205116133237">hss:keyfiles:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p13489173637">-</p>
+</td>
+</tr>
+<tr id="hss_01_0006__row1814412235234"><td class="cellrowborder" valign="top" width="29.93%" headers="mcps1.3.5.2.1.4.1.1 "><p id="hss_01_0006__p242425362310">Query the auto-startup list</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.580000000000005%" headers="mcps1.3.5.2.1.4.1.2 "><p id="hss_01_0006__p121441923122317">hss:launch:list</p>
+</td>
+<td class="cellrowborder" valign="top" width="32.49%" headers="mcps1.3.5.2.1.4.1.3 "><p id="hss_01_0006__p85131531632">-</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0131.html">Permissions Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0007.html b/docs/hss/umn/hss_01_0007.html
new file mode 100644
index 00000000..a1b6efcd
--- /dev/null
+++ b/docs/hss/umn/hss_01_0007.html
@@ -0,0 +1,14 @@
+<a name="hss_01_0007"></a><a name="hss_01_0007"></a>
+
+<h1 class="topictitle1">How Do I View Servers Where No Agents Have Been Installed?</h1>
+<div id="body1582784478454"><ol id="hss_01_0007__ol193635073915"><li id="hss_01_0007__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0007__li21773614392"><span>On the <strong id="hss_01_0007__b196943291672">Installation &amp; Configuration</strong> page, click the <strong id="hss_01_0007__b2869023133320">Agents</strong> tab and click <strong id="hss_01_0007__b1586932323313">Offline</strong>. View the servers where the agent is not installed.</span><p><p id="hss_01_0007__p17230134252819">Possible agent statuses are:</p>
+<ul id="hss_01_0007__ul11140122618284"><li id="hss_01_0007__li64342115139"><strong id="hss_01_0007__b665019498438">Not installed</strong>: The agent has not been installed or successfully started.</li><li id="hss_01_0007__li611534011511"><strong id="hss_01_0007__b123571552164513">Online</strong>: The agent is running properly.</li><li id="hss_01_0007__li1214072616284"><strong id="hss_01_0007__b139910513432">Offline</strong>: The communication between the agent and the HSS server is abnormal, and HSS cannot protect your servers.<p id="hss_01_0007__p814042682812">Click <span class="uicontrol" id="hss_01_0007__uicontrol11965153016138"><b>Offline Cause</b></span> to view the possible causes.</p>
+</li></ul>
+</p></li></ol>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0321.html">Agent FAQs</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0008.html b/docs/hss/umn/hss_01_0008.html
new file mode 100644
index 00000000..fdea4f16
--- /dev/null
+++ b/docs/hss/umn/hss_01_0008.html
@@ -0,0 +1,36 @@
+<a name="hss_01_0008"></a><a name="hss_01_0008"></a>
+
+<h1 class="topictitle1">How Does HSS Intercept Brute Force Attacks?</h1>
+<div id="body0000001169921743"><div class="section" id="hss_01_0008__section7625938165318"><h4 class="sectiontitle">Types of Detectable Brute Force Attacks</h4><p id="hss_01_0008__p185712057277">HSS can detect the following types of brute force attacks:</p>
+<ul id="hss_01_0008__ul20424111114273"><li id="hss_01_0008__li18424161182711">Windows: SqlServer (automatic interception is not supported currently) and Rdp</li><li id="hss_01_0008__li18424191152711">Linux: MySQL, vfstp, and SSH</li></ul>
+<div class="p" id="hss_01_0008__p15359183611817">If MySQL or VSFTP is installed on your server, after HSS is enabled, the agent will add rules to iptables to prevent MySQL and VSFTP brute force attacks. When detecting a brute-force attack, HSS will add the source IP address to the blocking list. The added rules are highlighted below.<div class="fignone" id="hss_01_0008__fig1267516331188"><span class="figcap"><b>Figure 1 </b>Added rules</span><br><span><img id="hss_01_0008__image1167519330813" src="en-us_image_0000001568317649.png"></span></div>
+</div>
+</div>
+<div class="notice" id="hss_01_0008__note35266543147"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="hss_01_0008__p17612192818918">Existing iptables rules are used for blocking brute-force attacks. You are advised to keep them. If they are deleted, HSS will not be able to protect MySQL or VSFTP from brute-force attacks.</p>
+</div></div>
+<div class="section" id="hss_01_0008__section11177209171610"><h4 class="sectiontitle">How Brute Force Attacks Are Intercepted</h4><p id="hss_01_0008__en-us_topic_0198414560_p124131712864">Brute-force attacks are a type of common intrusion attacks. Attackers submit many server passwords until eventually guessing correctly and gaining control over a server.</p>
+<p id="hss_01_0008__en-us_topic_0198414560_p71215941710">HSS uses brute-force detection algorithms and an IP address blacklist to effectively prevent brute-force attacks and block attacking IP addresses. The blocking duration is 12 hours. If a blocked IP address does not perform brute-force attacks in the default blocking duration, it will be automatically unblocked. </p>
+<div class="note" id="hss_01_0008__en-us_topic_0198414560_note1681471915528"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0008__en-us_topic_0198414560_p181531965220">If HSS detects account cracking attacks on servers using Kunpeng EulerOS (EulerOS with ARM), it does not block the source IP addresses and only generates alarms. The SSH login IP address whitelist does not take effect for such servers.</p>
+</div></div>
+</div>
+<div class="section" id="hss_01_0008__section619842314380"><h4 class="sectiontitle">Alarm Policies</h4><ul id="hss_01_0008__ul11662103910383"><li id="hss_01_0008__li16662133933818">If a hacker successfully cracks the password and logs in to a server, a real-time alarm will be immediately sent to specified recipients.</li><li id="hss_01_0008__li17662239183812">If a brute-force attack and risks of account hacking are detected, a real-time alarm will be immediately sent to specified recipients.</li><li id="hss_01_0008__li1566283910387">If a brute-force attack is detected and failed, and no unsafe settings (such as weak passwords) are detected on the server, no real-time alarms will be sent. <span id="hss_01_0008__text1350331085218">HSS</span> will summarize all attacks in a day in its daily alarm report. You can also view blocked attacks on the <strong id="hss_01_0008__b160145583310929">Detection</strong> &gt; <strong id="hss_01_0008__b1715184395617">Alarms</strong> page of the <span id="hss_01_0008__text9578172102311">HSS</span> console.</li></ul>
+</div>
+<div class="section" id="hss_01_0008__section9551153613116"><h4 class="sectiontitle">Viewing Brute Force Cracking Detection Results</h4><ol id="hss_01_0008__ol1314817229122"><li id="hss_01_0008__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0008__li1818315918272"><span>In the navigation pane, choose <span class="menucascade" id="hss_01_0008__menucascade29551652105619"><b><span class="uicontrol" id="hss_01_0008__uicontrol295515520566">Detection</span></b> &gt; <b><span class="uicontrol" id="hss_01_0008__uicontrol129551052105616">Alarms</span></b></span>.</span></li><li id="hss_01_0008__li1788913321015"><span>View the brute force cracking detection result of the server or container.</span><p><ul id="hss_01_0008__ul13464185529"><li id="hss_01_0008__li1246445027">View the brute force cracking detection result of the server.<ol type="a" id="hss_01_0008__ol885514116211"><li id="hss_01_0008__li1285511111521">Click the <strong id="hss_01_0008__b1494616144584">Server Alarms</strong> tab.</li><li id="hss_01_0008__li7787481725">In the <strong id="hss_01_0008__b74118385456">Alarm Types</strong> area, select <strong id="hss_01_0008__b565683671711">Abnormal User Behavior</strong> &gt; <strong id="hss_01_0008__b415254031718">Brute-force attacks</strong> to view alarm event records on the protected server.</li><li id="hss_01_0008__li15253172020310">Click <span class="uicontrol" id="hss_01_0008__uicontrol1331853202616"><b>View Details</b></span> in the <strong id="hss_01_0008__b1995219312456">Blocked IP Addresses</strong> area to view the blocked attack source IP address, attack type, blocking status, blocking times, blocking start time, and latest blocking time.<ul id="hss_01_0008__ul11791151943119"><li id="hss_01_0008__li679114193316"><strong id="hss_01_0008__b207130197010929">Blocked</strong> indicates the brute-force attack has been blocked by HSS.</li><li id="hss_01_0008__li079141923117"><strong id="hss_01_0008__b141056923010929">Canceled</strong> indicates you have unblocked the source IP address of the brute force attack.<div class="note" id="hss_01_0008__note113164874710"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0008__p1635010511764">The default blocking duration is 12 hours. If a blocked IP address does not perform brute-force attacks in the default blocking duration, it will be automatically unblocked.</p>
+</div></div>
+</li></ul>
+</li></ol>
+</li><li id="hss_01_0008__li13464754210">View the brute force cracking detection result of a container.<ol type="a" id="hss_01_0008__ol1389912531037"><li id="hss_01_0008__li1389918538315">Click the <strong id="hss_01_0008__b56991452131012">Container Alarms</strong> tab.</li><li id="hss_01_0008__li1312535610310">In the <strong id="hss_01_0008__b0826141819226">Alarm Types</strong> area, select <strong id="hss_01_0008__b208261218192217">Abnormal User Behavior</strong> &gt; <strong id="hss_01_0008__b88267181222">Brute-force attacks</strong> to view alarm event records on the protected container.</li></ol>
+</li></ul>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0008__section20461888173"><h4 class="sectiontitle">Managing Blocked IP Addresses</h4><ul id="hss_01_0008__en-us_topic_0198414560_ul1596825101816"><li id="hss_01_0008__en-us_topic_0198414560_li19542956142111">If a server is frequently attacked, you are advised to fix its vulnerabilities in a timely manner and eliminate risks.</li><li id="hss_01_0008__li1924162054413">If a valid IP address is blocked by mistake (for example, after O&amp;M personnel enter incorrect passwords for multiple times), <a href="hss_01_0287.html">manually unblock the IP address</a>.<div class="notice" id="hss_01_0008__note1139784114311"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="hss_01_0008__p0397154114316">If you manually unblocked an IP address, but incorrect password attempts from this IP address exceed the threshold again, this IP address will be blocked again.</p>
+</div></div>
+</li></ul>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0038.html">Brute-force Attack Defense</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0013.html b/docs/hss/umn/hss_01_0013.html
new file mode 100644
index 00000000..acb4aed5
--- /dev/null
+++ b/docs/hss/umn/hss_01_0013.html
@@ -0,0 +1,16 @@
+<a name="hss_01_0013"></a><a name="hss_01_0013"></a>
+
+<h1 class="topictitle1">Can I Unblock an IP Address Blocked by HSS, and How?</h1>
+<div id="body0000001123401796"><p id="hss_01_0013__p184371042144416">Whether you can unblock an IP address depends on why it was blocked. An IP address will be blocked if it is regarded as the source of a brute-force attack, listed in the common IP blacklist, or not in the IP whitelist you set.</p>
+<div class="section" id="hss_01_0013__section555810487579"><h4 class="sectiontitle">Brute-force Attack IP Address</h4><ul id="hss_01_0013__ul932915438419"><li id="hss_01_0013__li1933094316413">If a brute force attack is detected, HSS blocks the attack source IP address for 12 hours by default. If a blocked IP address does not perform brute-force attacks in the default blocking duration, it will be automatically unblocked.</li><li id="hss_01_0013__li131691561618">If you are sure that a source IP address can be trusted, you can manually unblock it. Choose <strong id="hss_01_0013__b18795427161811">Detection</strong> &gt; <strong id="hss_01_0013__b12795827111818">Alarms</strong>, click <strong id="hss_01_0013__b5795192761813">View Details</strong> under <strong id="hss_01_0013__b12795132751814">Blocked IP Addresses</strong>, and unblock the IP address in the displayed slide-out panel.<p id="hss_01_0013__p20221831801">If you manually unblocked an IP address, but incorrect password attempts from this IP address exceed the threshold again, this IP address will be blocked again.</p>
+</li></ul>
+</div>
+<div class="section" id="hss_01_0013__section18306852407"><h4 class="sectiontitle">IP Address in the Common IP Blacklist</h4><p id="hss_01_0013__p1075013455369">You cannot manually unblock such IP addresses.</p>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0164.html">Intrusions</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0014.html b/docs/hss/umn/hss_01_0014.html
new file mode 100644
index 00000000..87637cd9
--- /dev/null
+++ b/docs/hss/umn/hss_01_0014.html
@@ -0,0 +1,15 @@
+<a name="hss_01_0014"></a><a name="hss_01_0014"></a>
+
+<h1 class="topictitle1">What Can I Do If I Enabled Dynamic WTP But Its Status Is Enabled but not in effect?</h1>
+<div id="body1582790406938"><p id="hss_01_0014__p67587176204">Dynamic WTP protects your Tomcat applications.</p>
+<p id="hss_01_0014__p193842367335">For this function to take effect, ensure that:</p>
+<ul id="hss_01_0014__ul7547133831715"><li id="hss_01_0014__li954863871713">There are Tomcat applications running on your servers.</li><li id="hss_01_0014__li204591931101816">Your servers run the Linux OS.</li><li id="hss_01_0014__li1551295571812">The <strong id="hss_01_0014__b322092744719">setenv.sh</strong> file has been automatically generated in the <strong id="hss_01_0014__b32211627174720">tomcat/bin</strong> directory (usually 20 minutes after you enable dynamic WTP). If the file exists, restart Tomcat to make dynamic WTP take effect.</li></ul>
+<p id="hss_01_0014__p2085411315327">If the status of dynamic WTP is <strong id="hss_01_0014__b9383161612452">Enabled but not in effect</strong> after you enable it, perform the following operations:</p>
+<ul id="hss_01_0014__ul189181020324"><li id="hss_01_0014__li19663711153215">Check whether the <strong id="hss_01_0014__b20952164064517">setenv.sh</strong> file has been generated in the <strong id="hss_01_0014__b1274215110458">tomcat/bin</strong> directory.</li><li id="hss_01_0014__li889171013322">If the <strong id="hss_01_0014__b1761752118127">setenv.sh</strong> file exists, check whether Tomcat has been restarted.</li></ul>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0250.html">Web Tamper Protection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0015.html b/docs/hss/umn/hss_01_0015.html
new file mode 100644
index 00000000..00bf6b8e
--- /dev/null
+++ b/docs/hss/umn/hss_01_0015.html
@@ -0,0 +1,19 @@
+<a name="hss_01_0015"></a><a name="hss_01_0015"></a>
+
+<h1 class="topictitle1">Related Services</h1>
+<div id="body1566301166172"><div class="section" id="hss_01_0015__section9425175513910"><h4 class="sectiontitle">ECS</h4><p id="hss_01_0015__p195241721161013">The <span id="hss_01_0015__text2010085981413">HSS</span> agent can be installed on ECS.</p>
+<p id="hss_01_0015__p722117144104">For details about ECS, see the <i><cite id="hss_01_0015__cite359828825101323">Elastic Cloud Server User Guide</cite></i>.</p>
+</div>
+<div class="section" id="hss_01_0015__section20121054115318"><h4 class="sectiontitle">Cloud Container Engine (CCE)</h4><p id="hss_01_0015__p32104217194">CCE can rapidly build a highly reliable container cluster based on cloud servers and add nodes to the cluster for management. <span id="hss_01_0015__text1072543823217">HSS</span> can install Hostguard-agent on the nodes to protect the container applications deployed on them.</p>
+<div class="note" id="hss_01_0015__note931313142322"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0015__p631431412325">CCE is a high-performance, high-reliability service through which enterprises can manage containerized applications. CCE supports native Kubernetes applications and tools, allowing you to easily set up a container runtime environment on the cloud. For more information, see the <i><cite id="hss_01_0015__cite1650820336449">Container Service User Guide</cite></i>.</p>
+</div></div>
+</div>
+<div class="section" id="hss_01_0015__section10190124311474"><h4 class="sectiontitle">Software Repository for Container (SWR)</h4><p id="hss_01_0015__p14286533134811">SWR provides easy, secure, and reliable management over container images throughout their lifecycles, facilitating the deployment of containerized services. For more information, see the <em id="hss_01_0015__i1543301257101323">Software Repository for Container User Guide</em>. <span id="hss_01_0015__text164641828158">HSS</span> scans for vulnerabilities and configurations in container images to help you detect the container environment that cannot be achieved by traditional security software. </p>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0042.html">Introduction</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0017.html b/docs/hss/umn/hss_01_0017.html
new file mode 100644
index 00000000..055e16bb
--- /dev/null
+++ b/docs/hss/umn/hss_01_0017.html
@@ -0,0 +1,79 @@
+<a name="hss_01_0017"></a><a name="hss_01_0017"></a>
+
+<h1 class="topictitle1">What Are the Differences Between the Web Tamper Protection Functions of HSS and WAF?</h1>
+<div id="body1588728317042"><p id="hss_01_0017__p35221913101417">The web tamper protection function of HSS monitors website directories in real time, backs up files, and restores tampered files using the backup, protecting websites from tampering. This function is helpful for governments, educational institutions, and enterprises.</p>
+<p id="hss_01_0017__p212531621715">WAF protects user data on the application layer. It supports cache configuration on static web pages. When a user accesses a web page, the system returns a cached page to the user and randomly checks whether the page has been tampered with.</p>
+<div class="section" id="hss_01_0017__section17584165716227"><h4 class="sectiontitle">Differences Between the Web Tamper Protection Functions of HSS and WAF</h4><p id="hss_01_0017__p1631612525414">The following table describes the differences between HSS and WAF.</p>
+
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0017__table85527226342" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Differences between the web tamper protection functions of HSS and WAF</caption><thead align="left"><tr id="hss_01_0017__row13552152210343"><th align="left" class="cellrowborder" valign="top" width="11.16%" id="mcps1.3.3.3.2.4.1.1"><p id="hss_01_0017__p1355216223348">Item</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="63.71%" id="mcps1.3.3.3.2.4.1.2"><p id="hss_01_0017__p195529226341">HSS</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="25.130000000000003%" id="mcps1.3.3.3.2.4.1.3"><p id="hss_01_0017__p955262243415">WAF</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0017__row13552182215344"><td class="cellrowborder" valign="top" width="11.16%" headers="mcps1.3.3.3.2.4.1.1 "><p id="hss_01_0017__p7552322183412">Static web page protection</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.71%" headers="mcps1.3.3.3.2.4.1.2 "><ul id="hss_01_0017__ul13393144394817"><li id="hss_01_0017__li16220825131210">Drive file and web file locking<p id="hss_01_0017__p5814351121220"><a name="hss_01_0017__li16220825131210"></a><a name="li16220825131210"></a>Locks files in driver and web file directories to prevent attackers from tampering with them.</p>
+</li><li id="hss_01_0017__li14951433112220">Privileged process management<p id="hss_01_0017__p1333212363225"><a name="hss_01_0017__li14951433112220"></a><a name="li14951433112220"></a>Allows privileged processes to modify web pages.</p>
+</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="25.130000000000003%" headers="mcps1.3.3.3.2.4.1.3 "><ul id="hss_01_0017__ul185733616116"><li id="hss_01_0017__li4858336171112">Static web pages can be cached on servers.</li><li id="hss_01_0017__li278195621111">Privileged process management is not supported.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0017__row2055212215343"><td class="cellrowborder" valign="top" width="11.16%" headers="mcps1.3.3.3.2.4.1.1 "><p id="hss_01_0017__p755362223411">Dynamic web page protection</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.71%" headers="mcps1.3.3.3.2.4.1.2 "><p id="hss_01_0017__p525353517221">Protects your data while Tomcat is running, detecting dynamic data tampering in databases.</p>
+</td>
+<td class="cellrowborder" valign="top" width="25.130000000000003%" headers="mcps1.3.3.3.2.4.1.3 "><p id="hss_01_0017__p148361112112112">No</p>
+</td>
+</tr>
+<tr id="hss_01_0017__row1355312213410"><td class="cellrowborder" valign="top" width="11.16%" headers="mcps1.3.3.3.2.4.1.1 "><p id="hss_01_0017__p1755392283413">Backup and restoration</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.71%" headers="mcps1.3.3.3.2.4.1.2 "><ul id="hss_01_0017__ul8274125010224"><li id="hss_01_0017__li194911932112012">Active backup and restoration<p id="hss_01_0017__p95538172310"><a name="hss_01_0017__li194911932112012"></a><a name="li194911932112012"></a>If WTP detects that a file in the protection directory is tampered with, it immediately uses the backup file on the local host to restore the file.</p>
+</li><li id="hss_01_0017__li123452533229">Remote backup and restoration<p id="hss_01_0017__p29711845192315"><a name="hss_01_0017__li123452533229"></a><a name="li123452533229"></a>If a file directory or backup directory on the local server is invalid, you can use the remote backup service to restore the tampered web page.</p>
+</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="25.130000000000003%" headers="mcps1.3.3.3.2.4.1.3 "><p id="hss_01_0017__p3553112243412">No</p>
+</td>
+</tr>
+<tr id="hss_01_0017__row1955313226340"><td class="cellrowborder" valign="top" width="11.16%" headers="mcps1.3.3.3.2.4.1.1 "><p id="hss_01_0017__p841791932815">Suitable for</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.71%" headers="mcps1.3.3.3.2.4.1.2 "><p id="hss_01_0017__p1611017332312">Websites that have high security requirements and difficult to be manually recovered</p>
+</td>
+<td class="cellrowborder" valign="top" width="25.130000000000003%" headers="mcps1.3.3.3.2.4.1.3 "><p id="hss_01_0017__p13148183102310">Websites that only require application-layer protection</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+<div class="section" id="hss_01_0017__section13235192131913"><h4 class="sectiontitle">How Do I Select WTP?</h4>
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0017__table121151626102415" frame="border" border="1" rules="all"><thead align="left"><tr id="hss_01_0017__row1211652618242"><th align="left" class="cellrowborder" valign="top" width="28.71%" id="mcps1.3.4.2.1.3.1.1"><p id="hss_01_0017__p1511652672418">Website</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="71.28999999999999%" id="mcps1.3.4.2.1.3.1.2"><p id="hss_01_0017__p1811612260241">Service</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0017__row8116182682410"><td class="cellrowborder" valign="top" width="28.71%" headers="mcps1.3.4.2.1.3.1.1 "><p id="hss_01_0017__p6116926162410">Common websites</p>
+</td>
+<td class="cellrowborder" valign="top" width="71.28999999999999%" headers="mcps1.3.4.2.1.3.1.2 "><p id="hss_01_0017__p1711612632416">WAF web tamper protection + HSS enterprise edition</p>
+</td>
+</tr>
+<tr id="hss_01_0017__row9116226132415"><td class="cellrowborder" valign="top" width="28.71%" headers="mcps1.3.4.2.1.3.1.1 "><p id="hss_01_0017__p1311614262240">Websites that require strong protection and anti-tampering capabilities</p>
+</td>
+<td class="cellrowborder" valign="top" width="71.28999999999999%" headers="mcps1.3.4.2.1.3.1.2 "><p id="hss_01_0017__p8313155720268">WAF web tamper protection + HSS WTP</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0250.html">Web Tamper Protection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0021.html b/docs/hss/umn/hss_01_0021.html
new file mode 100644
index 00000000..8d645968
--- /dev/null
+++ b/docs/hss/umn/hss_01_0021.html
@@ -0,0 +1,53 @@
+<a name="hss_01_0021"></a><a name="hss_01_0021"></a>
+
+<h1 class="topictitle1">WTP Edition</h1>
+<div id="body0000001359695490"><p id="hss_01_0021__p1651050123115">The WTP edition provides web tamper protection capabilities for your servers.</p>
+<div class="section" id="hss_01_0021__section2061161614528"><h4 class="sectiontitle">Web Tamper Protection Principles</h4>
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0021__table171301423115020" frame="border" border="1" rules="all"><caption><b>Table 1 </b>How WTP works</caption><thead align="left"><tr id="hss_01_0021__row101311123165010"><th align="left" class="cellrowborder" valign="top" width="17.669999999999998%" id="mcps1.3.2.2.2.3.1.1"><p id="hss_01_0021__p5131112316508">Type</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="82.33%" id="mcps1.3.2.2.2.3.1.2"><p id="hss_01_0021__p101312235504">Mechanism</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0021__row1213192345010"><td class="cellrowborder" valign="top" width="17.669999999999998%" headers="mcps1.3.2.2.2.3.1.1 "><p id="hss_01_0021__p191311323115011">Static web page protection</p>
+</td>
+<td class="cellrowborder" valign="top" width="82.33%" headers="mcps1.3.2.2.2.3.1.2 "><ol id="hss_01_0021__ol2079014295015"><li id="hss_01_0021__li117901542185014">Local directory lock<p id="hss_01_0021__p579011429509"><a name="hss_01_0021__li117901542185014"></a><a name="li117901542185014"></a>WTP locks files in a web file directory in a drive to prevent attackers from modifying them. Website administrators can update the website content by using privileged processes.</p>
+</li><li id="hss_01_0021__li1479013429505">Proactive backup and restoration<p id="hss_01_0021__p879014426509"><a name="hss_01_0021__li1479013429505"></a><a name="li1479013429505"></a>If WTP detects that a file in the protection directory is tampered with, it immediately uses the backup file on the local host to restore the file.</p>
+</li><li id="hss_01_0021__li879074275019">Remote backup and restoration<p id="hss_01_0021__p77900421506"><a name="hss_01_0021__li879074275019"></a><a name="li879074275019"></a>If a file directory or backup directory on the local server is invalid, you can use the remote backup service to restore the tampered web page.</p>
+</li></ol>
+</td>
+</tr>
+<tr id="hss_01_0021__row11131142385011"><td class="cellrowborder" valign="top" width="17.669999999999998%" headers="mcps1.3.2.2.2.3.1.1 "><p id="hss_01_0021__p11131122325014">Dynamic web page protection</p>
+</td>
+<td class="cellrowborder" valign="top" width="82.33%" headers="mcps1.3.2.2.2.3.1.2 "><p id="hss_01_0021__p17821174715018">Dynamic web page protection for Tomcat.</p>
+<ol id="hss_01_0021__ol58315471807"><li id="hss_01_0021__li983115471408">Malicious behavior filtering based on RASP<p id="hss_01_0021__p188307471020"><a name="hss_01_0021__li983115471408"></a><a name="li983115471408"></a>The unique runtime application self-protection (RASP) detects application program behaviors, preventing attackers from tampering with web pages through application programs.</p>
+</li><li id="hss_01_0021__li48319476019">Network disk file access control<p id="hss_01_0021__p1983115471107"><a name="hss_01_0021__li48319476019"></a><a name="li48319476019"></a>WTP implements fine-grained management to control permissions for adding, modifying, and querying file content in network disks, preventing tampering without affecting website content release.</p>
+</li></ol>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+<div class="section" id="hss_01_0021__section1167255181511"><h4 class="sectiontitle">Prerequisite</h4><ul id="hss_01_0021__ul156715591514"><li id="hss_01_0021__li14940175741210">The agent has been installed on the servers to be protected, the agent status is <strong id="hss_01_0021__b751653883320">Online</strong>, and the protection status is <strong id="hss_01_0021__b1851717386336">Unprotected</strong>.</li></ul>
+</div>
+<div class="section" id="hss_01_0021__section16232142216125"><h4 class="sectiontitle">Configuring Protected Directories</h4><p id="hss_01_0021__p1272744211343">You can add up to 50 directories to be protected. For details, see <a href="hss_01_0216.html#hss_01_0216__section4367121594314">Adding a Protected Directory</a>.</p>
+<p id="hss_01_0021__p2445193794615">To record the running status of the server in real time, exclude the log files in the protected directory. You can grant high read and write permissions for log files to prevent attackers from viewing or tampering with the log files.</p>
+</div>
+<div class="section" id="hss_01_0021__section65255174255"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0021__ol17428183502714"><li id="hss_01_0021__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0021__li830314169200"><span>Click <span><img id="hss_01_0021__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0021__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0021__hss_01_0571_b14857117404"><span id="hss_01_0021__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0021__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li></ol><ol start="3" id="hss_01_0021__ol1681012216450"><li id="hss_01_0021__li1169821412289"><span>In the navigation pane, choose <strong id="hss_01_0021__b7804141913365">Protection</strong> &gt; <strong id="hss_01_0021__b4201122353612">Web Tamper Protection</strong>. On the <strong id="hss_01_0021__b255914276361">Web Tamper Protection</strong> page, click the <strong id="hss_01_0021__b760103773620">Servers</strong> tab.</span><p><div class="fignone" id="hss_01_0021__fig134207163272"><span class="figcap"><b>Figure 1 </b>Entering the page for protected directory settings</span><br><span><img id="hss_01_0021__hss_01_0216_image1139195181013" src="en-us_image_0000001854854673.png"></span></div>
+</p></li><li id="hss_01_0021__li656516598285"><span>Click <strong id="hss_01_0021__b12441165023612">Add Server</strong>. In the displayed dialog box, select servers.</span><p><div class="note" id="hss_01_0021__note746742312528"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0021__p1046819231528">Selected servers must be equal to or fewer than the available quotas.</p>
+</div></div>
+<div class="fignone" id="hss_01_0021__fig1245944472810"><span class="figcap"><b>Figure 2 </b>Adding protected servers</span><br><span><img id="hss_01_0021__en-us_topic_0000001517162686_image7461221122515" src="en-us_image_0000001563800218.png"></span></div>
+</p></li><li id="hss_01_0021__li145529044812"><span>Click <strong id="hss_01_0021__b20453535113911">Add and Enable Protection</strong> and check the protection status. Choose <strong id="hss_01_0021__b15891711174014">Protection</strong> &gt; <strong id="hss_01_0021__b25892113406">Web Tamper Protection</strong>. On the <strong id="hss_01_0021__b1658911104011">Web Tamper Protection</strong> page, click the <strong id="hss_01_0021__b175891311164015">Servers</strong> tab. If the <strong id="hss_01_0021__b10238144644014">Protection Status</strong> of the server is <strong id="hss_01_0021__b85101951184016">Protected</strong>, WTP has been enabled.</span><p><div class="notice" id="hss_01_0021__note195527017484"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><ul id="hss_01_0021__ul115524064815"><li id="hss_01_0021__li19550406481">After WTP is enabled, configure protected directories for WTP to take effect. For details, see <a href="hss_01_0216.html">Adding a Protected Directory</a>.</li><li id="hss_01_0021__li15550406489">Dynamic WTP can only be enabled for Linux servers, and can only be used after Tomcat is restarted.</li><li id="hss_01_0021__li12552140154811">You can check the server protection status on the <strong id="hss_01_0021__b144520251361">Web Tamper Protection</strong> page.<div class="p" id="hss_01_0021__p1155280134814">The premium edition will be enabled when you enable WTP. You can perform the following operations to check the protection status:<ul id="hss_01_0021__ul955219014810"><li id="hss_01_0021__li155501706486">Choose <strong id="hss_01_0021__b1745065274116">Prevention</strong> &gt; <strong id="hss_01_0021__b745785216412">Web Tamper Protection</strong>. If the <strong id="hss_01_0021__b13457155215417">Protection Status</strong> of the server is <strong id="hss_01_0021__b1945785217416">Protected</strong>, WTP has been enabled.</li></ul>
+</div>
+</li></ul>
+</div></div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0377.html">Enabling Protection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0023.html b/docs/hss/umn/hss_01_0023.html
new file mode 100644
index 00000000..77d3498f
--- /dev/null
+++ b/docs/hss/umn/hss_01_0023.html
@@ -0,0 +1,34 @@
+<a name="hss_01_0023"></a><a name="hss_01_0023"></a>
+
+<h1 class="topictitle1">Managing Server Groups</h1>
+<div id="body1583114846347"><p id="hss_01_0023__p1131815501141">To manage servers by group, you can create a server group and add servers to it.</p>
+<p id="hss_01_0023__p161371031101219">You can check the numbers of servers, unsafe servers, and unprotected servers in a group.</p>
+<div class="section" id="hss_01_0023__section18405217253"><h4 class="sectiontitle">Creating a Server Group</h4><p id="hss_01_0023__p1075832464220">After creating a server group, you can add servers to the group for unified management.</p>
+<ol id="hss_01_0023__ol17428183502714"><li id="hss_01_0023__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0023__li830314169200"><span>Click <span><img id="hss_01_0023__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0023__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0023__hss_01_0571_b14857117404"><span id="hss_01_0023__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0023__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li></ol><ol start="3" id="hss_01_0023__ol1881283014396"><li id="hss_01_0023__lf1c5233624434a18aafdf5060abd1b53"><span>In the navigation pane, choose <span class="menucascade" id="hss_01_0023__menucascade1597431714169"><b><span class="uicontrol" id="hss_01_0023__uicontrol297461731616">Asset Management</span></b> &gt; <b><span class="uicontrol" id="hss_01_0023__uicontrol79741717151613">Servers &amp; Quota</span></b></span>, click <strong id="hss_01_0023__b109744178168">Server Groups</strong> in the <strong id="hss_01_0023__b18975617161611">Server</strong> list, and click <strong id="hss_01_0023__b9975131751616">Create Server Group</strong>.</span><p><div class="fignone" id="hss_01_0023__fig1432416548487"><span class="figcap"><b>Figure 1 </b>Accessing the page of server groups</span><br><span><img id="hss_01_0023__image1696255014914" src="en-us_image_0000001711689404.png"></span></div>
+</p></li><li id="hss_01_0023__l29e2607059384d3188d1e2fdaec9fbf2"><span>In the <strong id="hss_01_0023__b1568162019317">Create Server Group</strong> dialog box, enter a server group name and select the servers to be added to the group.</span><p><div class="note" id="hss_01_0023__n9ee7ee8f5bbf4486a07572e6d40e7fee"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0023__uf0bab78135cd4f84962e04c59cf41b81"><li id="hss_01_0023__la2406271a98743b3970eae9c94c1e87e">A server group name must be unique, or the group will fail to be created.</li><li id="hss_01_0023__l93d5c533619f42bc9c11c25d19135f1f">A name cannot contain spaces. It contains only letters, digits, underscores (_), hyphens (-), dots (.), asterisks (*), and plus signs (+). The length cannot exceed 64 characters.</li></ul>
+</div></div>
+<div class="fignone" id="hss_01_0023__fig137011638191213"><span class="figcap"><b>Figure 2 </b>Creating a server group</span><br><span><img id="hss_01_0023__en-us_topic_0000001517481970_image161662135414" src="en-us_image_0000001735592920.png"></span></div>
+</p></li><li id="hss_01_0023__li241423842414"><span>Click <strong id="hss_01_0023__b105971448165120">OK</strong>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0023__section685617255106"><h4 class="sectiontitle">Adding Servers to Groups</h4><p id="hss_01_0023__p116791634131017">You can add servers to an existing server group.</p>
+<ol id="hss_01_0023__ol3302171218353"><li id="hss_01_0023__li6461857292"><span>Click the <strong id="hss_01_0023__b1932416381520">Server</strong> tab.</span></li><li id="hss_01_0023__l6bf486a8fa8e4cde8d2d00a3c97f4d33"><span>Select one or more servers and click <strong id="hss_01_0023__b144631994339">Add to Group</strong>.</span><p><div class="fignone" id="hss_01_0023__fig17339625191418"><span class="figcap"><b>Figure 3 </b>Adding servers to a group</span><br><span><img id="hss_01_0023__en-us_topic_0000001517481970_image11021256175511" src="en-us_image_0000001735433752.png"></span></div>
+<div class="note" id="hss_01_0023__note178822972318"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0023__p98825932310">To add a server to a group, you can also locate the row where the server resides, click <strong id="hss_01_0023__b5764122185416">More</strong> in the <strong id="hss_01_0023__b14627024155414">Operation</strong> column, and choose <strong id="hss_01_0023__b131624329544">Add to Group</strong>.</p>
+</div></div>
+</p></li><li id="hss_01_0023__lbab4f886cc2b42249a622dd33fceb18d"><span>In the displayed dialog box, select a server group and click <strong id="hss_01_0023__b2717617175515">OK</strong>.</span><p><div class="note" id="hss_01_0023__note9424221657"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0023__p143222354">A server can be added to only one server group.</p>
+</div></div>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0023__section5816132454011"><h4 class="sectiontitle">Related Operations</h4><p id="hss_01_0023__p51451630114017"><strong id="hss_01_0023__b59131410185613">Editing a server group</strong></p>
+<ol id="hss_01_0023__ol18468112617488"><li id="hss_01_0023__li1196515309187"><span>Click <strong id="hss_01_0023__b89517506321">Servers &amp; Quota</strong> and click <strong id="hss_01_0023__b181212278334">Server Groups</strong> on the <strong id="hss_01_0023__b07410313292">Servers</strong> tab.</span></li><li id="hss_01_0023__l80df4308628e4ceaa3bd824daac547ac"><span>Locate the row where a server group resides and click <strong id="hss_01_0023__b1411262910566">Edit</strong> in the <strong id="hss_01_0023__b1711212291567">Operation</strong> column.</span></li><li id="hss_01_0023__lc628d8addef8492a98a7f2914f3d8855"><span>In the displayed dialog box, change the server group name and add or remove servers in the group.</span></li><li id="hss_01_0023__li269912524508"><span>Click <strong id="hss_01_0023__b18528917145814">OK</strong>.</span></li></ol>
+<p id="hss_01_0023__p735413624116"><strong id="hss_01_0023__b742819346595">Deleting a server group</strong></p>
+<ol id="hss_01_0023__ol38611957111516"><li id="hss_01_0023__li1786113578158"><span>Click <strong id="hss_01_0023__b17323397312">Servers &amp; Quota</strong> and click <strong id="hss_01_0023__b12324199163117">Server Groups</strong> on the <strong id="hss_01_0023__b116714062811">Servers</strong> tab.</span></li><li id="hss_01_0023__li17717201213166"><span>Locate the row where a server group resides and click <strong id="hss_01_0023__b106927710118">Delete</strong> in the <strong id="hss_01_0023__b16989721114">Operation</strong> column.</span><p><div class="note" id="hss_01_0023__note37602339166"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0023__ad286c61fa4a741c6af2111b22b6eb0ca">After the server group is deleted, the <strong id="hss_01_0023__b116822051116">Server Group</strong> column of the servers that were in the group will be blank.</p>
+</div></div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0397.html">Server Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0024.html b/docs/hss/umn/hss_01_0024.html
new file mode 100644
index 00000000..3ebffb4d
--- /dev/null
+++ b/docs/hss/umn/hss_01_0024.html
@@ -0,0 +1,29 @@
+<a name="hss_01_0024"></a><a name="hss_01_0024"></a>
+
+<h1 class="topictitle1">Deploying a Policy</h1>
+<div id="body1583114846347"><p id="hss_01_0024__p14835533">You can quickly configure and start server scans by using policy groups. Simply create a group, add policies to it, and apply this group to servers. The agents deployed on your servers will scan everything specified in the policies.</p>
+<div class="section" id="hss_01_0024__section1303437171317"><h4 class="sectiontitle">Precautions</h4><ul id="hss_01_0024__ul157291526132"><li id="hss_01_0024__li1571601101512">When you enable the enterprise edition, the policy group of this edition (including weak password and website shell detection policies) takes effect for all your servers by default.</li><li id="hss_01_0024__li133321523141512">When you enable the premium edition alone or the premium edition included with the WTP edition, the policy group of this edition takes effect by default.<p id="hss_01_0024__p325761613579"><a name="hss_01_0024__li133321523141512"></a><a name="li133321523141512"></a>To create your own policy group, you can copy the policy group of premium edition and add or remove policies in the copy.</p>
+</li></ul>
+</div>
+<div class="section" id="hss_01_0024__section1337661923512"><h4 class="sectiontitle">Creating a Policy Group</h4><ol id="hss_01_0024__ol17428183502714"><li id="hss_01_0024__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0024__li830314169200"><span>Click <span><img id="hss_01_0024__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0024__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0024__hss_01_0571_b14857117404"><span id="hss_01_0024__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0024__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li></ol><ol start="3" id="hss_01_0024__ol1681012216450"><li id="hss_01_0024__li681018264513"><span>In the navigation tree on the left, choose <span class="menucascade" id="hss_01_0024__menucascade177714498610"><b><span class="uicontrol" id="hss_01_0024__uicontrol677013491613">Security Operations</span></b> &gt; <b><span class="uicontrol" id="hss_01_0024__uicontrol1677013490617">Policies</span></b></span></span></li><li id="hss_01_0024__li8971141794513"><span>Copy a policy group.</span><p><ul id="hss_01_0024__ul1971717164518"><li id="hss_01_0024__li9971171754519">Select the <strong id="hss_01_0024__b1117810171679">tenant_linux_premium_default_policy_group</strong> policy group. Locate the row that this policy group resides, click <strong id="hss_01_0024__b917871714710">Copy</strong> in the <strong id="hss_01_0024__b1179191718715">Operation</strong> column.<div class="fignone" id="hss_01_0024__fig152082212468"><span class="figcap"><b>Figure 1 </b>Copying a Linux policy group</span><br><span><img id="hss_01_0024__image1432943620357" src="en-us_image_0000001711848916.png"></span></div>
+</li><li id="hss_01_0024__li18971617124515">Select the <strong id="hss_01_0024__b8535105211119">tenant_windows_premium_default_policy_group</strong> policy group. Click <strong id="hss_01_0024__b853695216117">Copy</strong> in the <strong id="hss_01_0024__b65365528114">Operation</strong> column.<div class="fignone" id="hss_01_0024__fig198461138463"><span class="figcap"><b>Figure 2 </b>Copying a Windows policy group</span><br><span><img id="hss_01_0024__image18846233464" src="en-us_image_0000001759608337.png"></span></div>
+</li></ul>
+</p></li><li id="hss_01_0024__li19972171714450"><span>In the dialog box displayed, enter a policy group name and description, and click <strong id="hss_01_0024__b444846145715">OK</strong>.</span><p><div class="note" id="hss_01_0024__note1997241719455"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0024__ul397251754514"><li id="hss_01_0024__li12972217174517">The name of a policy group must be unique, or the group will fail to be created.</li><li id="hss_01_0024__li1397231784513">The policy group name and its description can contain only letters, digits, underscores (_), hyphens (-), and spaces, and cannot start or end with a space.</li></ul>
+</div></div>
+<div class="fignone" id="hss_01_0024__fig4867491033"><span class="figcap"><b>Figure 3 </b>Creating a policy group</span><br><span><img id="hss_01_0024__en-us_topic_0000001568441893_image15909409409" src="en-us_image_0000001802080893.png"></span></div>
+</p></li><li id="hss_01_0024__li9972417174517"><span>Click <strong id="hss_01_0024__b11203033641199">OK</strong>.</span></li><li id="hss_01_0024__li109721517124510"><span>Click the name of the policy group you just created. The policies in the group will be displayed.</span><p><div class="fignone" id="hss_01_0024__fig122136581342"><span class="figcap"><b>Figure 4 </b>Policy group details</span><br><span><img id="hss_01_0024__en-us_topic_0000001568441893_image1986322174211" src="en-us_image_0000001735592904.png"></span></div>
+</p></li><li id="hss_01_0024__li14972117184515"><span>Click a policy name and modify its settings as required. For details, see <a href="hss_01_0044.html">Configuring Policies</a>.</span></li><li id="hss_01_0024__li49721717104512"><span>Enable or disable the policy by clicking the corresponding button in the <strong id="hss_01_0024__b389422178">Operation</strong> column. You can click <span><img id="hss_01_0024__image197301794516" src="en-us_image_0000001568317673.png"></span> to refresh the page.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0024__section73327783614"><h4 class="sectiontitle">Applying a Policy Group</h4><ol id="hss_01_0024__ol13781619295"><li id="hss_01_0024__li539203110616"><span>Log in to the management console and go to the <span id="hss_01_0024__text183524516304">HSS</span> page.</span></li></ol><ol start="2" id="hss_01_0024__ol1860550114512"><li id="hss_01_0024__li10960121012217"><span>In the navigation pane, choose <span class="menucascade" id="hss_01_0024__menucascade552731410313"><b><span class="uicontrol" id="hss_01_0024__uicontrol35211148312">Asset Management</span></b> &gt; <b><span class="uicontrol" id="hss_01_0024__uicontrol155278148317">Servers &amp; Quota</span></b></span> and click <strong id="hss_01_0024__b452811413311">Servers</strong>.</span></li><li id="hss_01_0024__li122913201709"><span>Select one or more servers for which you want to deploy a policy, and .</span><p><div class="fignone" id="hss_01_0024__fig1346712610811"><span class="figcap"><b>Figure 5 </b>Applying a policy</span><br><span><img id="hss_01_0024__en-us_topic_0000001568441893_image1175216344454" src="en-us_image_0000001735433736.png"></span></div>
+<p id="hss_01_0024__p69261213180"></p>
+</p></li><li id="hss_01_0024__li176771958135918"><span>In the dialog box that is displayed, select a policy group and click <strong id="hss_01_0024__b1963937124216">OK</strong>.</span><p><div class="note" id="hss_01_0024__note202298201803"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0024__ul7228152015017"><li id="hss_01_0024__li14228192014013">Old policies applied to a server will become invalid if you apply new policies to the server.</li><li id="hss_01_0024__li72282020508">Policies are applied to the servers within 1 minute.</li><li id="hss_01_0024__li1228122011011">Policies applied to offline servers will not take effect until the servers are online.</li><li id="hss_01_0024__li422815201015">In a deployed policy group, you can enable, disable, or modify policies.</li><li id="hss_01_0024__li1122882020013">A policy group that has been deployed cannot be deleted.</li></ul>
+</div></div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0397.html">Server Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0025.html b/docs/hss/umn/hss_01_0025.html
new file mode 100644
index 00000000..ca399c96
--- /dev/null
+++ b/docs/hss/umn/hss_01_0025.html
@@ -0,0 +1,15 @@
+<a name="hss_01_0025"></a><a name="hss_01_0025"></a>
+
+<h1 class="topictitle1">Risk Prevention</h1>
+<div id="body1583122436135"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0140.html">Vulnerability Management</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0145.html">Baseline Inspection</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0304.html">Container Image Security</a></strong><br>
+</li>
+</ul>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0026.html b/docs/hss/umn/hss_01_0026.html
new file mode 100644
index 00000000..5b23a6c1
--- /dev/null
+++ b/docs/hss/umn/hss_01_0026.html
@@ -0,0 +1,106 @@
+<a name="hss_01_0026"></a><a name="hss_01_0026"></a>
+
+<h1 class="topictitle1">Viewing Server Alarms</h1>
+<div id="body1583121040668"><p id="hss_01_0026__p1662417155">The <strong id="hss_01_0026__b086244142014">Events</strong> page displays the alarm events generated in the last 30 days. You can manually handle the alarmed items.</p>
+<p id="hss_01_0026__p95591432204515">The status of a handled event changes from <strong id="hss_01_0026__b4559161510208">Unhandled</strong> to <strong id="hss_01_0026__b11564415142018">Handled</strong>.</p>
+<div class="section" id="hss_01_0026__section7221597183"><h4 class="sectiontitle">Constraints and Limitations</h4><ul id="hss_01_0026__ul571214581011"><li id="hss_01_0026__li071210458102">To skip the checks on high-risk command execution, privilege escalations, reverse shells, abnormal shells, or web shells, manually disable the corresponding policies in the policy groups on the <strong id="hss_01_0026__b9158546201811">Policies</strong> page. HSS will not check the servers associated with disabled policies.</li><li id="hss_01_0026__li4713184517109">Other detection items cannot be manually disabled.</li><li id="hss_01_0026__li34621934192116">Servers that are not protected by HSS do not support operations related to alarms and events.</li></ul>
+</div>
+<div class="section" id="hss_01_0026__section72111045132010"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0026__ol550031423810"><li id="hss_01_0026__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0026__li830314169200"><span>Click <span><img id="hss_01_0026__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0026__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0026__hss_01_0571_b14857117404"><span id="hss_01_0026__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0026__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0026__li150151423810"><span>In the navigation pane on the left, choose <strong id="hss_01_0026__b18377447191219">Detection</strong> &gt; <strong id="hss_01_0026__b7811141812132">Alarms</strong> and click <strong id="hss_01_0026__b12667936171318">Server Alarms</strong>.</span><p><div class="note" id="hss_01_0026__note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0026__hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0026__fig9988155212375"><span class="figcap"><b>Figure 1 </b>Server alarms</span><br><span><img id="hss_01_0026__image83101973150" src="en-us_image_0000001621827002.png"></span></div>
+
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0026__table185876181727" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Alarm statistics</caption><thead align="left"><tr id="hss_01_0026__row1258817180217"><th align="left" class="cellrowborder" colspan="2" valign="top" id="mcps1.3.4.2.3.2.3.2.4.1.1"><p id="hss_01_0026__p94362044109">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" id="mcps1.3.4.2.3.2.3.2.4.1.2"><p id="hss_01_0026__p958861819213">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0026__row148882134232"><td class="cellrowborder" colspan="2" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0026__p7104173222317">Enterprise Project</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.2 "><p id="hss_01_0026__p157294282317">Select an enterprise project and view alarm details by enterprise project.</p>
+</td>
+</tr>
+<tr id="hss_01_0026__row1146916442556"><td class="cellrowborder" colspan="2" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0026__p2046924445514">Time range</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.2 "><p id="hss_01_0026__p154691644125510">You can select a fixed time period or customize a time period to filter alarms. Only alarms generated within 30 days can be queried.</p>
+<p id="hss_01_0026__p1082114712614">The options are as follows:</p>
+<ul id="hss_01_0026__ul142371443720"><li id="hss_01_0026__li1923717411717">Last 24 hours</li><li id="hss_01_0026__li2440551276">Last 3 days</li><li id="hss_01_0026__li65694121672">Last 7 days</li><li id="hss_01_0026__li536218181879">Last 30 days</li><li id="hss_01_0026__li727320012124">Custom</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0026__row158819182218"><td class="cellrowborder" rowspan="5" valign="top" width="9.68%" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0026__p164377441907">Server Alarms</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.49%" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0026__p658817181029">Affected Servers</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.83%" headers="mcps1.3.4.2.3.2.3.2.4.1.2 "><p id="hss_01_0026__p158819181929">Number of servers for which alarms are generated.</p>
+</td>
+</tr>
+<tr id="hss_01_0026__row195881118921"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0026__p18588191819211">Alarms to be Handled</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0026__p1058871813211">Number of alarms to be handled.</p>
+<p id="hss_01_0026__p213174416312">By default, all alarms to be handled are displayed.</p>
+</td>
+</tr>
+<tr id="hss_01_0026__row125883181627"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0026__p05885181228">Handled Alarms</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0026__p175880189210">Number of handled alarms.</p>
+</td>
+</tr>
+<tr id="hss_01_0026__row42871218311"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0026__p1028862533">Blocked IP Addresses</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0026__p89448319411">Number of blocked IP addresses. You can click the number to check blocked IP address list.</p>
+<p id="hss_01_0026__p114491243184">The blocked IP address list displays the server name, attack source IP address, login type, blocking status, number of blocks, blocking start time, and the latest blocking time.</p>
+<p id="hss_01_0026__p02881821539">If a valid IP address is blocked by mistake (for example, after O&amp;M personnel enter incorrect passwords for multiple times), you can manually unblock it. If a server is frequently attacked, you are advised to fix its vulnerabilities in a timely manner and eliminate risks.</p>
+<div class="notice" id="hss_01_0026__note106951035202915"><span class="noticetitle"> NOTICE: </span><div class="noticebody"><ul id="hss_01_0026__ul873664454119"><li id="hss_01_0026__li19736544204118">After a blocked IP address is unblocked, HSS will no longer block the operations performed by the IP address.</li><li id="hss_01_0026__li13901734194211">A maximum of 10,000 IP addresses can be blocked for each type of software.<p id="hss_01_0026__p164171344194210"><a name="hss_01_0026__li13901734194211"></a><a name="li13901734194211"></a>If your Linux server does not support ipset, a maximum of 50 IP addresses can be clocked for MySQL and vsftp.</p>
+<p id="hss_01_0026__p29243369425">If your Linux server does not support ipset or hosts.deny, a maximum of 50 IP addresses can be blocked for SSH.</p>
+</li></ul>
+</div></div>
+</td>
+</tr>
+<tr id="hss_01_0026__row36761916637"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0026__p1067616161131">Isolated Files</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0026__p15536140963">HSS can isolate detected threat files. Files that have been isolated are displayed on a slide-out panel on the <strong id="hss_01_0026__b1570718482015">Server Alarms</strong> page. You can click <strong id="hss_01_0026__b1636910452024">Isolated Files</strong> on the upper right corner to check them.</p>
+<p id="hss_01_0026__p36769161313">You can recover isolated files. For details, see <a href="hss_01_0331.html">Managing Isolated Files</a>.</p>
+</td>
+</tr>
+<tr id="hss_01_0026__row1570741018115"><td class="cellrowborder" rowspan="5" valign="top" width="9.68%" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0026__p770712103113">Container Alarms</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.49%" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0026__p1929111513812">Affected Servers</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.83%" headers="mcps1.3.4.2.3.2.3.2.4.1.2 "><p id="hss_01_0026__p49291715488">Number of servers for which alarms are generated.</p>
+</td>
+</tr>
+<tr id="hss_01_0026__row2079910122817"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0026__p293017151281">Alarms to be Handled</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0026__p39301515688">Number of alarms to be handled.</p>
+<p id="hss_01_0026__p2930415288">By default, all alarms to be handled are displayed.</p>
+</td>
+</tr>
+<tr id="hss_01_0026__row1591320144819"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0026__p1393019151289">Handled Alarms</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0026__p1893017158815">Number of handled alarms</p>
+</td>
+</tr>
+<tr id="hss_01_0026__row4468310984"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0026__p5468610680">Threats</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0026__p046820107812">Displays the statistics on alarms by severity.</p>
+<ul id="hss_01_0026__ul323742412914"><li id="hss_01_0026__li142379241697">Critical</li><li id="hss_01_0026__li1057952611917">High</li><li id="hss_01_0026__li1581816283910">Medium</li><li id="hss_01_0026__li1312915311195">Low</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0026__row2041964418815"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0026__p1141911441984">Top 5 Events</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0026__p19420644887">Displays the top 5 alarm types and their quantities.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0026__li42442020104312"><span>Click an alarm event in the list of event types to view the affected servers and occurrence time of the event. The following information is displayed:</span><p><ul id="hss_01_0026__ul4415717165518"><li id="hss_01_0026__li104162177558">Total number of alarms</li><li id="hss_01_0026__li6416131735513">Number of each type of alarms</li></ul>
+</p></li><li id="hss_01_0026__li5309169134714"><span>Click an alarm name to view its details. </span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0030.html">Intrusion Detection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0028.html b/docs/hss/umn/hss_01_0028.html
new file mode 100644
index 00000000..261d899b
--- /dev/null
+++ b/docs/hss/umn/hss_01_0028.html
@@ -0,0 +1,74 @@
+<a name="hss_01_0028"></a><a name="hss_01_0028"></a>
+
+<h1 class="topictitle1">Managing the Alarm Whitelist</h1>
+<div id="body1583121040668"><p id="hss_01_0028__p556281213014">You can configure the alarm whitelist to reduce false alarms. Events can be deleted from the whitelist.</p>
+<p id="hss_01_0028__p11508329162916">Whitelisted events will not trigger alarms.</p>
+<p id="hss_01_0028__p6552847143519">On the <strong id="hss_01_0028__b12670639112013">Alarms</strong> page, you can add falsely reported alarms to the alarm whitelist. After an alarm is added to the whitelist, HSS will not generate alarms or collect statistics on it.</p>
+<div class="section" id="hss_01_0028__section420473243814"><h4 class="sectiontitle">Adding Events to the Alarm Whitelist</h4>
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0028__table18831149143511" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Configuring the alarm whitelist</caption><thead align="left"><tr id="hss_01_0028__row188320495353"><th align="left" class="cellrowborder" valign="top" width="17.97%" id="mcps1.3.4.2.2.3.1.1"><p id="hss_01_0028__p688374912355">Method</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="82.03%" id="mcps1.3.4.2.2.3.1.2"><p id="hss_01_0028__p16884204923516">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0028__row488418495357"><td class="cellrowborder" valign="top" width="17.97%" headers="mcps1.3.4.2.2.3.1.1 "><p id="hss_01_0028__p168851049193519">Add to alarm whitelist</p>
+</td>
+<td class="cellrowborder" valign="top" width="82.03%" headers="mcps1.3.4.2.2.3.1.2 "><p id="hss_01_0028__p1096264993711">Choose to add the alarm to the whitelist when handling it.</p>
+<p id="hss_01_0028__p1685743116373">The following types of events can be added to the alarm whitelist:</p>
+<ul id="hss_01_0028__ul19884122922617"><li id="hss_01_0028__li888462912618">Reverse shells</li><li id="hss_01_0028__li108844296262">Ransomware</li><li id="hss_01_0028__li5474834253">Malicious programs</li><li id="hss_01_0028__li55489612251">Web shell</li><li id="hss_01_0028__li1188452962618">Abnormal process behaviors</li><li id="hss_01_0028__li6885129172610">Process privilege escalations</li><li id="hss_01_0028__li0885102902616">File privilege escalations</li><li id="hss_01_0028__li8885529172620">High-risk command executions</li><li id="hss_01_0028__li11885132915266">Malicious programs</li><li id="hss_01_0028__li11911182620127">Important file changes</li><li id="hss_01_0028__li8505144719217">File/Directory changes</li><li id="hss_01_0028__li31035273226">Abnormal shells</li><li id="hss_01_0028__li231811411229">Suspicious crontab tasks</li><li id="hss_01_0028__li9513195062212">Invalid accounts</li><li id="hss_01_0028__li19637412112319">Common vulnerability exploits</li></ul>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+<div class="section" id="hss_01_0028__section2560185572012"><h4 class="sectiontitle">Checking the Alarm Whitelist</h4><p id="hss_01_0028__p109701921125613">Perform the following steps to check the alarm whitelist:</p>
+<ol id="hss_01_0028__ol5945467398"><li id="hss_01_0028__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0028__li830314169200"><span>Click <span><img id="hss_01_0028__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0028__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0028__hss_01_0571_b14857117404"><span id="hss_01_0028__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0028__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0028__li539881483310"><span>In the navigation pane on the left, choose <span class="menucascade" id="hss_01_0028__menucascade54021514133315"><b><span class="uicontrol" id="hss_01_0028__uicontrol194021143338">Detection</span></b> &gt; <b><span class="uicontrol" id="hss_01_0028__uicontrol6402111403318">Whitelists</span></b></span>.</span></li><li id="hss_01_0028__li2753723133214"><span>Click <span class="uicontrol" id="hss_01_0028__uicontrol1280133610432"><b>Alarm Whitelist</b></span> to view the added alarm whitelist. For more information, see <a href="#hss_01_0028__table1213284433320">Table 2</a>.</span><p>
+<div class="tablenoborder"><a name="hss_01_0028__table1213284433320"></a><a name="table1213284433320"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0028__table1213284433320" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Parameter description</caption><thead align="left"><tr id="hss_01_0028__row4133244193313"><th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.5.3.4.2.1.2.3.1.1"><p id="hss_01_0028__p201331344143319">Parameter Name</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.5.3.4.2.1.2.3.1.2"><p id="hss_01_0028__p513374412336">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0028__row913314449337"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.5.3.4.2.1.2.3.1.1 "><p id="hss_01_0028__p181331344193312">Alarm Type</p>
+</td>
+<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.5.3.4.2.1.2.3.1.2 "><p id="hss_01_0028__p945004473411">Name of the alarm whitelist type.</p>
+</td>
+</tr>
+<tr id="hss_01_0028__row71335442331"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.5.3.4.2.1.2.3.1.1 "><p id="hss_01_0028__p21335447331">SHA256</p>
+</td>
+<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.5.3.4.2.1.2.3.1.2 "><p id="hss_01_0028__p51331644143312">Hash value of the target file.</p>
+</td>
+</tr>
+<tr id="hss_01_0028__row137197469451"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.5.3.4.2.1.2.3.1.1 "><p id="hss_01_0028__p12371135815452">Description</p>
+</td>
+<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.5.3.4.2.1.2.3.1.2 "><p id="hss_01_0028__p572034611457">Description of the target whitelist.</p>
+</td>
+</tr>
+<tr id="hss_01_0028__row1544014315107"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.5.3.4.2.1.2.3.1.1 "><p id="hss_01_0028__p1544015311014">Added</p>
+</td>
+<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.5.3.4.2.1.2.3.1.2 "><p id="hss_01_0028__p64401231102">Time when an alarm is added to the whitelist.</p>
+</td>
+</tr>
+<tr id="hss_01_0028__row622910613108"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.5.3.4.2.1.2.3.1.1 "><p id="hss_01_0028__p52292612106">Enterprise Project</p>
+</td>
+<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.5.3.4.2.1.2.3.1.2 "><p id="hss_01_0028__p18229866101">Enterprise project</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0028__section2806205117222"><h4 class="sectiontitle">Related Operations</h4><p id="hss_01_0028__p544831214120"><strong id="hss_01_0028__b736835912112">Removing alarms from the whitelist</strong></p>
+<p id="hss_01_0028__p521082013411">To remove an alarm from the whitelist, select it and click <strong id="hss_01_0028__b1055103113282">Delete</strong>.</p>
+<div class="note" id="hss_01_0028__note155463519172"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0028__ul87059198239"><li id="hss_01_0028__li5705191902312">Exercise caution when performing this operation. Whitelisted alarms cannot be restored after removal, and will be reported once triggered.</li><li id="hss_01_0028__li1061610211235">After an alarm is deleted from the whitelist, the handling status of the events associated with the alarm is not updated. To change the status, choose <strong id="hss_01_0028__b167594424010">Detection</strong> &gt; <strong id="hss_01_0028__b47213446011">Alarms</strong>, click <span class="uicontrol" id="hss_01_0028__uicontrol1049121613524"><b>Handle</b></span> in the <strong id="hss_01_0028__b08748420172">Operation</strong> column of an event, and select <strong id="hss_01_0028__b173407515179">Remove from whitelist</strong>.</li></ul>
+</div></div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0367.html">Whitelist Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0029.html b/docs/hss/umn/hss_01_0029.html
new file mode 100644
index 00000000..ea4641f8
--- /dev/null
+++ b/docs/hss/umn/hss_01_0029.html
@@ -0,0 +1,59 @@
+<a name="hss_01_0029"></a><a name="hss_01_0029"></a>
+
+<h1 class="topictitle1">Managing <span id="text4552212205816">Login Whitelist</span></h1>
+<div id="body1584929523281"><p id="hss_01_0029__p2055845433719">You can configure the IP addresses of destination servers, login IP addresses, login usernames, and user behaviors in the <span id="hss_01_0029__text199891759587">Login Whitelist</span>.</p>
+<div class="note" id="hss_01_0029__note1392952453510"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0029__ul13874332134312"><li id="hss_01_0029__li1590853320439">If the destination server IP address, login IP address, and username of a login are all whitelisted, this login will be allowed without checking.</li><li id="hss_01_0029__li1387433224316">After an IP address is added to a whitelist by following the instructions in <a href="#hss_01_0029__section349913102296">Adding Login Whitelist</a>, the alarms (if any) that have been generated for the IP address will not be automatically cleared. Handle the alarms by referring to <a href="hss_01_0026.html">Viewing Server Alarms</a>.</li></ul>
+</div></div>
+<p id="hss_01_0029__p19571643115320">You can add <span id="hss_01_0029__text1066655845710">Login Whitelist</span> in either of the following ways:</p>
+<ul id="hss_01_0029__ul1067986549"><li id="hss_01_0029__li767118135420">Add it to the <span id="hss_01_0029__text317673912571">Login Whitelist</span> when handling false alarms of the <strong id="hss_01_0029__b1639935285914">Brute-force attack</strong> and <strong id="hss_01_0029__b183991652205912">Abnormal login</strong> types. For details, see <a href="hss_01_0026.html">Viewing Server Alarms</a>.</li><li id="hss_01_0029__li10938111556">On the <span id="hss_01_0029__text1973113175719">Login Whitelist</span> page, add <span id="hss_01_0029__text21061656195616">Login Whitelist</span>.</li></ul>
+<div class="section" id="hss_01_0029__section349913102296"><a name="hss_01_0029__section349913102296"></a><a name="section349913102296"></a><h4 class="sectiontitle">Adding <span id="hss_01_0029__text1863011755712">Login Whitelist</span></h4><ol id="hss_01_0029__ol132117234519"><li id="hss_01_0029__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0029__li830314169200"><span>Click <span><img id="hss_01_0029__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0029__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0029__hss_01_0571_b14857117404"><span id="hss_01_0029__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0029__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0029__li51319715213410"><span>Choose <span class="menucascade" id="hss_01_0029__menucascade7488426162812"><b><span class="uicontrol" id="hss_01_0029__uicontrol104881326152816">Detection</span></b> &gt; <b><span class="uicontrol" id="hss_01_0029__uicontrol9182829112812">Whitelists</span></b> &gt; <b><span class="uicontrol" id="hss_01_0029__uicontrol423413655418"><span id="hss_01_0029__text173115855617">Login Whitelist</span></span></b></span> to access the <span class="wintitle" id="hss_01_0029__wintitle2440578213"><b>Whitelists</b></span> page, and click <span class="uicontrol" id="hss_01_0029__uicontrol466810523226"><b>Add</b></span>.</span><p><div class="fignone" id="hss_01_0029__fig7440191502017"><span class="figcap"><b>Figure 1 </b>Adding <span id="hss_01_0029__text1990402965811">Login Whitelist</span></span><br><span><img id="hss_01_0029__image6573937115816" src="en-us_image_0000001621634874.png"></span></div>
+</p></li><li id="hss_01_0029__li2861335182211"><span>On the displayed page, enter the server IP address, login IP address, and login username.</span><p>
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0029__table4327949111416" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Login security whitelist parameters</caption><thead align="left"><tr id="hss_01_0029__row0328184931419"><th align="left" class="cellrowborder" valign="top" width="18.79187918791879%" id="mcps1.3.5.2.4.2.1.2.4.1.1"><p id="hss_01_0029__p8328114916143">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="48.12481248124813%" id="mcps1.3.5.2.4.2.1.2.4.1.2"><p id="hss_01_0029__p9329249191413">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="33.083308330833084%" id="mcps1.3.5.2.4.2.1.2.4.1.3"><p id="hss_01_0029__p332994931417">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0029__row732944951411"><td class="cellrowborder" valign="top" width="18.79187918791879%" headers="mcps1.3.5.2.4.2.1.2.4.1.1 "><p id="hss_01_0029__p5329174921416">Server IP Address</p>
+</td>
+<td class="cellrowborder" rowspan="2" valign="top" width="48.12481248124813%" headers="mcps1.3.5.2.4.2.1.2.4.1.2 "><ul id="hss_01_0029__ul83141108275"><li id="hss_01_0029__li133141510112715">IPv4 addresses are supported</li><li id="hss_01_0029__li16499181219275">Single IP addresses, IP address segments, and masks are supported. Use commas (,) to separate them.</li></ul>
+</td>
+<td class="cellrowborder" rowspan="2" valign="top" width="33.083308330833084%" headers="mcps1.3.5.2.4.2.1.2.4.1.3 "><ul id="hss_01_0029__ul1956317174319"><li id="hss_01_0029__li1594182011311">192.168.1.1</li><li id="hss_01_0029__li93730224317">192.168.2.1-192.168.6.1</li><li id="hss_01_0029__li45631317123114">192.168.7.0/24</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0029__row532984919140"><td class="cellrowborder" valign="top" headers="mcps1.3.5.2.4.2.1.2.4.1.1 "><p id="hss_01_0029__p14329154915146">Login IP Address</p>
+</td>
+</tr>
+<tr id="hss_01_0029__row18329134951415"><td class="cellrowborder" valign="top" width="18.79187918791879%" headers="mcps1.3.5.2.4.2.1.2.4.1.1 "><p id="hss_01_0029__p16329144911144">Login Username</p>
+</td>
+<td class="cellrowborder" valign="top" width="48.12481248124813%" headers="mcps1.3.5.2.4.2.1.2.4.1.2 "><p id="hss_01_0029__p1732994910142">Current login username</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.083308330833084%" headers="mcps1.3.5.2.4.2.1.2.4.1.3 "><p id="hss_01_0029__p2329849131420">hss_test</p>
+</td>
+</tr>
+<tr id="hss_01_0029__row19329749121410"><td class="cellrowborder" valign="top" width="18.79187918791879%" headers="mcps1.3.5.2.4.2.1.2.4.1.1 "><p id="hss_01_0029__p93323495142">Remarks</p>
+</td>
+<td class="cellrowborder" valign="top" width="48.12481248124813%" headers="mcps1.3.5.2.4.2.1.2.4.1.2 "><p id="hss_01_0029__p12332849171415">Custom whitelist description</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.083308330833084%" headers="mcps1.3.5.2.4.2.1.2.4.1.3 "><p id="hss_01_0029__p83320499149">Test</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0029__li7623105212362"><span>Click <strong id="hss_01_0029__b7962737175811">OK</strong>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0029__section927114112309"><h4 class="sectiontitle">Other Operations</h4><p id="hss_01_0029__p1739122110319">Removing <span id="hss_01_0029__text143031056726">Login Whitelist</span></p>
+<p id="hss_01_0029__p129981720143112">To delete a <span id="hss_01_0029__text27981841162817">Login Whitelist</span>, select the <span id="hss_01_0029__text10798204120281">Login Whitelist</span> to you want to delete and click <strong id="hss_01_0029__b10798114122815">Delete</strong>, or click <strong id="hss_01_0029__b8799114122813">Delete</strong> in the <strong id="hss_01_0029__b1979911419283">Operation</strong> column of the server IP address you want to delete in the <span id="hss_01_0029__text97991641182816">Login Whitelist</span>.</p>
+<div class="note" id="hss_01_0029__note56442504101"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0029__p664465021019">Exercise caution when performing the deletion operation because it cannot be rolled back.</p>
+</div></div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0367.html">Whitelist Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0030.html b/docs/hss/umn/hss_01_0030.html
new file mode 100644
index 00000000..0ac8c177
--- /dev/null
+++ b/docs/hss/umn/hss_01_0030.html
@@ -0,0 +1,25 @@
+<a name="hss_01_0030"></a><a name="hss_01_0030"></a>
+
+<h1 class="topictitle1">Intrusion Detection</h1>
+<div id="body1582853113963"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0277.html">Server Alarms</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0026.html">Viewing Server Alarms</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0413.html">Handling Server Alarms</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0331.html">Managing Isolated Files</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0312.html">Container Alarm Events</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0313.html">Viewing Container Alarms</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0414.html">Handling Container Alarms</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0367.html">Whitelist Management</a></strong><br>
+</li>
+</ul>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0032.html b/docs/hss/umn/hss_01_0032.html
new file mode 100644
index 00000000..5926333f
--- /dev/null
+++ b/docs/hss/umn/hss_01_0032.html
@@ -0,0 +1,35 @@
+<a name="hss_01_0032"></a><a name="hss_01_0032"></a>
+
+<h1 class="topictitle1">FAQs</h1>
+<div id="body15809130"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0258.html">About HSS</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0321.html">Agent FAQs</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0038.html">Brute-force Attack Defense</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0196.html">Weak Passwords and Unsafe Accounts</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0164.html">Intrusions</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0188.html">Abnormal Logins</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0165.html">Unsafe Settings</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0246.html">Vulnerability Management</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0250.html">Web Tamper Protection</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0323.html">Container Guard Service</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0404.html">Ransomware Protection</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0426.html">Security Configurations</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0101.html">Others</a></strong><br>
+</li>
+</ul>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0033.html b/docs/hss/umn/hss_01_0033.html
new file mode 100644
index 00000000..ba411466
--- /dev/null
+++ b/docs/hss/umn/hss_01_0033.html
@@ -0,0 +1,43 @@
+<a name="hss_01_0033"></a><a name="hss_01_0033"></a>
+
+<h1 class="topictitle1">What Is Host Security?</h1>
+<div id="body1505110852140"><p id="hss_01_0033__p28211356172112">Host Security Service (HSS) helps you identify and manage the assets on your servers, eliminate risks, and defend against intrusions and web page tampering. There are also advanced protection and security operations functions available to help you easily detect and handle threats.</p>
+<div class="section" id="hss_01_0033__section199379810205"><h4 class="sectiontitle">How HSS Works</h4><p id="hss_01_0033__en-us_topic_0000001124699553_p14791512104913">Install the HSS agent on your servers, and you will be able to check the server security status and risks in a region on the HSS console.</p>
+<p id="hss_01_0033__en-us_topic_0000001124699553_p3005474310717"><a href="#hss_01_0033__en-us_topic_0000001124699553_fig350352519269">Figure 1</a> shows the working principles of HSS.</p>
+<div class="fignone" id="hss_01_0033__en-us_topic_0000001124699553_fig350352519269"><a name="hss_01_0033__en-us_topic_0000001124699553_fig350352519269"></a><a name="en-us_topic_0000001124699553_fig350352519269"></a><span class="figcap"><b>Figure 1 </b>Working principles</span><br><span><img id="hss_01_0033__hss_01_0001_image14460634145515" src="en-us_image_0000001687084998.png"></span></div>
+<p id="hss_01_0033__en-us_topic_0000001124699553_p23543393183651">The functions and working processes of HSS components are described as follows:</p>
+
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0033__en-us_topic_0000001124699553_table1458723513812" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Components</caption><thead align="left"><tr id="hss_01_0033__hss_01_0001_row858817356384"><th align="left" class="cellrowborder" valign="top" width="24.47%" id="mcps1.3.2.6.2.3.1.1"><p id="hss_01_0033__hss_01_0001_p205881735133814">Component</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="75.53%" id="mcps1.3.2.6.2.3.1.2"><p id="hss_01_0033__hss_01_0001_p15588435203813">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0033__hss_01_0001_row16588735123818"><td class="cellrowborder" valign="top" width="24.47%" headers="mcps1.3.2.6.2.3.1.1 "><p id="hss_01_0033__hss_01_0001_p5588153512388">Management console</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.53%" headers="mcps1.3.2.6.2.3.1.2 "><p id="hss_01_0033__hss_01_0001_p195881835143817">A visualized management platform, where you can apply configurations in a centralized manner and view the protection status and scan results of servers in a region.</p>
+</td>
+</tr>
+<tr id="hss_01_0033__hss_01_0001_row4588235113812"><td class="cellrowborder" valign="top" width="24.47%" headers="mcps1.3.2.6.2.3.1.1 "><p id="hss_01_0033__hss_01_0001_p9588173511385">HSS cloud protection center</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.53%" headers="mcps1.3.2.6.2.3.1.2 "><ul id="hss_01_0033__hss_01_0001_ul12405636133920"><li id="hss_01_0033__hss_01_0001_li640553616397">Analyzes security risks in servers using AI, machine learning, and deep learning algorithms.</li><li id="hss_01_0033__hss_01_0001_li12405103617394">Integrates multiple antivirus engines to detect and kill malicious programs in servers.</li><li id="hss_01_0033__hss_01_0001_li34251459183317">Receives configurations and scan tasks sent from the console and forwards them to agents on the servers.</li><li id="hss_01_0033__hss_01_0001_li104051836183919">Receives server information reported by agents, analyzes security risks and exceptions on servers, and displays the analysis results on the console.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0033__hss_01_0001_row6122814113917"><td class="cellrowborder" valign="top" width="24.47%" headers="mcps1.3.2.6.2.3.1.1 "><p id="hss_01_0033__hss_01_0001_p1512491463915">Agent</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.53%" headers="mcps1.3.2.6.2.3.1.2 "><ul id="hss_01_0033__hss_01_0001_ul21822043103919"><li id="hss_01_0033__hss_01_0001_li11908182174011">Communicates with the HSS cloud protection center via HTTPS and WSS. Port 10180 is used by default.</li><li id="hss_01_0033__hss_01_0001_li340415215411">Scans all servers every early morning; monitors the security status of servers; and reports the collected server information (including non-compliant configurations, insecure configurations, intrusion traces, software list, port list, and process list) to the cloud protection center.</li><li id="hss_01_0033__hss_01_0001_li3183134310391">Blocks server attacks based on the security policies you configured.</li></ul>
+<div class="note" id="hss_01_0033__hss_01_0001_note1132261064312"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="hss_01_0033__hss_01_0001_ul5575101218424"><li id="hss_01_0033__hss_01_0001_li962225104217">If no agent is installed or the agent installed is abnormal, the <span id="hss_01_0033__hss_01_0001_text337403735511">HSS</span> is unavailable.</li><li id="hss_01_0033__hss_01_0001_li16260105882814">Select the agent and installation command suitable for your OS.</li><li id="hss_01_0033__hss_01_0001_li10419113415452">The HSS agent can be used for all editions, including container security and Web Tamper Protection (WTP). You only need to install the agent once on the same server.</li></ul>
+</div></div>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0258.html">About HSS</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0036.html b/docs/hss/umn/hss_01_0036.html
new file mode 100644
index 00000000..6f224fac
--- /dev/null
+++ b/docs/hss/umn/hss_01_0036.html
@@ -0,0 +1,34 @@
+<a name="hss_01_0036"></a><a name="hss_01_0036"></a>
+
+<h1 class="topictitle1">How Do I Fix an Abnormal Agent?</h1>
+<div id="body1505111306257"><p id="hss_01_0036__p11618125525411">Your agent is probably abnormal if it is in <strong id="hss_01_0036__b174864261920">Not installed</strong> or <strong id="hss_01_0036__b974804241912">Offline</strong> state. Agent statuses and their meaning are as follows:</p>
+<ul id="hss_01_0036__ul0518154210551"><li id="hss_01_0036__li1493612506396"><strong id="hss_01_0036__b19241450195311">Uninstalled</strong>: No agent has been installed on the server, or the agent has been installed but not started.</li><li id="hss_01_0036__li19519442105518"><strong id="hss_01_0036__b146223115416">Offline</strong>: The communication between the agent and the server is abnormal. The agent on the server has been deleted, or a server is offline.</li><li id="hss_01_0036__li21461923113312"><strong id="hss_01_0036__b12475459205316">Online</strong>: The agent on the server is running properly.</li></ul>
+<div class="section" id="hss_01_0036__section12341045125711"><h4 class="sectiontitle">Possible Causes</h4><ul id="hss_01_0036__ul2049014654816"><li id="hss_01_0036__li725217565415">The agent status on the console is not updated.<p id="hss_01_0036__p102331442256"><a name="hss_01_0036__li725217565415"></a><a name="li725217565415"></a>The agent status has not been updated. After the agent is installed, it takes 5 to 10 minutes for the console to update its status.</p>
+</li><li id="hss_01_0036__li877319228">OS version not supported.<p id="hss_01_0036__p17504171882010"><a name="hss_01_0036__li877319228"></a><a name="li877319228"></a>For details, see "Constraints" in "Service Overview".</p>
+</li><li id="hss_01_0036__li6981328155819">The network is faulty.<p id="hss_01_0036__p20383005811"><a name="hss_01_0036__li6981328155819"></a><a name="li6981328155819"></a>The agent or the cloud protection center is abnormal. For example, the NIC is faulty, the IP address changes, or the bandwidth is low.</p>
+</li><li id="hss_01_0036__li649113617489">The agent process is abnormal.</li></ul>
+</div>
+<div class="section" id="hss_01_0036__section018718217590"><h4 class="sectiontitle">Solution</h4><ol id="hss_01_0036__ol75871950152316"><li id="hss_01_0036__li35871350112310"><span>Check whether the agent status remains <strong id="hss_01_0036__b15804124578">Offline</strong> on the console for more than 10 minutes after the agent was installed.</span><p><ul id="hss_01_0036__ul1932311012416"><li id="hss_01_0036__li173231310132410">If yes, go to <a href="#hss_01_0036__li1862125342316">2</a>.</li><li id="hss_01_0036__li1323910182411">If no, wait until the agent goes online. No further action is required. After the agent was installed, it takes 5 to 10 minutes for the console to update its status.</li></ul>
+</p></li><li id="hss_01_0036__li1862125342316"><a name="hss_01_0036__li1862125342316"></a><a name="li1862125342316"></a><span>Check whether your server OS is within the scope of support in "Constraints" in "Service Overview".</span><p><ul id="hss_01_0036__ul166291013182617"><li id="hss_01_0036__li7629131315263">If yes, go to <a href="#hss_01_0036__li1040605463416">3</a>.</li><li id="hss_01_0036__li1462921392617">If no, the <span id="hss_01_0036__text2085933731117">HSS</span> agent cannot be installed or run on your server. Upgrade the OS to a version supported by <span id="hss_01_0036__text1025134915387">HSS</span> and try again.</li></ul>
+</p></li><li id="hss_01_0036__li1040605463416"><a name="hss_01_0036__li1040605463416"></a><a name="li1040605463416"></a><span>Check whether the server network is normal.</span><p><ul id="hss_01_0036__ul827915573365"><li id="hss_01_0036__li52791157163613">If yes, go to <a href="#hss_01_0036__li64084228240">4</a>.</li><li id="hss_01_0036__li227312153713">If no,  After the server can access the network, check the agent status.</li></ul>
+</p></li><li id="hss_01_0036__li64084228240"><a name="hss_01_0036__li64084228240"></a><a name="li64084228240"></a><span>Restart the agent process.</span><p><ul id="hss_01_0036__ul148801829917"><li id="hss_01_0036__li19674149124614">Windows<ol type="a" id="hss_01_0036__ol491791419181"><li id="hss_01_0036__li16355318131810">Log in to the server as user <strong id="hss_01_0036__b335516182187">administrator</strong>.</li><li id="hss_01_0036__li157142215182">Open the Task Manager.</li><li id="hss_01_0036__li741013417188">On the <strong id="hss_01_0036__b162411834102910">Services</strong> tab page, select <strong id="hss_01_0036__b12289036152913">HostGuard</strong>.</li><li id="hss_01_0036__li11917131414181">Right-click the service and choose <span class="parmvalue" id="hss_01_0036__parmvalue1979010155178"><b>Restart</b></span>.</li></ol>
+</li><li id="hss_01_0036__li8675104912468">Linux<p id="hss_01_0036__p143313536466"><a name="hss_01_0036__li8675104912468"></a><a name="li8675104912468"></a>Run the following command in the CLI as user <strong id="hss_01_0036__b101891827123818">root</strong> to restart the agent:</p>
+<p id="hss_01_0036__p9385185415464"><strong id="hss_01_0036__b0495416172313">service hostguard restart</strong></p>
+<div class="p" id="hss_01_0036__p189551054104617">If the following information is displayed, the restart is successful:<pre class="screen" id="hss_01_0036__screen17495131618232">root@HSS-Ubuntu32:~#service hostguard restart
+Stopping Hostguard...
+Hostguard stopped
+Hostguard restarting...
+Hostguard is running</pre>
+</div>
+</li></ul>
+<p id="hss_01_0036__p1495717524714">After the process is restarted, wait for about 2 minutes.</p>
+<ul id="hss_01_0036__ul195621193473"><li id="hss_01_0036__li12759939111">If the agent status is <strong id="hss_01_0036__b1939491016476">Online</strong>, no further action is required.</li><li id="hss_01_0036__li1288052913118">If the agent status is still <strong id="hss_01_0036__b736518232116">Not installed</strong> or <strong id="hss_01_0036__b1436515212215">Offline</strong>, uninstall the agent and install it again.</li></ul>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0321.html">Agent FAQs</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0037.html b/docs/hss/umn/hss_01_0037.html
new file mode 100644
index 00000000..cdd23906
--- /dev/null
+++ b/docs/hss/umn/hss_01_0037.html
@@ -0,0 +1,18 @@
+<a name="hss_01_0037"></a><a name="hss_01_0037"></a>
+
+<h1 class="topictitle1">Is the Agent in Conflict with Any Other Security Software?</h1>
+<div id="body1505869761390"><p id="hss_01_0037__p1065392813584">Yes, it may be in conflict with DenyHosts.</p>
+<ul id="hss_01_0037__ul18815301494"><li id="hss_01_0037__li158816308492">Symptom: The IP address of the login host is identified as an attack IP address but can not be unblocked.</li><li id="hss_01_0037__li198833012491">Cause: <span id="hss_01_0037__text2085933731117">HSS</span> and DenyHosts both block possible attack IP addresses, but <span id="hss_01_0037__text1120617434542">HSS</span> can not unblock the IP addresses that were blocked by DenyHosts.</li><li id="hss_01_0037__li688173014919">Handling method: Stop DenyHosts.</li><li id="hss_01_0037__li127111216193616">Procedure<ol id="hss_01_0037__ol2907010192348"><li id="hss_01_0037__li49030747203132">Log in as user <strong id="hss_01_0037__b55041753122618">root</strong> to ECS.</li><li id="hss_01_0037__li1373250692348">Run the following command to check whether DenyHosts has been installed:<p id="hss_01_0037__p3143633192353"><a name="hss_01_0037__li1373250692348"></a><a name="li1373250692348"></a><strong id="hss_01_0037__b4726463292348">ps -ef | grep denyhosts.py</strong></p>
+<p id="hss_01_0037__p43788965204510">If information similar to the following is displayed, DenyHosts has been installed:</p>
+<p id="hss_01_0037__p025216535108"><span><img id="hss_01_0037__image9252175361015" src="en-us_image_0000001517317850.png"></span></p>
+</li><li id="hss_01_0037__li11607026204547">Run the following command to stop DenyHosts:<p id="hss_01_0037__p585313589240"><a name="hss_01_0037__li11607026204547"></a><a name="li11607026204547"></a><strong id="hss_01_0037__b323001192348">kill -9 'cat /var/lock/denyhosts'</strong></p>
+</li><li id="hss_01_0037__li4374819015343">Run the following command to cancel the automatic start of DenyHosts upon host startup:<p id="hss_01_0037__p246238315345"><a name="hss_01_0037__li4374819015343"></a><a name="li4374819015343"></a><strong id="hss_01_0037__b1334501598162337">chkconfig --del denyhosts;</strong></p>
+</li></ol>
+</li></ul>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0321.html">Agent FAQs</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0038.html b/docs/hss/umn/hss_01_0038.html
new file mode 100644
index 00000000..c20218f3
--- /dev/null
+++ b/docs/hss/umn/hss_01_0038.html
@@ -0,0 +1,27 @@
+<a name="hss_01_0038"></a><a name="hss_01_0038"></a>
+
+<h1 class="topictitle1">Brute-force Attack Defense</h1>
+<div id="body1604307979814"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0008.html">How Does HSS Intercept Brute Force Attacks?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0183.html">How Do I Handle a Brute-force Attack Alarm?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0256.html">How Do I Defend Against Brute-force Attacks?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0097.html">What Do I Do If the Account Cracking Prevention Function Does Not Take Effect on Some Accounts for Linux Servers?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0287.html">How Do I Unblock an IP Address?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0418.html">What Do I Do If HSS Frequently Reports Brute-force Alarms?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0512.html">What Do I Do If My Remote Server Port Is Not Updated in Brute-force Attack Records?</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0032.html">FAQs</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0041.html b/docs/hss/umn/hss_01_0041.html
new file mode 100644
index 00000000..163f5807
--- /dev/null
+++ b/docs/hss/umn/hss_01_0041.html
@@ -0,0 +1,11 @@
+<a name="hss_01_0041"></a><a name="hss_01_0041"></a>
+
+<h1 class="topictitle1">Security Operations</h1>
+<div id="body1583122436135"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0314.html">Policy Management</a></strong><br>
+</li>
+</ul>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0042.html b/docs/hss/umn/hss_01_0042.html
new file mode 100644
index 00000000..0f46088e
--- /dev/null
+++ b/docs/hss/umn/hss_01_0042.html
@@ -0,0 +1,25 @@
+<a name="hss_01_0042"></a><a name="hss_01_0042"></a>
+
+<h1 class="topictitle1">Introduction</h1>
+<div id="body1566301165459"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0001.html">What Is HSS?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0002.html">Advantages</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0226.html">Scenarios</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0590.html">Editions and Features</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0130.html">HSS Permissions Management</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0137.html">Constraints and Limitations</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0015.html">Related Services</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0004.html">Basic Concepts</a></strong><br>
+</li>
+</ul>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0043.html b/docs/hss/umn/hss_01_0043.html
new file mode 100644
index 00000000..ab9bc5b0
--- /dev/null
+++ b/docs/hss/umn/hss_01_0043.html
@@ -0,0 +1,90 @@
+<a name="hss_01_0043"></a><a name="hss_01_0043"></a>
+
+<h1 class="topictitle1">How Do I Install a PAM and Set a Proper Password Complexity Policy in a Linux OS?</h1>
+<div id="body1510303098800"><div class="section" id="hss_01_0043__section129391718589"><h4 class="sectiontitle">Installing a PAM</h4><p id="hss_01_0043__p20436133492110">Your password complexity policy cannot be checked if no pluggable authentication module (PAM) is running in your system.</p>
+<p id="hss_01_0043__p1011174511211">For Debian or Ubuntu, run the <strong id="hss_01_0043__b6872658193219">apt-get install libpam-cracklib</strong> command as the administrator to install a PAM.</p>
+<div class="note" id="hss_01_0043__note1253214552218"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0043__p1153265542117">A PAM is installed and running by default in CentOS, Fedora, and EulerOS.</p>
+</div></div>
+</div>
+<div class="section" id="hss_01_0043__section2262237135813"><h4 class="sectiontitle">Setting a Password Complexity Policy</h4><p id="hss_01_0043__p9810142272214">A proper password complexity policy would be: the password must contain at least eight characters and must contain uppercase letters, lowercase letters, numbers, and special characters.</p>
+<div class="note" id="hss_01_0043__note19918535112212"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0043__p5870115311221">The preceding configurations are basic security requirements. For more security configurations, run the following commands to obtain help information in Linux OSs:</p>
+<ul id="hss_01_0043__ul287117530225"><li id="hss_01_0043__li1387145362213">For CentOS, Fedora, and EulerOS based on Red Hat 7.0, run:<p id="hss_01_0043__p19871953122219"><a name="hss_01_0043__li1387145362213"></a><a name="li1387145362213"></a><strong id="hss_01_0043__b1587195314226">man pam_pwquality</strong></p>
+</li></ul>
+<ul id="hss_01_0043__ul16871195310228"><li id="hss_01_0043__li12871135362219">For other Linux OSs, run:<p id="hss_01_0043__p108715531228"><a name="hss_01_0043__li12871135362219"></a><a name="li12871135362219"></a><strong id="hss_01_0043__b1787295314227">man pam_cracklib</strong></p>
+</li></ul>
+</div></div>
+<ul id="hss_01_0043__ul13739713217"><li id="hss_01_0043__li47457113210">CentOS, Fedora, and EulerOS<ol id="hss_01_0043__ol14580132942416"><li id="hss_01_0043__li25801229162412">Run the following command to edit the <span class="filepath" id="hss_01_0043__filepath19630525182518"><b>/etc/pam.d/system-auth</b></span> file:<p id="hss_01_0043__p125805296247"><strong id="hss_01_0043__b20580102911240">vi</strong><strong id="hss_01_0043__b1758022932413"> /etc/pam.d/system-auth</strong></p>
+</li><li id="hss_01_0043__li4580132962415">Find the following information in the file:<ul id="hss_01_0043__ul95804299248"><li id="hss_01_0043__li5580192916246">For CentOS, Fedora, and EulerOS based on Red Hat 7.0:<p id="hss_01_0043__p1158012916240"><a name="hss_01_0043__li5580192916246"></a><a name="li5580192916246"></a>password requisite pam_pwquality.so try_first_pass retry=3 type=</p>
+</li><li id="hss_01_0043__li8580172912249">For other CentOS, Fedora, and EulerOS systems:<p id="hss_01_0043__p35803296241"><a name="hss_01_0043__li8580172912249"></a><a name="li8580172912249"></a>password requisite pam_cracklib.so try_first_pass retry=3 type=</p>
+</li></ul>
+</li><li id="hss_01_0043__li16379148142519">Add the following parameters and their values: <span class="parmname" id="hss_01_0043__parmname1176858104175656_1"><b>minlen</b></span>, <span class="parmname" id="hss_01_0043__parmname807996971175656_1"><b>dcredit</b></span>, <span class="parmname" id="hss_01_0043__parmname2027288034175656_1"><b>ucredit</b></span>, <span class="parmname" id="hss_01_0043__parmname2029607354175656_1"><b>lcredit</b></span>, and <span class="parmname" id="hss_01_0043__parmname1957356546175656_1"><b>ocredit</b></span>. If the file already has these parameters, change their values. For details, see <a href="#hss_01_0043__table55305016336">Table 1</a>.<p id="hss_01_0043__p183791948122512">Example:</p>
+<p id="hss_01_0043__p33791248132515">password requisite pam_cracklib.so try_first_pass retry=3 minlen=8 dcredit=-1 ucredit=-1 lcredit=-1 ocredit=-1 type=</p>
+<div class="note" id="hss_01_0043__note14136201882610"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0043__p65121821152618">Set <span class="parmname" id="hss_01_0043__parmname1063054467164753"><b>dcredit</b></span>, <span class="parmname" id="hss_01_0043__parmname1336565770164753"><b>ucredit</b></span>, <span class="parmname" id="hss_01_0043__parmname730486594164753"><b>lcredit</b></span>, and <span class="parmname" id="hss_01_0043__parmname801331047164753"><b>ocredit</b></span> to negative numbers.</p>
+</div></div>
+
+<div class="tablenoborder"><a name="hss_01_0043__table55305016336"></a><a name="table55305016336"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0043__table55305016336" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameter description</caption><thead align="left"><tr id="hss_01_0043__row553130193312"><th align="left" class="cellrowborder" valign="top" width="19.921992199219922%" id="mcps1.3.2.4.1.1.3.10.2.4.1.1"><p id="hss_01_0043__p35319015330"><strong id="hss_01_0043__b24725868162658">Parameter</strong></p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="50.91509150915091%" id="mcps1.3.2.4.1.1.3.10.2.4.1.2"><p id="hss_01_0043__p553111013337"><strong id="hss_01_0043__b842352706135554">Description</strong></p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="29.162916291629166%" id="mcps1.3.2.4.1.1.3.10.2.4.1.3"><p id="hss_01_0043__p35312014337">Example</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0043__row45312083317"><td class="cellrowborder" valign="top" width="19.921992199219922%" headers="mcps1.3.2.4.1.1.3.10.2.4.1.1 "><p id="hss_01_0043__p783412516354">minlen</p>
+</td>
+<td class="cellrowborder" valign="top" width="50.91509150915091%" headers="mcps1.3.2.4.1.1.3.10.2.4.1.2 "><p id="hss_01_0043__p78341756355">Minimum length of a password.</p>
+<p id="hss_01_0043__p15834757355">For example, if you want the minimum length to be eight, set the <strong id="hss_01_0043__b173614163313">minlen</strong> value to 8.</p>
+</td>
+<td class="cellrowborder" valign="top" width="29.162916291629166%" headers="mcps1.3.2.4.1.1.3.10.2.4.1.3 "><p id="hss_01_0043__p78347593512">minlen=8</p>
+</td>
+</tr>
+<tr id="hss_01_0043__row175746325337"><td class="cellrowborder" valign="top" width="19.921992199219922%" headers="mcps1.3.2.4.1.1.3.10.2.4.1.1 "><p id="hss_01_0043__p208341757351">dcredit</p>
+</td>
+<td class="cellrowborder" valign="top" width="50.91509150915091%" headers="mcps1.3.2.4.1.1.3.10.2.4.1.2 "><p id="hss_01_0043__p13834356354">Number of digits</p>
+<p id="hss_01_0043__p128348517357">A negative value (for example, <strong id="hss_01_0043__b842352706165433_1">-N</strong>) indicates the number (for example, N) of digits required in a password. A positive value indicates that there is no limit.</p>
+</td>
+<td class="cellrowborder" valign="top" width="29.162916291629166%" headers="mcps1.3.2.4.1.1.3.10.2.4.1.3 "><p id="hss_01_0043__p88351854353">dcredit=-1</p>
+</td>
+</tr>
+<tr id="hss_01_0043__row10612536133318"><td class="cellrowborder" valign="top" width="19.921992199219922%" headers="mcps1.3.2.4.1.1.3.10.2.4.1.1 "><p id="hss_01_0043__p17835252352">ucredit</p>
+</td>
+<td class="cellrowborder" valign="top" width="50.91509150915091%" headers="mcps1.3.2.4.1.1.3.10.2.4.1.2 "><p id="hss_01_0043__p16835175173511">Number of uppercase letters</p>
+<p id="hss_01_0043__p1083575133519">A negative value (for example, <strong id="hss_01_0043__b842352706165433_3">-N</strong>) indicates the number (for example, N) of uppercase letters required in a password. A positive value indicates that there is no limit.</p>
+</td>
+<td class="cellrowborder" valign="top" width="29.162916291629166%" headers="mcps1.3.2.4.1.1.3.10.2.4.1.3 "><p id="hss_01_0043__p283516518353">ucredit=-1</p>
+</td>
+</tr>
+<tr id="hss_01_0043__row42632407331"><td class="cellrowborder" valign="top" width="19.921992199219922%" headers="mcps1.3.2.4.1.1.3.10.2.4.1.1 "><p id="hss_01_0043__p12835858353">lcredit</p>
+</td>
+<td class="cellrowborder" valign="top" width="50.91509150915091%" headers="mcps1.3.2.4.1.1.3.10.2.4.1.2 "><p id="hss_01_0043__p128357533520">Number of lowercase letters</p>
+<p id="hss_01_0043__p118356563513">A negative value (for example, <strong id="hss_01_0043__b842352706165433_5">-N</strong>) indicates the number (for example, N) of lowercase letters required in a password. A positive value indicates that there is no limit.</p>
+</td>
+<td class="cellrowborder" valign="top" width="29.162916291629166%" headers="mcps1.3.2.4.1.1.3.10.2.4.1.3 "><p id="hss_01_0043__p18835852359">lcredit=-1</p>
+</td>
+</tr>
+<tr id="hss_01_0043__row201454438346"><td class="cellrowborder" valign="top" width="19.921992199219922%" headers="mcps1.3.2.4.1.1.3.10.2.4.1.1 "><p id="hss_01_0043__p178351750351">ocredit</p>
+</td>
+<td class="cellrowborder" valign="top" width="50.91509150915091%" headers="mcps1.3.2.4.1.1.3.10.2.4.1.2 "><p id="hss_01_0043__p7835185103513">Number of special characters</p>
+<p id="hss_01_0043__p1835752357">A negative value (for example, <strong id="hss_01_0043__b842352706165433_7">-N</strong>) indicates the number (for example, N) of special characters required in a password. A positive value indicates that there is no limit.</p>
+</td>
+<td class="cellrowborder" valign="top" width="29.162916291629166%" headers="mcps1.3.2.4.1.1.3.10.2.4.1.3 "><p id="hss_01_0043__p1683516514358">ocredit=-1</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</li></ol>
+</li><li id="hss_01_0043__li7342122163216">Debian and Ubuntu<ol id="hss_01_0043__ol10375165972717"><li id="hss_01_0043__li03753590272">Run the following command to edit the <span class="filepath" id="hss_01_0043__filepath179197770316454_3"><b>/etc/pam.d/common-password</b></span> file:<p id="hss_01_0043__p937515910278"><strong id="hss_01_0043__b1637655911272">vi /etc/pam.d/common-password</strong></p>
+</li><li id="hss_01_0043__li837655992713">Find the following information in the file:<p id="hss_01_0043__p1937675916278"><a name="hss_01_0043__li837655992713"></a><a name="li837655992713"></a>password requisite pam_cracklib.so retry=3 minlen=8 difok=3</p>
+</li><li id="hss_01_0043__li1837635912715">Add the following parameters and their values: <span class="parmname" id="hss_01_0043__parmname183631595"><b>minlen</b></span>, <span class="parmname" id="hss_01_0043__parmname624470141"><b>dcredit</b></span>, <span class="parmname" id="hss_01_0043__parmname1892806773"><b>ucredit</b></span>, <span class="parmname" id="hss_01_0043__parmname1622153448"><b>lcredit</b></span>, and <span class="parmname" id="hss_01_0043__parmname1546670340"><b>ocredit</b></span>. If the file already has these parameters, change their values. For details, see <a href="#hss_01_0043__table55305016336">Table 1</a>.<p id="hss_01_0043__p3376165982720">Example:</p>
+<p id="hss_01_0043__p103768594277">password requisite pam_cracklib.so retry=3 minlen=8 dcredit=-1 ucredit=-1 lcredit=-1 ocredit=-1 difok=3</p>
+</li></ol>
+</li></ul>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0165.html">Unsafe Settings</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0044.html b/docs/hss/umn/hss_01_0044.html
new file mode 100644
index 00000000..b0dce418
--- /dev/null
+++ b/docs/hss/umn/hss_01_0044.html
@@ -0,0 +1,991 @@
+<a name="hss_01_0044"></a><a name="hss_01_0044"></a>
+
+<h1 class="topictitle1">Configuring Policies</h1>
+<div id="body1583196879510"><p id="hss_01_0044__p161231832181010">After HSS is enabled, you can configure HSS policies based on your service requirements.</p>
+<div class="section" id="hss_01_0044__section1274593521"><h4 class="sectiontitle">Constraints</h4><ul id="hss_01_0044__ul489724571014"><li id="hss_01_0044__li1589724541010">The enterprise, premium, WTP, or container edition is enabled.</li><li id="hss_01_0044__li477017411115">For the default policy groups, you are advised to retain their default configurations.</li><li id="hss_01_0044__li1075845241011">Modifications on a policy take effect only in the group it belongs to.</li></ul>
+</div>
+<div class="section" id="hss_01_0044__section108161830107"><h4 class="sectiontitle">Accessing the Policies Page</h4><ol id="hss_01_0044__ol212192516139"><li id="hss_01_0044__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0044__li830314169200"><span>Click <span><img id="hss_01_0044__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0044__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0044__hss_01_0571_b14857117404"><span id="hss_01_0044__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0044__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li></ol><ol start="3" id="hss_01_0044__en-us_topic_0000001124838005_ol109551038132217"><li id="hss_01_0044__en-us_topic_0000001124838005_li1395512382228"><span>In the navigation tree on the left, choose <strong id="hss_01_0044__hss_01_0368_b8417352173319">Security Operation</strong> &gt; <strong id="hss_01_0044__hss_01_0368_b9339141119349">Policies</strong>. On the displayed page, <a href="#hss_01_0044__hss_01_0368_hss_01_0045_t801bc5e996a743dd8e2bfeb480ff1ca8">Policy group parameters</a> describes the fields.</span><p><div class="note" id="hss_01_0044__hss_01_0368_note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0044__hss_01_0368_hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+
+<div class="tablenoborder"><a name="hss_01_0044__hss_01_0368_hss_01_0045_t801bc5e996a743dd8e2bfeb480ff1ca8"></a><a name="hss_01_0368_hss_01_0045_t801bc5e996a743dd8e2bfeb480ff1ca8"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0044__hss_01_0368_hss_01_0045_t801bc5e996a743dd8e2bfeb480ff1ca8" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Policy group parameters</caption><thead align="left"><tr id="hss_01_0044__hss_01_0368_hss_01_0045_r31c93826ed3e4bd59b563dbc8df14166"><th align="left" class="cellrowborder" valign="top" width="25.55%" id="mcps1.3.3.3.1.2.2.2.3.1.1"><p id="hss_01_0044__hss_01_0368_hss_01_0045_aed898cdf4901445f8f0e6d21c87fde48">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="74.45%" id="mcps1.3.3.3.1.2.2.2.3.1.2"><p id="hss_01_0044__hss_01_0368_hss_01_0045_a19e3b563f5a44b7db1d7a497ba290943">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0044__hss_01_0368_hss_01_0045_r488e363dd1d646998c450b4980a148a8"><td class="cellrowborder" valign="top" width="25.55%" headers="mcps1.3.3.3.1.2.2.2.3.1.1 "><p id="hss_01_0044__hss_01_0368_hss_01_0045_aeb9cd59319084c87b05c34c33e17209f">Policy Group</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.45%" headers="mcps1.3.3.3.1.2.2.2.3.1.2 "><p id="hss_01_0044__hss_01_0368_hss_01_0045_a1629b279eb4d4b4ca551f39969ce5246">Name of a policy group The preset policy group names are as follows:</p>
+<ul id="hss_01_0044__hss_01_0368_ul11249204134220"><li id="hss_01_0044__hss_01_0368_li12862112220466"><strong id="hss_01_0044__hss_01_0368_b132131639673733">tenant_linux_container_default_policy_group</strong>: preset Linux policy of the container edition. You can copy this policy group and create a new one based on it.</li><li id="hss_01_0044__hss_01_0368_li1057417431422"><strong id="hss_01_0044__hss_01_0368_b82333350673733">tenant_linux_enterprise_default_policy_group</strong> is the default Linux policy of the enterprise edition. This policy group can only be viewed, and cannot be copied or deleted.</li><li id="hss_01_0044__hss_01_0368_li9574114354211"><strong id="hss_01_0044__hss_01_0368_b204221408273733">tenant_windows_enterprise_default_policy_group</strong>: preset Windows policy of the enterprise edition. This policy group can only be viewed, and cannot be copied or deleted.</li><li id="hss_01_0044__hss_01_0368_li957417439421"><strong id="hss_01_0044__hss_01_0368_b100939184073733">tenant_linux_premium_default_policy_group</strong>: preset Linux policy of the premium edition. You can create a policy group by copying this default group and modify the copy.</li><li id="hss_01_0044__hss_01_0368_li157414312427"><strong id="hss_01_0044__hss_01_0368_b183131740473733">tenant_windows_premium_default_policy_group</strong>: preset Windows policy of the premium edition. You can create a policy group by copying this default group and modify the copy.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0044__hss_01_0368_hss_01_0045_row190113370416"><td class="cellrowborder" valign="top" width="25.55%" headers="mcps1.3.3.3.1.2.2.2.3.1.1 "><p id="hss_01_0044__hss_01_0368_hss_01_0045_p1990113377414">ID</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.45%" headers="mcps1.3.3.3.1.2.2.2.3.1.2 "><p id="hss_01_0044__hss_01_0368_hss_01_0045_p79014375412">Unique ID of a policy group</p>
+</td>
+</tr>
+<tr id="hss_01_0044__hss_01_0368_hss_01_0045_r43f1c22e0b5a4a22b201b6ab5806378b"><td class="cellrowborder" valign="top" width="25.55%" headers="mcps1.3.3.3.1.2.2.2.3.1.1 "><p id="hss_01_0044__hss_01_0368_hss_01_0045_a5e79838371f64e47bffa20d0daee2da4">Description</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.45%" headers="mcps1.3.3.3.1.2.2.2.3.1.2 "><p id="hss_01_0044__hss_01_0368_hss_01_0045_aa0cb14aedfe744e688a4457a197ab0a8">Description of a policy group</p>
+</td>
+</tr>
+<tr id="hss_01_0044__hss_01_0368_hss_01_0045_row55761411057"><td class="cellrowborder" valign="top" width="25.55%" headers="mcps1.3.3.3.1.2.2.2.3.1.1 "><p id="hss_01_0044__hss_01_0368_hss_01_0045_p1457712111513">Supported Version</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.45%" headers="mcps1.3.3.3.1.2.2.2.3.1.2 "><p id="hss_01_0044__hss_01_0368_hss_01_0045_p1577316512"><span id="hss_01_0044__hss_01_0368_hss_01_0045_text15282256155410">HSS</span> edition supported by a policy group.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__hss_01_0368_hss_01_0045_row1880233816911"><td class="cellrowborder" valign="top" width="25.55%" headers="mcps1.3.3.3.1.2.2.2.3.1.1 "><p id="hss_01_0044__hss_01_0368_hss_01_0045_p1980218381991">Associated Servers</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.45%" headers="mcps1.3.3.3.1.2.2.2.3.1.2 "><p id="hss_01_0044__hss_01_0368_hss_01_0045_p3802238498">To view details about the servers associated with a policy group, click the number in the <strong id="hss_01_0044__hss_01_0368_b1252310554456">Servers</strong> column of the group.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0044__li5608169434"><span>Click the name of the policy group to access the policy detail list.</span><p><div class="note" id="hss_01_0044__note59631848486"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0044__p199631481089">You can click <strong id="hss_01_0044__b1330214075418">Enable</strong> or <strong id="hss_01_0044__b230613454545">Disable</strong> in the <strong id="hss_01_0044__b1744718492548">Operation</strong> column of a policy. After a policy is disabled, the detection of the policy is not performed.</p>
+</div></div>
+</p></li><li id="hss_01_0044__li101433198256"><span>You can modify the policy by clicking its name.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0044__section1219861342"><a name="hss_01_0044__section1219861342"></a><a name="section1219861342"></a><h4 class="sectiontitle">Asset Discovery</h4><ol id="hss_01_0044__ol3593102310413"><li id="hss_01_0044__li12166192316403"><span>Click <strong id="hss_01_0044__b1327194013415">Asset Discovery</strong>.</span></li><li id="hss_01_0044__li122915402415"><span>On the displayed page, modify the settings as required. For more information, see <a href="#hss_01_0044__table5229440549">Table 2</a>.</span><p><div class="fignone" id="hss_01_0044__fig7861163273419"><span class="figcap"><b>Figure 1 </b>Modifying the asset discovery policy</span><br><span><img id="hss_01_0044__image83681435272" src="en-us_image_0000001670439437.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0044__table5229440549"></a><a name="table5229440549"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0044__table5229440549" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Parameter description</caption><thead align="left"><tr id="hss_01_0044__row22293401149"><th align="left" class="cellrowborder" valign="top" width="26.479999999999997%" id="mcps1.3.4.2.2.2.2.2.3.1.1"><p id="hss_01_0044__p1642161310578">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="73.52%" id="mcps1.3.4.2.2.2.2.2.3.1.2"><p id="hss_01_0044__p722914013419">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0044__row2023024011413"><td class="cellrowborder" valign="top" width="26.479999999999997%" headers="mcps1.3.4.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p58520365112258">Software Scanned</p>
+</td>
+<td class="cellrowborder" valign="top" width="73.52%" headers="mcps1.3.4.2.2.2.2.2.3.1.2 "><ul id="hss_01_0044__ul20119251513"><li id="hss_01_0044__li711251554">Software name. A name can contain a maximum of 5,000 characters without any space. Use commas (,) to separate software names.</li><li id="hss_01_0044__li17780618079">If this parameter is not specified, information about all installed software will be retrieved as its value.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0044__row1823044019411"><td class="cellrowborder" valign="top" width="26.479999999999997%" headers="mcps1.3.4.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p13133548142014">Software Search Path</p>
+</td>
+<td class="cellrowborder" valign="top" width="73.52%" headers="mcps1.3.4.2.2.2.2.2.3.1.2 "><p id="hss_01_0044__p18230114013419">Path for software search. This parameter is not required for Windows servers.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row145521153152611"><td class="cellrowborder" valign="top" width="26.479999999999997%" headers="mcps1.3.4.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p17553653162614">Scanned Web Directories</p>
+</td>
+<td class="cellrowborder" valign="top" width="73.52%" headers="mcps1.3.4.2.2.2.2.2.3.1.2 "><p id="hss_01_0044__p8553153162614">Specifies a web directory to be scanned.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row194227566268"><td class="cellrowborder" valign="top" width="26.479999999999997%" headers="mcps1.3.4.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p84221756152610">Scanned Web Directory Depth</p>
+</td>
+<td class="cellrowborder" valign="top" width="73.52%" headers="mcps1.3.4.2.2.2.2.2.3.1.2 "><p id="hss_01_0044__p24222560261">Specifies the level depth for web directory scanning.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0044__li14232144013415"><span>Confirm the information and click <span class="uicontrol" id="hss_01_0044__uicontrol105861049103519"><b>OK</b></span>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0044__section2225201363514"><a name="hss_01_0044__section2225201363514"></a><a name="section2225201363514"></a><h4 class="sectiontitle">Weak Password Scan</h4><p id="hss_01_0044__p1164403718814">Weak passwords are not attributed to a certain type of vulnerabilities, but they bring no less security risks than any type of vulnerabilities. Data and programs will become insecure if their passwords are cracked.</p>
+<p id="hss_01_0044__p2084865532218"><span id="hss_01_0044__text798861125519">HSS</span> proactively detects the accounts using weak passwords and generates alarms for the accounts. You can also add a password that may have been leaked to the weak password list to prevent server accounts from using the password.</p>
+<ol id="hss_01_0044__ol15504164512110"><li id="hss_01_0044__li56054931224551"><span>Click <strong id="hss_01_0044__b1962711585357">Weak Password Detection</strong>.</span></li><li id="hss_01_0044__li321899361079"><span>In the <strong id="hss_01_0044__b76826575489">Policy Settings</strong> area, modify the settings as required. For more information, see <a href="#hss_01_0044__table68786563367">Table 3</a>.</span><p><div class="fignone" id="hss_01_0044__fig487302319359"><span class="figcap"><b>Figure 2 </b>Modifying the weak password detection policy</span><br><span><img id="hss_01_0044__image126366593291" src="en-us_image_0000001670239397.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0044__table68786563367"></a><a name="table68786563367"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0044__table68786563367" frame="border" border="1" rules="all"><caption><b>Table 3 </b>Parameter description</caption><thead align="left"><tr id="hss_01_0044__row987045683618"><th align="left" class="cellrowborder" valign="top" width="21.099999999999998%" id="mcps1.3.5.4.2.2.2.2.3.1.1"><p id="hss_01_0044__p158231245181612">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="78.9%" id="mcps1.3.5.4.2.2.2.2.3.1.2"><p id="hss_01_0044__p138701856183613">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0044__row1082545123718"><td class="cellrowborder" valign="top" width="21.099999999999998%" headers="mcps1.3.5.4.2.2.2.2.3.1.1 "><p id="hss_01_0044__p9825145183714">Scan Time</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.9%" headers="mcps1.3.5.4.2.2.2.2.3.1.2 "><p id="hss_01_0044__p2825554378">Time point when detections are performed. It can be accurate to the minute.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row1089155743718"><td class="cellrowborder" valign="top" width="21.099999999999998%" headers="mcps1.3.5.4.2.2.2.2.3.1.1 "><p id="hss_01_0044__p450111914383">Random Deviation Time (s)</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.9%" headers="mcps1.3.5.4.2.2.2.2.3.1.2 "><p id="hss_01_0044__p1250118943810">Random deviation time of the weak password based on <strong id="hss_01_0044__b582412579261">Scan Time</strong>. The value range is 0 to 7200s.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row250492193818"><td class="cellrowborder" valign="top" width="21.099999999999998%" headers="mcps1.3.5.4.2.2.2.2.3.1.1 "><p id="hss_01_0044__p1174712211388">Scan Days</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.9%" headers="mcps1.3.5.4.2.2.2.2.3.1.2 "><p id="hss_01_0044__p1747822143819">Days in a week when weak passwords are scanned. You can select one or more days.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row14641173512514"><td class="cellrowborder" valign="top" width="21.099999999999998%" headers="mcps1.3.5.4.2.2.2.2.3.1.1 "><p id="hss_01_0044__p1529254214388">Detection Break Time (ms)</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.9%" headers="mcps1.3.5.4.2.2.2.2.3.1.2 "><p id="hss_01_0044__p134921424175418">Interval between the checks of two accounts. The value range is 0 to 2,000.</p>
+<p id="hss_01_0044__p449216241545">For example, if this parameter is set to <strong id="hss_01_0044__b141754106010656">50</strong>, the system checks <strong id="hss_01_0044__b71713298410656">/bin/ls</strong> every 50 milliseconds.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row1387510568363"><td class="cellrowborder" valign="top" width="21.099999999999998%" headers="mcps1.3.5.4.2.2.2.2.3.1.1 "><p id="hss_01_0044__p1194136161015">User-defined Weak Passwords</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.9%" headers="mcps1.3.5.4.2.2.2.2.3.1.2 "><p id="hss_01_0044__p519466101015">You can add a password that may have been leaked to this weak password text box to prevent server accounts from using the password.</p>
+<p id="hss_01_0044__p106614408917">Enter only one weak password per line. Up to 300 weak passwords can be added.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0044__li58928888101156"><span>Confirm the information and click <span class="uicontrol" id="hss_01_0044__hss_01_0044_uicontrol105861049103519"><b>OK</b></span>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0044__section6401323142512"><a name="hss_01_0044__section6401323142512"></a><a name="section6401323142512"></a><h4 class="sectiontitle">Configuration Check</h4><ol id="hss_01_0044__ol1594220591413"><li id="hss_01_0044__li54991231758"><span>Click <strong id="hss_01_0044__b14268132083916">Configuration Check</strong>.</span></li><li id="hss_01_0044__li385353884013"><span>On the <strong id="hss_01_0044__b19715020174314">Configure Check</strong>, modify the policy.</span><p><div class="fignone" id="hss_01_0044__fig11856115143611"><span class="figcap"><b>Figure 3 </b>Modifying the configuration check policy</span><br><span><img id="hss_01_0044__image12141921153312" src="en-us_image_0000001621799506.png"></span></div>
+
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0044__table150011313513" frame="border" border="1" rules="all"><caption><b>Table 4 </b>Parameter description</caption><thead align="left"><tr id="hss_01_0044__row1850114313516"><th align="left" class="cellrowborder" valign="top" width="21.060000000000002%" id="mcps1.3.6.2.2.2.2.2.3.1.1"><p id="hss_01_0044__p6583201844413">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="78.94%" id="mcps1.3.6.2.2.2.2.2.3.1.2"><p id="hss_01_0044__p0501173455">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0044__row25011331054"><td class="cellrowborder" valign="top" width="21.060000000000002%" headers="mcps1.3.6.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p2501113652">Scan Time</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.94%" headers="mcps1.3.6.2.2.2.2.2.3.1.2 "><p id="hss_01_0044__p6424166143114">Time point when detections are performed. It can be accurate to the minute.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row769665110329"><td class="cellrowborder" valign="top" width="21.060000000000002%" headers="mcps1.3.6.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p1769785115327">Random Deviation Time (Seconds)</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.94%" headers="mcps1.3.6.2.2.2.2.2.3.1.2 "><p id="hss_01_0044__p17697195123217">Random deviation time of the system detection. The value ranges from 0 to 7,200s.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row16501731854"><td class="cellrowborder" valign="top" width="21.060000000000002%" headers="mcps1.3.6.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p4501123254">Scan Days</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.94%" headers="mcps1.3.6.2.2.2.2.2.3.1.2 "><p id="hss_01_0044__p11903202173112">Day in a week when a detection is performed. You can select any days from Monday to Sunday.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row5611134184419"><td class="cellrowborder" valign="top" width="21.060000000000002%" headers="mcps1.3.6.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p166111244442">System Default Baseline Library</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.94%" headers="mcps1.3.6.2.2.2.2.2.3.1.2 "><p id="hss_01_0044__p1115642884013">The detection baseline has been configured in the system. You only need to select the baseline you want to scan. All parameters are in their default values and cannot be modified.</p>
+<p id="hss_01_0044__p15772741144010">The parameters are as follows:</p>
+<ul id="hss_01_0044__ul1027812084210"><li id="hss_01_0044__li1278122013426"><strong id="hss_01_0044__b73666519158">Scan</strong>: You can select this check box to execute the corresponding baseline policy. By default, this check box is not selected.</li><li id="hss_01_0044__li179961925134212"><strong id="hss_01_0044__b16717174531515">Baseline Name</strong></li><li id="hss_01_0044__li1753323814466"><strong id="hss_01_0044__b1749519491153">Type</strong></li><li id="hss_01_0044__li813414154496"><strong id="hss_01_0044__b88031171616">Baseline Library Hash</strong></li><li id="hss_01_0044__li119104914505"><strong id="hss_01_0044__b209836414167">Keyword</strong></li><li id="hss_01_0044__li141091220105013"><strong id="hss_01_0044__b1128161211612">OS Type</strong></li><li id="hss_01_0044__li12699173310505"><strong id="hss_01_0044__b176561546115515">OS Name</strong>: name of the OS to be checked. This parameter is left empty by default.</li><li id="hss_01_0044__li3961342135019"><strong id="hss_01_0044__b8320101520599">Allowed Executable Item ID</strong>: executable items allowed during baseline detection. This parameter is left empty by default.</li></ul>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0044__li208837314433"><span>Select the baseline to be detected or customize a baseline.</span></li><li id="hss_01_0044__li12237258205313"><span>Confirm the information and click <span class="uicontrol" id="hss_01_0044__hss_01_0044_uicontrol105861049103519_1"><b>OK</b></span>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0044__section1575063012457"><a name="hss_01_0044__section1575063012457"></a><a name="section1575063012457"></a><h4 class="sectiontitle">Web Shell Detection</h4><p id="hss_01_0044__p1951163019519">If <strong id="hss_01_0044__b965813264619">User-defined Scan Paths</strong> is not specified, the website paths in your assets are scanned by default. If <strong id="hss_01_0044__b18301116475">User-defined Scan Paths</strong> is specified, only the specified paths are scanned.</p>
+<ol id="hss_01_0044__ol34465261622"><li id="hss_01_0044__li98801131625"><span>Click <strong id="hss_01_0044__b38021326433">Web Shell Detection</strong>.</span></li><li id="hss_01_0044__li688015313216"><span>On the <strong id="hss_01_0044__b18267162217238">Web Shell Detection</strong> page, modify the settings as required. For more information, see <a href="#hss_01_0044__table98811231420">Table 5</a>.</span><p><div class="fignone" id="hss_01_0044__fig14122173715369"><span class="figcap"><b>Figure 4 </b>Modifying the web shell detection policy</span><br><span><img id="hss_01_0044__image41693813514" src="en-us_image_0000001670319513.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0044__table98811231420"></a><a name="table98811231420"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0044__table98811231420" frame="border" border="1" rules="all"><caption><b>Table 5 </b>Parameter description</caption><thead align="left"><tr id="hss_01_0044__row18881173111219"><th align="left" class="cellrowborder" valign="top" width="21%" id="mcps1.3.7.3.2.2.2.2.3.1.1"><p id="hss_01_0044__p593727191615">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="79%" id="mcps1.3.7.3.2.2.2.2.3.1.2"><p id="hss_01_0044__p488119311029">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0044__row178161363556"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.7.3.2.2.2.2.3.1.1 "><p id="hss_01_0044__p148171436135511">Scan Time</p>
+</td>
+<td class="cellrowborder" valign="top" width="79%" headers="mcps1.3.7.3.2.2.2.2.3.1.2 "><p id="hss_01_0044__p199015491907">Time point when detections are performed. It can be accurate to the minute.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row4470145135520"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.7.3.2.2.2.2.3.1.1 "><p id="hss_01_0044__p1647016452558">Random Deviation Time (Seconds)</p>
+</td>
+<td class="cellrowborder" valign="top" width="79%" headers="mcps1.3.7.3.2.2.2.2.3.1.2 "><p id="hss_01_0044__p59909499017">Random deviation time. The value ranges from 0 to 7,200s.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row14621718560"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.7.3.2.2.2.2.3.1.1 "><p id="hss_01_0044__p46211145617">Scan Days</p>
+</td>
+<td class="cellrowborder" valign="top" width="79%" headers="mcps1.3.7.3.2.2.2.2.3.1.2 "><p id="hss_01_0044__p062131105616">Days in a week when web shells are scanned. You can select one or more days.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row19417121618567"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.7.3.2.2.2.2.3.1.1 "><p id="hss_01_0044__p841731645611">User-defined Scan Paths</p>
+</td>
+<td class="cellrowborder" valign="top" width="79%" headers="mcps1.3.7.3.2.2.2.2.3.1.2 "><p id="hss_01_0044__p16365962496">Web paths to be scanned. A file path must:</p>
+<ul id="hss_01_0044__ul18321434205715"><li id="hss_01_0044__li1883263410578">Start with a slash (/) and end with no slashes (/).</li><li id="hss_01_0044__li7832534135718">Occupy a separate line and cannot contain spaces.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0044__row64762710584"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.7.3.2.2.2.2.3.1.1 "><p id="hss_01_0044__p788114311523">Monitored Files Types</p>
+</td>
+<td class="cellrowborder" valign="top" width="79%" headers="mcps1.3.7.3.2.2.2.2.3.1.2 "><p id="hss_01_0044__p27301318104110">Extensions of files to be checked. Valid values include <span class="parmvalue" id="hss_01_0044__parmvalue164662251495"><b>jsp</b></span>, <span class="parmvalue" id="hss_01_0044__parmvalue926842864911"><b>jspx</b></span>, <span class="parmvalue" id="hss_01_0044__parmvalue1534073124917"><b>jspf</b></span>, <span class="parmvalue" id="hss_01_0044__parmvalue3859633174911"><b>php</b></span>, <span class="parmvalue" id="hss_01_0044__parmvalue2483113794920"><b>php5</b></span>, <span class="parmvalue" id="hss_01_0044__parmvalue103801840194911"><b>php4</b></span>.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0044__li41491086548"><span>Confirm the information and click <span class="uicontrol" id="hss_01_0044__hss_01_0044_uicontrol105861049103519_2"><b>OK</b></span>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0044__section189931229171012"><a name="hss_01_0044__section189931229171012"></a><a name="section189931229171012"></a><h4 class="sectiontitle">File Protection</h4><ol id="hss_01_0044__of6b14381e0c945a28cee3fc69b4cde3c"><li id="hss_01_0044__li15124390111953"><span>Click <strong id="hss_01_0044__b86110429119">File Protection</strong>.</span></li><li id="hss_01_0044__li8577201917316"><span>On the <strong id="hss_01_0044__b1642914591217">File Protection</strong> page, modify the policy. For more information, see <a href="#hss_01_0044__table9079559112933">Table 6</a>.</span><p><div class="fignone" id="hss_01_0044__fig16415201819374"><span class="figcap"><b>Figure 5 </b>Modifying the file protection policy</span><br><span><img id="hss_01_0044__image1275523818" src="en-us_image_0000001621479770.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0044__table9079559112933"></a><a name="table9079559112933"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0044__table9079559112933" frame="border" border="1" rules="all"><caption><b>Table 6 </b>Parameter description</caption><thead align="left"><tr id="hss_01_0044__row55543219112933"><th align="left" class="cellrowborder" valign="top" width="24.52%" id="mcps1.3.8.2.2.2.2.2.3.1.1"><p id="hss_01_0044__p17930504112933">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="75.48%" id="mcps1.3.8.2.2.2.2.2.3.1.2"><p id="hss_01_0044__p1803340144420">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0044__row2327123610015"><td class="cellrowborder" valign="top" width="24.52%" headers="mcps1.3.8.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p91425415711">File Privilege Escalation</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.48%" headers="mcps1.3.8.2.2.2.2.2.3.1.2 "><ul id="hss_01_0044__ul144891805144"><li id="hss_01_0044__li7606115119388">Detects privilege escalation.<ul id="hss_01_0044__ul1360675119389"><li id="hss_01_0044__li960655117386"><span><img id="hss_01_0044__image977132411397" src="en-us_image_0000001621639582.png"></span>: enabled</li><li id="hss_01_0044__li860675173810"><span><img id="hss_01_0044__image5790115910393" src="en-us_image_0000001621959478.png"></span>: disabled</li></ul>
+</li><li id="hss_01_0044__li135451575145"><strong id="hss_01_0044__b13712456558">Ignored File Path</strong>: Files to be ignored. Start the path with a slash (/) and do not end it with a slash (/). Each path occupies a line. No spaces are allowed between path names.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0044__row14956142113117"><td class="cellrowborder" valign="top" width="24.52%" headers="mcps1.3.8.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p16135546712">File Integrity</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.48%" headers="mcps1.3.8.2.2.2.2.2.3.1.2 "><ul id="hss_01_0044__ul8929134104117"><li id="hss_01_0044__li3279625104012">Detects the integrity of key files.<ul id="hss_01_0044__ul0451183210400"><li id="hss_01_0044__li0451173224013"><span><img id="hss_01_0044__image19452103274015" src="en-us_image_0000001670559389.png"></span>: enabled</li><li id="hss_01_0044__li4452163234019"><span><img id="hss_01_0044__image645293211406" src="en-us_image_0000001670439441.png"></span>: disabled</li></ul>
+</li><li id="hss_01_0044__li15695163044418"><strong id="hss_01_0044__b1263217971113">File Paths</strong>: Configure the file paths.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0044__row151427773114"><td class="cellrowborder" valign="top" width="24.52%" headers="mcps1.3.8.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p113711252454">Important File Directory Change</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.48%" headers="mcps1.3.8.2.2.2.2.2.3.1.2 "><ul id="hss_01_0044__ul1537192518458"><li id="hss_01_0044__li179741517415">Detects the directory change of key files.<ul id="hss_01_0044__ul1540115524115"><li id="hss_01_0044__li10540655154111"><span><img id="hss_01_0044__image1154065511416" src="en-us_image_0000001670239401.png"></span>: enabled</li><li id="hss_01_0044__li55413553414"><span><img id="hss_01_0044__image07551712154714" src="en-us_image_0000001621799510.png"></span>: disabled</li></ul>
+</li><li id="hss_01_0044__li7631171774111"><strong id="hss_01_0044__b666102264710">Enable Audit</strong>: enables the audit detection function. If the function is enabled and inotify usage exceeds the limit, some file directory changes cannot be detected.<ul id="hss_01_0044__ul13195407425"><li id="hss_01_0044__li019560174210"><span><img id="hss_01_0044__image3865102311485" src="en-us_image_0000001670319517.png"></span>: enabled</li><li id="hss_01_0044__li1619612074210"><span><img id="hss_01_0044__image1565113818487" src="en-us_image_0000001621479774.png"></span>: disabled</li></ul>
+</li><li id="hss_01_0044__li9813224104710"><strong id="hss_01_0044__b1264621181617">Session IP Whitelist</strong>: If the file process belongs to the sessions of the listed IP addresses, no audit applies.</li><li id="hss_01_0044__li316411517486"><strong id="hss_01_0044__b1262716184299">Unmonitored File Types</strong>: File types that do not need to be monitored.</li><li id="hss_01_0044__li143712582481"><strong id="hss_01_0044__b47921458192919">Unmonitored File Paths</strong>: File paths that do not need to be monitored.</li><li id="hss_01_0044__li1446612434114"><strong id="hss_01_0044__b6521124684819">Monitoring Login Keys</strong>: enables the function of monitoring login keys.<ul id="hss_01_0044__ul1846622411419"><li id="hss_01_0044__li32191017164217"><span><img id="hss_01_0044__image1733310498484" src="en-us_image_0000001621639586.png"></span>: enabled</li><li id="hss_01_0044__li1722081764212"><span><img id="hss_01_0044__image17346195919489" src="en-us_image_0000001621959482.png"></span>: disabled</li></ul>
+</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0044__row156151836192419"><td class="cellrowborder" valign="top" width="24.52%" headers="mcps1.3.8.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p1961633632414">Directory Monitoring Mode</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.48%" headers="mcps1.3.8.2.2.2.2.2.3.1.2 "><ul id="hss_01_0044__ul866917458246"><li id="hss_01_0044__li1066994512410">Directory monitoring mode.</li><li id="hss_01_0044__li1489413514241"><strong id="hss_01_0044__b179487246465">File or Directory Path</strong>: Some file or directory monitoring paths are preset in the system. You can modify the file change type to be detected and add the file or directory paths to be monitored.</li></ul>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0044__li042713185541"><span>Confirm the information and click <span class="uicontrol" id="hss_01_0044__hss_01_0044_uicontrol105861049103519_3"><b>OK</b></span>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0044__section6126630141612"><h4 class="sectiontitle">Login Security Check</h4><ol id="hss_01_0044__ol4353151818510"><li id="hss_01_0044__li95038282520"><span>Click <strong id="hss_01_0044__b102211581166">Login Security Check</strong>.</span></li><li id="hss_01_0044__li75048287519"><span>In the displayed <strong id="hss_01_0044__b64302097430">Login Security Check</strong> page, modify the policy content.  describes the parameters.</span><p><div class="fignone" id="hss_01_0044__fig1147524912406"><span class="figcap"><b>Figure 6 </b>Modifying the security check policy</span><br><span><img id="hss_01_0044__image178146512438" src="en-us_image_0000001670559393.png"></span></div>
+
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0044__table105041828556" frame="border" border="1" rules="all"><caption><b>Table 7 </b>Parameter description</caption><thead align="left"><tr id="hss_01_0044__row205050281354"><th align="left" class="cellrowborder" valign="top" width="28.000000000000004%" id="mcps1.3.9.2.2.2.2.2.3.1.1"><p id="hss_01_0044__p1880315161611">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="72%" id="mcps1.3.9.2.2.2.2.2.3.1.2"><p id="hss_01_0044__p1650522815510">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0044__row992365020118"><td class="cellrowborder" valign="top" width="28.000000000000004%" headers="mcps1.3.9.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p12561121">Block Attacking IP Address</p>
+</td>
+<td class="cellrowborder" valign="top" width="72%" headers="mcps1.3.9.2.2.2.2.2.3.1.2 "><p id="hss_01_0044__p511011502343">After the function of blocking attacking IP addresses is enabled, HSS blocks the brute-force IP address logins.</p>
+<p id="hss_01_0044__p41104501342">The agent modifies system configurations to block the source IP addresses of account cracking attacks.</p>
+<ul id="hss_01_0044__ul1289618110410"><li id="hss_01_0044__li1788211474516"><span><img id="hss_01_0044__image13724161494917" src="en-us_image_0000001670439445.png"></span>: enabled</li><li id="hss_01_0044__li18821443458"><span><img id="hss_01_0044__image136337237499" src="en-us_image_0000001670239405.png"></span>: disabled</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0044__row1677191013312"><td class="cellrowborder" valign="top" width="28.000000000000004%" headers="mcps1.3.9.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p18771510736">Lock Time (Min.)</p>
+</td>
+<td class="cellrowborder" valign="top" width="72%" headers="mcps1.3.9.2.2.2.2.2.3.1.2 "><p id="hss_01_0044__p177714105314">This parameter is used to determine how many minutes the brute-force attacks are locked. The value range is 1 to 43,200 min. (Login is not allowed in the lockout duration.)</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row9749191619319"><td class="cellrowborder" valign="top" width="28.000000000000004%" headers="mcps1.3.9.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p147499167310">Cracking Behavior Determination Threshold (s)</p>
+</td>
+<td class="cellrowborder" valign="top" width="72%" headers="mcps1.3.9.2.2.2.2.2.3.1.2 "><p id="hss_01_0044__p1560895043516">This parameter is used together with <strong id="hss_01_0044__b1795379056">Cracking Behavior Determination Threshold (Login Attempts)</strong>. The value range is 5 to 3,600.</p>
+<p id="hss_01_0044__p136081750153513">For example, if this parameter is set to <strong id="hss_01_0044__b1265411860">30</strong> and <strong id="hss_01_0044__b297233942">Cracking Behavior Determination Threshold (Login Attempts)</strong> is set to <strong id="hss_01_0044__b52219236">5</strong>, the system determines that an account is cracked when the same IP address fails to log in to the system for five times within 30 seconds.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row27497161335"><td class="cellrowborder" valign="top" width="28.000000000000004%" headers="mcps1.3.9.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p9749101617310">Cracking Behavior Determination Threshold (Login Attempts)</p>
+</td>
+<td class="cellrowborder" valign="top" width="72%" headers="mcps1.3.9.2.2.2.2.2.3.1.2 "><p id="hss_01_0044__p19749216434">This parameter is used together with <strong id="hss_01_0044__b402021025">Cracking Behavior Determination Threshold</strong>. The value range is 1 to 36,000.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row1999972316318"><td class="cellrowborder" valign="top" width="28.000000000000004%" headers="mcps1.3.9.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p13011249311">Threshold for slow brute force attack (second)</p>
+</td>
+<td class="cellrowborder" valign="top" width="72%" headers="mcps1.3.9.2.2.2.2.2.3.1.2 "><p id="hss_01_0044__p4112122183611">This parameter is used together with <strong id="hss_01_0044__b18683279">Threshold for slow brute force attack (failed login attempt)</strong>. The value range is 600 to 86,400s.</p>
+<p id="hss_01_0044__p1511252213367">For example, if this parameter is set to <strong id="hss_01_0044__b2144599739">3600</strong> and <strong id="hss_01_0044__b508162679">Threshold for slow brute force attack (failed login attempt)</strong> is set to <strong id="hss_01_0044__b1753167944">15</strong>, the system determines that an account is cracked when the same IP address fails to log in to the system for fifteen times within 3,600 seconds.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row8013241939"><td class="cellrowborder" valign="top" width="28.000000000000004%" headers="mcps1.3.9.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p9015240320">Threshold for slow brute-force attack (failed login attempt)</p>
+</td>
+<td class="cellrowborder" valign="top" width="72%" headers="mcps1.3.9.2.2.2.2.2.3.1.2 "><p id="hss_01_0044__p2016243313">This parameter is used together with <strong id="hss_01_0044__b767510998">Threshold for slow brute force attack (second)</strong>. The value range is 6 to 100.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row908243312"><td class="cellrowborder" valign="top" width="28.000000000000004%" headers="mcps1.3.9.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p40202416311">Cracking Behavior Determination Release Time (s)</p>
+</td>
+<td class="cellrowborder" valign="top" width="72%" headers="mcps1.3.9.2.2.2.2.2.3.1.2 "><p id="hss_01_0044__p897255651314">Interval for clearing login failure records generated due to cracking. The value range is 60 to 86,400s.</p>
+<p id="hss_01_0044__p6411155314143">The unblocked IP addresses are those that triggered brute-force alarms.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row20549152813312"><td class="cellrowborder" valign="top" width="28.000000000000004%" headers="mcps1.3.9.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p954952810317">Check Whether the Audit Login Is Successful</p>
+</td>
+<td class="cellrowborder" valign="top" width="72%" headers="mcps1.3.9.2.2.2.2.2.3.1.2 "><ul id="hss_01_0044__ul103922422710"><li id="hss_01_0044__li1717016505453">After this function is enabled, HSS reports login success logs.<ul id="hss_01_0044__ul617095044510"><li id="hss_01_0044__li873771812463"><span><img id="hss_01_0044__image5113113719496" src="en-us_image_0000001621799514.png"></span>: enabled</li><li id="hss_01_0044__li773771854618"><span><img id="hss_01_0044__image12887104455315" src="en-us_image_0000001670319521.png"></span>: disabled</li></ul>
+</li></ul>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0044__li13945123419547"><span>Confirm the information and click <span class="uicontrol" id="hss_01_0044__hss_01_0044_uicontrol105861049103519_4"><b>OK</b></span>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0044__section1186562810202"><h4 class="sectiontitle">Malicious File Detection</h4><ol id="hss_01_0044__ol17975341621"><li id="hss_01_0044__li560121317213"><span>Click <strong id="hss_01_0044__b353163710015">Malicious File Detection</strong>.</span></li><li id="hss_01_0044__li96023136219"><span>On the displayed page, modify the policy. For more information, see <a href="#hss_01_0044__table180693445019">Table 8</a>.</span><p><div class="fignone" id="hss_01_0044__fig1693093720456"><span class="figcap"><b>Figure 7 </b>Modifying the malicious file detection policy</span><br><span><img id="hss_01_0044__image151669362489" src="en-us_image_0000001621479778.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0044__table180693445019"></a><a name="table180693445019"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0044__table180693445019" frame="border" border="1" rules="all"><caption><b>Table 8 </b>Parameter description</caption><thead align="left"><tr id="hss_01_0044__row1780516344503"><th align="left" class="cellrowborder" valign="top" width="32.32%" id="mcps1.3.10.2.2.2.2.2.3.1.1"><p id="hss_01_0044__p1680503418507">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="67.67999999999999%" id="mcps1.3.10.2.2.2.2.2.3.1.2"><p id="hss_01_0044__p1580523465016">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0044__row1080563425019"><td class="cellrowborder" valign="top" width="32.32%" headers="mcps1.3.10.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p20805143418507">Whitelist Paths in Reverse Shell Check</p>
+</td>
+<td class="cellrowborder" valign="top" width="67.67999999999999%" headers="mcps1.3.10.2.2.2.2.2.3.1.2 "><p id="hss_01_0044__p75796181412">Process file path to be ignored in reverse shell detection</p>
+<p id="hss_01_0044__p18051334155012">Start with a slash (/) and end with no slashes (/). Occupy a separate line and cannot contain spaces.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row118061534155016"><td class="cellrowborder" valign="top" width="32.32%" headers="mcps1.3.10.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p148052034135019">Reverse Shell Scanning Interval (s):</p>
+</td>
+<td class="cellrowborder" valign="top" width="67.67999999999999%" headers="mcps1.3.10.2.2.2.2.2.3.1.2 "><p id="hss_01_0044__p138061345508">Reverse shell scanning period. The value range is 30 to 86,400.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row9806103475018"><td class="cellrowborder" valign="top" width="32.32%" headers="mcps1.3.10.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p1480693413509">Audit detection enhancement</p>
+</td>
+<td class="cellrowborder" valign="top" width="67.67999999999999%" headers="mcps1.3.10.2.2.2.2.2.3.1.2 "><ul id="hss_01_0044__ul1555154483215"><li id="hss_01_0044__li15633168144911">Whether to enhance audit detection. You are advised to enable this function.<ul id="hss_01_0044__ul14307738174914"><li id="hss_01_0044__li20307173824913"><span><img id="hss_01_0044__image1046671619547" src="en-us_image_0000001621639590.png"></span>: enabled</li><li id="hss_01_0044__li12307123864919"><span><img id="hss_01_0044__image10608323155410" src="en-us_image_0000001621959486.png"></span>: disabled</li></ul>
+</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0044__row58061234195019"><td class="cellrowborder" valign="top" width="32.32%" headers="mcps1.3.10.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p98061834175015">Max. open files per process</p>
+</td>
+<td class="cellrowborder" valign="top" width="67.67999999999999%" headers="mcps1.3.10.2.2.2.2.2.3.1.2 "><p id="hss_01_0044__p16806834195012">Maximum number of files that can be opened by a process. The value range is 10 to 300,000.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row102341872220"><td class="cellrowborder" valign="top" width="32.32%" headers="mcps1.3.10.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p158066346504">Detect Reverse Shells</p>
+</td>
+<td class="cellrowborder" valign="top" width="67.67999999999999%" headers="mcps1.3.10.2.2.2.2.2.3.1.2 "><ul id="hss_01_0044__ul5111185272119"><li id="hss_01_0044__li632821310493">Detects reverse shells. You are advised to enable it.<ul id="hss_01_0044__ul2880105920491"><li id="hss_01_0044__li88801059124919"><span><img id="hss_01_0044__image58601330115418" src="en-us_image_0000001670559397.png"></span>: enabled</li><li id="hss_01_0044__li17880259174913"><span><img id="hss_01_0044__image117773617543" src="en-us_image_0000001670439449.png"></span>: disabled</li></ul>
+</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0044__row15994151811252"><td class="cellrowborder" valign="top" width="32.32%" headers="mcps1.3.10.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p9995121810252">Auto-block Reverse Shells</p>
+</td>
+<td class="cellrowborder" valign="top" width="67.67999999999999%" headers="mcps1.3.10.2.2.2.2.2.3.1.2 "><div class="p" id="hss_01_0044__p599571812251">Specifies whether to enable automatic blocking of reverse shells. You are advised to enable this function.
+</div>
+
+</td>
+</tr>
+<tr id="hss_01_0044__row129061811172219"><td class="cellrowborder" valign="top" width="32.32%" headers="mcps1.3.10.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p15450121712223">Abnormal Shell Detection</p>
+</td>
+<td class="cellrowborder" valign="top" width="67.67999999999999%" headers="mcps1.3.10.2.2.2.2.2.3.1.2 "><ul id="hss_01_0044__ul164508179226"><li id="hss_01_0044__li150212182498">Detects abnormal shells. You are advised to enable it.<ul id="hss_01_0044__ul7241813205013"><li id="hss_01_0044__li142417134508"><span><img id="hss_01_0044__image1175172305617" src="en-us_image_0000001670239409.png"></span>: enabled</li><li id="hss_01_0044__li14241113175017"><span><img id="hss_01_0044__image1283411411567" src="en-us_image_0000001621799518.png"></span>: disabled</li></ul>
+</li></ul>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0044__li18855155465416"><span>Confirm the information and click <span class="uicontrol" id="hss_01_0044__hss_01_0044_uicontrol105861049103519_5"><b>OK</b></span>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0044__section181381720102814"><h4 class="sectiontitle">Abnormal Process Behavior</h4><ol id="hss_01_0044__ol4698408311"><li id="hss_01_0044__li51722588113928"><span>Click <strong id="hss_01_0044__b435613144115">Abnormal process behaviors</strong>.</span></li><li id="hss_01_0044__li148355467316"><span>In the displayed area, modify the settings as required. For more information, see <a href="#hss_01_0044__table1583614466312">Table 9</a>.</span><p><div class="fignone" id="hss_01_0044__fig3423133214718"><span class="figcap"><b>Figure 8 </b>Modifying the abnormal process behavior policy</span><br><span><img id="hss_01_0044__image962933015119" src="en-us_image_0000001670319525.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0044__table1583614466312"></a><a name="table1583614466312"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0044__table1583614466312" frame="border" border="1" rules="all"><caption><b>Table 9 </b>Parameter description</caption><thead align="left"><tr id="hss_01_0044__row183694616312"><th align="left" class="cellrowborder" valign="top" width="17.06%" id="mcps1.3.11.2.2.2.2.2.4.1.1"><p id="hss_01_0044__p703279015945">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="59.85%" id="mcps1.3.11.2.2.2.2.2.4.1.2"><p id="hss_01_0044__p118364461233">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="23.09%" id="mcps1.3.11.2.2.2.2.2.4.1.3"><p id="hss_01_0044__p178691950142211">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0044__row158361646535"><td class="cellrowborder" valign="top" width="17.06%" headers="mcps1.3.11.2.2.2.2.2.4.1.1 "><p id="hss_01_0044__p1783615461733">Detection and Scanning Cycle (Seconds)</p>
+</td>
+<td class="cellrowborder" valign="top" width="59.85%" headers="mcps1.3.11.2.2.2.2.2.4.1.2 "><p id="hss_01_0044__p4661101115128">Interval for checking the running programs on the host. The value range is 30 to 1,800.</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.09%" headers="mcps1.3.11.2.2.2.2.2.4.1.3 "><p id="hss_01_0044__p6869135012213">1800</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row10131143720245"><td class="cellrowborder" valign="top" width="17.06%" headers="mcps1.3.11.2.2.2.2.2.4.1.1 "><p id="hss_01_0044__p513115379245">Detection Mode</p>
+</td>
+<td class="cellrowborder" valign="top" width="59.85%" headers="mcps1.3.11.2.2.2.2.2.4.1.2 "><p id="hss_01_0044__p4261044111112">Select the method for abnormal process behavior detection.</p>
+<ul id="hss_01_0044__ul1256232191216"><li id="hss_01_0044__li874161091213"><strong id="hss_01_0044__b116811121920">Sensitive</strong>: In-depth and full detection and scanning are performed on all processes, which may cause false positives. Suitable for cyber protection drills and key event assurance drills.</li><li id="hss_01_0044__li82419159126"><strong id="hss_01_0044__b145331021918">Balanced</strong>: All processes are detected and scanned. The detection result accuracy and the abnormal process detection rate are balanced. Suitable for routine protection.</li><li id="hss_01_0044__li1456220221213"><strong id="hss_01_0044__b1467221812198">Conservative</strong>: All processes are detected and scanned. This mode provides high detection result accuracy and low false positives. Suitable for scenarios with a large number of false positives.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="23.09%" headers="mcps1.3.11.2.2.2.2.2.4.1.3 "><p id="hss_01_0044__p286910508224">Balanced</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row29964098112933"><td class="cellrowborder" valign="top" width="17.06%" headers="mcps1.3.11.2.2.2.2.2.4.1.1 "><p id="hss_01_0044__p117381375297">Threshold for Score Reporting</p>
+</td>
+<td class="cellrowborder" valign="top" width="59.85%" headers="mcps1.3.11.2.2.2.2.2.4.1.2 "><p id="hss_01_0044__p30067523102211">Score reporting threshold. The value range is 1 to 100.</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.09%" headers="mcps1.3.11.2.2.2.2.2.4.1.3 "><p id="hss_01_0044__p16869750132211">3</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0044__li18080045513"><span>Confirm the information and click <span class="uicontrol" id="hss_01_0044__hss_01_0044_uicontrol105861049103519_6"><b>OK</b></span>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0044__section755517091018"><h4 class="sectiontitle">Root Privilege Escalation Detection</h4><ol id="hss_01_0044__ol188242212818"><li id="hss_01_0044__li1388214223819"><span>Click <strong id="hss_01_0044__b9532382619">Root privilege escalation</strong>.</span></li><li id="hss_01_0044__li12883192213813"><span>In the displayed area, modify the settings as required. For more information, see <a href="#hss_01_0044__table168831222885">Table 10</a>.</span><p><div class="fignone" id="hss_01_0044__fig478714472483"><span class="figcap"><b>Figure 9 </b>Modifying the root privilege escalation policy</span><br><span><img id="hss_01_0044__image19034567528" src="en-us_image_0000001621479782.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0044__table168831222885"></a><a name="table168831222885"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0044__table168831222885" frame="border" border="1" rules="all"><caption><b>Table 10 </b>Parameter description</caption><thead align="left"><tr id="hss_01_0044__row1588315221481"><th align="left" class="cellrowborder" valign="top" width="28.999999999999996%" id="mcps1.3.12.2.2.2.2.2.3.1.1"><p id="hss_01_0044__p488411226820">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="71%" id="mcps1.3.12.2.2.2.2.2.3.1.2"><p id="hss_01_0044__p48841322285">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0044__row98841322988"><td class="cellrowborder" valign="top" width="28.999999999999996%" headers="mcps1.3.12.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p1917216280427">Ignored Process File Path</p>
+</td>
+<td class="cellrowborder" valign="top" width="71%" headers="mcps1.3.12.2.2.2.2.2.3.1.2 "><p id="hss_01_0044__p3171162854212">Ignored process file path</p>
+<p id="hss_01_0044__p16453281513">Start with a slash (/) and end with no slashes (/). Occupy a separate line and cannot contain spaces.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row1884202210811"><td class="cellrowborder" valign="top" width="28.999999999999996%" headers="mcps1.3.12.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p7170628184213">Scanning Interval (s)</p>
+</td>
+<td class="cellrowborder" valign="top" width="71%" headers="mcps1.3.12.2.2.2.2.2.3.1.2 "><p id="hss_01_0044__p5169152804214">Interval for checking process files. The value range is 5 to 3,600.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0044__li20831371558"><span>Confirm the information and click <span class="uicontrol" id="hss_01_0044__hss_01_0044_uicontrol105861049103519_7"><b>OK</b></span>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0044__section8167115415341"><h4 class="sectiontitle">Real-time Process</h4><ol id="hss_01_0044__ol762811783519"><li id="hss_01_0044__li14628572357"><span>Click <strong id="hss_01_0044__b7135112714417">Real-time Process</strong>.</span></li><li id="hss_01_0044__li2062815703511"><span>On the displayed page, modify the settings as required. For more information, see <a href="#hss_01_0044__table11629197163518">Table 11</a>.</span><p><div class="fignone" id="hss_01_0044__fig155061236720"><span class="figcap"><b>Figure 10 </b>Modifying the real-time process policy</span><br><span><img id="hss_01_0044__image812942114543" src="en-us_image_0000001676837385.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0044__table11629197163518"></a><a name="table11629197163518"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0044__table11629197163518" frame="border" border="1" rules="all"><caption><b>Table 11 </b>Parameters for real-time process policy settings</caption><thead align="left"><tr id="hss_01_0044__row17630197163515"><th align="left" class="cellrowborder" valign="top" width="28.999999999999996%" id="mcps1.3.13.2.2.2.2.2.3.1.1"><p id="hss_01_0044__p863047153515">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="71%" id="mcps1.3.13.2.2.2.2.2.3.1.2"><p id="hss_01_0044__p76308773512">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0044__row2063015783518"><td class="cellrowborder" valign="top" width="28.999999999999996%" headers="mcps1.3.13.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p0848824173913">Full Process Report Interval (s)</p>
+</td>
+<td class="cellrowborder" valign="top" width="71%" headers="mcps1.3.13.2.2.2.2.2.3.1.2 "><p id="hss_01_0044__p1263013716351">Interval for reporting the full process. The value range is 3,600 to 86,400.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row146308793518"><td class="cellrowborder" valign="top" width="28.999999999999996%" headers="mcps1.3.13.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p1463013783511">High-Risk Commands</p>
+</td>
+<td class="cellrowborder" valign="top" width="71%" headers="mcps1.3.13.2.2.2.2.2.3.1.2 "><p id="hss_01_0044__p923805116223">High-risk commands that contain keywords during detection. </p>
+</td>
+</tr>
+<tr id="hss_01_0044__row126301077357"><td class="cellrowborder" valign="top" width="28.999999999999996%" headers="mcps1.3.13.2.2.2.2.2.3.1.1 "><p id="hss_01_0044__p17634207143519">Whitelist (Do Not Record Logs)</p>
+</td>
+<td class="cellrowborder" valign="top" width="71%" headers="mcps1.3.13.2.2.2.2.2.3.1.2 "><p id="hss_01_0044__p61042034182210">Paths or programs that are allowed or ignored during detection. You can enter the regular expression of the command to be added to the whitelist. The command regular expression is optional.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0044__li84376185551"><span>Confirm the information and click <span class="uicontrol" id="hss_01_0044__hss_01_0044_uicontrol105861049103519_8"><b>OK</b></span>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0044__section119861051985"><h4 class="sectiontitle">Rootkit Detection</h4><ol id="hss_01_0044__ol46584817818"><li id="hss_01_0044__li8658281184"><span>Click <span class="uicontrol" id="hss_01_0044__uicontrol18658108282"><b>Rootkit Detection</b></span>.</span></li><li id="hss_01_0044__li9658118983"><span>On the rootkit detection page, modify the policy content.</span><p><div class="fignone" id="hss_01_0044__fig13724201217504"><span class="figcap"><b>Figure 11 </b>Modifying the rootkit detection policy</span><br><span><img id="hss_01_0044__image151515104567" src="en-us_image_0000001621959490.png"></span></div>
+
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0044__table156591181581" frame="border" border="1" rules="all"><caption><b>Table 12 </b>Parameter description</caption><thead align="left"><tr id="hss_01_0044__row116601881381"><th align="left" class="cellrowborder" valign="top" width="20.03%" id="mcps1.3.14.2.2.2.2.2.4.1.1"><p id="hss_01_0044__p196609815820">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="54.31%" id="mcps1.3.14.2.2.2.2.2.4.1.2"><p id="hss_01_0044__p8660988816">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="25.66%" id="mcps1.3.14.2.2.2.2.2.4.1.3"><p id="hss_01_0044__p995661122713">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0044__row15660108984"><td class="cellrowborder" valign="top" width="20.03%" headers="mcps1.3.14.2.2.2.2.2.4.1.1 "><p id="hss_01_0044__p9660786810">Scanning Interval (s)</p>
+</td>
+<td class="cellrowborder" valign="top" width="54.31%" headers="mcps1.3.14.2.2.2.2.2.4.1.2 "><p id="hss_01_0044__p1660981783">Interval for executing the check policy. The value ranges from 60 to 86,400.</p>
+</td>
+<td class="cellrowborder" valign="top" width="25.66%" headers="mcps1.3.14.2.2.2.2.2.4.1.3 "><p id="hss_01_0044__p995761172718">86400</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row2660178581"><td class="cellrowborder" valign="top" width="20.03%" headers="mcps1.3.14.2.2.2.2.2.4.1.1 "><p id="hss_01_0044__p176611687814">Check Library</p>
+</td>
+<td class="cellrowborder" valign="top" width="54.31%" headers="mcps1.3.14.2.2.2.2.2.4.1.2 "><p id="hss_01_0044__p196612818812">Check files and folders in the existing libraries. You are advised to enable this function.</p>
+<ul id="hss_01_0044__ul142122113012"><li id="hss_01_0044__li17257214184014"><span><img id="hss_01_0044__image2257151474011" src="en-us_image_0000001686938880.png"></span>: enabled</li><li id="hss_01_0044__li4257131444016"><span><img id="hss_01_0044__image225791420406" src="en-us_image_0000001734778037.png"></span>: disabled</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="25.66%" headers="mcps1.3.14.2.2.2.2.2.4.1.3 "><p id="hss_01_0044__p19393184420421"><span><img id="hss_01_0044__image739384416429" src="en-us_image_0000001686938876.png"></span>: enabled</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row36611686810"><td class="cellrowborder" valign="top" width="20.03%" headers="mcps1.3.14.2.2.2.2.2.4.1.1 "><p id="hss_01_0044__p16619810815">Check Kernel Space</p>
+</td>
+<td class="cellrowborder" valign="top" width="54.31%" headers="mcps1.3.14.2.2.2.2.2.4.1.2 "><p id="hss_01_0044__p09316490249">Perform the check by kernel modules. All kernel modules will be checked. You are advised to enable this function.</p>
+
+<ul id="hss_01_0044__ul118793316303"><li id="hss_01_0044__li814013166401"><span><img id="hss_01_0044__image19140916204016" src="en-us_image_0000001734937861.png"></span>: enabled</li><li id="hss_01_0044__li314051614407"><span><img id="hss_01_0044__image114015161401" src="en-us_image_0000001686938868.png"></span>: disabled</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="25.66%" headers="mcps1.3.14.2.2.2.2.2.4.1.3 "><p id="hss_01_0044__p16783113410423"><span><img id="hss_01_0044__image99611523164010" src="en-us_image_0000001734937857.png"></span>: enabled</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row2091013246244"><td class="cellrowborder" valign="top" width="20.03%" headers="mcps1.3.14.2.2.2.2.2.4.1.1 "><p id="hss_01_0044__p6911524192410">Kernel Module Whitelist</p>
+</td>
+<td class="cellrowborder" valign="top" width="54.31%" headers="mcps1.3.14.2.2.2.2.2.4.1.2 "><p id="hss_01_0044__p7911162472417">Add the kernel modules that can be ignored during the detection.</p>
+<p id="hss_01_0044__p4400336102814">Up to 10 kernel modules can be added. Each module occupies a line.</p>
+</td>
+<td class="cellrowborder" valign="top" width="25.66%" headers="mcps1.3.14.2.2.2.2.2.4.1.3 "><p id="hss_01_0044__p79571619278">xt_conntrack</p>
+<p id="hss_01_0044__p1611606316">virtio_scsi</p>
+<p id="hss_01_0044__p3670513143111">tun</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0044__li1445270557"><span>Confirm the information and click <span class="uicontrol" id="hss_01_0044__hss_01_0044_uicontrol105861049103519_9"><b>OK</b></span>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0044__section49471117133816"><h4 class="sectiontitle">AV Detection</h4><ol id="hss_01_0044__ol7947121716387"><li id="hss_01_0044__li1494711773819"><span>Click <span class="uicontrol" id="hss_01_0044__uicontrol2094841763810"><b>AV Detection</b></span>.</span></li><li id="hss_01_0044__li13948201713383"><span>On the <strong id="hss_01_0044__b8947174213432">AV Detection</strong> slide pane that is displayed, modify the settings as required. For details, see <a href="#hss_01_0044__table394917175383">Table 13</a>.</span><p><div class="fignone" id="hss_01_0044__fig54379262526"><span class="figcap"><b>Figure 12 </b>Modifying an AV detection policy</span><br><span><img id="hss_01_0044__image17226624124014" src="en-us_image_0000001670559401.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0044__table394917175383"></a><a name="table394917175383"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0044__table394917175383" frame="border" border="1" rules="all"><caption><b>Table 13 </b>AV detection policy parameters</caption><thead align="left"><tr id="hss_01_0044__row29491217193812"><th align="left" class="cellrowborder" valign="top" width="20.03%" id="mcps1.3.15.2.2.2.2.2.4.1.1"><p id="hss_01_0044__p994917175385">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="54.31%" id="mcps1.3.15.2.2.2.2.2.4.1.2"><p id="hss_01_0044__p17949917133818">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="25.66%" id="mcps1.3.15.2.2.2.2.2.4.1.3"><p id="hss_01_0044__p12949141712384">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0044__row167260564526"><td class="cellrowborder" valign="top" width="20.03%" headers="mcps1.3.15.2.2.2.2.2.4.1.1 "><p id="hss_01_0044__p425716165311">Real-Time Protection</p>
+</td>
+<td class="cellrowborder" valign="top" width="54.31%" headers="mcps1.3.15.2.2.2.2.2.4.1.2 "><p id="hss_01_0044__p2257121155312">After this function is enabled, AV detection is performed in real time when the current policy is executed. You are advised to enable this function.</p>
+<ul id="hss_01_0044__ul825716125319"><li id="hss_01_0044__li1513113254118"><span><img id="hss_01_0044__image1917196581" src="en-us_image_0000001670439453.png"></span>: enabled</li><li id="hss_01_0044__li191343211419"><span><img id="hss_01_0044__image18920111585814" src="en-us_image_0000001670239413.png"></span>: disabled</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="25.66%" headers="mcps1.3.15.2.2.2.2.2.4.1.3 "><p id="hss_01_0044__p16743313184418"><span><img id="hss_01_0044__image874351317448" src="en-us_image_0000001686939532.png"></span>: enabled</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row79517176387"><td class="cellrowborder" valign="top" width="20.03%" headers="mcps1.3.15.2.2.2.2.2.4.1.1 "><p id="hss_01_0044__p1695117172380">Protected File Type</p>
+</td>
+<td class="cellrowborder" valign="top" width="54.31%" headers="mcps1.3.15.2.2.2.2.2.4.1.2 "><p id="hss_01_0044__p11951151718388">Type of the files to be checked in real time.</p>
+<ul id="hss_01_0044__ul14917155417470"><li id="hss_01_0044__li18507145145010"><strong id="hss_01_0044__b0885223171418">All</strong>: Select all file types.</li><li id="hss_01_0044__li6917175415476"><strong id="hss_01_0044__b1884419289149">Executable</strong>: Executable file types such as EXE, DLL, and SYS.</li><li id="hss_01_0044__li482920674810"><strong id="hss_01_0044__b343175111512">Compressed</strong>: Compressed file types such as ZIP, RAR, and JAR.</li><li id="hss_01_0044__li102991328204815"><strong id="hss_01_0044__b11969439171515">Text</strong>: Text file types such as PHP, JSP, HTML, and Bash.</li><li id="hss_01_0044__li1018414367483"><strong id="hss_01_0044__b3345174416150">OLE</strong>: Composite file types such as Microsoft Office files (PPT and DOC) and saved email files (MSG).</li><li id="hss_01_0044__li19969436485"><strong id="hss_01_0044__b974144971514">Other</strong>: File types except the preceding types.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="25.66%" headers="mcps1.3.15.2.2.2.2.2.4.1.3 "><p id="hss_01_0044__p1952161710388">All</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row59522017173819"><td class="cellrowborder" valign="top" width="20.03%" headers="mcps1.3.15.2.2.2.2.2.4.1.1 "><p id="hss_01_0044__p4952101711383">Action</p>
+</td>
+<td class="cellrowborder" valign="top" width="54.31%" headers="mcps1.3.15.2.2.2.2.2.4.1.2 "><p id="hss_01_0044__p19521617163814">Handling method for the object detection alarms.</p>
+<ul id="hss_01_0044__ul181365175113"><li id="hss_01_0044__li8813195155117"><strong id="hss_01_0044__b15432179561">Automated handling</strong>:Isolate high-risk virus files bu default. Report other virus files but do not isolate them.</li><li id="hss_01_0044__li1648084717560"><strong id="hss_01_0044__b1869819111764">Manual handling</strong>: Report all the detected virus files but do not isolate them. You need to handle them manually.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="25.66%" headers="mcps1.3.15.2.2.2.2.2.4.1.3 "><p id="hss_01_0044__p8952121793812">Automatic handling</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0044__li10312173375515"><span>Confirm the information and click <span class="uicontrol" id="hss_01_0044__hss_01_0044_uicontrol105861049103519_10"><b>OK</b></span>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0044__section496711544313"><h4 class="sectiontitle">Container Information Collection</h4><ol id="hss_01_0044__ol6310735151216"><li id="hss_01_0044__li1311123517126"><span>Click <span class="uicontrol" id="hss_01_0044__uicontrol23111335131216"><b>Container Information Collection</b></span>.</span></li><li id="hss_01_0044__li13311123571216"><span>On the <strong id="hss_01_0044__b125446114285">Container Information Collection</strong> slide pane that is displayed, modify the <span class="parmname" id="hss_01_0044__parmname153119357126"><b>Policy Settings</b></span>. For details about the parameters, see <a href="#hss_01_0044__table199907487168">Table 14</a>.</span><p><div class="fignone" id="hss_01_0044__fig1832192517465"><span class="figcap"><b>Figure 13 </b>Modifying the container information collection policy</span><br><span><img id="hss_01_0044__image19322225114612" src="en-us_image_0000001621960166.png"></span></div>
+<div class="note" id="hss_01_0044__note3982524105712"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0044__p89821924195716">The whitelist has a higher priority than blacklist. If a directory is specified in both the whitelist and blacklist, it is regarded as a whitelisted item.</p>
+</div></div>
+
+<div class="tablenoborder"><a name="hss_01_0044__table199907487168"></a><a name="table199907487168"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0044__table199907487168" frame="border" border="1" rules="all"><caption><b>Table 14 </b>Container information collection policy parameters</caption><thead align="left"><tr id="hss_01_0044__row899124811164"><th align="left" class="cellrowborder" valign="top" width="14.541454145414543%" id="mcps1.3.16.2.2.2.3.2.4.1.1"><p id="hss_01_0044__p139912048181613">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="44.56445644564456%" id="mcps1.3.16.2.2.2.3.2.4.1.2"><p id="hss_01_0044__p1799118483165">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="40.89408940894089%" id="mcps1.3.16.2.2.2.3.2.4.1.3"><p id="hss_01_0044__p99919480165">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0044__row39911848141615"><td class="cellrowborder" valign="top" width="14.541454145414543%" headers="mcps1.3.16.2.2.2.3.2.4.1.1 "><p id="hss_01_0044__p159911948131611">Mount Path Whitelist</p>
+</td>
+<td class="cellrowborder" valign="top" width="44.56445644564456%" headers="mcps1.3.16.2.2.2.3.2.4.1.2 "><p id="hss_01_0044__p17991648201619">Enter the directory that can be mounted.</p>
+</td>
+<td class="cellrowborder" rowspan="2" valign="top" width="40.89408940894089%" headers="mcps1.3.16.2.2.2.3.2.4.1.3 "><p id="hss_01_0044__p10357187406">/test/docker or /root/*</p>
+<p id="hss_01_0044__p1959883135413">Note: If a directory ends with an asterisk (*), it indicates all the sub-directories under the directory (excluding the main directory).</p>
+<p id="hss_01_0044__p13623115594615">For example, if <strong id="hss_01_0044__b162811163517">/var/test/*</strong> is specified in the whitelist, all sub-directories in <strong id="hss_01_0044__b091317443514">/var/test/</strong> are whitelisted, excluding the <strong id="hss_01_0044__b125867208354">test</strong> directory.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row16991048181613"><td class="cellrowborder" valign="top" headers="mcps1.3.16.2.2.2.3.2.4.1.1 "><p id="hss_01_0044__p3991194819166">Mount Path Blacklist</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.16.2.2.2.3.2.4.1.2 "><p id="hss_01_0044__p29922485165">Enter the directories that cannot be mounted. For example, <strong id="hss_01_0044__b63701134153517">user</strong> and <strong id="hss_01_0044__b39291336173513">bin</strong>, the directories of key host information files, are not advised being mounted. Otherwise, important information may be exposed.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0044__li483615405556"><span>Confirm the information and click <span class="uicontrol" id="hss_01_0044__hss_01_0044_uicontrol105861049103519_11"><b>OK</b></span>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0044__section1097817100453"><h4 class="sectiontitle">Cluster Intrusion Detection</h4><ol id="hss_01_0044__ol1930381114385"><li id="hss_01_0044__li0954515153811"><span>Click <span class="uicontrol" id="hss_01_0044__uicontrol29541915173817"><b>Cluster Intrusion Detection</b></span>.</span></li><li id="hss_01_0044__li1195441573814"><span>On the <strong id="hss_01_0044__b4442122019376">Cluster Intrusion Detection</strong> slide pane that is displayed, modify the <span class="parmname" id="hss_01_0044__parmname19955915193818"><b>Policy Settings</b></span>. For details about the parameters, see <a href="#hss_01_0044__table1995510152385">Table 15</a>.</span><p><div class="fignone" id="hss_01_0044__fig158919116498"><span class="figcap"><b>Figure 14 </b>Modifying the cluster intrusion detection policy</span><br><span><img id="hss_01_0044__image16892131174910" src="en-us_image_0000001670320201.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0044__table1995510152385"></a><a name="table1995510152385"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0044__table1995510152385" frame="border" border="1" rules="all"><caption><b>Table 15 </b>Cluster intrusion detection policy parameters</caption><thead align="left"><tr id="hss_01_0044__row19956115183819"><th align="left" class="cellrowborder" valign="top" width="14.541454145414543%" id="mcps1.3.17.2.2.2.2.2.4.1.1"><p id="hss_01_0044__p1295616158383">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="51.45514551455145%" id="mcps1.3.17.2.2.2.2.2.4.1.2"><p id="hss_01_0044__p119561315103814">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="34.003400340034005%" id="mcps1.3.17.2.2.2.2.2.4.1.3"><p id="hss_01_0044__p795691519389">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0044__row79569159386"><td class="cellrowborder" valign="top" width="14.541454145414543%" headers="mcps1.3.17.2.2.2.2.2.4.1.1 "><p id="hss_01_0044__p15956515133820">Basic Detection Cases</p>
+</td>
+<td class="cellrowborder" valign="top" width="51.45514551455145%" headers="mcps1.3.17.2.2.2.2.2.4.1.2 "><p id="hss_01_0044__p189561015133817">Select basic check items as required.</p>
+</td>
+<td class="cellrowborder" valign="top" width="34.003400340034005%" headers="mcps1.3.17.2.2.2.2.2.4.1.3 "><p id="hss_01_0044__p073054104212">Select all</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row8957171514386"><td class="cellrowborder" valign="top" width="14.541454145414543%" headers="mcps1.3.17.2.2.2.2.2.4.1.1 "><p id="hss_01_0044__p1995781503819">Whitelist</p>
+</td>
+<td class="cellrowborder" valign="top" width="51.45514551455145%" headers="mcps1.3.17.2.2.2.2.2.4.1.2 "><p id="hss_01_0044__p295721513820">You can customize the types and values that need to be ignored during the detection. You can add and delete types and values as required.</p>
+<p id="hss_01_0044__p260818129456">The following types are supported:</p>
+<ul id="hss_01_0044__ul348954344512"><li id="hss_01_0044__li114898431456">IP address filter</li><li id="hss_01_0044__li1767119450450">Pod name filter</li><li id="hss_01_0044__li173866557457">Image name filter</li><li id="hss_01_0044__li52384468">User filter</li><li id="hss_01_0044__li109191716466">Pod tag filter</li><li id="hss_01_0044__li21041724104615">Namespace filter<div class="note" id="hss_01_0044__note15269343134610"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="hss_01_0044__p142704437465">Each type can be used only once.</p>
+</div></div>
+</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="34.003400340034005%" headers="mcps1.3.17.2.2.2.2.2.4.1.3 "><p id="hss_01_0044__p2546191944116">Type: IP address filtering</p>
+<p id="hss_01_0044__p5283174094720">Value: 192.168.x.x</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+<div class="note" id="hss_01_0044__note18583132571510"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0044__p8583625171511">After this policy is configured, you need to enable the log audit function and deploy the <span id="hss_01_0044__text2897154921710">HSS</span> agent on the management node (node where the APIServer is located) of the cluster to make the policy take effect.</p>
+</div></div>
+</p></li><li id="hss_01_0044__li13452155011551"><span>Confirm the information and click <span class="uicontrol" id="hss_01_0044__hss_01_0044_uicontrol105861049103519_12"><b>OK</b></span>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0044__section103941749114517"><h4 class="sectiontitle">Container File Monitoring</h4><div class="notice" id="hss_01_0044__note1184758144110"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="hss_01_0044__p68416585416">If a monitored file path is under the mount path rather than the writable layer of the container on the server, changes on the file cannot trigger container file modification alarms. To protect such files, configure a <a href="#hss_01_0044__section189931229171012">file protection policy</a>.</p>
+</div></div>
+<ol id="hss_01_0044__ol19671047144815"><li id="hss_01_0044__li11681847164814"><span>Click <span class="uicontrol" id="hss_01_0044__uicontrol968144719487"><b>Container File Monitoring</b></span>.</span></li><li id="hss_01_0044__li1868147194817"><span>On the <strong id="hss_01_0044__b5323133144217">Container File Monitoring</strong> slide pane that is displayed, modify the <span class="parmname" id="hss_01_0044__parmname3689471482"><b>Policy Settings</b></span>. For details about the parameters, see <a href="#hss_01_0044__table9683478481">Table 16</a>.</span><p><div class="fignone" id="hss_01_0044__fig23931356579"><span class="figcap"><b>Figure 15 </b>Modifying the container file monitoring policy</span><br><span><img id="hss_01_0044__image183941935195712" src="en-us_image_0000001670440105.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0044__table9683478481"></a><a name="table9683478481"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0044__table9683478481" frame="border" border="1" rules="all"><caption><b>Table 16 </b>Container file monitoring policy parameters</caption><thead align="left"><tr id="hss_01_0044__row196934717484"><th align="left" class="cellrowborder" valign="top" width="14.541454145414543%" id="mcps1.3.18.3.2.2.2.2.4.1.1"><p id="hss_01_0044__p2691747194812">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="51.45514551455145%" id="mcps1.3.18.3.2.2.2.2.4.1.2"><p id="hss_01_0044__p147094784810">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="34.003400340034005%" id="mcps1.3.18.3.2.2.2.2.4.1.3"><p id="hss_01_0044__p370144710481">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0044__row10701047104813"><td class="cellrowborder" valign="top" width="14.541454145414543%" headers="mcps1.3.18.3.2.2.2.2.4.1.1 "><p id="hss_01_0044__p57084734815">Fuzzy match</p>
+</td>
+<td class="cellrowborder" valign="top" width="51.45514551455145%" headers="mcps1.3.18.3.2.2.2.2.4.1.2 "><p id="hss_01_0044__p157018473481">Indicates whether to enable fuzzy match for the target file. You are advised to select this option.</p>
+</td>
+<td class="cellrowborder" valign="top" width="34.003400340034005%" headers="mcps1.3.18.3.2.2.2.2.4.1.3 "><p id="hss_01_0044__p187014719484">Selected</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row1470104774811"><td class="cellrowborder" valign="top" width="14.541454145414543%" headers="mcps1.3.18.3.2.2.2.2.4.1.1 "><p id="hss_01_0044__p6701847184811">Block New Executable</p>
+</td>
+<td class="cellrowborder" valign="top" width="51.45514551455145%" headers="mcps1.3.18.3.2.2.2.2.4.1.2 "><p id="hss_01_0044__p6950183417526">Monitor the behavior of the adding executable files. If this option is selected, adding executable files is prohibited. You are advised to select this option.</p>
+</td>
+<td class="cellrowborder" valign="top" width="34.003400340034005%" headers="mcps1.3.18.3.2.2.2.2.4.1.3 "><p id="hss_01_0044__p11113193375318">Selected</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row8607195119504"><td class="cellrowborder" valign="top" width="14.541454145414543%" headers="mcps1.3.18.3.2.2.2.2.4.1.1 "><p id="hss_01_0044__p560714512502">Image Name</p>
+</td>
+<td class="cellrowborder" valign="top" width="51.45514551455145%" headers="mcps1.3.18.3.2.2.2.2.4.1.2 "><p id="hss_01_0044__p260714518504">Name of the target image to be checked</p>
+</td>
+<td class="cellrowborder" valign="top" width="34.003400340034005%" headers="mcps1.3.18.3.2.2.2.2.4.1.3 "><p id="hss_01_0044__p86079519507">test_bj4</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row447213075116"><td class="cellrowborder" valign="top" width="14.541454145414543%" headers="mcps1.3.18.3.2.2.2.2.4.1.1 "><p id="hss_01_0044__p194726045114">Image ID</p>
+</td>
+<td class="cellrowborder" valign="top" width="51.45514551455145%" headers="mcps1.3.18.3.2.2.2.2.4.1.2 "><p id="hss_01_0044__p7531142275419">ID of the target image to be checked</p>
+</td>
+<td class="cellrowborder" valign="top" width="34.003400340034005%" headers="mcps1.3.18.3.2.2.2.2.4.1.3 "><p id="hss_01_0044__p64721802515">-</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row18768122135118"><td class="cellrowborder" valign="top" width="14.541454145414543%" headers="mcps1.3.18.3.2.2.2.2.4.1.1 "><p id="hss_01_0044__p276992135116">File</p>
+</td>
+<td class="cellrowborder" valign="top" width="51.45514551455145%" headers="mcps1.3.18.3.2.2.2.2.4.1.2 "><p id="hss_01_0044__p1938211289544">Name of the file in the target image to be checked</p>
+</td>
+<td class="cellrowborder" valign="top" width="34.003400340034005%" headers="mcps1.3.18.3.2.2.2.2.4.1.3 "><p id="hss_01_0044__p18769821519">/tmp/testw.txt</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0044__li1881471295613"><span>Confirm the information and click <span class="uicontrol" id="hss_01_0044__hss_01_0044_uicontrol105861049103519_13"><b>OK</b></span>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0044__section345561715467"><h4 class="sectiontitle">Container Process Whitelist</h4><ol id="hss_01_0044__ol3251134713555"><li id="hss_01_0044__li5251184725516"><span>Click <span class="uicontrol" id="hss_01_0044__uicontrol525174725519"><b>Container Process Whitelist</b></span>.</span></li><li id="hss_01_0044__li22521247145518"><span>On the <strong id="hss_01_0044__b897510428443">Container Process Whitelist</strong> slide pane that is displayed, modify the <span class="parmname" id="hss_01_0044__parmname52521847125514"><b>Policy Settings</b></span>. For details about the parameters, see <a href="#hss_01_0044__table1325215475552">Table 17</a>.</span><p><div class="fignone" id="hss_01_0044__fig793013251305"><span class="figcap"><b>Figure 16 </b>Container process whitelist policy</span><br><span><img id="hss_01_0044__image493219253013" src="en-us_image_0000001670240065.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0044__table1325215475552"></a><a name="table1325215475552"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0044__table1325215475552" frame="border" border="1" rules="all"><caption><b>Table 17 </b>Container process whitelist policy parameters</caption><thead align="left"><tr id="hss_01_0044__row92521247175517"><th align="left" class="cellrowborder" valign="top" width="14.541454145414543%" id="mcps1.3.19.2.2.2.2.2.4.1.1"><p id="hss_01_0044__p11253147175518">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="51.45514551455145%" id="mcps1.3.19.2.2.2.2.2.4.1.2"><p id="hss_01_0044__p162533471557">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="34.003400340034005%" id="mcps1.3.19.2.2.2.2.2.4.1.3"><p id="hss_01_0044__p1025314795512">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0044__row32531747185512"><td class="cellrowborder" valign="top" width="14.541454145414543%" headers="mcps1.3.19.2.2.2.2.2.4.1.1 "><p id="hss_01_0044__p16253124755520">Fuzzy Match</p>
+</td>
+<td class="cellrowborder" valign="top" width="51.45514551455145%" headers="mcps1.3.19.2.2.2.2.2.4.1.2 "><p id="hss_01_0044__p42531479556">Indicates whether to enable fuzzy match for the target file. You are advised to select this option.</p>
+</td>
+<td class="cellrowborder" valign="top" width="34.003400340034005%" headers="mcps1.3.19.2.2.2.2.2.4.1.3 "><p id="hss_01_0044__p525313476559">Selected</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row1625484765510"><td class="cellrowborder" valign="top" width="14.541454145414543%" headers="mcps1.3.19.2.2.2.2.2.4.1.1 "><p id="hss_01_0044__p425474715557">Image Name</p>
+</td>
+<td class="cellrowborder" valign="top" width="51.45514551455145%" headers="mcps1.3.19.2.2.2.2.2.4.1.2 "><p id="hss_01_0044__p122542047155512">Name of the target image to be detected</p>
+</td>
+<td class="cellrowborder" valign="top" width="34.003400340034005%" headers="mcps1.3.19.2.2.2.2.2.4.1.3 "><p id="hss_01_0044__p525411474557">test_bj4</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row1425416474551"><td class="cellrowborder" valign="top" width="14.541454145414543%" headers="mcps1.3.19.2.2.2.2.2.4.1.1 "><p id="hss_01_0044__p4254247175516">Image ID</p>
+</td>
+<td class="cellrowborder" valign="top" width="51.45514551455145%" headers="mcps1.3.19.2.2.2.2.2.4.1.2 "><p id="hss_01_0044__p14255144716559">ID of the target image to be checked</p>
+</td>
+<td class="cellrowborder" valign="top" width="34.003400340034005%" headers="mcps1.3.19.2.2.2.2.2.4.1.3 "><p id="hss_01_0044__p6255204745520">-</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row12552474559"><td class="cellrowborder" valign="top" width="14.541454145414543%" headers="mcps1.3.19.2.2.2.2.2.4.1.1 "><p id="hss_01_0044__p135527185618">File</p>
+</td>
+<td class="cellrowborder" valign="top" width="51.45514551455145%" headers="mcps1.3.19.2.2.2.2.2.4.1.2 "><p id="hss_01_0044__p102551247185514">Path of the file in the target image to be checked</p>
+</td>
+<td class="cellrowborder" valign="top" width="34.003400340034005%" headers="mcps1.3.19.2.2.2.2.2.4.1.3 "><p id="hss_01_0044__p172551447155518">/tmp/testw</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0044__li143131818564"><span>Confirm the information and click <span class="uicontrol" id="hss_01_0044__hss_01_0044_uicontrol105861049103519_14"><b>OK</b></span>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0044__section1718012455468"><a name="hss_01_0044__section1718012455468"></a><a name="section1718012455468"></a><h4 class="sectiontitle">Suspicious Image Behaviors</h4><ol id="hss_01_0044__ol131204012573"><li id="hss_01_0044__li121215400576"><span>Click <strong id="hss_01_0044__b143401512124617">Suspicious Image Behaviors</strong>.</span></li><li id="hss_01_0044__li18131740145716"><span>On the <strong id="hss_01_0044__b1611419112478">Suspicious Image Behaviors</strong> slide pane that is displayed, modify the <span class="parmname" id="hss_01_0044__parmname1413164019577"><b>Policy Settings</b></span>. For details about the parameters, see <a href="#hss_01_0044__table191314400575">Table 18</a>.</span><p><div class="fignone" id="hss_01_0044__fig87619416522"><span class="figcap"><b>Figure 17 </b>Modifying the suspicious image behavior policy</span><br><span><img id="hss_01_0044__image137614419522" src="en-us_image_0000001621480454.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0044__table191314400575"></a><a name="table191314400575"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0044__table191314400575" frame="border" border="1" rules="all"><caption><b>Table 18 </b>Suspicious image behaviors policy parameters</caption><thead align="left"><tr id="hss_01_0044__row16141540135717"><th align="left" class="cellrowborder" valign="top" width="12.861286128612862%" id="mcps1.3.20.2.2.2.2.2.4.1.1"><p id="hss_01_0044__p121454019574">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="71.82718271827181%" id="mcps1.3.20.2.2.2.2.2.4.1.2"><p id="hss_01_0044__p414174019578">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="15.311531153115313%" id="mcps1.3.20.2.2.2.2.2.4.1.3"><p id="hss_01_0044__p151444095717">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0044__row1151140115717"><td class="cellrowborder" valign="top" width="12.861286128612862%" headers="mcps1.3.20.2.2.2.2.2.4.1.1 "><p id="hss_01_0044__p1015174018575">Rule Name</p>
+</td>
+<td class="cellrowborder" valign="top" width="71.82718271827181%" headers="mcps1.3.20.2.2.2.2.2.4.1.2 "><p id="hss_01_0044__p13151440185712">Name of a rule</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.311531153115313%" headers="mcps1.3.20.2.2.2.2.2.4.1.3 "><p id="hss_01_0044__p16489106601">-</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row13159406572"><td class="cellrowborder" valign="top" width="12.861286128612862%" headers="mcps1.3.20.2.2.2.2.2.4.1.1 "><p id="hss_01_0044__p71504095720">Description</p>
+</td>
+<td class="cellrowborder" valign="top" width="71.82718271827181%" headers="mcps1.3.20.2.2.2.2.2.4.1.2 "><p id="hss_01_0044__p1416124017571">Brief description of a rule</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.311531153115313%" headers="mcps1.3.20.2.2.2.2.2.4.1.3 "><p id="hss_01_0044__p21620401578">-</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row10161340145713"><td class="cellrowborder" valign="top" width="12.861286128612862%" headers="mcps1.3.20.2.2.2.2.2.4.1.1 "><p id="hss_01_0044__p1760161316591">Template</p>
+</td>
+<td class="cellrowborder" valign="top" width="71.82718271827181%" headers="mcps1.3.20.2.2.2.2.2.4.1.2 "><ul id="hss_01_0044__ul175921617119"><li id="hss_01_0044__li154035437910">Configure templates based on different rules. The supported rules are as follows:<ul id="hss_01_0044__ul167622504920"><li id="hss_01_0044__li2595162111">Image whitelist</li><li id="hss_01_0044__li1774951819110">Image blacklist</li><li id="hss_01_0044__li19233113018110">Image tag whitelist</li><li id="hss_01_0044__li6102381919">Image tag blacklist</li><li id="hss_01_0044__li1495616449116">Create container whitelist</li><li id="hss_01_0044__li26702553110">Create container blacklist</li><li id="hss_01_0044__li18291621211">Container mount proc whitelist</li><li id="hss_01_0044__li810311170215">Container seccomp unconfined</li><li id="hss_01_0044__li143329354215">Container privilege whitelist</li><li id="hss_01_0044__li201993397417">Container capability whitelist</li></ul>
+</li><li id="hss_01_0044__li1953013531698">The parameters are described as follows:<ul id="hss_01_0044__ul47127541644"><li id="hss_01_0044__li1271255416415"><strong id="hss_01_0044__b84361104511">Exact match</strong>: Enter the names of the images you want to check. Use semicolons (;) to separate multiple names. A maximum of 20 names can be entered.</li><li id="hss_01_0044__li82658201050"><strong id="hss_01_0044__b153152247511">RegEx match</strong>: Use regular expressions to match images. Use semicolons (;) to separate multiple expressions. A maximum of 20 expressions can be entered.</li><li id="hss_01_0044__li92781551656"><strong id="hss_01_0044__b813911514511">Prefix match</strong>: Enter the prefixes of the images you want to check. Multiple prefixes are separated by semicolons (;). A maximum of 20 prefixes can be entered.</li><li id="hss_01_0044__li0427131821112"><strong id="hss_01_0044__b19219499511">Tag Name</strong>: Enter the tag and value of the images you want to check. A maximum of 20 tags can be added.</li><li id="hss_01_0044__li14938111510251"><strong id="hss_01_0044__b85701965220">Permission Type</strong>: Specify permissions to be checked or ignored. For details about permissions, see <a href="#hss_01_0044__table16974181219484">Table 19</a>.</li></ul>
+</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="15.311531153115313%" headers="mcps1.3.20.2.2.2.2.2.4.1.3 "><p id="hss_01_0044__p11654095712">-</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+
+<div class="tablenoborder"><a name="hss_01_0044__table16974181219484"></a><a name="table16974181219484"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0044__table16974181219484" frame="border" border="1" rules="all"><caption><b>Table 19 </b>Abnormal image permissions</caption><thead align="left"><tr id="hss_01_0044__row17975191217486"><th align="left" class="cellrowborder" valign="top" width="24.709999999999997%" id="mcps1.3.20.2.2.2.3.2.3.1.1"><p id="hss_01_0044__p7975712204818">Permissions Name</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="75.29%" id="mcps1.3.20.2.2.2.3.2.3.1.2"><p id="hss_01_0044__p397517123489">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0044__row19752124486"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p59721640204918">AUDIT_WRITE</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p157041021165918">Write records to kernel auditing log.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row155851504498"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p897220405491">CHOWN</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p129721640174914">Make arbitrary changes to file UIDs and GIDs.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row115867034910"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p1197311402493">DAC_OVERRIDE</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p52471406010">Bypass file read, write, and execute permission checks.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row65861709494"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p119731240104915">FOWNER</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p19753651413">Bypass permission checks on operations that normally require the file system UID of the process to match the UID of the file.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row158620114917"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p12973134014910">FSETID</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p680591819119">Do not clear set-user-ID and set-group-ID permission bits when a file is modified.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row35878074917"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p13973114024910">KILL</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p15805118014">Bypass permission checks for sending signals</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row17587180144911"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p6973140184918">MKNOD</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p15571391112">Create special files using mknod.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row0588130134918"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p69741740194911">NET_BIND_SERVICE</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p6131749101314">Bind a socket to internet domain privileged ports (port numbers less than 1024).</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row20588160184916"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p139741540194917">NET_RAW</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p2636115191414">Use RAW and PACKET sockets.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row1258816016496"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p12974114019491">SETFCAP</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p157891127035">Set file capabilities.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row358980154917"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p5974540114916">SETGID</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p629173519319">Make arbitrary manipulations of process GIDs and supplementary GID list.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row99761812144818"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p597414403498">SETPCAP</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p667813415316">Modify process capabilities.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row11976121216482"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p119751240134916">SETUID</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p1862110481437">Make arbitrary manipulations of process UIDs.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row13976141294815"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p1097511405496">SYS_CHROOT</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p48100586314">Use chroot to change the root directory.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row1397711214818"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p15720144275116">AUDIT_CONTROL</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p2082731914511">Enable and disable kernel auditing; change auditing filter rules; retrieve auditing status and filtering rules.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row16879125074810"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p14720144285117">AUDIT_READ</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p4111731455">Allow reading audit logs via multicast netlink socket.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row79771712164818"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p1772019426513">BLOCK_SUSPEND</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p17256164418511">Allow suspension prevention.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row3417522164917"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p7720154245110">BPF</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p28654537516">Allow creating BPF maps, loading BPF Type Format (BTF) data, retrieve JITed code of BPF programs, and more.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row1634532819519"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p772115424517">CHECKPOINT_RESTORE</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p87211842185119">Allow operations related to checkpoints and restoration.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row16345102811513"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p117211842145119">DAC_READ_SEARCH</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p205783310615">Bypass file read permission checks and directory read and execute permission checks.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row23459285510"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p10721104218518">IPC_LOCK</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p1457582310917">Lock memory (such as mlock, mlockall, mmap, and shmctl).</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row83463287519"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p157212423516">IPC_OWNER</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p1623585012911">Bypass permission checks for operations on System V IPC objects.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row63461628195110"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p0721542115112">LEASE</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p98421210141010">Establish leases on arbitrary files</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row20346152835119"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p20721842115115">LINUX_IMMUTABLE</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p1931182501017">Set the FS_APPEND_FL and FS_IMMUTABLE_FL i-node flags.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row034692895111"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p872116429516">MAC_ADMIN</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p7366184281014">Allow MAC configuration or state changes.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row93469288519"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p9721204265116">MAC_OVERRIDE</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p265940161112">Override Mandatory Access Control (MAC).</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row43461128115115"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p472134225120">NET_ADMIN</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p1299051091214">Perform various network-related operations.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row17347128205115"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p172274265114">NET_BROADCAST</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p12722194219519">Make socket broadcasts, and listen to multicasts.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row434722820512"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p77221042155114">PERFMON</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p104061634151413">Allow privileged system performance and observability operations using perf_events, i915_perf and other kernel subsystems.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row2347152895110"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p17221042115113">SYS_ADMIN</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p7270164817142">Perform a range of system administration operations.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row9347102825117"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p157228428517">SYS_BOOT</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p19541555131417">Use reboot and kexec_load. Reboot and load a new kernel for later execution.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row19347192811518"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p2722942135119">SYS_MODULE</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p198921311156">Load and unload kernel modules.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row164186224497"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p1372217424516">SYS_NICE</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p134778224157">Raise process nice value (nice, set priority) and change the nice value for arbitrary processes.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row641918226490"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p9722114211515">SYS_PACCT</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p03771544201519">Enable or disable process accounting.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row94196224498"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p2072244245116">SYS_PTRACE</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p995118543157">Trace arbitrary processes using ptrace.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row17419132216498"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p12722124295111">SYS_RAWIO</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p1258886131616">Perform I/O port operations (ipl and ioperm).</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row5420822124917"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p15723342135114">SYS_RESOURCE</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p23531024101611">Override resource limits.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row5420162294912"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p1272312420513">SYS_TIME</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p8973130121618">Set the system clock (settimeofday, stime, and adjtimex) and real-time (hardware) clock.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row119777127481"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p1872374215119">SYS_TTY_CONFIG</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p2341155471618">Use vhangup. Employ various privileged ioctl operations on virtual terminals.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row990284110489"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p8723124225111">SYSLOG</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p981920931713">Perform privileged syslog operations.</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row690313416481"><td class="cellrowborder" valign="top" width="24.709999999999997%" headers="mcps1.3.20.2.2.2.3.2.3.1.1 "><p id="hss_01_0044__p6723164235118">WAKE_ALARM</p>
+</td>
+<td class="cellrowborder" valign="top" width="75.29%" headers="mcps1.3.20.2.2.2.3.2.3.1.2 "><p id="hss_01_0044__p121172231176">Trigger something that will wake up the system.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0044__li1985618269567"><span>Confirm the information and click <span class="uicontrol" id="hss_01_0044__hss_01_0044_uicontrol105861049103519_15"><b>OK</b></span>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0044__section77391531194211"><h4 class="sectiontitle">Port Scan Detection</h4><ol id="hss_01_0044__ol784333871819"><li id="hss_01_0044__li9843183841815"><span>Click <span class="uicontrol" id="hss_01_0044__uicontrol108431538151811"><b>Port Scan Detection</b></span>.</span></li><li id="hss_01_0044__li178441338171817"><span>On the <strong id="hss_01_0044__b29681231191818">Port Scan Detection</strong> slide pane that is displayed, modify the <span class="parmname" id="hss_01_0044__parmname1984493811187"><b>Policy Settings</b></span>. For details about the parameters, see <a href="#hss_01_0044__table188451238181811">Table 20</a>.</span><p><div class="fignone" id="hss_01_0044__fig17392210549"><span class="figcap"><b>Figure 18 </b>Modifying the port scanning policy</span><br><span><img id="hss_01_0044__image107391218544" src="en-us_image_0000001621640278.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0044__table188451238181811"></a><a name="table188451238181811"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0044__table188451238181811" frame="border" border="1" rules="all"><caption><b>Table 20 </b>Port scan detection policy parameters</caption><thead align="left"><tr id="hss_01_0044__row128461738101813"><th align="left" class="cellrowborder" valign="top" width="21.242124212421242%" id="mcps1.3.21.2.2.2.2.2.4.1.1"><p id="hss_01_0044__p2846123821813">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="56.94569456945695%" id="mcps1.3.21.2.2.2.2.2.4.1.2"><p id="hss_01_0044__p1684633817188">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="21.81218121812181%" id="mcps1.3.21.2.2.2.2.2.4.1.3"><p id="hss_01_0044__p28470382189">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0044__row6847103881812"><td class="cellrowborder" valign="top" width="21.242124212421242%" headers="mcps1.3.21.2.2.2.2.2.4.1.1 "><p id="hss_01_0044__p484753813183">Process Information Collection Interval (s):</p>
+</td>
+<td class="cellrowborder" valign="top" width="56.94569456945695%" headers="mcps1.3.21.2.2.2.2.2.4.1.2 "><p id="hss_01_0044__p9848113811813">Interval for obtaining processes</p>
+</td>
+<td class="cellrowborder" valign="top" width="21.81218121812181%" headers="mcps1.3.21.2.2.2.2.2.4.1.3 "><p id="hss_01_0044__p4848193871817">Selected</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row1884833801813"><td class="cellrowborder" valign="top" width="21.242124212421242%" headers="mcps1.3.21.2.2.2.2.2.4.1.1 "><p id="hss_01_0044__p484820382185">Source IP Address Whitelist</p>
+</td>
+<td class="cellrowborder" valign="top" width="56.94569456945695%" headers="mcps1.3.21.2.2.2.2.2.4.1.2 "><p id="hss_01_0044__p08489382188">Enter the IP address whitelist. Separate multiple IP addresses with semicolons (;).</p>
+</td>
+<td class="cellrowborder" valign="top" width="21.81218121812181%" headers="mcps1.3.21.2.2.2.2.2.4.1.3 "><p id="hss_01_0044__p2084823841811">test_bj4</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row48481538191817"><td class="cellrowborder" valign="top" width="21.242124212421242%" headers="mcps1.3.21.2.2.2.2.2.4.1.1 "><p id="hss_01_0044__p1284863891815">Packet Quantity Threshold</p>
+</td>
+<td class="cellrowborder" valign="top" width="56.94569456945695%" headers="mcps1.3.21.2.2.2.2.2.4.1.2 "><p id="hss_01_0044__p5108232122115">-</p>
+</td>
+<td class="cellrowborder" valign="top" width="21.81218121812181%" headers="mcps1.3.21.2.2.2.2.2.4.1.3 "><p id="hss_01_0044__p784903817182">-</p>
+</td>
+</tr>
+<tr id="hss_01_0044__row15849193819188"><td class="cellrowborder" valign="top" width="21.242124212421242%" headers="mcps1.3.21.2.2.2.2.2.4.1.1 "><p id="hss_01_0044__p14116247205">Ports to Scan</p>
+</td>
+<td class="cellrowborder" valign="top" width="56.94569456945695%" headers="mcps1.3.21.2.2.2.2.2.4.1.2 "><p id="hss_01_0044__p9930155119215">Details about the port number and protocol type to be detected</p>
+</td>
+<td class="cellrowborder" valign="top" width="21.81218121812181%" headers="mcps1.3.21.2.2.2.2.2.4.1.3 "><p id="hss_01_0044__p148494386182">-</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0044__li868343110562"><span>Confirm the information and click <span class="uicontrol" id="hss_01_0044__hss_01_0044_uicontrol105861049103519_16"><b>OK</b></span>.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0314.html">Policy Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0045.html b/docs/hss/umn/hss_01_0045.html
new file mode 100644
index 00000000..6384a2c3
--- /dev/null
+++ b/docs/hss/umn/hss_01_0045.html
@@ -0,0 +1,331 @@
+<a name="hss_01_0045"></a><a name="hss_01_0045"></a>
+
+<h1 class="topictitle1">Overview</h1>
+<div id="body1583114846347"><p id="hss_01_0045__p10133141913122">If policies such as asset collection, baseline check, and intrusion detection do not meet your server protection requirements, you can manage these policies.</p>
+<p id="hss_01_0045__p465816153214"><a href="#hss_01_0045__table9201049404">Table 1</a> lists the policies that can be managed by each HSS edition. For details about how to configure policies, see <a href="hss_01_0044.html">Configuring Policies</a>.</p>
+<p id="hss_01_0045__p475216351467">If you have different protection requirements, you can create a custom policy group to deploy different protection policies for different servers. For details, see <a href="hss_01_0368.html">Creating a Policy Group</a>.</p>
+
+<div class="tablenoborder"><a name="hss_01_0045__table9201049404"></a><a name="table9201049404"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0045__table9201049404" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Policies</caption><thead align="left"><tr id="hss_01_0045__row1120449209"><th align="left" class="cellrowborder" valign="top" width="8.081676518001075%" id="mcps1.3.4.2.9.1.1"><p id="hss_01_0045__p20207491208">Function Type</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="9.98387963460505%" id="mcps1.3.4.2.9.1.2"><p id="hss_01_0045__p10207495015">Policy</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="33.19720580333154%" id="mcps1.3.4.2.9.1.3"><p id="hss_01_0045__p52010493014">Action</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="14.121440085975282%" id="mcps1.3.4.2.9.1.4"><p id="hss_01_0045__p19207491309">Supported OS</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="9.296077377753894%" id="mcps1.3.4.2.9.1.5"><p id="hss_01_0045__p5208498011">Enterprise Edition</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="8.758731864588931%" id="mcps1.3.4.2.9.1.6"><p id="hss_01_0045__p1220134917013">Premium Edition</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="9.650725416442773%" id="mcps1.3.4.2.9.1.7"><p id="hss_01_0045__p2212496019">WTP Edition</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="6.91026329930145%" id="mcps1.3.4.2.9.1.8"><p id="hss_01_0045__p2021144915010">Container Edition</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0045__row4210490016"><td class="cellrowborder" valign="top" width="8.081676518001075%" headers="mcps1.3.4.2.9.1.1 "><p id="hss_01_0045__p421134910018">Assets</p>
+</td>
+<td class="cellrowborder" valign="top" width="9.98387963460505%" headers="mcps1.3.4.2.9.1.2 "><p id="hss_01_0045__p321154917020">Asset discovery</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.19720580333154%" headers="mcps1.3.4.2.9.1.3 "><p id="hss_01_0045__p4211491406">Scan and display all software in one place, including software name, path, and major applications, helping you identify abnormal assets.</p>
+</td>
+<td class="cellrowborder" valign="top" width="14.121440085975282%" headers="mcps1.3.4.2.9.1.4 "><p id="hss_01_0045__p921549303">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="9.296077377753894%" headers="mcps1.3.4.2.9.1.5 "><p id="hss_01_0045__p721104917011">×</p>
+</td>
+<td class="cellrowborder" valign="top" width="8.758731864588931%" headers="mcps1.3.4.2.9.1.6 "><p id="hss_01_0045__p3215493014">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="9.650725416442773%" headers="mcps1.3.4.2.9.1.7 "><p id="hss_01_0045__p18211649205">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.91026329930145%" headers="mcps1.3.4.2.9.1.8 "><p id="hss_01_0045__p10210491209">√</p>
+</td>
+</tr>
+<tr id="hss_01_0045__row152154910019"><td class="cellrowborder" rowspan="2" valign="top" width="8.081676518001075%" headers="mcps1.3.4.2.9.1.1 "><p id="hss_01_0045__p192119499013">Baseline Inspection</p>
+</td>
+<td class="cellrowborder" valign="top" width="9.98387963460505%" headers="mcps1.3.4.2.9.1.2 "><p id="hss_01_0045__p1321184916011">Weak password detection</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.19720580333154%" headers="mcps1.3.4.2.9.1.3 "><p id="hss_01_0045__p11211549505">Change weak passwords to stronger ones based on HSS scan results and suggestions.</p>
+</td>
+<td class="cellrowborder" valign="top" width="14.121440085975282%" headers="mcps1.3.4.2.9.1.4 "><p id="hss_01_0045__p20214490014">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" width="9.296077377753894%" headers="mcps1.3.4.2.9.1.5 "><p id="hss_01_0045__p192119490014">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="8.758731864588931%" headers="mcps1.3.4.2.9.1.6 "><p id="hss_01_0045__p32112491608">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="9.650725416442773%" headers="mcps1.3.4.2.9.1.7 "><p id="hss_01_0045__p1211549007">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.91026329930145%" headers="mcps1.3.4.2.9.1.8 "><p id="hss_01_0045__p102113491012">√</p>
+</td>
+</tr>
+<tr id="hss_01_0045__row14221249902"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.1 "><p id="hss_01_0045__p4221649305">Configuration Check</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.2 "><p id="hss_01_0045__p162214491609">Check the unsafe Tomcat, Nginx, and SSH login configurations found by HSS.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.3 "><p id="hss_01_0045__p1322124915013">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.4 "><p id="hss_01_0045__p222114914010">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.5 "><p id="hss_01_0045__p1022154916010">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.6 "><p id="hss_01_0045__p19225491203">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.7 "><p id="hss_01_0045__p7221549606">√</p>
+</td>
+</tr>
+<tr id="hss_01_0045__row82264919017"><td class="cellrowborder" rowspan="16" valign="top" width="8.081676518001075%" headers="mcps1.3.4.2.9.1.1 "><p id="hss_01_0045__p1422749407">Intrusions</p>
+</td>
+<td class="cellrowborder" valign="top" width="9.98387963460505%" headers="mcps1.3.4.2.9.1.2 "><p id="hss_01_0045__p152218499018">AV detection</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.19720580333154%" headers="mcps1.3.4.2.9.1.3 "><p id="hss_01_0045__p3223493011">Check server assets and report, isolate, and kill the detected viruses.</p>
+<p id="hss_01_0045__p1622449901">The generated alarms are displayed under <span class="menucascade" id="hss_01_0045__menucascade59851221125316"><b><span class="uicontrol" id="hss_01_0045__uicontrol12985221165318">Detection</span></b> &gt; <b><span class="uicontrol" id="hss_01_0045__uicontrol292926195310">Alarms</span></b> &gt; <b><span class="uicontrol" id="hss_01_0045__uicontrol1038917343535">Server Alarms</span></b> &gt; <b><span class="uicontrol" id="hss_01_0045__uicontrol7275115485319">Event Types</span></b> &gt; <b><span class="uicontrol" id="hss_01_0045__uicontrol17114205712549">Malware</span></b></span>.</p>
+<p id="hss_01_0045__p92219490020">After AV detection is enabled, the resource usage is as follows:</p>
+<p id="hss_01_0045__p10224499014">The CPU usage does not exceed 40% of a single vCPU. The actual CPU usage depends on the server status.</p>
+</td>
+<td class="cellrowborder" valign="top" width="14.121440085975282%" headers="mcps1.3.4.2.9.1.4 "><p id="hss_01_0045__p142344910011">Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="9.296077377753894%" headers="mcps1.3.4.2.9.1.5 "><p id="hss_01_0045__p1423134910010">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="8.758731864588931%" headers="mcps1.3.4.2.9.1.6 "><p id="hss_01_0045__p2023104915020">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="9.650725416442773%" headers="mcps1.3.4.2.9.1.7 "><p id="hss_01_0045__p3239491404">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.91026329930145%" headers="mcps1.3.4.2.9.1.8 "><p id="hss_01_0045__p16231849006">×</p>
+</td>
+</tr>
+<tr id="hss_01_0045__row1123249200"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.1 "><p id="hss_01_0045__p82311491019">Container Information Collection</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.2 "><p id="hss_01_0045__p8234491404">Collect information about all containers on a server, including ports and directories, and report alarms for risky information.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.3 "><p id="hss_01_0045__p18238492014">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.4 "><p id="hss_01_0045__p17239495014">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.5 "><p id="hss_01_0045__p923204910014">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.6 "><p id="hss_01_0045__p22315491018">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.7 "><p id="hss_01_0045__p202311491015">√</p>
+</td>
+</tr>
+<tr id="hss_01_0045__row423174916017"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.1 "><p id="hss_01_0045__p52316491703">Cluster Intrusion Detection</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.2 "><p id="hss_01_0045__p14237491407">Detect container high-privilege changes, creation in key information, and virus intrusion.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.3 "><p id="hss_01_0045__p6234491403">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.4 "><p id="hss_01_0045__p20231949105">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.5 "><p id="hss_01_0045__p202444919018">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.6 "><p id="hss_01_0045__p72484914010">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.7 "><p id="hss_01_0045__p1624184913010">√</p>
+</td>
+</tr>
+<tr id="hss_01_0045__row72414491809"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.1 "><p id="hss_01_0045__p52414491303">Web Shell Detection</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.2 "><p id="hss_01_0045__p7248499012">Scan web directories on servers for web shells.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.3 "><p id="hss_01_0045__p92513492005">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.4 "><p id="hss_01_0045__p4256491015">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.5 "><p id="hss_01_0045__p172554918017">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.6 "><p id="hss_01_0045__p16255491502">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.7 "><p id="hss_01_0045__p12255491505">√</p>
+</td>
+</tr>
+<tr id="hss_01_0045__row17258491803"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.1 "><p id="hss_01_0045__p1525349104">Container File Monitoring</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.2 "><p id="hss_01_0045__p11256498011">Detect file access that violates security policies. Security O&amp;M personnel can check whether hackers are intruding and tampering with sensitive files.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.3 "><p id="hss_01_0045__p17251149504">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.4 "><p id="hss_01_0045__p11256498015">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.5 "><p id="hss_01_0045__p82534911015">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.6 "><p id="hss_01_0045__p122515494014">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.7 "><p id="hss_01_0045__p102517498019">√</p>
+</td>
+</tr>
+<tr id="hss_01_0045__row16251149702"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.1 "><p id="hss_01_0045__p132513497020">Container Process Whitelist</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.2 "><p id="hss_01_0045__p192512491506">Check for process startups that violate security policies.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.3 "><p id="hss_01_0045__p5263492008">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.4 "><p id="hss_01_0045__p8261149308">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.5 "><p id="hss_01_0045__p2268494013">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.6 "><p id="hss_01_0045__p32616491900">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.7 "><p id="hss_01_0045__p17288491006">√</p>
+</td>
+</tr>
+<tr id="hss_01_0045__row12813491001"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.1 "><p id="hss_01_0045__p02819491906">Suspicious Image Behaviors</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.2 "><p id="hss_01_0045__p62811491006">Configure the blacklist and whitelist and customize permissions to ignore abnormal behaviors or report alarms.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.3 "><p id="hss_01_0045__p82814491409">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.4 "><p id="hss_01_0045__p132874915011">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.5 "><p id="hss_01_0045__p172894918017">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.6 "><p id="hss_01_0045__p72817498018">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.7 "><p id="hss_01_0045__p12285491702">√</p>
+</td>
+</tr>
+<tr id="hss_01_0045__row1280491501"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.1 "><p id="hss_01_0045__p17281549807">HIPS Detection</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.2 "><p id="hss_01_0045__p6287491301">Check registries, files, and processes, and report alarms for operations such as abnormal changes.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.3 "><p id="hss_01_0045__p17291349000">Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.4 "><p id="hss_01_0045__p14292492002">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.5 "><p id="hss_01_0045__p132913491703">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.6 "><p id="hss_01_0045__p12994910010">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.7 "><p id="hss_01_0045__p16291493018">√</p>
+</td>
+</tr>
+<tr id="hss_01_0045__row172913491304"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.1 "><p id="hss_01_0045__p122911497011">File Protection</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.2 "><p id="hss_01_0045__p1929549104">Check the files in the Linux OS, applications, and other components to detect tampering.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.3 "><p id="hss_01_0045__p112910497010">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.4 "><p id="hss_01_0045__p62919491015">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.5 "><p id="hss_01_0045__p729104918018">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.6 "><p id="hss_01_0045__p629114919014">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.7 "><p id="hss_01_0045__p15296498015">√</p>
+</td>
+</tr>
+<tr id="hss_01_0045__row122934912019"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.1 "><p id="hss_01_0045__p629134915012">Login Security Check</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.2 "><p id="hss_01_0045__p1298491708">Detect brute-force attacks on SSH, FTP, and MySQL accounts.</p>
+<p id="hss_01_0045__p929249405">If the number of brute-force attacks (consecutive incorrect password attempts) from an IP address reaches 5 within 30 seconds, the IP address will be blocked.</p>
+<p id="hss_01_0045__p183011491509">By default, suspicious SSH attackers are blocked for 12 hours. Other types of suspicious attackers are blocked for 24 hours. You can check whether the IP address is trustworthy based on its attack type and how many times it has been blocked. You can manually unblock the IP addresses you trust.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.3 "><p id="hss_01_0045__p20303491105">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.4 "><p id="hss_01_0045__p2308493019">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.5 "><p id="hss_01_0045__p0308497016">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.6 "><p id="hss_01_0045__p7303491909">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.7 "><p id="hss_01_0045__p1230749508">√</p>
+</td>
+</tr>
+<tr id="hss_01_0045__row12305491904"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.1 "><p id="hss_01_0045__p7301491308">Malicious File Detection</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.2 "><ul id="hss_01_0045__ul9301649301"><li id="hss_01_0045__li1930134916013">Reverse shell: Monitor user process behaviors in real time to detect reverse shells caused by invalid connections.</li><li id="hss_01_0045__li1930749106">Detect actions on abnormal shells, including moving, copying, and deleting shell files, and modifying the access permissions and hard links of the files.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.3 "><p id="hss_01_0045__p330049303">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.4 "><p id="hss_01_0045__p731194920014">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.5 "><p id="hss_01_0045__p19311849500">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.6 "><p id="hss_01_0045__p63114491101">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.7 "><p id="hss_01_0045__p12319493015">√</p>
+</td>
+</tr>
+<tr id="hss_01_0045__row5310491705"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.1 "><p id="hss_01_0045__p831134917017">Port Scan Detection</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.2 "><p id="hss_01_0045__p1831849406">Detect scanning or sniffing on specified ports and report alarms.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.3 "><p id="hss_01_0045__p6311049903">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.4 "><p id="hss_01_0045__p14317491405">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.5 "><p id="hss_01_0045__p193118491304">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.6 "><p id="hss_01_0045__p173116496013">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.7 "><p id="hss_01_0045__p123118499016">√</p>
+</td>
+</tr>
+<tr id="hss_01_0045__row73124915017"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.1 "><p id="hss_01_0045__p14314496011">Abnormal process behaviors</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.2 "><p id="hss_01_0045__p1631174913012">All the running processes on all your servers are monitored for you. You can create a process whitelist to ignore alarms on trusted processes, and can receive alarms on unauthorized process behavior and intrusions.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.3 "><p id="hss_01_0045__p53114914016">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.4 "><p id="hss_01_0045__p13212491102">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.5 "><p id="hss_01_0045__p1032204910011">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.6 "><p id="hss_01_0045__p133213491907">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.7 "><p id="hss_01_0045__p103211494010">√</p>
+</td>
+</tr>
+<tr id="hss_01_0045__row932749509"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.1 "><p id="hss_01_0045__p6326495015">Root privilege escalation</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.2 "><p id="hss_01_0045__p173218494011">Detect the root privilege escalation for files in the current system.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.3 "><p id="hss_01_0045__p17326494013">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.4 "><p id="hss_01_0045__p23210491705">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.5 "><p id="hss_01_0045__p203215491804">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.6 "><p id="hss_01_0045__p10321349608">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.7 "><p id="hss_01_0045__p14321349407">√</p>
+</td>
+</tr>
+<tr id="hss_01_0045__row9321149005"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.1 "><p id="hss_01_0045__p17326499013">Real-time Process</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.2 "><p id="hss_01_0045__p332124913015">Monitor the executed commands in real time and generate alarms if high-risk commands are detected.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.3 "><p id="hss_01_0045__p133312491909">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.4 "><p id="hss_01_0045__p433184912019">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.5 "><p id="hss_01_0045__p1233144911017">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.6 "><p id="hss_01_0045__p1933349802">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.7 "><p id="hss_01_0045__p9332493015">√</p>
+</td>
+</tr>
+<tr id="hss_01_0045__row113315491103"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.1 "><p id="hss_01_0045__p9333491609">Rootkit Detection</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.2 "><p id="hss_01_0045__p18331449102">Detect server assets and report alarms for suspicious kernel modules, files, and folders.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.3 "><p id="hss_01_0045__p033204910013">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.4 "><p id="hss_01_0045__p43311491001">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.5 "><p id="hss_01_0045__p143354916015">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.6 "><p id="hss_01_0045__p1933124914019">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.9.1.7 "><p id="hss_01_0045__p133312491100">√</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0314.html">Policy Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0051.html b/docs/hss/umn/hss_01_0051.html
new file mode 100644
index 00000000..3c2cb072
--- /dev/null
+++ b/docs/hss/umn/hss_01_0051.html
@@ -0,0 +1,62 @@
+<a name="hss_01_0051"></a><a name="hss_01_0051"></a>
+
+<h1 class="topictitle1">Common Security Configuration</h1>
+<div id="body1511874421665"><p id="hss_01_0051__p572410226463">After protection is enabled, you can configure the common login locations, common login IP addresses, and the SSH login IP address whitelist. You can also enable automatic isolation and killing of malicious programs.</p>
+<ol id="hss_01_0051__ol7976683220"><li id="hss_01_0051__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0051__li830314169200"><span>Click <span><img id="hss_01_0051__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0051__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0051__hss_01_0571_b14857117404"><span id="hss_01_0051__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0051__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li></ol>
+<div class="section" id="hss_01_0051__section1448034163012"><h4 class="sectiontitle">Configuring Common Login Locations</h4><p id="hss_01_0051__p15986104004914">After you configure common login locations, <span id="hss_01_0051__text183524516304">HSS</span> will generate alarms on the logins from other login locations. A server can be added to multiple login locations.</p>
+<ol id="hss_01_0051__ol6245113954914"><li id="hss_01_0051__li4245123984918"><span>Choose <strong id="hss_01_0051__b340516112260">Installation &amp; Configuration</strong> and click the <strong id="hss_01_0051__b911519122615">Security Configuration</strong> tab. Click <strong id="hss_01_0051__b7613726152613">Common Login Locations</strong> and click <strong id="hss_01_0051__b83018332264">Add Common Login Location</strong>.</span><p><div class="fignone" id="hss_01_0051__fig463417236271"><span class="figcap"><b>Figure 1 </b>Adding a common login location</span><br><span><img id="hss_01_0051__en-us_topic_0000001568641917_image15503144193419" src="en-us_image_0000001563247778.png"></span></div>
+</p></li><li id="hss_01_0051__li931713453716"><span>In the dialog box that is displayed, select a geographical location and select servers. Confirm the information and click <strong id="hss_01_0051__b8900193582513">OK</strong>.</span><p><div class="fignone" id="hss_01_0051__fig1970573620281"><span class="figcap"><b>Figure 2 </b>Configuring common login locations</span><br><span><img id="hss_01_0051__image165610272519" src="en-us_image_0000001798383608.png"></span></div>
+</p></li><li id="hss_01_0051__li168221592335"><span>Return to the <strong id="hss_01_0051__b206811753122817">Security Configuration</strong> tab of the <strong id="hss_01_0051__b3460182210288">Installation &amp; Configuration</strong> page. Check whether the added locations are displayed on the <strong id="hss_01_0051__b151781535202918">Common Login Locations</strong> subtab.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0051__section10435391307"><h4 class="sectiontitle">Configuring Common Login IP Addresses</h4><p id="hss_01_0051__p4240440113018">After you configure common IP addresses, <span id="hss_01_0051__text1827718583010">HSS</span> will generate alarms on the logins from other IP addresses.</p>
+<ol id="hss_01_0051__ol186681422174813"><li id="hss_01_0051__li1266832217487"><span>Choose <strong id="hss_01_0051__b18483542122916">Installation &amp; Configuration</strong> and click the <strong id="hss_01_0051__b8484142202911">Security Configuration</strong> tab. Click <strong id="hss_01_0051__b348412429292">Common Login IP Addresses</strong> and click <strong id="hss_01_0051__b1848514212917">Add Common Login IP Address</strong>.</span><p><div class="fignone" id="hss_01_0051__fig168108063020"><span class="figcap"><b>Figure 3 </b>Adding a common login IP address</span><br><span><img id="hss_01_0051__en-us_topic_0000001568641917_image76224173911" src="en-us_image_0000001613967749.png"></span></div>
+</p></li></ol><ol start="2" id="hss_01_0051__ol2668142214489"><li id="hss_01_0051__li1266892210489"><span>In the dialog box that is displayed, enter an IP address and select servers. Confirm the information and click <strong id="hss_01_0051__b12818143213119">OK</strong>.</span><p><div class="note" id="hss_01_0051__note16437130420"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0051__ul7802867511"><li id="hss_01_0051__li380226256">A common login IP address must be a public IP address or IP address segment. Otherwise, you cannot remotely log in to the server in SSH mode.</li><li id="hss_01_0051__li146663811518">Only one IP address can be added at a time. To add multiple IP addresses, repeat the operations until all IP addresses are added. Up to 20 IP addresses can be added.</li></ul>
+</div></div>
+<div class="fignone" id="hss_01_0051__fig856512463019"><span class="figcap"><b>Figure 4 </b>Entering a common login IP address</span><br><span><img id="hss_01_0051__en-us_topic_0000001568641917_image82861025174118" src="en-us_image_0000001862551832.png"></span></div>
+</p></li><li id="hss_01_0051__li16802028421"><span>Return to the <strong id="hss_01_0051__b12803725173312">Security Configuration</strong> tab of the <strong id="hss_01_0051__b13804725143312">Installation &amp; Configuration</strong> page. Check whether the added locations are displayed on the <strong id="hss_01_0051__b12804325143319">Common Login IP Addresses</strong> subtab.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0051__section525414343012"><h4 class="sectiontitle">Configuring an SSH Login IP Address Whitelist</h4><p id="hss_01_0051__p133344682311">The SSH login whitelist controls SSH access to servers to prevent account cracking.</p>
+<div class="note" id="hss_01_0051__note03278365100"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0051__ul19744124841215"><li id="hss_01_0051__li1674484818123">An account can have up to 10 SSH login IP addresses in the whitelist.</li><li id="hss_01_0051__li162312557120">After you configure an SSH login IP address whitelist, SSH logins will be allowed only from whitelisted IP addresses.<ul id="hss_01_0051__ul7682250101219"><li id="hss_01_0051__li14556182842514">Before enabling this function, ensure that all IP addresses that need to initiate SSH logins are added to the whitelist. Otherwise, you cannot remotely log in to your server using SSH.<p id="hss_01_0051__p4799144395315"><a name="hss_01_0051__li14556182842514"></a><a name="li14556182842514"></a>If your service needs to access a server, but not necessarily via SSH, you do not need to add its IP address to the whitelist.</p>
+</li><li id="hss_01_0051__li26821850101220">Exercise caution when adding an IP address to the whitelist. This will make HSS no longer restrict access from this IP address to your servers.</li></ul>
+</li></ul>
+</div></div>
+<ol id="hss_01_0051__ol132763671010"><li id="hss_01_0051__li5332936151011"><span>Choose <strong id="hss_01_0051__b1540152103818">Installation &amp; Configuration</strong> and click the <strong id="hss_01_0051__b95407293815">Security Configuration</strong> tab. Click <strong id="hss_01_0051__b254072103810">SSH IP Whitelist</strong> and click <strong id="hss_01_0051__b1154017263811">Add IP Address</strong>.</span></li></ol><ol start="2" id="hss_01_0051__ol11332113671019"><li id="hss_01_0051__li1332236161016"><span>In the dialog box that is displayed, enter an IP address and select servers. Confirm the information and click <strong id="hss_01_0051__b19408924173918">OK</strong>.</span><p><div class="note" id="hss_01_0051__note15333193621014"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0051__ul1133313610106"><li id="hss_01_0051__li8333203616102">A common login IP address must be a public IP address or IP address segment. Otherwise, you cannot remotely log in to the server in SSH mode.</li><li id="hss_01_0051__li1533343671020">Only one IP address can be added at a time. To add multiple IP addresses, repeat the operations until all IP addresses are added.</li></ul>
+</div></div>
+<div class="fignone" id="hss_01_0051__fig131891812123018"><span class="figcap"><b>Figure 5 </b>Entering an IP address</span><br><span><img id="hss_01_0051__en-us_topic_0000001568641917_image18758150184616" src="en-us_image_0000001613689505.png"></span></div>
+</p></li><li id="hss_01_0051__li533343641017"><span>Return to the <strong id="hss_01_0051__b673545217412">Security Configuration</strong> tab of the <strong id="hss_01_0051__b273605210411">Installation &amp; Configuration</strong> page. Check whether the added locations are displayed on the <strong id="hss_01_0051__b573612525414">Common Login IP Addresses</strong> subtab.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0051__section33461055133017"><h4 class="sectiontitle">Isolating and Killing Malicious Programs</h4><p id="hss_01_0051__p16756757181615">HSS automatically isolates and kills identified malicious programs, such as web shells, Trojans, and worms, removing security risks.</p>
+<ol id="hss_01_0051__ol1546214291427"><li id="hss_01_0051__li134631729104214"><span>Choose <strong id="hss_01_0051__b37981522115617">Installation &amp; Configuration</strong> and click the <strong id="hss_01_0051__b472612255568">Security Configuration</strong> tab. Click the <strong id="hss_01_0051__b29001629152311">Isolation and Killing of Malicious Programs</strong> tab and enable <strong id="hss_01_0051__b490017290235">Isolate and Kill Malicious Programs</strong>.</span><p><div class="note" id="hss_01_0051__note1595722164612"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0051__p146207261417">After the cloud scan function is enabled, all <span id="hss_01_0051__text1020219397578">HSS</span> servers will be scanned. Some HSS quota editions can support only limited scanning capabilities. Therefore, you are advised to enable the enterprise edition or higher to enjoy all capabilities of the isolation and killing function.</p>
+</div></div>
+</p></li></ol><ol start="2" id="hss_01_0051__ol446372916428"><li id="hss_01_0051__li1334714845018"><span>In the confirmation dialog box, click <strong id="hss_01_0051__b1070616243169">OK</strong> to enable the isolation and killing of malicious programs.</span><p><p id="hss_01_0051__p65671255145118">Automatic isolation and killing may cause false positives. You can choose <strong id="hss_01_0051__b25132207316">Intrusions</strong> &gt; <strong id="hss_01_0051__b7513172033114">Events</strong> to view isolated malicious programs. You can cancel the isolation or ignore misreported malicious programs.</p>
+<div class="notice" id="hss_01_0051__note12348238175116"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><ul id="hss_01_0051__ul10348638165114"><li id="hss_01_0051__li171714444716">When a program is isolated and killed, the process of the program is terminated immediately. To avoid impact on services, check the detection result, and cancel the isolation of or unignore misreported malicious programs (if any).</li><li id="hss_01_0051__li153487387515">If <strong id="hss_01_0051__b1896114417406">Isolate and Kill Malicious Programs</strong> is set to <strong id="hss_01_0051__b139051244114013">Disable</strong> on the <strong id="hss_01_0051__b1390594424010">Isolation and Killing of Malicious Programs</strong> tab, HSS will generate an alarm when it detects a malicious program.<p id="hss_01_0051__p17348103815118">To isolate and kill the malicious programs that triggered alarms, choose <strong id="hss_01_0051__b162028234242">Intrusions</strong> &gt; <strong id="hss_01_0051__b3458112614249">Events</strong> and click <strong id="hss_01_0051__b267742816249">Malicious program</strong>.</p>
+</li></ul>
+</div></div>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0051__section172571068317"><h4 class="sectiontitle">Enabling 2FA</h4><ul id="hss_01_0051__ul19910521403"><li id="hss_01_0051__li172841948202520">Two-factor authentication (2FA) requires users to provide verification codes before they log in. The codes will be sent to their mobile phones or email boxes.</li><li id="hss_01_0051__li224115216019">You have to choose an SMN topic for servers where 2FA is enabled. The topic specifies the recipients of login verification codes, and <span id="hss_01_0051__text1796019119377">HSS</span> will authenticate login users accordingly.</li></ul>
+<p id="hss_01_0051__p12182344010"><strong id="hss_01_0051__b0448195111011">Prerequisites</strong></p>
+<ul id="hss_01_0051__ul2126183616309"><li id="hss_01_0051__li11126636183017">You have created a message topic whose protocol is SMS or email.</li><li id="hss_01_0051__li131261736193013">Server protection has been enabled.</li><li id="hss_01_0051__li1552214116282">To enable 2FA, you need to disable the SELinux firewall.</li></ul>
+<p id="hss_01_0051__p73912811472"><strong id="hss_01_0051__b1619812461115">Constraints and Limitations</strong></p>
+<div class="p" id="hss_01_0051__p316319253515">If 2FA is enabled, it can be used only in following scenarios:<ul id="hss_01_0051__ul145119285474"><li id="hss_01_0051__li18931152872519">Linux: The SSH password is used to log in to an ECS, and the OpenSSH version is earlier than 8.</li><li id="hss_01_0051__li182781720105712">Windows: The RDP file is used to log in to a Windows ECS.</li></ul>
+</div>
+<p id="hss_01_0051__p51011211115"><strong id="hss_01_0051__b81621834216">Procedure</strong></p>
+<ol id="hss_01_0051__ol85625291319"><li id="hss_01_0051__li169032105116"><span>On the <strong id="hss_01_0051__b167491345124918">Two-Factor Authentication</strong> tab, select servers and click Enable <strong id="hss_01_0051__b1455955674914">2FA</strong>. Alternatively, click <strong id="hss_01_0051__b17516119501">Enable</strong> in the <strong id="hss_01_0051__b550220187508">Operation</strong> column.</span><p><div class="fignone" id="hss_01_0051__fig12947192315302"><span class="figcap"><b>Figure 6 </b>Enabling 2FA</span><br><span><img id="hss_01_0051__en-us_topic_0000001568641917_image1090483575215" src="en-us_image_0000001613970477.png"></span></div>
+</p></li><li id="hss_01_0051__li158561821569"><span>In the displayed <strong id="hss_01_0051__b159782347477">Enable 2FA</strong> dialog box, select an authentication mode.</span><p><ul id="hss_01_0051__ul2223145220313"><li id="hss_01_0051__li32231652103120"><strong id="hss_01_0051__b1596115439480">SMS/Email</strong><p id="hss_01_0051__p184093597287">You need to select an SMN topic for SMS and email verification.</p>
+<ul id="hss_01_0051__ul1445916235375"><li id="hss_01_0051__li132323163713">The drop-down list displays only notification topics that have been confirmed.</li><li id="hss_01_0051__li17459523143711">If there is no topic, click <strong id="hss_01_0051__b842352706135447">View</strong> to create one. </li><li id="hss_01_0051__li1945902319373">During authentication, all the mobile numbers and email addresses specified in the topic will receive a verification SMS or email. You can delete mobile numbers and email addresses that do not need to receive verification messages.</li></ul>
+<div class="fignone" id="hss_01_0051__fig61218376405"><span class="figcap"><b>Figure 7 </b>SMS/Email</span><br><span><img id="hss_01_0051__en-us_topic_0000001568641917_image209881159145413" src="en-us_image_0000001563731138.png"></span></div>
+</li><li id="hss_01_0051__li1201818183216"><strong id="hss_01_0051__b114514874810">Verification code</strong><p id="hss_01_0051__p1974314554491">Use the verification code you receive in real time for verification.</p>
+<div class="fignone" id="hss_01_0051__fig1349413405405"><span class="figcap"><b>Figure 8 </b>Setting Method to Verification code</span><br><span><img id="hss_01_0051__en-us_topic_0000001568641917_image1147510230559" src="en-us_image_0000001563252390.png"></span></div>
+</li></ul>
+</p></li><li id="hss_01_0051__li822954135"><span>Click <strong id="hss_01_0051__b189234674412">OK</strong>. After 2FA is enabled, it takes about 5 minutes for the configuration to take effect.</span><p><div class="notice" id="hss_01_0051__note6925183315118"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="hss_01_0051__p568114014619">When you log in to a remote Windows server from another Windows server where 2FA is enabled, you need to manually add credentials on the latter. Otherwise, the login will fail.</p>
+<p id="hss_01_0051__p416616254556">To add credentials, choose <span class="uicontrol" id="hss_01_0051__uicontrol841123616531"><b>Start</b></span> &gt; <span class="uicontrol" id="hss_01_0051__uicontrol5411836155318"><b>Control Panel</b></span>, and click <span class="uicontrol" id="hss_01_0051__uicontrol10412173610533"><b>User Accounts</b></span>. Click <span class="uicontrol" id="hss_01_0051__uicontrol741217364535"><b>Manage your credentials</b></span> and then click <span class="uicontrol" id="hss_01_0051__uicontrol1141283695320"><b>Add a Windows credential</b></span>. Add the username and password of the remote server that you want to access.</p>
+</div></div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0292.html">Enabling HSS</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0063.html b/docs/hss/umn/hss_01_0063.html
new file mode 100644
index 00000000..1b10ef6c
--- /dev/null
+++ b/docs/hss/umn/hss_01_0063.html
@@ -0,0 +1,131 @@
+<a name="hss_01_0063"></a><a name="hss_01_0063"></a>
+
+<h1 class="topictitle1">Viewing Vulnerability Details</h1>
+<div id="body1513676224009"><p id="hss_01_0063__p1639321905317">You can view vulnerabilities of your assets on the <strong id="hss_01_0063__b5110208182210">Vulnerabilities</strong> page. The <strong id="hss_01_0063__b12461114141511">Vulnerabilities</strong> page contains two tabs: <strong id="hss_01_0063__b34611848152">Vulnerabilities view</strong> and <strong id="hss_01_0063__b546110411158">Server view</strong>, helping you analyze vulnerabilities from the vulnerability and server perspectives.</p>
+<div class="section" id="hss_01_0063__section1854716547329"><h4 class="sectiontitle">Constraints</h4><ul id="hss_01_0063__ul1169137161217"><li id="hss_01_0063__li17699791214">Servers that are not protected by HSS do not support this function.</li><li id="hss_01_0063__li5516131011101">The <strong id="hss_01_0063__b3814040194318">Server Status</strong> is <strong id="hss_01_0063__b272634134312">Running</strong>, <strong id="hss_01_0063__b1733293819431">Agent Status</strong> is <strong id="hss_01_0063__b1291398436">Online</strong>, and <strong id="hss_01_0063__b278611432438">Protection Status</strong> is <strong id="hss_01_0063__b2941344184316">Protected</strong>. Otherwise, vulnerability scan cannot be performed.</li></ul>
+</div>
+<div class="section" id="hss_01_0063__section3908601380"><h4 class="sectiontitle">Viewing Vulnerability Details (Vulnerability View)</h4><ol id="hss_01_0063__ol12356611912"><li id="hss_01_0063__li566341010915"><span>Log in to the management console.</span></li><li id="hss_01_0063__li6664010690"><span>In the navigation pane, choose <strong id="hss_01_0063__b2299044142316">Prediction</strong> &gt; <strong id="hss_01_0063__b15141121413283">Vulnerabilities</strong>.</span></li><li id="hss_01_0063__li1134017381996"><span>View vulnerability information on the <strong id="hss_01_0063__b1197022020246">Vulnerabilities</strong> page.</span><p><div class="fignone" id="hss_01_0063__fig760888103418"><span class="figcap"><b>Figure 1 </b>Viewing vulnerability details</span><br><span><img id="hss_01_0063__image122361501137" src="en-us_image_0000001807238698.png"></span></div>
+<ul id="hss_01_0063__ul16261128181019"><li id="hss_01_0063__li8626192871016">Viewing vulnerability scan results<p id="hss_01_0063__p6215195711119"><a name="hss_01_0063__li8626192871016"></a><a name="li8626192871016"></a>In the vulnerability statistics area in the upper part of the <strong id="hss_01_0063__b4235145413277">Vulnerabilities</strong> page, view vulnerability scan results. <a href="#hss_01_0063__table5527201313142">Table 1</a> describes related parameters.</p>
+
+<div class="tablenoborder"><a name="hss_01_0063__table5527201313142"></a><a name="table5527201313142"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0063__table5527201313142" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Vulnerability scan parameters</caption><thead align="left"><tr id="hss_01_0063__row5529121321417"><th align="left" class="cellrowborder" valign="top" width="27.26%" id="mcps1.3.3.2.3.2.2.1.2.2.3.1.1"><p id="hss_01_0063__p05295138140">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="72.74000000000001%" id="mcps1.3.3.2.3.2.2.1.2.2.3.1.2"><p id="hss_01_0063__p352941315147">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0063__row1852941319140"><td class="cellrowborder" valign="top" width="27.26%" headers="mcps1.3.3.2.3.2.2.1.2.2.3.1.1 "><p id="hss_01_0063__p8529913161414">Critical Vulnerabilities</p>
+</td>
+<td class="cellrowborder" valign="top" width="72.74000000000001%" headers="mcps1.3.3.2.3.2.2.1.2.2.3.1.2 "><p id="hss_01_0063__p55292132149">Click the number in <strong id="hss_01_0063__b9889330103010">Critical vulnerabilities</strong>. On the slide-out panel displayed, you can view all types of vulnerabilities to be urgently fixed.</p>
+</td>
+</tr>
+<tr id="hss_01_0063__row8529713161418"><td class="cellrowborder" valign="top" width="27.26%" headers="mcps1.3.3.2.3.2.2.1.2.2.3.1.1 "><p id="hss_01_0063__p2530161319146">Unfixed Vulnerabilities</p>
+</td>
+<td class="cellrowborder" valign="top" width="72.74000000000001%" headers="mcps1.3.3.2.3.2.2.1.2.2.3.1.2 "><p id="hss_01_0063__p182461937131912">Click the number in <strong id="hss_01_0063__b353119718336">Unfixed Vulnerabilities</strong>. On the slide-out panel displayed, you can view all types of vulnerabilities that are not fixed.</p>
+</td>
+</tr>
+<tr id="hss_01_0063__row14530181361414"><td class="cellrowborder" valign="top" width="27.26%" headers="mcps1.3.3.2.3.2.2.1.2.2.3.1.1 "><p id="hss_01_0063__p17530161301419">Servers with Vulnerabilities</p>
+</td>
+<td class="cellrowborder" valign="top" width="72.74000000000001%" headers="mcps1.3.3.2.3.2.2.1.2.2.3.1.2 "><p id="hss_01_0063__p18924123682012">Click the number in <strong id="hss_01_0063__b106091432103519">Servers with Vulnerabilities</strong>. You can view the servers with vulnerabilities in the lower part of the <strong id="hss_01_0063__b8303175103617">Vulnerabilities</strong> page.</p>
+</td>
+</tr>
+<tr id="hss_01_0063__row45301113121419"><td class="cellrowborder" valign="top" width="27.26%" headers="mcps1.3.3.2.3.2.2.1.2.2.3.1.1 "><p id="hss_01_0063__p65306133147">Vulnerabilities Handled Today</p>
+</td>
+<td class="cellrowborder" valign="top" width="72.74000000000001%" headers="mcps1.3.3.2.3.2.2.1.2.2.3.1.2 "><p id="hss_01_0063__p105306132149">Click the number in <strong id="hss_01_0063__b1543112547366">Vulnerabilities Handled Today</strong>. On the slide-out panel displayed, you can view all types of vulnerabilities that have been handled today.</p>
+</td>
+</tr>
+<tr id="hss_01_0063__row5530181301410"><td class="cellrowborder" valign="top" width="27.26%" headers="mcps1.3.3.2.3.2.2.1.2.2.3.1.1 "><p id="hss_01_0063__p17530181381412">Vulnerabilities Handled in Total</p>
+</td>
+<td class="cellrowborder" valign="top" width="72.74000000000001%" headers="mcps1.3.3.2.3.2.2.1.2.2.3.1.2 "><p id="hss_01_0063__p753018138149">Click the number in <strong id="hss_01_0063__b69360128383">Vulnerabilities Handled in Total</strong>. On the slide-out panel displayed, you can view all types of vulnerabilities that have been handled. The number is just the quantity of vulnerabilities handled within one year.</p>
+</td>
+</tr>
+<tr id="hss_01_0063__row1653016138143"><td class="cellrowborder" valign="top" width="27.26%" headers="mcps1.3.3.2.3.2.2.1.2.2.3.1.1 "><p id="hss_01_0063__p3530171381416">Detectable Vulnerabilities</p>
+</td>
+<td class="cellrowborder" valign="top" width="72.74000000000001%" headers="mcps1.3.3.2.3.2.2.1.2.2.3.1.2 "><p id="hss_01_0063__p5530151313143">Displays the number of vulnerabilities that can be detected by HSS.</p>
+</td>
+</tr>
+<tr id="hss_01_0063__row10329124191616"><td class="cellrowborder" valign="top" width="27.26%" headers="mcps1.3.3.2.3.2.2.1.2.2.3.1.1 "><p id="hss_01_0063__p632902451611">Scans in Total</p>
+</td>
+<td class="cellrowborder" valign="top" width="72.74000000000001%" headers="mcps1.3.3.2.3.2.2.1.2.2.3.1.2 "><p id="hss_01_0063__p13329182419166">Displays the number of vulnerability scans.</p>
+<p id="hss_01_0063__p1935094682712">Click <span class="uicontrol" id="hss_01_0063__uicontrol15220124114276"><b>Scan</b></span> to manually scan for vulnerabilities on servers.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</li><li id="hss_01_0063__li177482014288">Viewing the importance of assets affected by a vulnerability<p id="hss_01_0063__p8924378364"><a name="hss_01_0063__li177482014288"></a><a name="li177482014288"></a>In the vulnerability list in the lower part of the page, view the importance of the asset affected by a vulnerability in the <strong id="hss_01_0063__b0791522165319">Affected Servers</strong> column.</p>
+<ul id="hss_01_0063__ul145052543813"><li id="hss_01_0063__li1366013113810"><span><img id="hss_01_0063__image1113392510368" src="en-us_image_0000001635697117.png"></span>: major asset</li><li id="hss_01_0063__li126618313812"><span><img id="hss_01_0063__image23141740203620" src="en-us_image_0000001586056592.png"></span>: minor asset</li><li id="hss_01_0063__li14661193173816"><span><img id="hss_01_0063__image153851058133616" src="en-us_image_0000001585737324.png"></span>: test asset</li></ul>
+</li><li id="hss_01_0063__li1043715143818">Viewing vulnerability details<p id="hss_01_0063__p325453515412"><a name="hss_01_0063__li1043715143818"></a><a name="li1043715143818"></a>Click the name of a target vulnerability. On the vulnerability details slide-out panel displayed, you can view the repair suggestions, CVE details, affected servers, and historical handling records of the vulnerability.</p>
+</li><li id="hss_01_0063__li988138104414">Viewing handled vulnerabilities or vulnerabilities to be handled<p id="hss_01_0063__p1047951414615"><a name="hss_01_0063__li988138104414"></a><a name="li988138104414"></a>Above the vulnerability list, select <span class="parmvalue" id="hss_01_0063__parmvalue10341135894513"><b>Unhandled</b></span> or <span class="parmvalue" id="hss_01_0063__parmvalue39871154610"><b>Handled</b></span> from the vulnerability handling status drop-down list to filter vulnerabilities to be handled or that have been handled.</p>
+</li><li id="hss_01_0063__li20649192815522">Exporting the vulnerability list<p id="hss_01_0063__p1293143615315"><a name="hss_01_0063__li20649192815522"></a><a name="li20649192815522"></a>Click <span class="uicontrol" id="hss_01_0063__uicontrol967353245314"><b>Export</b></span> above the vulnerability list to export vulnerability data with just one-click. Then, you can view vulnerability information on your local PC.</p>
+<div class="note" id="hss_01_0063__note163518148541"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0063__p167371391798">A maximum of 30,000 vulnerabilities can be exported at a time.</p>
+
+</div></div>
+</li></ul>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0063__section75981910554"><h4 class="sectiontitle">Viewing Vulnerability Details (Server View)</h4><div class="note" id="hss_01_0063__note9780152610595"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0063__p1815814152597">The basic edition does not support this operation.</p>
+</div></div>
+<ol id="hss_01_0063__ol10103172595512"><li id="hss_01_0063__li4103625145512"><span>Log in to the management console.</span></li><li id="hss_01_0063__li51046253555"><span>In the navigation pane, choose <strong id="hss_01_0063__b7561133413512">Prediction</strong> &gt; <strong id="hss_01_0063__b65623345516">Vulnerabilities</strong>.</span></li><li id="hss_01_0063__li1010418256554"><span>In the upper right corner of the <strong id="hss_01_0063__b13745189113118">Vulnerabilities</strong> page, click <span class="parmvalue" id="hss_01_0063__parmvalue774519913310"><b>Server view</b></span> to view vulnerability information.</span><p><div class="fignone" id="hss_01_0063__fig1010472525512"><span class="figcap"><b>Figure 2 </b>Viewing vulnerability details</span><br><span><img id="hss_01_0063__image9181121416206" src="en-us_image_0000001853881857.png"></span></div>
+<ul id="hss_01_0063__ul5104162515512"><li id="hss_01_0063__li1210482513555">Viewing vulnerability scan results<p id="hss_01_0063__p51041025165516"><a name="hss_01_0063__li1210482513555"></a><a name="li1210482513555"></a>In the vulnerability statistics area in the upper part of the <strong id="hss_01_0063__b277214136612">Vulnerabilities</strong> page, view vulnerability scan results. <a href="#hss_01_0063__table13104182512554">Table 2</a> describes related parameters.</p>
+
+<div class="tablenoborder"><a name="hss_01_0063__table13104182512554"></a><a name="table13104182512554"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0063__table13104182512554" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Vulnerability scan parameters</caption><thead align="left"><tr id="hss_01_0063__row1910582515553"><th align="left" class="cellrowborder" valign="top" width="27.26%" id="mcps1.3.4.3.3.2.2.1.2.2.3.1.1"><p id="hss_01_0063__p610519259554">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="72.74000000000001%" id="mcps1.3.4.3.3.2.2.1.2.2.3.1.2"><p id="hss_01_0063__p2105132595512">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0063__row1510517251554"><td class="cellrowborder" valign="top" width="27.26%" headers="mcps1.3.4.3.3.2.2.1.2.2.3.1.1 "><p id="hss_01_0063__p6105325165515">Critical vulnerabilities</p>
+</td>
+<td class="cellrowborder" valign="top" width="72.74000000000001%" headers="mcps1.3.4.3.3.2.2.1.2.2.3.1.2 "><p id="hss_01_0063__p121051025185516">Click the number in <strong id="hss_01_0063__b167761576616">Critical vulnerabilities</strong>. On the slide-out panel displayed, you can view all types of vulnerabilities to be urgently fixed.</p>
+</td>
+</tr>
+<tr id="hss_01_0063__row1310510255556"><td class="cellrowborder" valign="top" width="27.26%" headers="mcps1.3.4.3.3.2.2.1.2.2.3.1.1 "><p id="hss_01_0063__p9105172510558">Unfixed Vulnerabilities</p>
+</td>
+<td class="cellrowborder" valign="top" width="72.74000000000001%" headers="mcps1.3.4.3.3.2.2.1.2.2.3.1.2 "><p id="hss_01_0063__p610562516555">Click the number in <strong id="hss_01_0063__b11482271971">Unfixed Vulnerabilities</strong>. On the slide-out panel displayed, you can view all types of vulnerabilities that are not fixed.</p>
+</td>
+</tr>
+<tr id="hss_01_0063__row17105142565520"><td class="cellrowborder" valign="top" width="27.26%" headers="mcps1.3.4.3.3.2.2.1.2.2.3.1.1 "><p id="hss_01_0063__p510512565518">Servers with Vulnerabilities</p>
+</td>
+<td class="cellrowborder" valign="top" width="72.74000000000001%" headers="mcps1.3.4.3.3.2.2.1.2.2.3.1.2 "><p id="hss_01_0063__p510510259559">Displays the number of servers with vulnerabilities.</p>
+</td>
+</tr>
+<tr id="hss_01_0063__row101057255556"><td class="cellrowborder" valign="top" width="27.26%" headers="mcps1.3.4.3.3.2.2.1.2.2.3.1.1 "><p id="hss_01_0063__p15105162519559">Vulnerabilities Handled Today</p>
+</td>
+<td class="cellrowborder" valign="top" width="72.74000000000001%" headers="mcps1.3.4.3.3.2.2.1.2.2.3.1.2 "><p id="hss_01_0063__p1105112510554">Click the number in <strong id="hss_01_0063__b1287010409716">Vulnerabilities Handled Today</strong>. On the slide-out panel displayed, you can view all types of vulnerabilities that have been handled today.</p>
+</td>
+</tr>
+<tr id="hss_01_0063__row13106132512554"><td class="cellrowborder" valign="top" width="27.26%" headers="mcps1.3.4.3.3.2.2.1.2.2.3.1.1 "><p id="hss_01_0063__p171062252558">Vulnerabilities Handled in Total</p>
+</td>
+<td class="cellrowborder" valign="top" width="72.74000000000001%" headers="mcps1.3.4.3.3.2.2.1.2.2.3.1.2 "><p id="hss_01_0063__p51062025175515">Click the number in <strong id="hss_01_0063__b197022461970">Vulnerabilities Handled in Total</strong>. On the slide-out panel displayed, you can view all types of vulnerabilities that have been handled.</p>
+</td>
+</tr>
+<tr id="hss_01_0063__row610692514551"><td class="cellrowborder" valign="top" width="27.26%" headers="mcps1.3.4.3.3.2.2.1.2.2.3.1.1 "><p id="hss_01_0063__p710622555519">Detectable Vulnerabilities</p>
+</td>
+<td class="cellrowborder" valign="top" width="72.74000000000001%" headers="mcps1.3.4.3.3.2.2.1.2.2.3.1.2 "><p id="hss_01_0063__p14106225115516">Displays the number of vulnerabilities that can be detected by HSS.</p>
+</td>
+</tr>
+<tr id="hss_01_0063__row1610672514554"><td class="cellrowborder" valign="top" width="27.26%" headers="mcps1.3.4.3.3.2.2.1.2.2.3.1.1 "><p id="hss_01_0063__p10106425115515">Scans in Total</p>
+</td>
+<td class="cellrowborder" valign="top" width="72.74000000000001%" headers="mcps1.3.4.3.3.2.2.1.2.2.3.1.2 "><p id="hss_01_0063__p41061025115510">Displays the number of vulnerability scans.</p>
+<p id="hss_01_0063__p101061625205511">Click <span class="uicontrol" id="hss_01_0063__uicontrol577418561573"><b>Scan</b></span> to manually scan for vulnerabilities on servers.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</li><li id="hss_01_0063__li210712514558">Viewing server details and vulnerabilities on servers<ol type="a" id="hss_01_0063__ol5684841903"><li id="hss_01_0063__li166855411008">Click the name of a target server. On the server details slide-out panel displayed, you can view details about the server and vulnerabilities on the server.</li><li id="hss_01_0063__li3871044306">Click the name of a target vulnerability. On the vulnerability details slide-out panel displayed, you can view the CVE details, affected servers, and historical handling records of the vulnerability.</li></ol>
+</li><li id="hss_01_0063__li3107172515510">Viewing handled vulnerabilities or vulnerabilities to be handled<p id="hss_01_0063__p210713257559"><a name="hss_01_0063__li3107172515510"></a><a name="li3107172515510"></a>Above the vulnerability list, select <span class="parmvalue" id="hss_01_0063__parmvalue1111105217917"><b>Unhandled</b></span> or <span class="parmvalue" id="hss_01_0063__parmvalue1611115218916"><b>Handled</b></span> from the vulnerability handling status drop-down list to filter vulnerabilities to be handled or that have been handled.</p>
+</li><li id="hss_01_0063__li8107425175516">Exporting the list of servers with vulnerabilities<p id="hss_01_0063__p1710711250557"><a name="hss_01_0063__li8107425175516"></a><a name="li8107425175516"></a>Click <span class="uicontrol" id="hss_01_0063__uicontrol13837174816315"><b>Export</b></span> above the vulnerability list to export vulnerability data with just one-click. Then, you can view vulnerability information on your local PC.</p>
+<div class="note" id="hss_01_0063__note759193717211"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0063__hss_01_0063_p167371391798">A maximum of 30,000 vulnerabilities can be exported at a time.</p>
+
+</div></div>
+</li></ul>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0140.html">Vulnerability Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0069.html b/docs/hss/umn/hss_01_0069.html
new file mode 100644
index 00000000..d082ad4b
--- /dev/null
+++ b/docs/hss/umn/hss_01_0069.html
@@ -0,0 +1,23 @@
+<a name="hss_01_0069"></a><a name="hss_01_0069"></a>
+
+<h1 class="topictitle1">What Should I Do If Agent Installation Failed?</h1>
+<div id="body1524487075798"><div class="section" id="hss_01_0069__section777510312302"><h4 class="sectiontitle">Symptoms</h4><p id="hss_01_0069__p67589269117">The agent fails to be installed by running commands. The server list page on the console still indicates that the agent is not installed.</p>
+</div>
+<div class="section" id="hss_01_0069__section12685133612302"><h4 class="sectiontitle">Possible Causes</h4><p id="hss_01_0069__p711754612146"></p>
+<ul id="hss_01_0069__ul61287218212"><li id="hss_01_0069__li1612819216210">The SELinux firewall has not been disabled.</li><li id="hss_01_0069__li1922310451725">The root account is not used for installation.</li><li id="hss_01_0069__li1769715121033">The installation command is incorrect.</li><li id="hss_01_0069__li1228119191435">Residual information exists after the agent is uninstalled.</li></ul>
+</div>
+<div class="section" id="hss_01_0069__section7668135743016"><h4 class="sectiontitle">Solution</h4><ol id="hss_01_0069__ol977312267110"><li id="hss_01_0069__li4771126101114"><span>Check whether the SELinux firewall of the server is disabled.</span><p><ul id="hss_01_0069__ul5771172651113"><li id="hss_01_0069__li1777112671112">If it is, go to the next step.</li><li id="hss_01_0069__li15771152651110">If it is not, disable it and install the agent again.</li></ul>
+</p></li><li id="hss_01_0069__li167721226111115"><span>Check whether the installation command is suitable for the server region and OS.</span><p><ol type="a" id="hss_01_0069__ol127711526101119"><li id="hss_01_0069__li577172618115">Switch to the server region.</li><li id="hss_01_0069__li077162601110">Copy the installation commands suitable for your server OS.<ul id="hss_01_0069__ul577117261112"><li id="hss_01_0069__li9771926101119">Run 32-bit installation commands on a 32-bit server.</li><li id="hss_01_0069__li11771162671116">Run 64-bit installation commands on a 64-bit server.</li></ul>
+</li></ol>
+<ul id="hss_01_0069__ul207721126141118"><li id="hss_01_0069__li7772326201111">If yes, go to the next step.</li><li id="hss_01_0069__li277282631117">If the commands you used are incorrect, install the agent again with correct ones.</li></ul>
+</p></li><li id="hss_01_0069__li37721726101120"><span>Check whether the installation was performed by user <strong id="hss_01_0069__b2891218183619">root</strong>.</span><p><ul id="hss_01_0069__ul13772926161120"><li id="hss_01_0069__li377282616110">If yes, go to the next step.</li><li id="hss_01_0069__li1677210268114">If it was not, install the agent again as user <strong id="hss_01_0069__b1546414317561">root</strong>.</li></ul>
+</p></li><li id="hss_01_0069__li15235183511215"><span><a href="hss_01_0119.html">Uninstall the agent</a> as user <strong id="hss_01_0069__b10960251174811">root</strong> and forcibly install it.</span><p><ul id="hss_01_0069__ul7773132611116"><li id="hss_01_0069__li3772122631113">If the installation is successful, no further action is required.</li><li id="hss_01_0069__li8772026191116">If the installation fails, contact technical support.</li></ul>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0321.html">Agent FAQs</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0070.html b/docs/hss/umn/hss_01_0070.html
new file mode 100644
index 00000000..96161a17
--- /dev/null
+++ b/docs/hss/umn/hss_01_0070.html
@@ -0,0 +1,13 @@
+<a name="hss_01_0070"></a><a name="hss_01_0070"></a>
+
+<h1 class="topictitle1">Audit</h1>
+<div id="body1524560451539"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0071.html">HSS Operations Supported by CTS</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0603.html">Querying Real-Time Traces</a></strong><br>
+</li>
+</ul>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0071.html b/docs/hss/umn/hss_01_0071.html
new file mode 100644
index 00000000..b22e83cc
--- /dev/null
+++ b/docs/hss/umn/hss_01_0071.html
@@ -0,0 +1,408 @@
+<a name="hss_01_0071"></a><a name="hss_01_0071"></a>
+
+<h1 class="topictitle1">HSS Operations Supported by CTS</h1>
+<div id="body1524560451540"><p id="hss_01_0071__p8060118"><a href="#hss_01_0071__table24308247181417">Table 1</a> lists HSS operations recorded by CTS.</p>
+
+<div class="tablenoborder"><a name="hss_01_0071__table24308247181417"></a><a name="table24308247181417"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0071__table24308247181417" frame="border" border="1" rules="all"><caption><b>Table 1 </b>HSS operations that can be recorded by CTS</caption><thead align="left"><tr id="hss_01_0071__row23938145181417"><th align="left" class="cellrowborder" valign="top" width="42.734273427342735%" id="mcps1.4.2.2.4.1.1"><p id="hss_01_0071__p66527987181455">Operation</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="23.932393239323936%" id="mcps1.4.2.2.4.1.2"><p id="hss_01_0071__p20057853181455">Resource Type</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="33.33333333333333%" id="mcps1.4.2.2.4.1.3"><p id="hss_01_0071__p14073416181455">Trace Name</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0071__row58092716181417"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p070415313576">Unignoring a port</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p41938876181455">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p20215184875717">notIgnorePortStatus</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row66834545181417"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p1670413316579">Ignoring a port</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p58720953181455">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p11215748145710">ignorePortStatus</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row29947516181417"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p2704231195716">Unignoring configuration check items</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p35652233181455">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p62151948105716">notIgnoreCheckRuleStat</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row10571659181417"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p12704183135715">Ignoring configuration check items</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p40357412181455">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p5215134875710">ignoreCheckRuleStat</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row64234896111241"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p370415315579">Retrying a baseline check</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p1490746111241">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p2021594816571">runBaselineDetect</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row43273696111250"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p117041031175717">Unbinding quota</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p48230284111250">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p162151348195712">cancelHostsQuota</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row6201522111247"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p197043318577">Disabling container protection</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p20218781111247">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p32151648145719">closeContainerProtectStatus</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row1976411501226"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p1970412319572">Enabling container protection</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p15761175212210">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p221534819578">openContainerProtectStatus</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row671811472317"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p0704731135720">Unblocking an IP address</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p97186146233">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p3215174817577">changeBlockedIp</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row98251614619"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p14704931165712">Handling an event</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p1748112111363">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p821510482570">changeEvent</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row181166592056"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p070463114576">Canceling the isolation of a file</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p134822011266">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p11215174815571">changeIsolatedFile</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row13799115464120"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p5704531115711">Removing an alarm from whitelist</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p147991554134120">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p421574885715">removeAlarmWhiteList</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row3617125113417"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p37041631185719">Adding <span id="hss_01_0071__text184267348108">Login Whitelist</span></p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p861715513418">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p20215104845715">addLoginWhiteList</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row1973614482413"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p177041231155711">Removing <span id="hss_01_0071__text2080594218583">Login Whitelist</span></p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p373744864119">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p421564812574">removeLoginWhiteList</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row1373864712315"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p11704193165714">Adding a server group</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p1273864792318">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p122151448125710">addHostsGroup</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row10105164552312"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p1570493195716">Adding servers to a group</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p1410574522314">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p162151148135712">associateHostsGroup</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row57086514520"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p1704153118577">Modifying a server group</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p10313355112411">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p1721564813578">changeHostsGroup</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row1564615154516"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p12704131125719">Deleting a server group</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p17314145552416">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p721574817575">deleteHostsGroup</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row19561820513"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p16704183119571">Disabling HSS</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p171143419537">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p11215104805714">closeHostsProtectStatus</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row13975202011519"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p1570417317575">Enabling HSS</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p3114944533">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p421544885719">openHostsProtectStatus</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row1338052305114"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p13704113118571">Uninstalling an agent</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p1611474145315">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p13215174812578">uninstallAgents</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row128372665112"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p97051731145715">Scanning an image</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p1211454185315">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p1821534818572">runImageScan</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row928616429512"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p670516317571">Synchronizing the image list from SWR</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p11149465310">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p17215184875713">runImageSynchronizeTask</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row2096054414514"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p14705143110579">Updating and scanning an SWR image</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p51141043535">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p142155483573">runSwrImageScan</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row17786010135120"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p1477717813588">Performing a security check again</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p2011415420539">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p10622171215599">resetRiskScore</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row3514511510"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p107771884582">Adding a policy group</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p1334454644510">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p136228121591">addPolicyGroup</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row204888275459"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p11777283587">Removing a policy group</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p18488527114516">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p12622012195918">deletePolicyGroup</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row206323256459"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p37771188589">Applying a policy group</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p16322251452">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p10623101218595">deployPolicyGroup</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row194242234518"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p1277713818585">Modifying a policy</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p94252284515">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p86237123595">modifyPolicyDetail</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row7834885111"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p87777885818">Modifying a policy group</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p18828148144516">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p76231012175911">modifyPolicyGroup</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row598765315519"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p37773805819">Disabling automatic isolation and killing</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p16984185017459">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p6623171285915">closeAutoKillVirusStatus</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row98311056175110"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p1177711885818">Enabling automatic isolation and killing</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p567118520454">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p562312122595">openAutoKillVirusStatus</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row1334912261464"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p57771818583">Configure common login IP addresses</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p1269075144920">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p13623111295914">modifyLoginCommonIp</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row1480217308474"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p877715819582">Configure common login locations</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p1169010512491">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p162318125592">modifyLoginCommonLocation</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row1933082974716"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p377714816584">Configuring the SSH login whitelist</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p166911657494">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p1362310123592">modifyLoginWhiteIp</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row915517161475"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p1577719814588">Fixing a vulnerability</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p196913512491">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p362361218597">changeVulStatus</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row44181548114720"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p147775812588">Adding a protected directory</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p86911952491">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p11623171219592">addHostProtectDirInfo</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row1260422724710"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p07771186584">Adding a privileged process</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p9691125154911">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p166231712175917">addPrivilegedProcessInfo</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row1553143415481"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p1277714810581">Adding a scheduled protection setting</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p16692115154916">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p1362314126592">addTimingOffConfigInfo</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row127881452174815"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p13777188580">Removing a remote backup server</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p1569213513492">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p3623212145913">deleteBackupHostInfo</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row15212145118480"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p07771281587">Removing a protected directory</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p166926520494">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p662301216598">deleteHostProtectDirInfo</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row326212455487"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p87778855819">Removing a privileged process</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p1369215174913">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p362311126591">deletePrivilegedProcessInfo</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row18422104916481"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p117778819587">Deleting scheduled protection settings</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p1692165124920">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p13623812195918">deleteTimingOffConfigInfo</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row161759470484"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p17777987584">Configuring the scheduled protection period</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p10693135144917">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p16234126594">setDateOffConfigInfo</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row18667143934815"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p1677718825816">Modifying the status of a protected directory</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p96931584915">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p462312125591">setProtectDirSwitchInfo</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row144041743124812"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p147782835817">Enabling or disabling dynamic WTP</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p169317554919">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p26231112115913">setRaspSwitch</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row11539184112485"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p1877888145816">Configuring a remote backup server</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p86937511493">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p4623612175915">setRemoteBackupInfo</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row92014388483"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p15778682589">Enabling or disabling scheduled protection</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p969320515497">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p10623161213599">setTimingOffSwitchInfo</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row5452143619485"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p1577814835818">Disabling WTP</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p66931751492">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p16231612135915">closeWtpProtectionStatus</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row164471532154815"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p15778138145817">Enabling WTP</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p269320584917">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p26234123594">openWtpProtectionStatus</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row1736214145472"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p2778138105820">Modifying a remote backup server</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p269411594918">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p66231612185910">updateBackupHostInfo</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row123182345415"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p577888175816">Modifying a protected directory</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p07594545420">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p19623121295911">updateHostProtectDirInfo</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row8210930135418"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p197783845813">Modifying a privileged process</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p37684518546">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p262315123594">updatePrivilegedProcessInfo</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row1788617294547"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p1577816819585">Modifying the Tomcat bin directory</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p3626516558">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p1623912175916">updateRaspPathInfo</p>
+</td>
+</tr>
+<tr id="hss_01_0071__row1155332705420"><td class="cellrowborder" valign="top" width="42.734273427342735%" headers="mcps1.4.2.2.4.1.1 "><p id="hss_01_0071__p13778286585">Modifying the scheduled protection period</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.932393239323936%" headers="mcps1.4.2.2.4.1.2 "><p id="hss_01_0071__p196213514557">hss</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.4.2.2.4.1.3 "><p id="hss_01_0071__p062317126596">updateTimingOffConfigInfo</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0070.html">Audit</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0087.html b/docs/hss/umn/hss_01_0087.html
new file mode 100644
index 00000000..b3f9d709
--- /dev/null
+++ b/docs/hss/umn/hss_01_0087.html
@@ -0,0 +1,19 @@
+<a name="hss_01_0087"></a><a name="hss_01_0087"></a>
+
+<h1 class="topictitle1">Viewing WTP Events</h1>
+<div id="body0000001122827990"><p id="hss_01_0087__p1441112119916">Once static WTP is enabled, the <span id="hss_01_0087__text2897154921710">HSS</span> service will comprehensively check protected directories you specified. You can check records about detected tampering of host protection files.</p>
+<div class="section" id="hss_01_0087__section112495541074"><h4 class="sectiontitle">Constraints</h4><p id="hss_01_0087__hss_01_0106_p15131401586">Only the servers that are protected by the HSS WTP edition support the operations described in this section.</p>
+</div>
+<div class="section" id="hss_01_0087__section2256777914731"><h4 class="sectiontitle">Prerequisites</h4><ul id="hss_01_0087__ul6266552014741"><li id="hss_01_0087__li39677673161121"><span class="parmname" id="hss_01_0087__parmname2136432061101025"><b>Agent Status</b></span> of the server is <span class="parmvalue" id="hss_01_0087__parmvalue260555303101025"><b>Online</b></span>, and its <span class="parmname" id="hss_01_0087__parmname404638472101025"><b>WTP Status</b></span> is <span class="parmvalue" id="hss_01_0087__parmvalue1149890853101025"><b>Enabled</b></span>.</li><li id="hss_01_0087__li1874134672015">WTP is enabled.</li></ul>
+</div>
+<div class="section" id="hss_01_0087__section17750121241610"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0087__ol1836313111217"><li id="hss_01_0087__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0087__li830314169200"><span>Click <span><img id="hss_01_0087__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0087__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0087__hss_01_0571_b14857117404"><span id="hss_01_0087__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0087__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0087__li36576201238"><span>Choose <strong id="hss_01_0087__b12867195120350">Prevention</strong> &gt; <strong id="hss_01_0087__b022975563511">Web Tamper Protection</strong> and click <strong id="hss_01_0087__b17666181003515">Events</strong> to view the tampering records of protected files on servers.</span><p><div class="p" id="hss_01_0087__p1461516174143"><div class="fignone" id="hss_01_0087__fig92379221507"><span class="figcap"><b>Figure 1 </b>Events</span><br><span><img id="hss_01_0087__image1338925873814" src="en-us_image_0000001854995385.png"></span></div>
+</div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0153.html">WTP</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0088.html b/docs/hss/umn/hss_01_0088.html
new file mode 100644
index 00000000..8ee03e75
--- /dev/null
+++ b/docs/hss/umn/hss_01_0088.html
@@ -0,0 +1,23 @@
+<a name="hss_01_0088"></a><a name="hss_01_0088"></a>
+
+<h1 class="topictitle1">Managing SWR Shared Images</h1>
+<div id="body0000001435818876"><p id="hss_01_0088__p184853251554">The images in the shared image repository are from SWR. You can view details about all shared images.</p>
+<div class="section" id="hss_01_0088__section1920201514181"><h4 class="sectiontitle">Constraints</h4><ul id="hss_01_0088__hss_01_0299_hss_01_0298_ul325716561917"><li id="hss_01_0088__hss_01_0299_hss_01_0298_li1029841412492">Only the HSS container edition supports this function.</li></ul>
+<ul id="hss_01_0088__hss_01_0299_hss_01_0298_ul583913714494"><li id="hss_01_0088__hss_01_0299_hss_01_0298_li138399734912">Security scans can be performed only on Linux images.</li></ul>
+</div>
+<div class="section" id="hss_01_0088__section012763154315"><h4 class="sectiontitle">Viewing SWR Shared Images</h4><ol id="hss_01_0088__ol13116203913439"><li id="hss_01_0088__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0088__li830314169200"><span>Click <span><img id="hss_01_0088__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0088__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0088__hss_01_0571_b14857117404"><span id="hss_01_0088__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0088__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0088__li9991028162612"><span>In the navigation pane, choose <strong id="hss_01_0088__b209238763112">Asset Management</strong> &gt; <strong id="hss_01_0088__b10923978312">Containers &amp; Quota</strong>.</span><p><div class="note" id="hss_01_0088__note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0088__hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select the target enterprise project to view or operate the asset and detection information.</p>
+</div></div>
+</p></li><li id="hss_01_0088__li1827014199591"><span>Click the <strong id="hss_01_0088__b12906202013316">Container Images</strong> tab and click <strong id="hss_01_0088__b662511257315">SWR shared image</strong> to view the shared image list.</span><p><div class="p" id="hss_01_0088__p1270124817143">You can view the version, size, organization, security risks, and owner of a shared image.<div class="fignone" id="hss_01_0088__fig1698781881414"><span class="figcap"><b>Figure 1 </b>Viewing shared images</span><br><span><img id="hss_01_0088__en-us_topic_0000001568322101_image3389151514108" src="en-us_image_0000001619472165.png"></span></div>
+<ul id="hss_01_0088__ul1412982274918"><li id="hss_01_0088__li71291622204918">Updating a shared image<p id="hss_01_0088__p14123125614913"><a name="hss_01_0088__li71291622204918"></a><a name="li71291622204918"></a>Click <strong id="hss_01_0088__b18138125911013">Update Shared Images from SWR</strong> to update the shared image list.</p>
+</li><li id="hss_01_0088__li67001325104911">Filtering images of the latest version<p id="hss_01_0088__p5810111215506"><a name="hss_01_0088__li67001325104911"></a><a name="li67001325104911"></a>If you select <strong id="hss_01_0088__b1169022861117">Display latest image versions only</strong>, you can filter the latest images of all images.</p>
+</li></ul>
+</div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0297.html">Container Images</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0091.html b/docs/hss/umn/hss_01_0091.html
new file mode 100644
index 00000000..2df902e5
--- /dev/null
+++ b/docs/hss/umn/hss_01_0091.html
@@ -0,0 +1,20 @@
+<a name="hss_01_0091"></a><a name="hss_01_0091"></a>
+
+<h1 class="topictitle1">How Do I Check the User IP address of a Remote Login?</h1>
+<div id="body1585817411742"><div class="section" id="hss_01_0091__section132244113512"><h4 class="sectiontitle">Alarm Policies</h4><p id="hss_01_0091__p6722054151414">The remote login detection function checks for remote logins into your servers in real time. HSS generates an alarm if it detects logins from locations other than the common login locations you set.</p>
+</div>
+<div class="section" id="hss_01_0091__section1931018302513"><h4 class="sectiontitle">Viewing Remote Login Records on the Console</h4><ol id="hss_01_0091__ol9280143121212"><li id="hss_01_0091__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0091__li4386115111109"><span>In the navigation pane on the left, choose <strong id="hss_01_0091__b8441162312209">Detection</strong> &gt; <strong id="hss_01_0091__b18441132312018">Alarms</strong>, and click <strong id="hss_01_0091__b154418234205">Server Alarms</strong>.</span></li><li id="hss_01_0091__li124332415585"><span>In the <strong id="hss_01_0091__b47912197503">Event Types</strong> area, Choose <strong id="hss_01_0091__b1779101995018">Abnormal User Behavior</strong> &gt; <strong id="hss_01_0091__b1179419175018">Abnormal logins</strong>, and click <strong id="hss_01_0091__b57915195505">Remote Login</strong>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0091__section1850524119402"><h4 class="sectiontitle">Locally Viewing Remote Login Records</h4><ul id="hss_01_0091__ul179626131114"><li id="hss_01_0091__li196212131113">Linux<p id="hss_01_0091__p829413509409"><a name="hss_01_0091__li196212131113"></a><a name="li196212131113"></a>For Linux servers, you can view logs in <strong id="hss_01_0091__b11383143184117">/var/log/secure</strong> and <strong id="hss_01_0091__b10301101632519">/var/log/message</strong> directories, or run the <strong id="hss_01_0091__b93011716192516">last</strong> command to check whether there are abnormal login records.</p>
+</li><li id="hss_01_0091__li135654307114">Windows<div class="p" id="hss_01_0091__p153161936131111"><a name="hss_01_0091__li135654307114"></a><a name="li135654307114"></a>To view server login logs, perform the following steps:<ol id="hss_01_0091__ol163245411012"><li id="hss_01_0091__li232444111118">Open <strong id="hss_01_0091__b171521446192816">Control Panel</strong>.</li><li id="hss_01_0091__li12841855219">Choose <strong id="hss_01_0091__b11825102012914">Administrative Tools</strong> &gt; <strong id="hss_01_0091__b1912202319296">Event Viewer</strong>. The <strong id="hss_01_0091__b77711226112915">Event Viewer</strong> page is displayed.</li><li id="hss_01_0091__li2039861414417">In the navigation tree on the left, choose <strong id="hss_01_0091__b1224894519">Windows Logs</strong> &gt; <strong id="hss_01_0091__b5162211195118">Security</strong>. The <strong id="hss_01_0091__b1714081755120">Security</strong> page is displayed.</li><li id="hss_01_0091__li1261111511755">In the navigation tree on the right, choose <strong id="hss_01_0091__b14460135615513">Security</strong> &gt; <strong id="hss_01_0091__b81504591519">Filter Current Log</strong>. The <strong id="hss_01_0091__b206369218528">Filter Current Log</strong> dialog box is displayed.</li><li id="hss_01_0091__li1969019194710">On the <strong id="hss_01_0091__b97701735105210">Filter</strong> tab, locate the <strong id="hss_01_0091__b238112531521">&lt;All Event IDs&gt;</strong>.</li><li id="hss_01_0091__li6137230395">Enter the login event ID and click <strong id="hss_01_0091__b4362202329">OK</strong> to filter the target login events.<ul id="hss_01_0091__ul0696165514920"><li id="hss_01_0091__li11696155517915">4624: ID of successful login events</li><li id="hss_01_0091__li135382099101">4625: ID of failed login events</li></ul>
+</li></ol>
+</div>
+</li></ul>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0188.html">Abnormal Logins</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0095.html b/docs/hss/umn/hss_01_0095.html
new file mode 100644
index 00000000..e3164c9e
--- /dev/null
+++ b/docs/hss/umn/hss_01_0095.html
@@ -0,0 +1,17 @@
+<a name="hss_01_0095"></a><a name="hss_01_0095"></a>
+
+<h1 class="topictitle1">How Do I Set a Proper Password Complexity Policy in a Windows OS?</h1>
+<div id="body1529656337979"><p id="hss_01_0095__p17274171468">A proper password complexity policy would be: eight characters for the length of a password and at least three types of the following characters used: uppercase letters, lowercase letters, digits, and special characters.</p>
+<p id="hss_01_0095__p197781037389">Perform the following steps to set a local security policy:</p>
+<ol id="hss_01_0095__ol587263194"><li id="hss_01_0095__li11872431796"><span>Log in to the OS as user <strong id="hss_01_0095__b1589823113594">Administrator</strong>. Choose <strong id="hss_01_0095__b19641317123018">Start</strong> &gt; <strong id="hss_01_0095__b46581712301">Control Panel</strong> &gt; <strong id="hss_01_0095__b66631711305">System and Security</strong> &gt; <strong id="hss_01_0095__b76751717302">Administrative Tools</strong>. In the <strong id="hss_01_0095__b1467121718304">Administrative Tools</strong> folder, double-click <strong id="hss_01_0095__b1868141713305">Local Security Policy</strong>.</span><p><div class="note" id="hss_01_0095__note61951855201015"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0095__ul63261322134411"><li id="hss_01_0095__li113261422154418">Alternatively, click <strong id="hss_01_0095__b1154194119338">Start</strong> and type <strong id="hss_01_0095__b215454103313">secpol.msc</strong> in the <strong id="hss_01_0095__b161541041143313">Search programs and files</strong> box.</li><li id="hss_01_0095__li1431324164410">When a policy is applied to a server, the domain policy takes precedence over the locally defined policy on the server.</li></ul>
+</div></div>
+</p></li><li id="hss_01_0095__li41521513151312"><span>Choose <strong id="hss_01_0095__b01371333133020">Account Policies</strong> &gt; <strong id="hss_01_0095__b413843312305">Password Policy</strong> and perform the following operations.</span><p><ul id="hss_01_0095__ul16732131121411"><li id="hss_01_0095__li18321713111411">Double-click <strong id="hss_01_0095__b967373573019">Password must meet complexity requirements</strong>, select <strong id="hss_01_0095__b17674163583019">Enable</strong>, and click <strong id="hss_01_0095__b12675173543014">OK</strong> to enable the policy.</li><li id="hss_01_0095__li1332161310147">Double-click <strong id="hss_01_0095__b96706373306">Minimum password length</strong>, enter the length (greater than or equal to <strong id="hss_01_0095__b19672143723016">8</strong>), and click <strong id="hss_01_0095__b46721737163018">OK</strong> to set the policy.</li></ul>
+<p id="hss_01_0095__p6765111371614"></p>
+</p></li><li id="hss_01_0095__li423114334171"><span>Run the <strong id="hss_01_0095__b157961611328">gpupdate</strong> command to refresh your system settings. After the refresh succeeded, the settings will take effect in the system.</span></li></ol>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0165.html">Unsafe Settings</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0096.html b/docs/hss/umn/hss_01_0096.html
new file mode 100644
index 00000000..2683f9bc
--- /dev/null
+++ b/docs/hss/umn/hss_01_0096.html
@@ -0,0 +1,31 @@
+<a name="hss_01_0096"></a><a name="hss_01_0096"></a>
+
+<h1 class="topictitle1">What Is the Default Agent Installation Path?</h1>
+<div id="body1592298144531"><p id="hss_01_0096__p8060118">The agent installation paths on servers running the Linux or Windows OS cannot be customized. <a href="#hss_01_0096__table168115351756">Table 1</a> describes the default paths.</p>
+
+<div class="tablenoborder"><a name="hss_01_0096__table168115351756"></a><a name="table168115351756"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0096__table168115351756" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Default agent installation paths</caption><thead align="left"><tr id="hss_01_0096__row136811835251"><th align="left" class="cellrowborder" valign="top" width="25.86%" id="mcps1.3.2.2.3.1.1"><p id="hss_01_0096__p168103510511">OS</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="74.14%" id="mcps1.3.2.2.3.1.2"><p id="hss_01_0096__p768112359510">Default Installation Path</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0096__row15681203518512"><td class="cellrowborder" valign="top" width="25.86%" headers="mcps1.3.2.2.3.1.1 "><p id="hss_01_0096__p136817355513">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.14%" headers="mcps1.3.2.2.3.1.2 "><p id="hss_01_0096__p6681735456">/usr/local/hostguard/</p>
+</td>
+</tr>
+<tr id="hss_01_0096__row15681835958"><td class="cellrowborder" valign="top" width="25.86%" headers="mcps1.3.2.2.3.1.1 "><p id="hss_01_0096__p5681535250">Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.14%" headers="mcps1.3.2.2.3.1.2 "><p id="hss_01_0096__p15681123515516">C:\Program Files\HostGuard</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0321.html">Agent FAQs</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0097.html b/docs/hss/umn/hss_01_0097.html
new file mode 100644
index 00000000..a037e958
--- /dev/null
+++ b/docs/hss/umn/hss_01_0097.html
@@ -0,0 +1,21 @@
+<a name="hss_01_0097"></a><a name="hss_01_0097"></a>
+
+<h1 class="topictitle1">What Do I Do If the Account Cracking Prevention Function Does Not Take Effect on Some Accounts for Linux Servers?</h1>
+<div id="body1531812111092"><div class="section" id="hss_01_0097__section15772642163312"><h4 class="sectiontitle">Possible Causes</h4><p id="hss_01_0097__p3511144519332">The SSHD service in the host system does not depend on <strong id="hss_01_0097__b61109324515">libwrap.so</strong>.</p>
+<div class="note" id="hss_01_0097__note1520611815444"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0097__p1620738154418">As a free software library, libwrap implements the universal TCP Wrapper function. Any daemon that contains <strong id="hss_01_0097__b126191726162317">libwrap.so</strong> can use the rules in files <strong id="hss_01_0097__b155409433237">/etc/hosts.allow</strong> and <strong id="hss_01_0097__b11801450142316">/etc/hosts.deny</strong> to perform simple access control on the host.</p>
+</div></div>
+</div>
+<div class="section" id="hss_01_0097__section779832473311"><h4 class="sectiontitle">Solution</h4><p id="hss_01_0097__p32220201218">Log in to the server and install the <span id="hss_01_0097__text2060193472217">HSS</span> agent. Then run the following command:</p>
+<p id="hss_01_0097__p112221620112119"><strong id="hss_01_0097__b1025620409324">sh /usr/local/hostguard/conf/config_ssh_xinetd.sh</strong>.</p>
+</div>
+<div class="section" id="hss_01_0097__section2449155815313"><h4 class="sectiontitle">Affected Image Versions</h4><ul id="hss_01_0097__ul1722315406297"><li id="hss_01_0097__li122324082910">The following are Gentoo images that have the problem:<ul id="hss_01_0097__ul1813918522294"><li id="hss_01_0097__li722318406298">Gentoo Linux 17.0 64bit (40 GB)</li><li id="hss_01_0097__li1322324072917">Gentoo Linux 13.0 64bit (40 GB)</li></ul>
+</li><li id="hss_01_0097__li1022454019293">The following are OpenSUSE images that have the problem:<ul id="hss_01_0097__ul115000558294"><li id="hss_01_0097__li322444015296">OpenSUSE 42.2 64bit (40 GB)</li><li id="hss_01_0097__li1222424022910">OpenSUSE 13.2 64bit (40 GB)</li></ul>
+</li></ul>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0038.html">Brute-force Attack Defense</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0099.html b/docs/hss/umn/hss_01_0099.html
new file mode 100644
index 00000000..a03cf093
--- /dev/null
+++ b/docs/hss/umn/hss_01_0099.html
@@ -0,0 +1,111 @@
+<a name="hss_01_0099"></a><a name="hss_01_0099"></a>
+
+<h1 class="topictitle1">How Do I Check HSS Log Files?</h1>
+<div id="body0000001169921753"><div class="section" id="hss_01_0099__section18872142123114"><h4 class="sectiontitle">Log Path</h4><p id="hss_01_0099__p105711719172212">The following table describes log files and their paths.</p>
+
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0099__table14932168797" frame="border" border="1" rules="all"><thead align="left"><tr id="hss_01_0099__row59321388920"><th align="left" class="cellrowborder" valign="top" width="20.27%" id="mcps1.3.1.3.1.4.1.1"><p id="hss_01_0099__p20932681498">OS</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="36.54%" id="mcps1.3.1.3.1.4.1.2"><p id="hss_01_0099__p149321081598">Log Directory</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="43.19%" id="mcps1.3.1.3.1.4.1.3"><p id="hss_01_0099__p73571431586">Log File</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0099__row1493312813910"><td class="cellrowborder" valign="top" width="20.27%" headers="mcps1.3.1.3.1.4.1.1 "><p id="hss_01_0099__p39331281594">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" width="36.54%" headers="mcps1.3.1.3.1.4.1.2 "><p id="hss_01_0099__p952417552521">/var/log/hostguard/</p>
+</td>
+<td class="cellrowborder" valign="top" width="43.19%" headers="mcps1.3.1.3.1.4.1.3 "><ul id="hss_01_0099__ul17575957171118"><li id="hss_01_0099__li47041719161215">hostwatch.log</li><li id="hss_01_0099__li16214152131217">hostguard.log</li><li id="hss_01_0099__li292152719127">upgrade.log</li><li id="hss_01_0099__li028683319128">hostguard-service.log</li><li id="hss_01_0099__li14195381123">config_tool.log</li><li id="hss_01_0099__li19834444121215">engine.log</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0099__row10516114714236"><td class="cellrowborder" valign="top" width="20.27%" headers="mcps1.3.1.3.1.4.1.1 "><p id="hss_01_0099__p207991953102319">Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="36.54%" headers="mcps1.3.1.3.1.4.1.2 "><p id="hss_01_0099__p154175400197">C:\Program Files\HostGuard\log</p>
+</td>
+<td class="cellrowborder" valign="top" width="43.19%" headers="mcps1.3.1.3.1.4.1.3 "><ul id="hss_01_0099__ul77999537237"><li id="hss_01_0099__li1079914536239">hostwatch.log</li><li id="hss_01_0099__li16799553182310">hostguard.log</li><li id="hss_01_0099__li779925312235">upgrade.log</li></ul>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+<div class="section" id="hss_01_0099__section81643572311"><h4 class="sectiontitle">Log Retention</h4>
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0099__table17431634119" frame="border" border="1" rules="all"><thead align="left"><tr id="hss_01_0099__row11744466416"><th align="left" class="cellrowborder" valign="top" width="17.24%" id="mcps1.3.2.2.1.6.1.1"><p id="hss_01_0099__p4744186164112">Log File</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="26.93%" id="mcps1.3.2.2.1.6.1.2"><p id="hss_01_0099__p195361534218">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="14.69%" id="mcps1.3.2.2.1.6.1.3"><p id="hss_01_0099__p1974436154113">Maximum Size</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="25.080000000000002%" id="mcps1.3.2.2.1.6.1.4"><p id="hss_01_0099__p121919325436">Retained File</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="16.06%" id="mcps1.3.2.2.1.6.1.5"><p id="hss_01_0099__p103151733191911">Retention Period</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0099__row137441567412"><td class="cellrowborder" valign="top" width="17.24%" headers="mcps1.3.2.2.1.6.1.1 "><p id="hss_01_0099__p1490193944019">hostwatch.log</p>
+</td>
+<td class="cellrowborder" valign="top" width="26.93%" headers="mcps1.3.2.2.1.6.1.2 "><p id="hss_01_0099__p953715174215">Records logs generated during the running of daemon processes.</p>
+</td>
+<td class="cellrowborder" valign="top" width="14.69%" headers="mcps1.3.2.2.1.6.1.3 "><p id="hss_01_0099__p1474418624119">10 MB</p>
+</td>
+<td class="cellrowborder" valign="top" width="25.080000000000002%" headers="mcps1.3.2.2.1.6.1.4 "><p id="hss_01_0099__p27955188207">Latest eight files</p>
+</td>
+<td class="cellrowborder" rowspan="6" valign="top" width="16.06%" headers="mcps1.3.2.2.1.6.1.5 "><p id="hss_01_0099__p1859515101218">Until the HSS agent is uninstalled</p>
+</td>
+</tr>
+<tr id="hss_01_0099__row177443674116"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.6.1.1 "><p id="hss_01_0099__p574446114118">hostguard.log</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.6.1.2 "><p id="hss_01_0099__p1953161524217">Records logs generated during the running of working processes.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.6.1.3 "><p id="hss_01_0099__p137441963418">10 MB</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.6.1.4 "><p id="hss_01_0099__p220242019215">Latest eight files</p>
+</td>
+</tr>
+<tr id="hss_01_0099__row1084813547437"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.6.1.1 "><p id="hss_01_0099__p11525851104117">upgrade.log</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.6.1.2 "><p id="hss_01_0099__p1153191510427">Records logs generated during version upgrading.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.6.1.3 "><p id="hss_01_0099__p13483183314438">10 MB</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.6.1.4 "><p id="hss_01_0099__p865793482214">Latest eight files</p>
+</td>
+</tr>
+<tr id="hss_01_0099__row9937133516419"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.6.1.1 "><p id="hss_01_0099__p1560135111419">hostguard-service.log</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.6.1.2 "><p id="hss_01_0099__p353151517428">Records logs (scripts) generated when the service starts.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.6.1.3 "><p id="hss_01_0099__p89372035154112">100 kB</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.6.1.4 "><p id="hss_01_0099__p771920556912">Latest two logs</p>
+</td>
+</tr>
+<tr id="hss_01_0099__row149171324297"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.6.1.1 "><p id="hss_01_0099__p4928028692">config_tool.log</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.6.1.2 "><p id="hss_01_0099__p139181024697">Records logs (programs) generated when the service starts.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.6.1.3 "><p id="hss_01_0099__p1191810241911">10 kB</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.6.1.4 "><p id="hss_01_0099__p5918924795">Latest two logs</p>
+</td>
+</tr>
+<tr id="hss_01_0099__row63493313428"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.6.1.1 "><p id="hss_01_0099__p18597191334114">engine.log</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.6.1.2 "><p id="hss_01_0099__p1754191515423">Records logs generated when the service exits.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.6.1.3 "><p id="hss_01_0099__p194313411392">10 kB</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.6.1.4 "><p id="hss_01_0099__p1725805812918">Latest two logs</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0101.html">Others</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0101.html b/docs/hss/umn/hss_01_0101.html
new file mode 100644
index 00000000..901cc855
--- /dev/null
+++ b/docs/hss/umn/hss_01_0101.html
@@ -0,0 +1,21 @@
+<a name="hss_01_0101"></a><a name="hss_01_0101"></a>
+
+<h1 class="topictitle1">Others</h1>
+<div id="body0000001169921751"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0269.html">How Do I Use the Windows Remote Desktop Connection Tool to Connect to a Server?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0099.html">How Do I Check HSS Log Files?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0103.html">How Do I Enable Logging for Login Failures?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0117.html">How Do I Clear an Alarm on Critical File Changes?</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0032.html">FAQs</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0103.html b/docs/hss/umn/hss_01_0103.html
new file mode 100644
index 00000000..5f9f7e0d
--- /dev/null
+++ b/docs/hss/umn/hss_01_0103.html
@@ -0,0 +1,22 @@
+<a name="hss_01_0103"></a><a name="hss_01_0103"></a>
+
+<h1 class="topictitle1">How Do I Enable Logging for Login Failures?</h1>
+<div id="body0000001123241976"><div class="section" id="hss_01_0103__section173885174619"><h4 class="sectiontitle">MySQL</h4><p id="hss_01_0103__p185059312710">The account hacking prevention function for Linux supports MySQL 5.6 and 5.7. Perform the following steps to enable logging for login failure:</p>
+<ol id="hss_01_0103__ol1424911484266"><li id="hss_01_0103__li424994811261"><span>Log in to the host as the <strong id="hss_01_0103__b191487273615">root</strong> user.</span></li><li id="hss_01_0103__li324914482263"><span>Run the following command to query the <strong id="hss_01_0103__b14232421164814">log_warnings</strong> value:</span><p><p id="hss_01_0103__p259821719276"><b><span class="cmdname" id="hss_01_0103__cmdname204115924217">show global variables like 'log_warnings</span></b>'</p>
+</p></li><li id="hss_01_0103__li162501548152619"><span>Run the following command to change the <strong id="hss_01_0103__b143935403010949">log_warnings</strong> value:</span><p><p id="hss_01_0103__p155981317122710"><b><span class="cmdname" id="hss_01_0103__cmdname43423196427">set global log_warnings=2</span></b></p>
+</p></li><li id="hss_01_0103__li76463120421"><span>Modify the configuration file.</span><p><ul id="hss_01_0103__ul20426104504218"><li id="hss_01_0103__li3849184719427">For a Linux OS, modify the <strong id="hss_01_0103__b102161814134112">my.conf</strong> file by adding <strong id="hss_01_0103__b0216101415416">log_warnings=2</strong> to <strong id="hss_01_0103__b112179149412">[MySQLd]</strong>.</li></ul>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0103__section1955712345503"><h4 class="sectiontitle">vsftp</h4><p id="hss_01_0103__p4923871586">This section shows you how to enable logging for vsftp login failures.</p>
+<ol id="hss_01_0103__ol268161132619"><li id="hss_01_0103__li86821192610"><span>Modify the configuration file (for example, <strong id="hss_01_0103__b207026292010949">/etc/vsftpd.conf</strong>) and set the following parameters:</span><p><p id="hss_01_0103__p11826633124510"><b><span class="cmdname" id="hss_01_0103__cmdname9626923112612">vsftpd_log_file=log/file/path</span></b></p>
+<p id="hss_01_0103__p17613107164519"><b><span class="cmdname" id="hss_01_0103__cmdname46281236267">dual_log_enable=YES</span></b></p>
+</p></li><li id="hss_01_0103__li1469011142618"><span>Restart the vsftp service. If the setting is successful, log records shown in the logs shown in <a href="#hss_01_0103__fig167291123485">Figure 1</a> will be returned when you log in to vsftp.</span><p><div class="fignone" id="hss_01_0103__fig167291123485"><a name="hss_01_0103__fig167291123485"></a><a name="fig167291123485"></a><span class="figcap"><b>Figure 1 </b>Log Records</span><br><span><img id="hss_01_0103__image1272931215486" src="en-us_image_0000001568517685.png"></span></div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0101.html">Others</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0106.html b/docs/hss/umn/hss_01_0106.html
new file mode 100644
index 00000000..2a9e7011
--- /dev/null
+++ b/docs/hss/umn/hss_01_0106.html
@@ -0,0 +1,69 @@
+<a name="hss_01_0106"></a><a name="hss_01_0106"></a>
+
+<h1 class="topictitle1">Configuring Remote Backup</h1>
+<div id="body1591152985278"><p id="hss_01_0106__p7256113918013">By default, HSS backs up the files from the protected directories (excluding specified subdirectories and file types) to the local backup directory you specified when adding protected directories. To protect the local backup files from tampering, you must enable the remote backup function.</p>
+<p id="hss_01_0106__p594818482238">If the file and backup directory on the local server become invalid, you can manually obtain the backup file from the remote backup server to restore the tampered websites.</p>
+<div class="section" id="hss_01_0106__section112495541074"><h4 class="sectiontitle">Constraints</h4><p id="hss_01_0106__p15131401586">Only the servers that are protected by the HSS WTP edition support the operations described in this section.</p>
+</div>
+<div class="section" id="hss_01_0106__section20700182611151"><h4 class="sectiontitle">Prerequisites</h4><p id="hss_01_0106__p1155974012424">The following servers can be used as remote backup servers:</p>
+<p id="hss_01_0106__p1464511141246">Linux servers whose <strong id="hss_01_0106__b1421173951816">Server Status</strong> is <strong id="hss_01_0106__b12421163916185">Running</strong> and <strong id="hss_01_0106__b1342213916180">Agent Status</strong> is <strong id="hss_01_0106__b17422123941812">Online</strong></p>
+<div class="notice" id="hss_01_0106__note179043490281"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><ul id="hss_01_0106__ul11515111019246"><li id="hss_01_0106__li3127812122414">The remote backup function can be used when the Linux backup server is connected to your cloud server. To ensure a proper backup, you are advised to select a backup server on the same intranet as your cloud server.</li><li id="hss_01_0106__li16515131011244">You are advised to use intranet servers least exposed to attacks as the remote backup servers.</li></ul>
+</div></div>
+</div>
+<div class="section" id="hss_01_0106__section0379134573511"><h4 class="sectiontitle">Adding a Remote Backup Server</h4><ol id="hss_01_0106__ol182261714201"><li id="hss_01_0106__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0106__li830314169200"><span>Click <span><img id="hss_01_0106__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0106__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0106__hss_01_0571_b14857117404"><span id="hss_01_0106__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0106__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0106__li131416349436"><span>Choose <strong id="hss_01_0106__hss_01_0216_b114194892410">Prevention</strong> &gt; <strong id="hss_01_0106__hss_01_0216_b15114817245">Web Tamper Protection</strong>, click <strong id="hss_01_0106__hss_01_0216_b65124819244">Configure Protection</strong>.</span><p><div class="note" id="hss_01_0106__hss_01_0216_note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0106__hss_01_0216_hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0106__hss_01_0216_fig85317912311"><span class="figcap"><b>Figure 1 </b>Entering the page for protected directory settings</span><br><span><img id="hss_01_0106__hss_01_0216_image1139195181013" src="en-us_image_0000001854854673.png"></span></div>
+</p></li><li id="hss_01_0106__li162141510204"><span>Click <strong id="hss_01_0106__hss_01_0216_b1629171745010">Settings</strong> under <strong id="hss_01_0106__hss_01_0216_b2027522212514">Protected Directory Settings</strong>.</span><p><div class="fignone" id="hss_01_0106__hss_01_0216_fig163228187319"><span class="figcap"><b>Figure 2 </b>Protected directory settings</span><br><span><img id="hss_01_0106__hss_01_0216_image8431850162018" src="en-us_image_0000001669998725.png"></span></div>
+</p></li><li id="hss_01_0106__li823612187166"><span>Click <strong id="hss_01_0106__b12815343539">Manage Remote Backup</strong>. In the dialog box that is displayed, click <strong id="hss_01_0106__b1072195714318">Add Backup Server</strong>. For details, see <a href="#hss_01_0106__table1423774551618">Table 1</a>.</span><p><div class="fignone" id="hss_01_0106__fig63862502368"><span class="figcap"><b>Figure 3 </b>Adding a Remote Backup Server</span><br><span><img id="hss_01_0106__image15166183743114" src="en-us_image_0000001620839122.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0106__table1423774551618"></a><a name="table1423774551618"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0106__table1423774551618" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Backup server parameters</caption><thead align="left"><tr id="hss_01_0106__row2234145121611"><th align="left" class="cellrowborder" valign="top" width="12.35%" id="mcps1.3.5.2.5.2.2.2.3.1.1"><p id="hss_01_0106__p623494551611">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="87.64999999999999%" id="mcps1.3.5.2.5.2.2.2.3.1.2"><p id="hss_01_0106__p2234154513161">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0106__row18236745141617"><td class="cellrowborder" valign="top" width="12.35%" headers="mcps1.3.5.2.5.2.2.2.3.1.1 "><p id="hss_01_0106__p1123610454164">Address</p>
+</td>
+<td class="cellrowborder" valign="top" width="87.64999999999999%" headers="mcps1.3.5.2.5.2.2.2.3.1.2 "><p id="hss_01_0106__p15236194513168">This address is the private network address of the server.</p>
+</td>
+</tr>
+<tr id="hss_01_0106__row623714581616"><td class="cellrowborder" valign="top" width="12.35%" headers="mcps1.3.5.2.5.2.2.2.3.1.1 "><p id="hss_01_0106__p6236445191617">Port</p>
+</td>
+<td class="cellrowborder" valign="top" width="87.64999999999999%" headers="mcps1.3.5.2.5.2.2.2.3.1.2 "><p id="hss_01_0106__p915917332347">Ensure that the port is not blocked by any security group or firewall or occupied.</p>
+</td>
+</tr>
+<tr id="hss_01_0106__row023717458167"><td class="cellrowborder" valign="top" width="12.35%" headers="mcps1.3.5.2.5.2.2.2.3.1.1 "><p id="hss_01_0106__p1323714519165">Backup Path</p>
+</td>
+<td class="cellrowborder" valign="top" width="87.64999999999999%" headers="mcps1.3.5.2.5.2.2.2.3.1.2 "><p id="hss_01_0106__p475921912397">Path of remote backup files.</p>
+<ul id="hss_01_0106__ul9528101874316"><li id="hss_01_0106__li0528201815438">If the protected directories of multiple servers are backed up to the same remote backup server, the data will be stored in separate folders named after agent IDs.<p id="hss_01_0106__p177425209434"><a name="hss_01_0106__li0528201815438"></a><a name="li0528201815438"></a>Assume the protected directories of the two servers are <span class="filepath" id="hss_01_0106__filepath1555131134718"><b>/hss01</b></span> and <span class="filepath" id="hss_01_0106__filepath956131124718"><b>hss02</b></span>, and the agent IDs of the two servers are <strong id="hss_01_0106__b1990618298510">f1fdbabc-6cdc-43af-acab-e4e6f086625f</strong> and <strong id="hss_01_0106__b721333259">f2ddbabc-6cdc-43af-abcd-e4e6f086626f</strong>, and the remote backup path is <strong id="hss_01_0106__b1195217356512">/hss01</strong>.</p>
+<p id="hss_01_0106__p12626132114314">The corresponding backup paths are <strong id="hss_01_0106__b1870361767">/hss01/f1fdbabc-6cdc-43af-acab-e4e6f086625f</strong> and <strong id="hss_01_0106__b8166541360">/hss01/f2ddbabc-6cdc-43af-abcd-e4e6f086626f</strong>.</p>
+</li><li id="hss_01_0106__li18488123616911">If WTP is enabled for the remote backup server, do not set the remote backup path to any directories protected by WTP. Otherwise, remote backup will fail.</li></ul>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0106__li2663802468"><span>Click <strong id="hss_01_0106__b64591045145311">OK</strong>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0106__section1374115332913"><h4 class="sectiontitle">Setting remote backup</h4><ol id="hss_01_0106__ol428516118301"><li id="hss_01_0106__li559634812386"><span>Log in to the management console.</span></li><li id="hss_01_0106__li559714483382"><span>Choose <strong id="hss_01_0106__hss_01_0216_b114194892410_1">Prevention</strong> &gt; <strong id="hss_01_0106__hss_01_0216_b15114817245_1">Web Tamper Protection</strong>, click <strong id="hss_01_0106__hss_01_0216_b65124819244_1">Configure Protection</strong>.</span><p><div class="note" id="hss_01_0106__hss_01_0216_note1169413414298_1"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0106__hss_01_0216_hss_01_0546_p158536161110_1">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0106__hss_01_0216_fig85317912311_1"><span class="figcap"><b>Figure 4 </b>Entering the page for protected directory settings</span><br><span><img id="hss_01_0106__hss_01_0216_image1139195181013_1" src="en-us_image_0000001854854673.png"></span></div>
+</p></li><li id="hss_01_0106__li155989482384"><span>Click <strong id="hss_01_0106__hss_01_0216_b1629171745010_1">Settings</strong> under <strong id="hss_01_0106__hss_01_0216_b2027522212514_1">Protected Directory Settings</strong>.</span><p><div class="fignone" id="hss_01_0106__hss_01_0216_fig163228187319_1"><span class="figcap"><b>Figure 5 </b>Protected directory settings</span><br><span><img id="hss_01_0106__hss_01_0216_image8431850162018_1" src="en-us_image_0000001669998725.png"></span></div>
+</p></li><li id="hss_01_0106__li197811983013"><span>Click <strong id="hss_01_0106__b583052911244">Enable Remote Backup</strong> and select a remote backup server.</span></li><li id="hss_01_0106__li38581343183418"><span>Click <strong id="hss_01_0106__b15135717163316">OK</strong> to start remote backup.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0106__section166448202917"><h4 class="sectiontitle">Changing a Remote Backup Server</h4><ol id="hss_01_0106__ol1690104014550"><li id="hss_01_0106__li9636162394114"><span>Log in to the management console.</span></li><li id="hss_01_0106__li6638172319412"><span>Choose <strong id="hss_01_0106__hss_01_0216_b114194892410_2">Prevention</strong> &gt; <strong id="hss_01_0106__hss_01_0216_b15114817245_2">Web Tamper Protection</strong>, click <strong id="hss_01_0106__hss_01_0216_b65124819244_2">Configure Protection</strong>.</span><p><div class="note" id="hss_01_0106__hss_01_0216_note1169413414298_2"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0106__hss_01_0216_hss_01_0546_p158536161110_2">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0106__hss_01_0216_fig85317912311_2"><span class="figcap"><b>Figure 6 </b>Entering the page for protected directory settings</span><br><span><img id="hss_01_0106__hss_01_0216_image1139195181013_2" src="en-us_image_0000001854854673.png"></span></div>
+</p></li><li id="hss_01_0106__li126401023154112"><span>Click <strong id="hss_01_0106__hss_01_0216_b1629171745010_2">Settings</strong> under <strong id="hss_01_0106__hss_01_0216_b2027522212514_2">Protected Directory Settings</strong>.</span><p><div class="fignone" id="hss_01_0106__hss_01_0216_fig163228187319_2"><span class="figcap"><b>Figure 7 </b>Protected directory settings</span><br><span><img id="hss_01_0106__hss_01_0216_image8431850162018_2" src="en-us_image_0000001669998725.png"></span></div>
+</p></li><li id="hss_01_0106__li116512487211"><span>Click <strong id="hss_01_0106__b4444132618501">Manage Remote Backup Servers</strong>. The <strong id="hss_01_0106__b53901369501">Manage Remote Backup Servers</strong> page is displayed. Click <strong id="hss_01_0106__b581145035013">Edit</strong> in the <strong id="hss_01_0106__b14541754115020">Operation</strong> column to modify the information about the remote backup server.</span></li><li id="hss_01_0106__li19021940115512"><span>Click <strong id="hss_01_0106__b12676193813277">OK</strong>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0106__section1595210270329"><h4 class="sectiontitle">Related Operations</h4><p id="hss_01_0106__p912717436323"><strong id="hss_01_0106__b8311887548">Disabling remote backup</strong></p>
+<p id="hss_01_0106__p3922332103718">Exercise caution when performing this operation. If remote backup is disabled, HSS will no longer back up files in your protected directories.</p>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0153.html">WTP</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0113.html b/docs/hss/umn/hss_01_0113.html
new file mode 100644
index 00000000..db9b3175
--- /dev/null
+++ b/docs/hss/umn/hss_01_0113.html
@@ -0,0 +1,11 @@
+<a name="hss_01_0113"></a><a name="hss_01_0113"></a>
+
+<h1 class="topictitle1">What Can I Do If an Alarm Indicating Successful Login Is Reported?</h1>
+<div id="body1584513192361"><ul id="hss_01_0113__ul209795425346"><li id="hss_01_0113__li1897914253413">If you select <strong id="hss_01_0113__b1411532221712">Successful Logins</strong> in the <strong id="hss_01_0113__b311542212171">Real-Time Alarm Notifications</strong> area, HSS will send alarms when detecting any successful logins.</li><li id="hss_01_0113__li11979114273419">If all the accounts on your ECSs are managed by a single administrator, such alarms help them conveniently monitor system accounts.</li><li id="hss_01_0113__li1597913427342">If the system accounts are managed by multiple administrators, or different servers are managed by different administrators, too many alarms will interrupt O&amp;M personnel. In this case, you are advised to disable the alarm item.</li><li id="hss_01_0113__li09791042193411">Alarms on this event do not necessarily indicate attacks. Logins from valid IP addresses are not attacks.</li></ul>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0188.html">Abnormal Logins</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0114.html b/docs/hss/umn/hss_01_0114.html
new file mode 100644
index 00000000..98e9b0dc
--- /dev/null
+++ b/docs/hss/umn/hss_01_0114.html
@@ -0,0 +1,11 @@
+<a name="hss_01_0114"></a><a name="hss_01_0114"></a>
+
+<h1 class="topictitle1">Do I Need to Restart a Server After Fixing its Vulnerabilities?</h1>
+<div id="body0000001192177691"><p id="hss_01_0114__p203141304306">After you fixed Windows OS vulnerabilities or Linux kernel vulnerabilities, you need to restart servers for the fix to take effect, or <span id="hss_01_0114__text6228721151517">HSS</span> will continue to warn you of these vulnerabilities. For other types of vulnerabilities, you do not need to restart servers after fixing them.</p>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0246.html">Vulnerability Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0116.html b/docs/hss/umn/hss_01_0116.html
new file mode 100644
index 00000000..c937bba4
--- /dev/null
+++ b/docs/hss/umn/hss_01_0116.html
@@ -0,0 +1,110 @@
+<a name="hss_01_0116"></a><a name="hss_01_0116"></a>
+
+<h1 class="topictitle1">How Many CPU and Memory Resources Are Occupied by the Agent When It Performs Scans?</h1>
+<div id="body1592897422202"><p id="hss_01_0116__p263511761816">HSS uses lightweight agents, which occupy only a few resources and do not affect your services.</p>
+<p id="hss_01_0116__p162104554515">The CPU and memory usage is as follows.</p>
+<div class="section" id="hss_01_0116__section33375022515"><h4 class="sectiontitle">Maximum CPU Usage</h4><p id="hss_01_0116__p182065120270">A running agent occupies a maximum of 20% of a vCPU. The actual usage depends on your server specifications. For details, see <a href="#hss_01_0116__section08751730152715">Resource Usage of Different Specifications While the Agent Is Running</a>.</p>
+<p id="hss_01_0116__p37614266459">If the CPU usage exceeds 20% of a vCPU, the agent will automatically reduce CPU usage, spending more time on scans. This does not affect your services. If the CPU usage exceeds 25% of a vCPU, the agent will be automatically restarted.</p>
+<div class="note" id="hss_01_0116__note19502237164118"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0116__p24014291078">The agent is scheduled to scan your servers from 00:00 to 04:00 a.m. local server time every day. It does not affect the normal running of the server system.</p>
+</div></div>
+</div>
+<div class="section" id="hss_01_0116__section1465517244262"><h4 class="sectiontitle">Peak Memory Usage</h4><p id="hss_01_0116__p135168321718">A running agent occupies about <strong id="hss_01_0116__b167345516101">500 MB</strong> memory. If the agent memory usage exceeds the maximum memory limit <strong id="hss_01_0116__b1179263111417">500 MB</strong>, the agent will be automatically restarted within 5 minutes.</p>
+</div>
+<div class="section" id="hss_01_0116__section08751730152715"><a name="hss_01_0116__section08751730152715"></a><a name="section08751730152715"></a><h4 class="sectiontitle">Resource Usage of Different Specifications While the Agent Is Running</h4><p id="hss_01_0116__p369491881719">The following table describes the CPU and memory usage of different specifications when the agent is running.</p>
+
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0116__table104201033122120" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Resource usage of the agent</caption><thead align="left"><tr id="hss_01_0116__row174211933172110"><th align="left" class="cellrowborder" valign="top" width="33.33333333333333%" id="mcps1.3.5.3.2.4.1.1"><p id="hss_01_0116__p4421113352115">vCPUs</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="33.33333333333333%" id="mcps1.3.5.3.2.4.1.2"><p id="hss_01_0116__p1642113317215">Max. CPU Usage of Agent</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="33.33333333333333%" id="mcps1.3.5.3.2.4.1.3"><p id="hss_01_0116__p19421143312217">Max. Memory Usage</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0116__row5421193362113"><td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.1 "><p id="hss_01_0116__p157965285158">1 vCPU</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.2 "><p id="hss_01_0116__p17421233112118">20%</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.3 "><p id="hss_01_0116__p14211333112110">500 MB</p>
+</td>
+</tr>
+<tr id="hss_01_0116__row94212332219"><td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.1 "><p id="hss_01_0116__p1454716332158">2 vCPUs</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.2 "><p id="hss_01_0116__p1142110337219">10%</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.3 "><p id="hss_01_0116__p13507202145512">500 MB</p>
+</td>
+</tr>
+<tr id="hss_01_0116__row0421113392112"><td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.1 "><p id="hss_01_0116__p394103710152">4 vCPUs</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.2 "><p id="hss_01_0116__p6421733162113">5%</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.3 "><p id="hss_01_0116__p1953192511555">500 MB</p>
+</td>
+</tr>
+<tr id="hss_01_0116__row0421163314210"><td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.1 "><p id="hss_01_0116__p1517734221510">8 vCPUs</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.2 "><p id="hss_01_0116__p14212333212">2.5%</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.3 "><p id="hss_01_0116__p17943151292112">500 MB</p>
+</td>
+</tr>
+<tr id="hss_01_0116__row842113312219"><td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.1 "><p id="hss_01_0116__p18171145191517">12 vCPUs</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.2 "><p id="hss_01_0116__p1442119336212">About 1.67%</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.3 "><p id="hss_01_0116__p4949412112111">500 MB</p>
+</td>
+</tr>
+<tr id="hss_01_0116__row942110338213"><td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.1 "><p id="hss_01_0116__p323855071511">16 vCPUs</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.2 "><p id="hss_01_0116__p74212337219">About 1.25%</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.3 "><p id="hss_01_0116__p8952121222111">500 MB</p>
+</td>
+</tr>
+<tr id="hss_01_0116__row3421203362119"><td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.1 "><p id="hss_01_0116__p1254132213326">24 vCPUs</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.2 "><p id="hss_01_0116__p742317335214">About 0.84%</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.3 "><p id="hss_01_0116__p159541212172110">500 MB</p>
+</td>
+</tr>
+<tr id="hss_01_0116__row9653229123220"><td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.1 "><p id="hss_01_0116__p1062615349324">32 vCPUs</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.2 "><p id="hss_01_0116__p265422919327">About 0.63%</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.3 "><p id="hss_01_0116__p209561612172110">500 MB</p>
+</td>
+</tr>
+<tr id="hss_01_0116__row360483383214"><td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.1 "><p id="hss_01_0116__p371114477329">48 vCPUs</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.2 "><p id="hss_01_0116__p76052339329">About 0.42%</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.3 "><p id="hss_01_0116__p11958161218215">500 MB</p>
+</td>
+</tr>
+<tr id="hss_01_0116__row171995193215"><td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.1 "><p id="hss_01_0116__p1534555218328">60 vCPUs</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.2 "><p id="hss_01_0116__p131955193213">About 0.34%</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.3 "><p id="hss_01_0116__p2962191214212">500 MB</p>
+</td>
+</tr>
+<tr id="hss_01_0116__row1332810223319"><td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.1 "><p id="hss_01_0116__p18258183133310">64 vCPUs</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.2 "><p id="hss_01_0116__p4328625330">About 0.32%</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.2.4.1.3 "><p id="hss_01_0116__p189643122210">500 MB</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0321.html">Agent FAQs</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0117.html b/docs/hss/umn/hss_01_0117.html
new file mode 100644
index 00000000..5c9be3ab
--- /dev/null
+++ b/docs/hss/umn/hss_01_0117.html
@@ -0,0 +1,11 @@
+<a name="hss_01_0117"></a><a name="hss_01_0117"></a>
+
+<h1 class="topictitle1">How Do I Clear an Alarm on Critical File Changes?</h1>
+<div id="body0000001123241978"><p id="hss_01_0117__p8060118">If you are sure the changes on your critical files are safe, you do not need to handle the alarm. It will be automatically cleared in seven days.</p>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0101.html">Others</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0119.html b/docs/hss/umn/hss_01_0119.html
new file mode 100644
index 00000000..48a27085
--- /dev/null
+++ b/docs/hss/umn/hss_01_0119.html
@@ -0,0 +1,55 @@
+<a name="hss_01_0119"></a><a name="hss_01_0119"></a>
+
+<h1 class="topictitle1">How Do I Uninstall the Agent?</h1>
+<div id="body1566301171164"><p id="hss_01_0119__p203012519301">Two uninstallation methods are available: one-click uninstallation and manual local uninstallation.</p>
+<div class="section" id="hss_01_0119__section17921625182517"><h4 class="sectiontitle">Scenario</h4><ul id="hss_01_0119__ul1398210276265"><li id="hss_01_0119__li1798392792611">The agent was installed using an incorrect package and you need to uninstall it.</li><li id="hss_01_0119__li1072072542816">The agent was installed using incorrect commands and you need to uninstall it.</li><li id="hss_01_0119__li138151314162912">If the agent fails to be upgraded, uninstall the agent.</li></ul>
+</div>
+<div class="section" id="hss_01_0119__section116461948202611"><h4 class="sectiontitle">Prerequisites</h4><p id="hss_01_0119__p1391811185915">When you uninstall the agent on the management console, the <strong id="hss_01_0119__b751415684212">Agent Status</strong> of the server is <strong id="hss_01_0119__b87471710114217">Online</strong>.</p>
+</div>
+<div class="section" id="hss_01_0119__section625513421110"><h4 class="sectiontitle">Uninstalling the Agent on the Console in One-Click</h4><p id="hss_01_0119__p01741951182219">You can uninstall an <span id="hss_01_0119__text1650183881420">HSS</span> agent from the HSS console.</p>
+<div class="note" id="hss_01_0119__note1650641343117"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0119__p2507131317310">After the agent is uninstalled from a server, <span id="hss_01_0119__text148579381296">HSS</span> will not provide any protection for the server.</p>
+</div></div>
+<ol id="hss_01_0119__ol11150120152515"><li id="hss_01_0119__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0119__li18180440173014"><span>In the navigation pane, choose <span class="menucascade" id="hss_01_0119__menucascade1418184014308"><b><span class="uicontrol" id="hss_01_0119__uicontrol20181840163012">Installation and Configuration</span></b></span>.</span></li><li id="hss_01_0119__li1545312942816"><span>On the displayed page, click the <strong id="hss_01_0119__b286793862019">Agents</strong> tab and click <strong id="hss_01_0119__b198671638102016">Online</strong>. In the row containing the desired server, click <span class="wintitle" id="hss_01_0119__wintitle6868203872010"><b>Uninstall Agent</b></span> in the <span class="parmname" id="hss_01_0119__parmname1486815387208"><b>Operation</b></span> column.</span></li><li id="hss_01_0119__li062642319272"><span>In the displayed dialog box, click <span class="uicontrol" id="hss_01_0119__uicontrol337525872714"><b>OK</b></span>.</span><p><p id="hss_01_0119__p257155618177">In the server list, if <strong id="hss_01_0119__b819544635815">Agent Status</strong> of the server is <strong id="hss_01_0119__b31171949145810">Offline</strong>, its agent is successfully uninstalled.</p>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0119__section1980193816119"><h4 class="sectiontitle">Uninstalling the Agent from the Server</h4><p id="hss_01_0119__p04455229123">You can manually uninstall an agent on a server when you no longer use <span id="hss_01_0119__text104061315193519">HSS</span> or need to reinstall the agent.</p>
+<div class="note" id="hss_01_0119__note193412821818"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0119__p226113434136">After the agent is uninstalled from the target server, <span id="hss_01_0119__text355118463149">HSS</span> will not provide any protection for the server.</p>
+</div></div>
+<ul id="hss_01_0119__ul18315163310149"><li id="hss_01_0119__li7315033171415"><strong id="hss_01_0119__b96745694618">Uninstalling the Linux agent</strong><ol id="hss_01_0119__ol6475195521419"><li id="hss_01_0119__li747513554144">Log in to the server from which you want to uninstall the agent and run the following command to switch to user root:<p id="hss_01_0119__p152351523125911"><a name="hss_01_0119__li747513554144"></a><a name="li747513554144"></a><strong id="hss_01_0119__b48517504152612">su - root</strong></p>
+</li><li id="hss_01_0119__li547515531414"><a name="hss_01_0119__li547515531414"></a><a name="li547515531414"></a>In any directory, run the following command to uninstall the agent:<div class="note" id="hss_01_0119__note1773712473448"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0119__p198917159279">Do not run the uninstallation command in the <strong id="hss_01_0119__b2097714853">/usr/local/hostguard/</strong> directory. You can run the uninstallation command in any other directory.</p>
+</div></div>
+<ul id="hss_01_0119__ul742218261518"><li id="hss_01_0119__li542216264518">For EulerOS, CentOS and Red Hat, or other OSs that support RPM installation, run the <strong id="hss_01_0119__b191731111122711">rpm -e hostguard</strong> command.</li><li id="hss_01_0119__li1042211261753">For Ubuntu and Debian OSs, or other OSs that support DEB installation, run the <strong id="hss_01_0119__b746312812224">dpkg -P hostguard</strong> command.</li></ul>
+<p id="hss_01_0119__p5928912224">If information similar to the following is displayed, the agent has been successfully uninstalled. If the uninstallation fails, go to the <a href="#hss_01_0119__li1588319685517">step 3</a>.</p>
+<pre class="screen" id="hss_01_0119__screen53360612224">Stopping Hostguard...
+Hostguard stopped
+Hostguard uninstalled.</pre>
+</li><li id="hss_01_0119__li1588319685517"><a name="hss_01_0119__li1588319685517"></a><a name="li1588319685517"></a>(Optional) If the agent fails to be uninstalled in <a href="#hss_01_0119__li547515531414">step 2</a>, perform the following operations to uninstall the agent:<ul id="hss_01_0119__ul425442419565"><li id="hss_01_0119__li2025418245563">For OSs that support RPM installation, such as EulerOS, CentOS, and Red Hat.<ol type="a" id="hss_01_0119__ol1359611812578"><li id="hss_01_0119__li145961718145716">Run the following command to delete the installation record:<p id="hss_01_0119__p159611865715"><a name="hss_01_0119__li145961718145716"></a><a name="li145961718145716"></a><b><span class="cmdname" id="hss_01_0119__cmdname959616186576">rpm -e --justdb hostguard</span></b></p>
+</li><li id="hss_01_0119__li959661845712">Run the following command to check whether there are hostguard processes:<p id="hss_01_0119__p259616184571"><a name="hss_01_0119__li959661845712"></a><a name="li959661845712"></a><b><span class="cmdname" id="hss_01_0119__cmdname0596418175713">ps -ef | grep hostguard</span></b></p>
+<p id="hss_01_0119__p18596318185716">If there are residual processes, run the <strong id="hss_01_0119__b297512466579">kill -9 PID</strong> command to kill all residual processes.</p>
+</li><li id="hss_01_0119__li859618189574">Run the following command to check whether the <strong id="hss_01_0119__b10191923589">/usr/local/hostguard</strong> directory exists:<p id="hss_01_0119__p55961418175716"><b><span class="cmdname" id="hss_01_0119__cmdname4597131817570">ll /usr/local/hostguard</span></b></p>
+<p id="hss_01_0119__p959751885714">If the directory exists, run the <strong id="hss_01_0119__b1851831185820">rm -rf /usr/local/hostguard</strong> command to delete it.</p>
+</li><li id="hss_01_0119__li359711182574">Run the following command to check whether the <strong id="hss_01_0119__b567718489588">/etc/init.d/hostguard</strong> file exists:<p id="hss_01_0119__p205975189579"><b><span class="cmdname" id="hss_01_0119__cmdname14597918115719">ll /etc/init.d/hostguard</span></b></p>
+<p id="hss_01_0119__p13597131835712">If the file exists, run the <strong id="hss_01_0119__b88005017596">rm -f /etc/init.d/hostguard</strong> command to delete the file.</p>
+</li></ol>
+</li><li id="hss_01_0119__li5794202615561">For OSs that support DEB installation, such as Ubuntu and Debian.<ol type="a" id="hss_01_0119__ol185291348115715"><li id="hss_01_0119__li1452954835716">Run the following command to check whether there are hostguard processes:<p id="hss_01_0119__p752916489571"><a name="hss_01_0119__li1452954835716"></a><a name="li1452954835716"></a><b><span class="cmdname" id="hss_01_0119__cmdname115295488572">ps -ef | grep hostguard</span></b></p>
+<p id="hss_01_0119__p1052944805717">If there are residual processes, run the <strong id="hss_01_0119__b1049445113597">kill -9 PID</strong> command to kill all residual processes.</p>
+</li><li id="hss_01_0119__li15529184819572">Run the following command to check whether the <strong id="hss_01_0119__b1542445555912">/usr/local/hostguard</strong> directory exists:<p id="hss_01_0119__p12529154885714"><b><span class="cmdname" id="hss_01_0119__cmdname85291148125711">ll /usr/local/hostguard</span></b></p>
+<p id="hss_01_0119__p155291348125717">If the directory exists, run the <strong id="hss_01_0119__b1151115775918">rm -rf /usr/local/hostguard</strong> command to delete it.</p>
+</li><li id="hss_01_0119__li135291481575">Run the following command to check whether the <strong id="hss_01_0119__b29833589595">/etc/init.d/hostguard</strong> file exists:<p id="hss_01_0119__p6529194819571"><b><span class="cmdname" id="hss_01_0119__cmdname20529114812579">ll /etc/init.d/hostguard</span></b></p>
+<p id="hss_01_0119__p6529184811578">If the file exists, run the <strong id="hss_01_0119__b116951701707">rm -f /etc/init.d/hostguard</strong> command to delete the file.</p>
+</li></ol>
+</li></ul>
+</li></ol>
+</li><li id="hss_01_0119__li319015114150"><strong id="hss_01_0119__b368912101467">Uninstalling the Windows agent</strong><ol id="hss_01_0119__ol209579444150"><li id="hss_01_0119__li195794421519">Log in to the server that you want to uninstall the agent.</li><li id="hss_01_0119__li119571144161517">Click <strong id="hss_01_0119__b1651141320514">Start</strong> and choose <strong id="hss_01_0119__b81661420105118">Control Panel</strong> &gt; <strong id="hss_01_0119__b1274610225514">Programs</strong>. Then select <strong id="hss_01_0119__b756672525112">HostGuard</strong> and click <strong id="hss_01_0119__b779013295512">Uninstall</strong>.<div class="note" id="hss_01_0119__nc445e1fc386040759a77026168c00a40"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0119__ud1fc92a82a0a468f9b861c7e5dcc1769"><li id="hss_01_0119__l78f76898e492481e9639e0d4b12b75dc">Alternatively, go to the <strong id="hss_01_0119__b823511371619">C:\Program File\HostGuard</strong> directory and double-click <strong id="hss_01_0119__b1159554175220">unins000.exe</strong> to uninstall the program.</li><li id="hss_01_0119__l6e23dd5f5a5e4367876f5835953b8669">If you have created a folder for storing the agent shortcut under the <strong id="hss_01_0119__b926161111222">Start</strong> menu when installing the agent, you can also choose <strong id="hss_01_0119__b1226141119229">Start</strong> &gt; <strong id="hss_01_0119__b02621611122212">HostGuard</strong> &gt; <strong id="hss_01_0119__b22623116222">Uninstall HostGuard</strong> to uninstall HostGuard.</li></ul>
+</div></div>
+</li><li id="hss_01_0119__li1495794410157">In the <strong id="hss_01_0119__b1420605510212">Uninstall HostGuard</strong> dialog box, click <strong id="hss_01_0119__b39456571520">Yes</strong>.</li><li id="hss_01_0119__li2774984618">(Optional) Restart the server.<ul id="hss_01_0119__ul33471930124612"><li id="hss_01_0119__li1334753011467">If you have enabled WTP, you need to restart the server after uninstalling the agent. In the <strong id="hss_01_0119__b24514133817">Uninstall HostGuard</strong> dialog box, click <strong id="hss_01_0119__b134517139812">Yes</strong> to restart the server.</li><li id="hss_01_0119__li8347103016463">If you have not enabled WTP, you do not need to restart the server. In the <strong id="hss_01_0119__b63015291386">Uninstall HostGuard</strong> dialog box, click <strong id="hss_01_0119__b8301829882">No</strong> to skip server restart.</li></ul>
+</li></ol>
+</li></ul>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0321.html">Agent FAQs</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0120.html b/docs/hss/umn/hss_01_0120.html
new file mode 100644
index 00000000..753f7ab3
--- /dev/null
+++ b/docs/hss/umn/hss_01_0120.html
@@ -0,0 +1,14 @@
+<a name="hss_01_0120"></a><a name="hss_01_0120"></a>
+
+<h1 class="topictitle1">Can I Disable Remote Login Detection?</h1>
+<div id="body1594803380822"><p id="hss_01_0120__p8060118">No.</p>
+<p id="hss_01_0120__p15254053119">If you do not want to receive remote login alarm notifications, add alarmed locations as common login locations, or deselect the remote login attempt item in alarm notification settings.</p>
+<ul id="hss_01_0120__ul11596172213114"><li id="hss_01_0120__li126501341169">On the <strong id="hss_01_0120__b1378122820397">Common Login Locations</strong> tab, click <strong id="hss_01_0120__b740533610396">Add Common Login Location</strong>, and add common login locations. HSS does not trigger remote login alarms on logins from common login locations.</li><li id="hss_01_0120__li1759717220318">Choose <strong id="hss_01_0120__b133639881914">Installation &amp; Configuration</strong> and click <strong id="hss_01_0120__b661014192191">Alarm Notifications</strong>. In the <strong id="hss_01_0120__b16558032015">Masked Events</strong> box, select <span class="parmvalue" id="hss_01_0120__parmvalue127634127515"><b>Abnormal logins</b></span>.<p id="hss_01_0120__p81815326319">Exercise caution when you deselect the <strong id="hss_01_0120__b43785012218">Abnormal Logins</strong> notification item. Abnormal logins include remote logins and successful hacks. If you deselect this item, you will not receive alarms on brute-force attacks in real time.</p>
+</li></ul>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0188.html">Abnormal Logins</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0130.html b/docs/hss/umn/hss_01_0130.html
new file mode 100644
index 00000000..ca39302a
--- /dev/null
+++ b/docs/hss/umn/hss_01_0130.html
@@ -0,0 +1,62 @@
+<a name="hss_01_0130"></a><a name="hss_01_0130"></a>
+
+<h1 class="topictitle1">HSS Permissions Management</h1>
+<div id="body8662426"><p id="hss_01_0130__en-us_topic_0187145412_p1353115612114">If you need to assign different permissions to employees in your enterprise to access your HSS resources, IAM is a good choice for fine-grained permissions management. IAM provides identity authentication, permissions management, and access control, helping you secure the access to your cloud resources.</p>
+<p id="hss_01_0130__en-us_topic_0187145412_p20531115614114">With IAM, you can use your account to create IAM users for your employees, and assign permissions to the users to control their access to specific resource types. For example, some software developers in your enterprise need to use HSS resources but must not delete them or perform any high-risk operations. To achieve this result, you can create IAM users for the software developers and grant them only the permissions required for using HSS resources.</p>
+<p id="hss_01_0130__en-us_topic_0187145412_p753235631117">If your account does not need individual IAM users for permissions management, then you may skip over this chapter.</p>
+<div class="section" id="hss_01_0130__en-us_topic_0187145412_section1687715494121"><h4 class="sectiontitle">HSS Permissions</h4><p id="hss_01_0130__en-us_topic_0187145412_p91531416151317">By default, new IAM users do not have permissions assigned. You need to add a user to one or more groups, and attach permissions policies or roles to these groups. Users inherit permissions from their groups and can perform specified operations on cloud services.</p>
+<p id="hss_01_0130__en-us_topic_0187145412_p744319551540">HSS is a project-level service deployed and accessed in specific physical regions. To assign HSS permissions to a user group, specify the scope as region-specific projects and select projects for the permissions to take effect. If <strong id="hss_01_0130__b173691672910727">All projects</strong> is selected, the permissions will take effect for the user group in all region-specific projects. When accessing HSS, the users need to switch to a region where they have been authorized to use cloud services.</p>
+<div class="p" id="hss_01_0130__en-us_topic_0187145412_p92931510171920">You can grant permissions by using roles or policies.<ul id="hss_01_0130__en-us_topic_0187145412_ul14203102718193"><li id="hss_01_0130__en-us_topic_0187145412_li1820417275191">Roles: A type of coarse-grained authorization mechanism that defines permissions related to user responsibilities. This mechanism provides only a limited number of service-level roles for authorization. Some roles depend other roles to take effect. When you assign such roles to users, remember to assign the roles they depend on. However, roles are not an ideal choice for fine-grained authorization and secure access control.</li><li id="hss_01_0130__en-us_topic_0187145412_li13156030101920">Policies: A type of fine-grained authorization that defines permissions required to perform operations on specific cloud resources under certain conditions. This type of authorization is more flexible and ideal for secure access control. For example, you can grant HSS users only the permissions for managing a certain type of resources. </li></ul>
+</div>
+<div class="p" id="hss_01_0130__en-us_topic_0187145412_p164624296138">The following table describes more details.
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0130__en-us_topic_0187145412_table77669303205" frame="border" border="1" rules="all"><caption><b>Table 1 </b>System-defined permissions supported by HSS</caption><thead align="left"><tr id="hss_01_0130__en-us_topic_0187145412_row2767163082017"><th align="left" class="cellrowborder" valign="top" width="18.871887188718873%" id="mcps1.3.4.5.1.2.5.1.1"><p id="hss_01_0130__en-us_topic_0187145412_p167671630162011">Role/Policy Name</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="21.752175217521753%" id="mcps1.3.4.5.1.2.5.1.2"><p id="hss_01_0130__en-us_topic_0187145412_p1876710309205">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="9.990999099909992%" id="mcps1.3.4.5.1.2.5.1.3"><p id="hss_01_0130__en-us_topic_0187145412_p3459112418415">Type</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="49.38493849384938%" id="mcps1.3.4.5.1.2.5.1.4"><p id="hss_01_0130__en-us_topic_0187145412_p276733014204">Dependency</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0130__en-us_topic_0187145412_row1276712300207"><td class="cellrowborder" valign="top" width="18.871887188718873%" headers="mcps1.3.4.5.1.2.5.1.1 "><p id="hss_01_0130__en-us_topic_0187145412_p3767193011202">HSS Administrator</p>
+</td>
+<td class="cellrowborder" valign="top" width="21.752175217521753%" headers="mcps1.3.4.5.1.2.5.1.2 "><p id="hss_01_0130__en-us_topic_0187145412_p5767330132017"><span id="hss_01_0130__text11491183817610">HSS</span> administrator, who has all permissions of <span id="hss_01_0130__text1449293820615">HSS</span></p>
+</td>
+<td class="cellrowborder" valign="top" width="9.990999099909992%" headers="mcps1.3.4.5.1.2.5.1.3 "><p id="hss_01_0130__en-us_topic_0187145412_p134591224104113">System-defined role</p>
+</td>
+<td class="cellrowborder" valign="top" width="49.38493849384938%" headers="mcps1.3.4.5.1.2.5.1.4 "><ul id="hss_01_0130__en-us_topic_0187145412_ul1546516411202"><li id="hss_01_0130__en-us_topic_0187145412_li16465204122017">It depends on the <strong id="hss_01_0130__b15111794910727">Tenant Guest</strong> role.<p id="hss_01_0130__en-us_topic_0187145412_p1771012602015">Tenant Guest: A global role, which must be assigned in the global project.</p>
+</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0130__en-us_topic_0187145412_row4708123532810"><td class="cellrowborder" valign="top" width="18.871887188718873%" headers="mcps1.3.4.5.1.2.5.1.1 "><p id="hss_01_0130__en-us_topic_0187145412_p1366532512219">HSSFullAccess</p>
+</td>
+<td class="cellrowborder" valign="top" width="21.752175217521753%" headers="mcps1.3.4.5.1.2.5.1.2 "><p id="hss_01_0130__en-us_topic_0187145412_p12709103592818">All <span id="hss_01_0130__text1527823841416">HSS</span> permissions</p>
+</td>
+<td class="cellrowborder" valign="top" width="9.990999099909992%" headers="mcps1.3.4.5.1.2.5.1.3 "><p id="hss_01_0130__en-us_topic_0187145412_p1170963517284">Policy</p>
+</td>
+<td class="cellrowborder" valign="top" width="49.38493849384938%" headers="mcps1.3.4.5.1.2.5.1.4 "><p id="hss_01_0130__p175511204118">None</p>
+</td>
+</tr>
+<tr id="hss_01_0130__en-us_topic_0187145412_row13720637112819"><td class="cellrowborder" valign="top" width="18.871887188718873%" headers="mcps1.3.4.5.1.2.5.1.1 "><p id="hss_01_0130__en-us_topic_0187145412_p13864438161415">HSSReadOnlyAccess</p>
+</td>
+<td class="cellrowborder" valign="top" width="21.752175217521753%" headers="mcps1.3.4.5.1.2.5.1.2 "><p id="hss_01_0130__en-us_topic_0187145412_p1872023712815">Read-only permission for <span id="hss_01_0130__text17302154014141">HSS</span></p>
+</td>
+<td class="cellrowborder" valign="top" width="9.990999099909992%" headers="mcps1.3.4.5.1.2.5.1.3 "><p id="hss_01_0130__en-us_topic_0187145412_p772133712819">Policy</p>
+</td>
+<td class="cellrowborder" valign="top" width="49.38493849384938%" headers="mcps1.3.4.5.1.2.5.1.4 "><p id="hss_01_0130__en-us_topic_0187145412_p2072153711280">None</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</div>
+<p id="hss_01_0130__en-us_topic_0187145412_p817644312211">WTP provides two types of user permissions by default: <span class="keyword" id="hss_01_0130__keyword166121766210727">user management</span> and <span class="keyword" id="hss_01_0130__keyword134076247810727">resource management</span>. User management permissions include permissions for managing users, user groups, and user group permissions. Resource management permissions include permissions for performing operations on cloud resources.</p>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0042.html">Introduction</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0131.html b/docs/hss/umn/hss_01_0131.html
new file mode 100644
index 00000000..b80aa2cb
--- /dev/null
+++ b/docs/hss/umn/hss_01_0131.html
@@ -0,0 +1,15 @@
+<a name="hss_01_0131"></a><a name="hss_01_0131"></a>
+
+<h1 class="topictitle1">Permissions Management</h1>
+<div id="body0000001173854629"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0133.html">Creating a User and Granting Permissions</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0005.html">HSS Custom Policies</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0006.html">HSS Actions</a></strong><br>
+</li>
+</ul>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0133.html b/docs/hss/umn/hss_01_0133.html
new file mode 100644
index 00000000..fea1e0dd
--- /dev/null
+++ b/docs/hss/umn/hss_01_0133.html
@@ -0,0 +1,63 @@
+<a name="hss_01_0133"></a><a name="hss_01_0133"></a>
+
+<h1 class="topictitle1">Creating a User and Granting Permissions</h1>
+<div id="body0000001127974998"><p id="hss_01_0133__p24041731165811">This section describes IAM's fine-grained permissions management for your HSS resources. With IAM, you can:</p>
+<ul id="hss_01_0133__ul1455514138211"><li id="hss_01_0133__li155517137213">Create IAM users for employees based on the organizational structure of your enterprise. Each IAM user has their own security credentials, providing access to HSS resources.</li><li id="hss_01_0133__li6555171311217">Grant only the permissions required for users to perform a specific task.</li><li id="hss_01_0133__li1755561313211">Entrust a cloud account or cloud service to perform professional and efficient O&amp;M on your HSS resources.</li></ul>
+<p id="hss_01_0133__p11555151311213">If your account does not require individual IAM users, skip this chapter.</p>
+<p id="hss_01_0133__p17555171362116">This section describes the procedure for granting permissions (see <a href="#hss_01_0133__fig392404973213">Figure 1</a>).</p>
+<div class="section" id="hss_01_0133__section1566572142218"><h4 class="sectiontitle">Prerequisite</h4><div class="p" id="hss_01_0133__p9477125222716">Before authorizing permissions to a user group, you need to know which HSS permissions can be added to the user group. <a href="#hss_01_0133__table1990914124510">Table 1</a> describes the policy details. 
+<div class="tablenoborder"><a name="hss_01_0133__table1990914124510"></a><a name="table1990914124510"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0133__table1990914124510" frame="border" border="1" rules="all"><caption><b>Table 1 </b>System-defined permissions supported by HSS</caption><thead align="left"><tr id="hss_01_0133__en-us_topic_0187145412_row2767163082017"><th align="left" class="cellrowborder" valign="top" width="18.871887188718873%" id="mcps1.3.5.2.2.2.5.1.1"><p id="hss_01_0133__en-us_topic_0187145412_p167671630162011">Role/Policy Name</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="21.752175217521753%" id="mcps1.3.5.2.2.2.5.1.2"><p id="hss_01_0133__en-us_topic_0187145412_p1876710309205">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="9.990999099909992%" id="mcps1.3.5.2.2.2.5.1.3"><p id="hss_01_0133__en-us_topic_0187145412_p3459112418415">Type</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="49.38493849384938%" id="mcps1.3.5.2.2.2.5.1.4"><p id="hss_01_0133__en-us_topic_0187145412_p276733014204">Dependency</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0133__en-us_topic_0187145412_row1276712300207"><td class="cellrowborder" valign="top" width="18.871887188718873%" headers="mcps1.3.5.2.2.2.5.1.1 "><p id="hss_01_0133__en-us_topic_0187145412_p3767193011202">HSS Administrator</p>
+</td>
+<td class="cellrowborder" valign="top" width="21.752175217521753%" headers="mcps1.3.5.2.2.2.5.1.2 "><p id="hss_01_0133__en-us_topic_0187145412_p5767330132017"><span id="hss_01_0133__text1659913216524">HSS</span> administrator, who has all permissions of <span id="hss_01_0133__text6884141695213">HSS</span></p>
+</td>
+<td class="cellrowborder" valign="top" width="9.990999099909992%" headers="mcps1.3.5.2.2.2.5.1.3 "><p id="hss_01_0133__en-us_topic_0187145412_p134591224104113">System-defined role</p>
+</td>
+<td class="cellrowborder" valign="top" width="49.38493849384938%" headers="mcps1.3.5.2.2.2.5.1.4 "><ul id="hss_01_0133__en-us_topic_0187145412_ul1546516411202"><li id="hss_01_0133__en-us_topic_0187145412_li16465204122017">It depends on the <strong id="hss_01_0133__b1539146109101355">Tenant Guest</strong> role.<p id="hss_01_0133__en-us_topic_0187145412_p1771012602015">Tenant Guest: A global role, which must be assigned in the global project.</p>
+</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0133__en-us_topic_0187145412_row4708123532810"><td class="cellrowborder" valign="top" width="18.871887188718873%" headers="mcps1.3.5.2.2.2.5.1.1 "><p id="hss_01_0133__en-us_topic_0187145412_p1366532512219">HSS FullAccess</p>
+</td>
+<td class="cellrowborder" valign="top" width="21.752175217521753%" headers="mcps1.3.5.2.2.2.5.1.2 "><p id="hss_01_0133__en-us_topic_0187145412_p12709103592818">All <span id="hss_01_0133__text2748891878">HSS</span> permissions</p>
+</td>
+<td class="cellrowborder" valign="top" width="9.990999099909992%" headers="mcps1.3.5.2.2.2.5.1.3 "><p id="hss_01_0133__en-us_topic_0187145412_p1170963517284">System-defined policy</p>
+</td>
+<td class="cellrowborder" valign="top" width="49.38493849384938%" headers="mcps1.3.5.2.2.2.5.1.4 "><p id="hss_01_0133__en-us_topic_0187145412_p54291107613">None</p>
+</td>
+</tr>
+<tr id="hss_01_0133__en-us_topic_0187145412_row13720637112819"><td class="cellrowborder" valign="top" width="18.871887188718873%" headers="mcps1.3.5.2.2.2.5.1.1 "><p id="hss_01_0133__en-us_topic_0187145412_p13864438161415">HSS ReadOnlyAccess</p>
+</td>
+<td class="cellrowborder" valign="top" width="21.752175217521753%" headers="mcps1.3.5.2.2.2.5.1.2 "><p id="hss_01_0133__en-us_topic_0187145412_p1872023712815">Read-only permission for <span id="hss_01_0133__text729120114712">HSS</span></p>
+</td>
+<td class="cellrowborder" valign="top" width="9.990999099909992%" headers="mcps1.3.5.2.2.2.5.1.3 "><p id="hss_01_0133__en-us_topic_0187145412_p772133712819">System-defined policy</p>
+</td>
+<td class="cellrowborder" valign="top" width="49.38493849384938%" headers="mcps1.3.5.2.2.2.5.1.4 "><p id="hss_01_0133__en-us_topic_0187145412_p2072153711280">None</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</div>
+<div class="section" id="hss_01_0133__section4984230102516"><h4 class="sectiontitle">Authorization Process</h4><div class="fignone" id="hss_01_0133__fig392404973213"><a name="hss_01_0133__fig392404973213"></a><a name="fig392404973213"></a><span class="figcap"><b>Figure 1 </b>Process for granting permissions</span><br><span><img id="hss_01_0133__en-us_topic_0169801941_image151720220407" src="en-us_image_0000001568317677.png"></span></div>
+<ol id="hss_01_0133__ol176133372712"><li id="hss_01_0133__li1761173372710"><a name="hss_01_0133__li1761173372710"></a><a name="li1761173372710"></a>Create a user group and assign permissions. On the IAM console, grant the <span class="parmvalue" id="hss_01_0133__parmvalue2291141262914"><b>HSS Administrator</b></span> permission.</li><li id="hss_01_0133__li19761153312718">Create a user and add it to the group. On the IAM console, add the user to the group created in <a href="#hss_01_0133__li1761173372710">1</a>.</li><li id="hss_01_0133__li13761163332714">Log in and verify permissions.<p id="hss_01_0133__p1770973792715"><a name="hss_01_0133__li13761163332714"></a><a name="li13761163332714"></a>Log in to the HSS console as the created user, and verify that the user only has read permissions for HSS.</p>
+<p id="hss_01_0133__p058214389271">In <strong id="hss_01_0133__b791914175255">Service List</strong> on the console, select any other services (for example, there is only the <strong id="hss_01_0133__b119190171258">HSS Administrator</strong> policy). If a message indicating that the permission is insufficient is displayed, the <strong id="hss_01_0133__b139191217152513">HSS Administrator</strong> permission takes effect.</p>
+</li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0131.html">Permissions Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0137.html b/docs/hss/umn/hss_01_0137.html
new file mode 100644
index 00000000..76143ced
--- /dev/null
+++ b/docs/hss/umn/hss_01_0137.html
@@ -0,0 +1,73 @@
+<a name="hss_01_0137"></a><a name="hss_01_0137"></a>
+
+<h1 class="topictitle1">Constraints and Limitations</h1>
+<div id="body1566301166176"><div class="section" id="hss_01_0137__section821417581961"><h4 class="sectiontitle">Supported Server Types</h4><p id="hss_01_0137__p10575177571">Elastic Cloud Server (ECS)</p>
+</div>
+<div class="section" id="hss_01_0137__section3897426874"><a name="hss_01_0137__section3897426874"></a><a name="section3897426874"></a><h4 class="sectiontitle">Supported OSs</h4><p id="hss_01_0137__p1426302112541"><span id="hss_01_0137__text388217538416">HSS</span> can run on Linux servers (such as CentOS and EulerOS) and Windows servers (such as Windows 2012 and Windows 2016).</p>
+<div class="notice" id="hss_01_0137__note196371708492"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><ul id="hss_01_0137__ul6596457184"><li id="hss_01_0137__li1659184511813">The agent is probably incompatible with the Linux or Windows versions that have reached end of life. To obtain better <span id="hss_01_0137__text1789545613107">HSS</span> service experience, you are advised to install or upgrade to an OS version supported by the agent.</li></ul>
+</div></div>
+</div>
+<ul id="hss_01_0137__ul567012231495"><li id="hss_01_0137__li11160185565117">Server OSs supported by the agent
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0137__table316105565117" frame="border" border="1" rules="all"><thead align="left"><tr id="hss_01_0137__row1316135513514"><th align="left" class="cellrowborder" valign="top" width="13.120000000000001%" id="mcps1.3.3.1.1.1.4.1.1"><p id="hss_01_0137__p1161135516518">OS Type</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="12.030000000000001%" id="mcps1.3.3.1.1.1.4.1.2"><p id="hss_01_0137__p11161155565116">System Architecture</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="74.85000000000001%" id="mcps1.3.3.1.1.1.4.1.3"><p id="hss_01_0137__p91612055115119">Supported OS</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0137__row1716118557512"><td class="cellrowborder" rowspan="2" valign="top" width="13.120000000000001%" headers="mcps1.3.3.1.1.1.4.1.1 "><p id="hss_01_0137__p1116145520517">Linux</p>
+<p id="hss_01_0137__p4163055185112"></p>
+</td>
+<td class="cellrowborder" valign="top" width="12.030000000000001%" headers="mcps1.3.3.1.1.1.4.1.2 "><p id="hss_01_0137__p3161855185119">X86</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.85000000000001%" headers="mcps1.3.3.1.1.1.4.1.3 "><ul id="hss_01_0137__ul2161185525110"><li id="hss_01_0137__li11162155195115">CentOS 7.4, 7.5, 7.6, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, and 9 (64-bit)</li><li id="hss_01_0137__li616285545110">Debian 9, 10, 11.0.0, 11.1.0 (64-bit)</li><li id="hss_01_0137__li8162145555114">EulerOS 2.2, 2.3, 2.5, 2.7 and 2.9 (64-bit)</li><li id="hss_01_0137__li201622559512">Fedora 28 (64-bit)</li><li id="hss_01_0137__li21621255175112">OpenSUSE: 15.3 (64-bit)</li><li id="hss_01_0137__li13163115519518">Ubuntu 16, 18, 20.03, 20.04, and 22.04 (64-bit)</li><li id="hss_01_0137__li416317552517">Red Hat 7.4, 7.6, 8.0, 8.7 (64-bit)</li><li id="hss_01_0137__li1316312558517">OpenEuler 20.03 LTS, 22.03 SP3 LTS, and 22.03 (64-bit)</li><li id="hss_01_0137__li18163255145117">AlmaLinux 9.0 (64-bit)</li><li id="hss_01_0137__li13163175515510">Rocky Linux 8.4, 8.5 and 9.0 (64-bit)</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0137__row616319553518"><td class="cellrowborder" valign="top" headers="mcps1.3.3.1.1.1.4.1.1 "><p id="hss_01_0137__p9163155518511">ARM</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.1.1.1.4.1.2 "><ul id="hss_01_0137__ul12164125565110"><li id="hss_01_0137__li7164195585120">CentOS 7.4, 7.5, 7.6, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, and 9 (64-bit)</li><li id="hss_01_0137__li20164555125116">EulerOS 2.8 and 2.9 (64-bit)</li><li id="hss_01_0137__li1516445575112">Fedora 29 (64-bit)</li><li id="hss_01_0137__li131641955205110">OpenSUSE: 15 64bit with ARM(40GB)</li><li id="hss_01_0137__li3164175511511">Ubuntu 18 (64-bit)</li><li id="hss_01_0137__li171646555511">Kylin V7 and V10 (64-bit)</li><li id="hss_01_0137__li8164105519514">NeoKylin: V10 (aarch64-bit)</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0137__row1016410553511"><td class="cellrowborder" valign="top" width="13.120000000000001%" headers="mcps1.3.3.1.1.1.4.1.1 "><p id="hss_01_0137__p9164105525112">Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="12.030000000000001%" headers="mcps1.3.3.1.1.1.4.1.2 "><p id="hss_01_0137__p316555585117">X86</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.85000000000001%" headers="mcps1.3.3.1.1.1.4.1.3 "><ul id="hss_01_0137__ul1116575535111"><li id="hss_01_0137__li121651755155119">Windows Server 2019</li><li id="hss_01_0137__li41651155145111">Windows Server 2016</li><li id="hss_01_0137__li1816535519519">Windows Server 2012</li><li id="hss_01_0137__li1215664325411">Windows Server 2008<div class="note" id="hss_01_0137__note191656555512"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="hss_01_0137__p16165205511518">If any third-party security software is installed on the server, disable the protection function of the software before agent installation, and enable it afterwards.</p>
+</div></div>
+</li></ul>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</li></ul>
+<div class="section" id="hss_01_0137__section419913395113"><h4 class="sectiontitle">OSs that Support Vulnerability Scan and Fix</h4><p id="hss_01_0137__p56816202112">HSS can scan for and fix vulnerabilities in the OSs described in <a href="#hss_01_0137__table1796232221619">Table 1</a>.</p>
+
+<div class="tablenoborder"><a name="hss_01_0137__table1796232221619"></a><a name="table1796232221619"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0137__table1796232221619" frame="border" border="1" rules="all"><caption><b>Table 1 </b>OSs that support vulnerability scan and fix</caption><thead align="left"><tr id="hss_01_0137__row1744264816168"><th align="left" class="cellrowborder" valign="top" width="10.67%" id="mcps1.3.4.3.2.3.1.1"><p id="hss_01_0137__p12443144841620">OS Type</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="89.33%" id="mcps1.3.4.3.2.3.1.2"><p id="hss_01_0137__p1144310481166">Supported OS</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0137__row90192310169"><td class="cellrowborder" valign="top" width="10.67%" headers="mcps1.3.4.3.2.3.1.1 "><p id="hss_01_0137__p12172314166">Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="89.33%" headers="mcps1.3.4.3.2.3.1.2 "><ul id="hss_01_0137__ul108181728181719"><li id="hss_01_0137__li98181528161710">Windows Server 2019 Datacenter 64-bit English (40 GB)</li><li id="hss_01_0137__li08181328101712">Windows Server 2019 Datacenter 64-bit Chinese (40 GB)</li><li id="hss_01_0137__li1818528101718">Windows Server 2016 Standard 64-bit English (40 GB)</li><li id="hss_01_0137__li19818192811714">Windows Server 2016 Standard 64-bit Chinese (40 GB)</li><li id="hss_01_0137__li16819172814171">Windows Server 2016 Datacenter 64-bit English (40 GB)</li><li id="hss_01_0137__li381912861719">Windows Server 2016 Datacenter 64-bit Chinese (40 GB)</li><li id="hss_01_0137__li1881992801717">Windows Server 2012 R2 Standard 64-bit English (40 GB)</li><li id="hss_01_0137__li19819152816173">Windows Server 2012 R2 Standard 64-bit Chinese (40 GB)</li><li id="hss_01_0137__li48191828131717">Windows Server 2012 R2 Datacenter 64-bit English (40 GB)</li><li id="hss_01_0137__li181952861717">Windows Server 2012 R2 Datacenter 64-bit Chinese (40 GB)</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0137__row21192312160"><td class="cellrowborder" valign="top" width="10.67%" headers="mcps1.3.4.3.2.3.1.1 "><p id="hss_01_0137__p121923171616">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" width="89.33%" headers="mcps1.3.4.3.2.3.1.2 "><ul id="hss_01_0137__ul198116914195"><li id="hss_01_0137__li48116991913">EulerOS: 2.2, 2.3, 2.5, 2.8, 2.9 (64-bit)</li><li id="hss_01_0137__li1481129161917">CentOS 7.4, 7.5, 7.6, 7.7, 7.8 and 7.9 (64-bit)</li><li id="hss_01_0137__li19815910196">Ubuntu 16.04, 18.04, 20.04 (64-bit)</li><li id="hss_01_0137__li68113911920">Debian 9 and 10 (64-bit)</li><li id="hss_01_0137__li18110941915">Kylin V10 (64-bit)</li><li id="hss_01_0137__li4817910199">UnionTech OS V20 server E and V20 server D (64-bit)</li></ul>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0042.html">Introduction</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0140.html b/docs/hss/umn/hss_01_0140.html
new file mode 100644
index 00000000..8801e524
--- /dev/null
+++ b/docs/hss/umn/hss_01_0140.html
@@ -0,0 +1,27 @@
+<a name="hss_01_0140"></a><a name="hss_01_0140"></a>
+
+<h1 class="topictitle1">Vulnerability Management</h1>
+<div id="body1566355847447"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0302.html">Vulnerability Management Overview</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0412.html">Vulnerability Scan</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0063.html">Viewing Vulnerability Details</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0574.html">Exporting the vulnerability list</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0141.html">Handling Vulnerabilities</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0509.html">Managing the Vulnerability Whitelist</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0503.html">Viewing Vulnerability Handling History</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0025.html">Risk Prevention</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0141.html b/docs/hss/umn/hss_01_0141.html
new file mode 100644
index 00000000..563ca164
--- /dev/null
+++ b/docs/hss/umn/hss_01_0141.html
@@ -0,0 +1,231 @@
+<a name="hss_01_0141"></a><a name="hss_01_0141"></a>
+
+<h1 class="topictitle1">Handling Vulnerabilities</h1>
+<div id="body1566376012451"><p id="hss_01_0141__p65495111329">If HSS detects a vulnerability on a server, you need to handle the vulnerability in a timely manner based on its severity and your business conditions to prevent the vulnerability from being exploited by intruders.</p>
+<p id="hss_01_0141__p1694013129367">Vulnerabilities can be handled in the following ways:</p>
+<ul id="hss_01_0141__ul522185919378"><li id="hss_01_0141__li1822259123713"><strong id="hss_01_0141__b14256105710018">Fixing vulnerabilities</strong><p id="hss_01_0141__p10686163912814">If a vulnerability may harm your services, fix it as soon as possible. For Linux and Windows vulnerabilities, you can let <span id="hss_01_0141__text793211519599">HSS</span> fix them in one-click. Web-CMS vulnerabilities and application vulnerabilities cannot be automatically fixed. Handle them by referring to the suggestions provided on the vulnerability details page.</p>
+</li><li id="hss_01_0141__li92225910376"><strong id="hss_01_0141__b122816316113">Ignoring vulnerabilities</strong><p id="hss_01_0141__p14741259516">Some vulnerabilities are risky only in specific conditions. For example, if a vulnerability can be exploited only through an open port, but the target server does not open any ports, the vulnerability will not harm the server. If you can confirm that a vulnerability is harmless, you can ignore it. If the vulnerability is detected again in the next vulnerability scan, HSS will still report it.</p>
+</li></ul>
+<div class="section" id="hss_01_0141__section752520518409"><h4 class="sectiontitle">Constraints</h4><ul id="hss_01_0141__ul1452515194016"><li id="hss_01_0141__li7752103094512">CentOS 6 and CentOS 8 are officially End of Life (EOL) and no longer maintained. HSS scans them for vulnerabilities based on Red Hat patch notices but cannot fix them. You are advised to change to other OSs.</li><li id="hss_01_0141__li1620181564615">Ubuntu 18.04 and earlier versions do not support free patch updates. You need to apply and configure Ubuntu Pro to install upgrade packages, or vulnerability fix will fail.</li><li id="hss_01_0141__li6710452184614">The kernel vulnerabilities on CCE, MRS, and BMS servers cannot be fixed. Fixing them may make some functions unavailable.</li><li id="hss_01_0141__li752613512400">To handle vulnerabilities on a server, ensure the server is in the <strong id="hss_01_0141__b748775672818">Running</strong> state, its agent status is <strong id="hss_01_0141__b1744151192910">Online</strong>, and its protection status is <strong id="hss_01_0141__b6146181122917">Protected</strong>.</li></ul>
+</div>
+<div class="section" id="hss_01_0141__section1336613405514"><h4 class="sectiontitle">Precautions</h4><ul id="hss_01_0141__ul1136654015516"><li id="hss_01_0141__li03663401755">Vulnerability fixing operations cannot be rolled back. If a vulnerability fails to be fixed, services will probably be interrupted, and incompatibility issues will probably occur in middleware or upper layer applications. To prevent unexpected consequences, you are advised to use CBR to back up ECSs. Then, use idle servers to simulate the production environment and test-fix the vulnerability. If the test-fix succeeds, fix the vulnerability on servers running in the production environment.</li><li id="hss_01_0141__li12444145317104">Servers need to access the Internet and use external image sources to fix vulnerabilities. </li></ul>
+</div>
+<div class="section" id="hss_01_0141__section567512018181"><h4 class="sectiontitle">Urgency</h4><ul id="hss_01_0141__ul123915562419"><li id="hss_01_0141__li4239955162420"><strong id="hss_01_0141__b3601102373110">High</strong>: This vulnerability must be fixed as soon as possible. Attackers may exploit this vulnerability to damage the server.</li><li id="hss_01_0141__li1123918554241"><strong id="hss_01_0141__b897631184810">Medium</strong>: You are advised to fix the vulnerability to enhance your server security.</li><li id="hss_01_0141__li132391255112411"><strong id="hss_01_0141__b934912267495">Safe for now</strong>: This vulnerability has a small threat to server security. You can choose to fix or ignore it.</li></ul>
+</div>
+<div class="section" id="hss_01_0141__section8503315151317"><h4 class="sectiontitle">Vulnerability Fix Priority</h4><p id="hss_01_0141__hss_01_0302_p1280841017513">HSS' vulnerability scan system classifies vulnerability fix priorities into four levels: critical, high, medium, and low. You can refer to the priorities to fix the vulnerabilities that have significant impact on your server first.</p>
+<ul id="hss_01_0141__hss_01_0302_ul123915562419"><li id="hss_01_0141__hss_01_0302_li78616317213"><strong id="hss_01_0141__b12950140123918">Critical</strong>: This vulnerability must be fixed immediately. Attackers may exploit this vulnerability to cause great damage to the server.</li><li id="hss_01_0141__hss_01_0302_li4239955162420"><strong id="hss_01_0141__b1851364373911">High</strong>: This vulnerability must be fixed as soon as possible. Attackers may exploit this vulnerability to damage the server.</li><li id="hss_01_0141__hss_01_0302_li1123918554241"><strong id="hss_01_0141__b1225645113919">Medium</strong>: You are advised to fix the vulnerability to enhance your server security.</li><li id="hss_01_0141__hss_01_0302_li132391255112411"><strong id="hss_01_0141__b1257712471393">Low</strong>: This vulnerability has a small threat to server security. You can choose to fix or ignore it.</li></ul>
+</div>
+<div class="section" id="hss_01_0141__section16612238155520"><h4 class="sectiontitle">Vulnerability Display</h4><p id="hss_01_0141__p1435885551120">Detected vulnerabilities will be displayed in the vulnerability list for seven days, regardless of whether you have handled them.</p>
+</div>
+<div class="section" id="hss_01_0141__section19844201816611"><h4 class="sectiontitle">Automatically Fixing Vulnerabilities (Vulnerability View)</h4><p id="hss_01_0141__p8161183817719">You can only fix Linux and Windows vulnerabilities with one-click on the console.</p>
+<div class="note" id="hss_01_0141__note399115418181"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0141__p12991154117185">A maximum of 1,000 server vulnerabilities can be fixed at a time. If there are more than 1,000 vulnerabilities, fix them in batches.</p>
+</div></div>
+<ol id="hss_01_0141__ol19752172712913"><li id="hss_01_0141__li17436430990"><span>Log in to the management console.</span></li><li id="hss_01_0141__li12437123014918"><span>In the navigation pane, choose <strong id="hss_01_0141__b24491317239">Prediction</strong> &gt; <strong id="hss_01_0141__b8451153172312">Vulnerabilities</strong>.</span></li><li id="hss_01_0141__li102062894715"><span>Fix Linux and Windows vulnerabilities.</span><p><ul id="hss_01_0141__ul1840763944718"><li id="hss_01_0141__li84071139114712">Fixing a single vulnerability<p id="hss_01_0141__p1880612556476"><a name="hss_01_0141__li84071139114712"></a><a name="li84071139114712"></a>Locate the row containing a target vulnerability and click <strong id="hss_01_0141__b145181123142816">Fix</strong> in the <strong id="hss_01_0141__b1551862332812">Operation</strong> column.</p>
+</li><li id="hss_01_0141__li13160141813488">Fixing multiple vulnerabilities<p id="hss_01_0141__p1462019527015"><a name="hss_01_0141__li13160141813488"></a><a name="li13160141813488"></a>Select all target vulnerabilities and click <span class="uicontrol" id="hss_01_0141__uicontrol59871575317"><b>Fix</b></span> in the upper left corner of the vulnerability list to fix vulnerabilities in batches.</p>
+<p id="hss_01_0141__p11441537154411">To fix all Linux or Windows vulnerabilities, select <span class="parmvalue" id="hss_01_0141__parmvalue88113893514"><b>Select all Linux vulnerabilities</b></span> or <span class="parmvalue" id="hss_01_0141__parmvalue9812786353"><b>Select all Windows vulnerabilities</b></span> in the <strong id="hss_01_0141__b1581258113518">Fix</strong> dialog box.</p>
+</li><li id="hss_01_0141__li1910944454919">Fix one or more servers affected by a vulnerability.<ol type="a" id="hss_01_0141__ol534064214718"><li id="hss_01_0141__li123398426474">Click a vulnerability name.</li><li id="hss_01_0141__li183401142194720">On the vulnerability details slide-out panel displayed, click the <span class="parmvalue" id="hss_01_0141__parmvalue895411192519"><b>Affected</b></span> tab, locate the row containing the target server, and click <span class="uicontrol" id="hss_01_0141__uicontrol86081443524"><b>Fix</b></span> in the <strong id="hss_01_0141__b121663302448">Operation</strong> column.<p id="hss_01_0141__p1134064218476">You can also select all target servers and click <span class="uicontrol" id="hss_01_0141__uicontrol729571785719"><b>Fix</b></span> above the server list to fix vulnerabilities for the servers in batches.</p>
+</li></ol>
+</li></ul>
+</p></li></ol><ol start="4" id="hss_01_0141__ol165072501493"><li id="hss_01_0141__li046145115510"><span>In the <strong id="hss_01_0141__b993516117468">Fix</strong> dialog box displayed, select <strong id="hss_01_0141__b1314811019483">I am aware that if I have not backed up my ECSs before fixing vulnerabilities, services may be interrupted and fail to be rolled back during maintenance.</strong> and click <span class="uicontrol" id="hss_01_0141__uicontrol1746225118511"><b>Auto Fix</b></span>.</span></li><li id="hss_01_0141__li6507750164915"><span>Click a vulnerability name.</span></li><li id="hss_01_0141__li4507175074918"><span>Click the <span class="parmvalue" id="hss_01_0141__parmvalue368416299532"><b>Handling History</b></span> tab to view the fix status of the target vulnerability in the <span class="parmvalue" id="hss_01_0141__parmvalue3665134016344"><b>Status</b></span> column. <a href="#hss_01_0141__table1309111182315">Table 1</a> describes vulnerability fix statuses.</span><p>
+<div class="tablenoborder"><a name="hss_01_0141__table1309111182315"></a><a name="table1309111182315"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0141__table1309111182315" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Vulnerability fix statuses</caption><thead align="left"><tr id="hss_01_0141__row93095111234"><th align="left" class="cellrowborder" valign="top" width="28.470000000000002%" id="mcps1.3.9.5.3.2.1.2.3.1.1"><p id="hss_01_0141__p1630981112319">Status</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="71.53%" id="mcps1.3.9.5.3.2.1.2.3.1.2"><p id="hss_01_0141__p230951152316">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0141__row163097122313"><td class="cellrowborder" valign="top" width="28.470000000000002%" headers="mcps1.3.9.5.3.2.1.2.3.1.1 "><p id="hss_01_0141__p193095122320">Unhandled</p>
+</td>
+<td class="cellrowborder" valign="top" width="71.53%" headers="mcps1.3.9.5.3.2.1.2.3.1.2 "><p id="hss_01_0141__p19309191152318">The vulnerability is not fixed.</p>
+</td>
+</tr>
+<tr id="hss_01_0141__row730917182313"><td class="cellrowborder" valign="top" width="28.470000000000002%" headers="mcps1.3.9.5.3.2.1.2.3.1.1 "><p id="hss_01_0141__p163099102313">Ignored</p>
+</td>
+<td class="cellrowborder" valign="top" width="71.53%" headers="mcps1.3.9.5.3.2.1.2.3.1.2 "><p id="hss_01_0141__p33092132320">The vulnerability does not affect your services. You have ignored the vulnerability.</p>
+</td>
+</tr>
+<tr id="hss_01_0141__row3309617237"><td class="cellrowborder" valign="top" width="28.470000000000002%" headers="mcps1.3.9.5.3.2.1.2.3.1.1 "><p id="hss_01_0141__p23101510239">Verifying</p>
+</td>
+<td class="cellrowborder" valign="top" width="71.53%" headers="mcps1.3.9.5.3.2.1.2.3.1.2 "><p id="hss_01_0141__p12310117233">HSS is verifying whether a fixed vulnerability is successfully fixed.</p>
+</td>
+</tr>
+<tr id="hss_01_0141__row4310101142312"><td class="cellrowborder" valign="top" width="28.470000000000002%" headers="mcps1.3.9.5.3.2.1.2.3.1.1 "><p id="hss_01_0141__p14310113235">Fixing</p>
+</td>
+<td class="cellrowborder" valign="top" width="71.53%" headers="mcps1.3.9.5.3.2.1.2.3.1.2 "><p id="hss_01_0141__p83107192313">HSS is fixing the vulnerability.</p>
+</td>
+</tr>
+<tr id="hss_01_0141__row7310181102313"><td class="cellrowborder" valign="top" width="28.470000000000002%" headers="mcps1.3.9.5.3.2.1.2.3.1.1 "><p id="hss_01_0141__p6310511232">Fixed</p>
+</td>
+<td class="cellrowborder" valign="top" width="71.53%" headers="mcps1.3.9.5.3.2.1.2.3.1.2 "><p id="hss_01_0141__p03102172317">The vulnerability has been successfully fixed.</p>
+</td>
+</tr>
+<tr id="hss_01_0141__row198316169283"><td class="cellrowborder" valign="top" width="28.470000000000002%" headers="mcps1.3.9.5.3.2.1.2.3.1.1 "><p id="hss_01_0141__p8983416112810">Restart required</p>
+</td>
+<td class="cellrowborder" valign="top" width="71.53%" headers="mcps1.3.9.5.3.2.1.2.3.1.2 "><p id="hss_01_0141__p13983151615285">The vulnerability has been successfully fixed. You need to restart the server as soon as possible.</p>
+</td>
+</tr>
+<tr id="hss_01_0141__row1738104512298"><td class="cellrowborder" valign="top" width="28.470000000000002%" headers="mcps1.3.9.5.3.2.1.2.3.1.1 "><p id="hss_01_0141__p5381245162910">Failed</p>
+</td>
+<td class="cellrowborder" valign="top" width="71.53%" headers="mcps1.3.9.5.3.2.1.2.3.1.2 "><p id="hss_01_0141__p638154515292">The vulnerability fails to be fixed. The possible cause is that the vulnerability does not exist or has been changed.</p>
+</td>
+</tr>
+<tr id="hss_01_0141__row1166216933119"><td class="cellrowborder" valign="top" width="28.470000000000002%" headers="mcps1.3.9.5.3.2.1.2.3.1.1 "><p id="hss_01_0141__p17662190312">Restart the server and try again</p>
+</td>
+<td class="cellrowborder" valign="top" width="71.53%" headers="mcps1.3.9.5.3.2.1.2.3.1.2 "><p id="hss_01_0141__p74824261375">This status is displayed only for vulnerabilities that exist on Windows servers.</p>
+<p id="hss_01_0141__p2475114033617">The vulnerability has not been fixed on the Windows server for a long time. As a result, the latest patch cannot be installed. You need to install an earlier patch, restart the server, and then install the latest patch.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0141__section1264332154617"><h4 class="sectiontitle">Automatically Fixing Vulnerabilities (Server View)</h4><p id="hss_01_0141__p148491784462">You can only fix Linux and Windows vulnerabilities with one-click on the console.</p>
+<ol id="hss_01_0141__ol484919815469"><li id="hss_01_0141__li484920815468"><span>Log in to the management console.</span></li><li id="hss_01_0141__li188508834611"><span>In the navigation pane, choose <strong id="hss_01_0141__b0411111611426">Prediction</strong> &gt; <strong id="hss_01_0141__b1141281634220">Vulnerabilities</strong>.</span></li><li id="hss_01_0141__li19850128154610"><span>Fix Linux and Windows vulnerabilities.</span><p><ul id="hss_01_0141__ul337871316589"><li id="hss_01_0141__li173787138584">Fixing all vulnerabilities on a server<ol type="a" id="hss_01_0141__ol138531789464"><li id="hss_01_0141__li485314864611">Locate the row containing a target server and click <strong id="hss_01_0141__b13123100154315">Fix</strong> in the <strong id="hss_01_0141__b151248034318">Operation</strong> column.<p id="hss_01_0141__p188492431817">You can also select multiple servers and click <strong id="hss_01_0141__b13885165720110">Fix</strong> in the upper part of the vulnerability list. To fix all server vulnerabilities, you can select all servers in the batch fix dialog box.</p>
+</li><li id="hss_01_0141__li1285314854615">In the <strong id="hss_01_0141__b167213710438">Fix</strong> dialog box displayed, select the type of the vulnerability to be fixed, select <strong id="hss_01_0141__b8228181584420">I am aware that if I have not backed up my ECSs before fixing vulnerabilities, services may be interrupted and fail to be rolled back during maintenance.</strong>, and click <span class="uicontrol" id="hss_01_0141__uicontrol1285319818461"><b>OK</b></span>.<p id="hss_01_0141__p15853208154614">Only Linux and Windows vulnerabilities can be automatically fixed with one-click. Web-CMS and application vulnerabilities need to be manually fixed by logging in to the server.</p>
+</li><li id="hss_01_0141__li1564581515132">Click the server name. On the server details slide-out panel displayed, view the vulnerability fix status. <a href="#hss_01_0141__table1148064981617">Table 2</a> describes vulnerability fix statuses.</li></ol>
+</li><li id="hss_01_0141__li2077374013714">Fixing one or more vulnerabilities on a server<ol type="a" id="hss_01_0141__ol481719171813"><li id="hss_01_0141__li1681719171885">Click the name of a target server. The server details slide-out panel is displayed.</li><li id="hss_01_0141__li19315193911918">Locate the row containing a target vulnerability and click <strong id="hss_01_0141__b3274193474913">Fix</strong> in the <strong id="hss_01_0141__b1327543424913">Operation</strong> column.<p id="hss_01_0141__p1354815284152">Alternatively, you can select all target vulnerabilities and click <span class="uicontrol" id="hss_01_0141__uicontrol1195334719396"><b>Fix</b></span> above the vulnerability list to fix vulnerabilities in batches. </p>
+</li><li id="hss_01_0141__li1839627201011">In the <strong id="hss_01_0141__b0767396516">Fix</strong> dialog box displayed, select <strong id="hss_01_0141__b7767209155117">I am aware that if I have not backed up my ECSs before fixing vulnerabilities, services may be interrupted and fail to be rolled back during maintenance.</strong>, and click <span class="uicontrol" id="hss_01_0141__uicontrol276815955118"><b>Auto Fix</b></span>.</li><li id="hss_01_0141__li1041622631317">In the <strong id="hss_01_0141__b1595455145312">Status</strong> column of the target vulnerability, view the fix status of the vulnerability. <a href="#hss_01_0141__table1148064981617">Table 2</a> describes vulnerability fix statuses.</li></ol>
+</li></ul>
+
+<div class="tablenoborder"><a name="hss_01_0141__table1148064981617"></a><a name="table1148064981617"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0141__table1148064981617" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Vulnerability fix statuses</caption><thead align="left"><tr id="hss_01_0141__hss_01_0141_row93095111234"><th align="left" class="cellrowborder" valign="top" width="28.470000000000002%" id="mcps1.3.10.3.3.2.2.2.3.1.1"><p id="hss_01_0141__hss_01_0141_p1630981112319">Status</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="71.53%" id="mcps1.3.10.3.3.2.2.2.3.1.2"><p id="hss_01_0141__hss_01_0141_p230951152316">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0141__hss_01_0141_row163097122313"><td class="cellrowborder" valign="top" width="28.470000000000002%" headers="mcps1.3.10.3.3.2.2.2.3.1.1 "><p id="hss_01_0141__hss_01_0141_p193095122320">Unhandled</p>
+</td>
+<td class="cellrowborder" valign="top" width="71.53%" headers="mcps1.3.10.3.3.2.2.2.3.1.2 "><p id="hss_01_0141__hss_01_0141_p19309191152318">The vulnerability is not fixed.</p>
+</td>
+</tr>
+<tr id="hss_01_0141__hss_01_0141_row730917182313"><td class="cellrowborder" valign="top" width="28.470000000000002%" headers="mcps1.3.10.3.3.2.2.2.3.1.1 "><p id="hss_01_0141__hss_01_0141_p163099102313">Ignored</p>
+</td>
+<td class="cellrowborder" valign="top" width="71.53%" headers="mcps1.3.10.3.3.2.2.2.3.1.2 "><p id="hss_01_0141__hss_01_0141_p33092132320">The vulnerability does not affect your services. You have ignored the vulnerability.</p>
+</td>
+</tr>
+<tr id="hss_01_0141__hss_01_0141_row3309617237"><td class="cellrowborder" valign="top" width="28.470000000000002%" headers="mcps1.3.10.3.3.2.2.2.3.1.1 "><p id="hss_01_0141__hss_01_0141_p23101510239">Verifying</p>
+</td>
+<td class="cellrowborder" valign="top" width="71.53%" headers="mcps1.3.10.3.3.2.2.2.3.1.2 "><p id="hss_01_0141__hss_01_0141_p12310117233">HSS is verifying whether a fixed vulnerability is successfully fixed.</p>
+</td>
+</tr>
+<tr id="hss_01_0141__hss_01_0141_row4310101142312"><td class="cellrowborder" valign="top" width="28.470000000000002%" headers="mcps1.3.10.3.3.2.2.2.3.1.1 "><p id="hss_01_0141__hss_01_0141_p14310113235">Fixing</p>
+</td>
+<td class="cellrowborder" valign="top" width="71.53%" headers="mcps1.3.10.3.3.2.2.2.3.1.2 "><p id="hss_01_0141__hss_01_0141_p83107192313">HSS is fixing the vulnerability.</p>
+</td>
+</tr>
+<tr id="hss_01_0141__hss_01_0141_row7310181102313"><td class="cellrowborder" valign="top" width="28.470000000000002%" headers="mcps1.3.10.3.3.2.2.2.3.1.1 "><p id="hss_01_0141__hss_01_0141_p6310511232">Fixed</p>
+</td>
+<td class="cellrowborder" valign="top" width="71.53%" headers="mcps1.3.10.3.3.2.2.2.3.1.2 "><p id="hss_01_0141__hss_01_0141_p03102172317">The vulnerability has been successfully fixed.</p>
+</td>
+</tr>
+<tr id="hss_01_0141__hss_01_0141_row198316169283"><td class="cellrowborder" valign="top" width="28.470000000000002%" headers="mcps1.3.10.3.3.2.2.2.3.1.1 "><p id="hss_01_0141__hss_01_0141_p8983416112810">Restart required</p>
+</td>
+<td class="cellrowborder" valign="top" width="71.53%" headers="mcps1.3.10.3.3.2.2.2.3.1.2 "><p id="hss_01_0141__hss_01_0141_p13983151615285">The vulnerability has been successfully fixed. You need to restart the server as soon as possible.</p>
+</td>
+</tr>
+<tr id="hss_01_0141__hss_01_0141_row1738104512298"><td class="cellrowborder" valign="top" width="28.470000000000002%" headers="mcps1.3.10.3.3.2.2.2.3.1.1 "><p id="hss_01_0141__hss_01_0141_p5381245162910">Failed</p>
+</td>
+<td class="cellrowborder" valign="top" width="71.53%" headers="mcps1.3.10.3.3.2.2.2.3.1.2 "><p id="hss_01_0141__hss_01_0141_p638154515292">The vulnerability fails to be fixed. The possible cause is that the vulnerability does not exist or has been changed.</p>
+</td>
+</tr>
+<tr id="hss_01_0141__hss_01_0141_row1166216933119"><td class="cellrowborder" valign="top" width="28.470000000000002%" headers="mcps1.3.10.3.3.2.2.2.3.1.1 "><p id="hss_01_0141__hss_01_0141_p17662190312">Restart the server and try again</p>
+</td>
+<td class="cellrowborder" valign="top" width="71.53%" headers="mcps1.3.10.3.3.2.2.2.3.1.2 "><p id="hss_01_0141__hss_01_0141_p74824261375">This status is displayed only for vulnerabilities that exist on Windows servers.</p>
+<p id="hss_01_0141__hss_01_0141_p2475114033617">The vulnerability has not been fixed on the Windows server for a long time. As a result, the latest patch cannot be installed. You need to install an earlier patch, restart the server, and then install the latest patch.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0141__section1000471163"><h4 class="sectiontitle">Ignoring a Vulnerability</h4><p id="hss_01_0141__p7393291348">Some vulnerabilities are risky only in specific conditions. For example, if a vulnerability can be exploited only through an open port, but the target server does not open any ports, the vulnerability will not harm the server. Such vulnerabilities can be ignored.</p>
+<p id="hss_01_0141__p119317448312">After the vulnerability is ignored, no alarm will be generated for the vulnerability.</p>
+<ol id="hss_01_0141__ol625019153619"><li id="hss_01_0141__li52506183619"><span>Log in to the management console.</span></li><li id="hss_01_0141__li172518115361"><span>In the navigation pane, choose <strong id="hss_01_0141__b0988428203313">Prediction</strong> &gt; <strong id="hss_01_0141__b5988172853318">Vulnerabilities</strong>.</span></li><li id="hss_01_0141__li18837156173612"><span>Locate the row containing a target vulnerability and click <strong id="hss_01_0141__b5841132153311">Ignore</strong> in the <strong id="hss_01_0141__b19856323337">Operation</strong> column.</span></li><li id="hss_01_0141__li11531581378"><span>In the dialog box displayed, click <span class="uicontrol" id="hss_01_0141__uicontrol41541434342"><b>OK</b></span>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0141__section199881539165318"><h4 class="sectiontitle">Whitelisting Vulnerabilities</h4><p id="hss_01_0141__p1478554110539">If you evaluate that some vulnerabilities do not affect your services and do not want to view the vulnerabilities in the vulnerability list, you can whitelist the vulnerabilities. After they are whitelisted, the vulnerabilities will be ignored in the vulnerability list and no alarms will be reported. The vulnerabilities will not be scanned and the vulnerability information will not be displayed when the next vulnerability scan task is executed.</p>
+<ol id="hss_01_0141__ol2232113310597"><li id="hss_01_0141__li3232183355914"><span>Log in to the management console.</span></li><li id="hss_01_0141__li18233123395914"><span>In the navigation pane, choose <strong id="hss_01_0141__b24641411184212">Prediction</strong> &gt; <strong id="hss_01_0141__b6465911124218">Vulnerabilities</strong>.</span><p><ul id="hss_01_0141__ul1515321719815"><li id="hss_01_0141__li91531117588">Whitelisting all servers that are affected by a vulnerability<p id="hss_01_0141__p17300919187"><a name="hss_01_0141__li91531117588"></a><a name="li91531117588"></a>HSS will ignore the vulnerability when scanning for vulnerabilities on all servers.</p>
+<ol type="a" id="hss_01_0141__ol6608171910911"><li id="hss_01_0141__li32771750791">In the <strong id="hss_01_0141__b3497144116018">Operation</strong> column of the row containing the target vulnerability, click <strong id="hss_01_0141__b24978418015">More</strong> and select <strong id="hss_01_0141__b64974411301">Add to Whitelist</strong>.<p id="hss_01_0141__p4526252592">You can also select multiple vulnerabilities and click <span class="uicontrol" id="hss_01_0141__uicontrol125332714113"><b>Add to Whitelist</b></span> above the vulnerability list.</p>
+<div class="fignone" id="hss_01_0141__fig20521185816496"><span class="figcap"><b>Figure 1 </b>Whitelisting all servers that are affected by a vulnerability</span><br><span><img id="hss_01_0141__image134611551124913" src="en-us_image_0000001853976253.png"></span></div>
+</li><li id="hss_01_0141__li69931231993">In the dialog box displayed, click <span class="uicontrol" id="hss_01_0141__uicontrol58111348255"><b>OK</b></span>.</li></ol>
+</li><li id="hss_01_0141__li16316016597">Whitelisting one or more servers that are affected by a vulnerability<p id="hss_01_0141__p266053651016"><a name="hss_01_0141__li16316016597"></a><a name="li16316016597"></a>HSS will ignore the vulnerability when scanning for vulnerabilities on these servers.</p>
+<ol type="a" id="hss_01_0141__ol44111251266"><li id="hss_01_0141__li12891355866">Click a target vulnerability name.</li><li id="hss_01_0141__li104128511464">On the slide-out panel displayed, click the <span class="parmvalue" id="hss_01_0141__parmvalue1858161619714"><b>Affected</b></span> tab.</li><li id="hss_01_0141__li1685416214717">In the <strong id="hss_01_0141__b13760104616014">Operation</strong> column of the row containing the target server, click <strong id="hss_01_0141__b276014611017">More</strong> and select <strong id="hss_01_0141__b27611246206">Add to Whitelist</strong>.<p id="hss_01_0141__p5734541191">You can also select multiple servers and click <span class="uicontrol" id="hss_01_0141__uicontrol166222304284"><b>Add to Whitelist</b></span> above the server list.</p>
+<div class="fignone" id="hss_01_0141__fig16825161204914"><span class="figcap"><b>Figure 2 </b>Whitelisting a single server that is affected by a vulnerability</span><br><span><img id="hss_01_0141__image474419556508" src="en-us_image_0000001853897085.png"></span></div>
+</li><li id="hss_01_0141__li169311445817">In the dialog box displayed, click <span class="uicontrol" id="hss_01_0141__uicontrol1383145812286"><b>OK</b></span>.</li></ol>
+</li><li id="hss_01_0141__li3854817102710">Whitelisting vulnerabilities using whitelist rules<ol type="a" id="hss_01_0141__ol43512195283"><li id="hss_01_0141__li113671919282">In the upper right corner of the <strong id="hss_01_0141__b16466951192911">Vulnerabilities</strong> page, click <span class="uicontrol" id="hss_01_0141__uicontrol18834145717173"><b>Configure Policy</b></span>. The <span class="uicontrol" id="hss_01_0141__uicontrol156153244325"><b>Configure Policy</b></span> slide-out panel is displayed.</li><li id="hss_01_0141__li236419122815">In the <strong id="hss_01_0141__b181091354338">Vulnerability Whitelist</strong> area, click <span class="uicontrol" id="hss_01_0141__uicontrol2515951181817"><b>Add Rule</b></span>.</li><li id="hss_01_0141__li636519122811">Configure a whitelist rule according to <a href="#hss_01_0141__table15714142382020">Table 3</a>.<div class="fignone" id="hss_01_0141__fig1673802719417"><span class="figcap"><b>Figure 3 </b>Configuring a whitelist rule</span><br><span><img id="hss_01_0141__image198851720185220" src="en-us_image_0000001807098924.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0141__table15714142382020"></a><a name="table15714142382020"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0141__table15714142382020" frame="border" border="1" rules="all"><caption><b>Table 3 </b>Vulnerability whitelist rule parameters</caption><thead align="left"><tr id="hss_01_0141__row11715172362011"><th align="left" class="cellrowborder" valign="top" width="22.3%" id="mcps1.3.12.3.2.2.1.3.1.3.3.2.3.1.1"><p id="hss_01_0141__p2715112312016">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="77.7%" id="mcps1.3.12.3.2.2.1.3.1.3.3.2.3.1.2"><p id="hss_01_0141__p1671515232207">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0141__row107152234209"><td class="cellrowborder" valign="top" width="22.3%" headers="mcps1.3.12.3.2.2.1.3.1.3.3.2.3.1.1 "><p id="hss_01_0141__p1471552316207">Type</p>
+</td>
+<td class="cellrowborder" valign="top" width="77.7%" headers="mcps1.3.12.3.2.2.1.3.1.3.3.2.3.1.2 "><p id="hss_01_0141__p1165418296275">Select the type of vulnerabilities to be whitelisted. Possible values are as follows:</p>
+<ul id="hss_01_0141__ul589517137343"><li id="hss_01_0141__li1896131311347"><strong id="hss_01_0141__b166860820366">Linux Vulnerabilities</strong></li><li id="hss_01_0141__li58965134343"><strong id="hss_01_0141__b1774091883611">Windows Vulnerabilities</strong></li><li id="hss_01_0141__li198968136344"><strong id="hss_01_0141__b51531633113612">Web-CMS Vulnerabilities</strong></li><li id="hss_01_0141__li1389610133341"><strong id="hss_01_0141__b33151635133617">Application Vulnerabilities</strong></li></ul>
+</td>
+</tr>
+<tr id="hss_01_0141__row197151923102015"><td class="cellrowborder" valign="top" width="22.3%" headers="mcps1.3.12.3.2.2.1.3.1.3.3.2.3.1.1 "><p id="hss_01_0141__p1271519235206">Vulnerability</p>
+</td>
+<td class="cellrowborder" valign="top" width="77.7%" headers="mcps1.3.12.3.2.2.1.3.1.3.3.2.3.1.2 "><p id="hss_01_0141__p15715162332018">Select one or more vulnerabilities to be whitelisted.</p>
+</td>
+</tr>
+<tr id="hss_01_0141__row57158232208"><td class="cellrowborder" valign="top" width="22.3%" headers="mcps1.3.12.3.2.2.1.3.1.3.3.2.3.1.1 "><p id="hss_01_0141__p14716202382017">Rule Scope</p>
+</td>
+<td class="cellrowborder" valign="top" width="77.7%" headers="mcps1.3.12.3.2.2.1.3.1.3.3.2.3.1.2 "><p id="hss_01_0141__p176540294270">Select the servers affected by the vulnerabilities. Possible values are as follows:</p>
+<ul id="hss_01_0141__ul01021640142919"><li id="hss_01_0141__li1710219409299"><strong id="hss_01_0141__b1764674953911">All servers</strong><p id="hss_01_0141__p17222101910010">HSS will ignore the vulnerability when scanning for vulnerabilities on all servers.</p>
+</li><li id="hss_01_0141__li310214062919"><strong id="hss_01_0141__b15654108154018">Selected servers</strong><p id="hss_01_0141__p946371410234">Select one or more target servers. HSS will ignore the vulnerabilities when scanning for vulnerabilities on these servers.</p>
+<p id="hss_01_0141__p927115324332">You can search for a target server by server name, ID, EIP, or private IP address.</p>
+</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0141__row145219292369"><td class="cellrowborder" valign="top" width="22.3%" headers="mcps1.3.12.3.2.2.1.3.1.3.3.2.3.1.1 "><p id="hss_01_0141__p752219295368">Remarks (Optional)</p>
+</td>
+<td class="cellrowborder" valign="top" width="77.7%" headers="mcps1.3.12.3.2.2.1.3.1.3.3.2.3.1.2 "><p id="hss_01_0141__p3522142919367">Enter the remarks.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</li><li id="hss_01_0141__li14828131555110">Click <span class="uicontrol" id="hss_01_0141__uicontrol14839143411519"><b>OK</b></span>.</li></ol>
+</li></ul>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0141__section19207131411327"><h4 class="sectiontitle">Verifying the Vulnerability Fix</h4><div class="p" id="hss_01_0141__p1782532414327">After you manually fix vulnerabilities, you are advised to verify the fixing result.<ul id="hss_01_0141__ul28146226355"><li id="hss_01_0141__li8814622103518"><strong id="hss_01_0141__b19317195216454">Method 1</strong>: On the vulnerability details page, click <span class="uicontrol" id="hss_01_0141__uicontrol1732154418397"><b>Verify</b></span> to perform one-click verification.<div class="note" id="hss_01_0141__note168230588413"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0141__ul19432105911157"><li id="hss_01_0141__li174321259171514">The fixing of emergency vulnerabilities cannot be verified.</li><li id="hss_01_0141__li12161191131614">Only application vulnerabilities of the JAR package can be verified. Application vulnerabilities of the non-JAR package are automatically filtered out and not verified.</li></ul>
+</div></div>
+</li><li id="hss_01_0141__li17814162215352"><strong id="hss_01_0141__b1663503917488">Method 2</strong>: Ensure the software has been upgraded to the latest version. The following table provides the commands to check the software upgrade result.
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0141__table16814162218355" frame="border" border="1" rules="all"><caption><b>Table 4 </b>Verification commands</caption><thead align="left"><tr id="hss_01_0141__row138141122133518"><th align="left" class="cellrowborder" valign="top" width="37.330000000000005%" id="mcps1.3.13.2.1.2.2.2.3.1.1"><p id="hss_01_0141__p1081412223352">OS</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="62.67%" id="mcps1.3.13.2.1.2.2.2.3.1.2"><p id="hss_01_0141__p1781413223357">Verification Command</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0141__row14815522103510"><td class="cellrowborder" valign="top" width="37.330000000000005%" headers="mcps1.3.13.2.1.2.2.2.3.1.1 "><p id="hss_01_0141__p16815022133513">CentOS/Fedora /Euler/Redhat/Oracle</p>
+</td>
+<td class="cellrowborder" valign="top" width="62.67%" headers="mcps1.3.13.2.1.2.2.2.3.1.2 "><p id="hss_01_0141__p1481513223353">rpm -qa | grep <em id="hss_01_0141__i11280131117499">Software_name</em></p>
+</td>
+</tr>
+<tr id="hss_01_0141__row1281562283511"><td class="cellrowborder" valign="top" width="37.330000000000005%" headers="mcps1.3.13.2.1.2.2.2.3.1.1 "><p id="hss_01_0141__p3815112263516">Debian/Ubuntu</p>
+</td>
+<td class="cellrowborder" valign="top" width="62.67%" headers="mcps1.3.13.2.1.2.2.2.3.1.2 "><p id="hss_01_0141__p128151822103518">dpkg -l | grep <em id="hss_01_0141__i531411149496">Software_name</em></p>
+</td>
+</tr>
+<tr id="hss_01_0141__row16815172210357"><td class="cellrowborder" valign="top" width="37.330000000000005%" headers="mcps1.3.13.2.1.2.2.2.3.1.1 "><p id="hss_01_0141__p108151922143519">Gentoo</p>
+</td>
+<td class="cellrowborder" valign="top" width="62.67%" headers="mcps1.3.13.2.1.2.2.2.3.1.2 "><p id="hss_01_0141__p1781552215354">emerge --search <em id="hss_01_0141__i6265131612490">Software_name</em></p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</li></ul>
+</div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0140.html">Vulnerability Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0142.html b/docs/hss/umn/hss_01_0142.html
new file mode 100644
index 00000000..a1b15963
--- /dev/null
+++ b/docs/hss/umn/hss_01_0142.html
@@ -0,0 +1,17 @@
+<a name="hss_01_0142"></a><a name="hss_01_0142"></a>
+
+<h1 class="topictitle1">Prevention</h1>
+<div id="body1566355847447"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0388.html">Application Protection</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0153.html">WTP</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0346.html">Ransomware Prevention</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0360.html">File Integrity Monitoring</a></strong><br>
+</li>
+</ul>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0145.html b/docs/hss/umn/hss_01_0145.html
new file mode 100644
index 00000000..e29e1c33
--- /dev/null
+++ b/docs/hss/umn/hss_01_0145.html
@@ -0,0 +1,23 @@
+<a name="hss_01_0145"></a><a name="hss_01_0145"></a>
+
+<h1 class="topictitle1">Baseline Inspection</h1>
+<div id="body1566355847447"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0303.html">Baseline Inspection Overview</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0146.html">Performing Baseline Inspection</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0147.html">Viewing and Processing Baseline Check Results</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0597.html">Exporting the Baseline Check Report</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0393.html">Managing Manual Baseline Check Policies</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0025.html">Risk Prevention</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0146.html b/docs/hss/umn/hss_01_0146.html
new file mode 100644
index 00000000..e866194f
--- /dev/null
+++ b/docs/hss/umn/hss_01_0146.html
@@ -0,0 +1,69 @@
+<a name="hss_01_0146"></a><a name="hss_01_0146"></a>
+
+<h1 class="topictitle1">Performing Baseline Inspection</h1>
+<div id="body0000001745041972"><p id="hss_01_0146__p9977135514816">The baseline check supports automatic and manual baseline checks.</p>
+<ul id="hss_01_0146__ul16676163512810"><li id="hss_01_0146__li196761935785">Automatic baseline check: checks server configurations and common weak passwords.</li><li id="hss_01_0146__li1467616357812">Manual baseline check: To view the real-time baseline risks of a specified server or detect the password complexity policy, you can manually perform a baseline check.</li></ul>
+<div class="section" id="hss_01_0146__section4588162019315"><h4 class="sectiontitle">Automated Baseline Checks</h4><p id="hss_01_0146__p1867125416312"> automatically performs a check for all server configurations and common weak passwords at <strong id="hss_01_0146__b92521046194611">01:00 every day</strong>.</p>
+<p id="hss_01_0146__p136711454930">Premium edition, web tamper protection edition, and container edition allow you to customize the automatic detection period for configurations and common weak passwords. For details, see <a href="hss_01_0044.html#hss_01_0044__section6401323142512">Configuration Check</a> and <a href="hss_01_0044.html#hss_01_0044__section2225201363514">Weak Password Scan</a>.</p>
+</div>
+<div class="section" id="hss_01_0146__section1035310124113"><h4 class="sectiontitle">Manually Performing a Baseline Check</h4><ol id="hss_01_0146__ol675711194218"><li id="hss_01_0146__li8456183054117"><span>Log in to the management console.</span></li><li id="hss_01_0146__li84561430154116"><span>Click <span><img id="hss_01_0146__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0146__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0146__hss_01_0571_b14857117404"><span id="hss_01_0146__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0146__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0146__li3460183011415"><span>In the navigation pane on the left, choose <strong id="hss_01_0146__b34647996465839">Prediction</strong> &gt; <strong id="hss_01_0146__b158268183165839">Baseline Checks</strong>.</span><p><div class="note" id="hss_01_0146__note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0146__hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0146__fig334401010313"><span class="figcap"><b>Figure 1 </b>Baseline check overview</span><br><span><img id="hss_01_0146__en-us_topic_0000001568317529_en-us_topic_0000001517641794_image165241420433" src="en-us_image_0000001618285045.png"></span></div>
+</p></li><li id="hss_01_0146__li13657919153116"><span>(Optional) Create a manual baseline check policy.</span><p><div class="p" id="hss_01_0146__p3187152003213">Before manually checking the baseline policy, you need to create a manual baseline check policy for the target server. If you have created a policy for the target server, skip this step.<ol type="a" id="hss_01_0146__ol1080814190314"><li id="hss_01_0146__li10805319133115">Click <span class="uicontrol" id="hss_01_0146__uicontrol8932122015411"><b>Policies</b></span> in the upper right corner of the page.<div class="fignone" id="hss_01_0146__fig880513199314"><span class="figcap"><b>Figure 2 </b>Baseline policies</span><br><span><img id="hss_01_0146__image38046190316" src="en-us_image_0000001785666064.png"></span></div>
+</li><li id="hss_01_0146__li1808171912318">Click <strong id="hss_01_0146__b99681484420">Create Policy</strong> and configure the policy information by referring to <a href="#hss_01_0146__table1080891917315">Table 1</a>.<div class="p" id="hss_01_0146__p17808171933114">To check baseline details, click <strong id="hss_01_0146__b6452111511426">Rule Details</strong> on the right of a baseline name.<div class="note" id="hss_01_0146__note10805141920312"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0146__p148051119103120">If you select <strong id="hss_01_0146__b191346465365839">Linux</strong> for <strong id="hss_01_0146__b40811148265839">OS</strong>, you can select any checks included in <strong id="hss_01_0146__b101632017565839">Baseline</strong> and edit rules. This function is not supported for Windows servers.</p>
+</div></div>
+<div class="fignone" id="hss_01_0146__fig280611943116"><span class="figcap"><b>Figure 3 </b>Creating a policy</span><br><span><img id="hss_01_0146__en-us_topic_0000001517641874_image13577429184" src="en-us_image_0000001618324457.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0146__table1080891917315"></a><a name="table1080891917315"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0146__table1080891917315" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Baseline policy parameters</caption><thead align="left"><tr id="hss_01_0146__row5806419193116"><th align="left" class="cellrowborder" valign="top" width="12.1012101210121%" id="mcps1.3.4.2.4.2.1.1.2.3.4.2.4.1.1"><p id="hss_01_0146__p9806111993114">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="56.89568956895689%" id="mcps1.3.4.2.4.2.1.1.2.3.4.2.4.1.2"><p id="hss_01_0146__p108060199310">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="31.003100310031%" id="mcps1.3.4.2.4.2.1.1.2.3.4.2.4.1.3"><p id="hss_01_0146__p4806219103113">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0146__row2806151933112"><td class="cellrowborder" valign="top" width="12.1012101210121%" headers="mcps1.3.4.2.4.2.1.1.2.3.4.2.4.1.1 "><p id="hss_01_0146__p1780612191312">Policy</p>
+</td>
+<td class="cellrowborder" valign="top" width="56.89568956895689%" headers="mcps1.3.4.2.4.2.1.1.2.3.4.2.4.1.2 "><p id="hss_01_0146__p178067199318">Policy name</p>
+</td>
+<td class="cellrowborder" valign="top" width="31.003100310031%" headers="mcps1.3.4.2.4.2.1.1.2.3.4.2.4.1.3 "><p id="hss_01_0146__p208069196315">linux_web1_security_policy</p>
+</td>
+</tr>
+<tr id="hss_01_0146__row18807141973119"><td class="cellrowborder" valign="top" width="12.1012101210121%" headers="mcps1.3.4.2.4.2.1.1.2.3.4.2.4.1.1 "><p id="hss_01_0146__p12806219133112">OS</p>
+</td>
+<td class="cellrowborder" valign="top" width="56.89568956895689%" headers="mcps1.3.4.2.4.2.1.1.2.3.4.2.4.1.2 "><p id="hss_01_0146__p0806181916315">OS that will be checked.</p>
+<ul id="hss_01_0146__ul1580631915315"><li id="hss_01_0146__li080661993111">Linux</li><li id="hss_01_0146__li28061191315">Windows</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="31.003100310031%" headers="mcps1.3.4.2.4.2.1.1.2.3.4.2.4.1.3 "><p id="hss_01_0146__p11807819153114">Linux</p>
+</td>
+</tr>
+<tr id="hss_01_0146__row13808181915315"><td class="cellrowborder" valign="top" width="12.1012101210121%" headers="mcps1.3.4.2.4.2.1.1.2.3.4.2.4.1.1 "><p id="hss_01_0146__p880751913319">Baseline</p>
+</td>
+<td class="cellrowborder" valign="top" width="56.89568956895689%" headers="mcps1.3.4.2.4.2.1.1.2.3.4.2.4.1.2 "><p id="hss_01_0146__p118071819173116">Baseline used for a check. Check items are as follows:</p>
+<ul id="hss_01_0146__ul10807151953112"><li id="hss_01_0146__hss_01_0303_li948193265218">For Linux,<ul id="hss_01_0146__hss_01_0303_ul94816326529"><li id="hss_01_0146__hss_01_0303_li164811532125218">The cloud security practice baseline can check Apache2, Docker, MongoDB, Redis, MySQL5, Nginx, Tomcat, SSH, vsftp, CentOS7, EulerOS, EulerOS_ext, Kubernetes-Node, Kubernetes-Master.</li><li id="hss_01_0146__hss_01_0303_li467072261120">DJCP MLPS compliance: Apache 2, MongoDB, MySQL 5, Nginx, Tomcat, CentOS 6, CentOS 7, CentOS 8, Debian 9, Debian 10, Debian 11, Red Hat 6, Red Hat 7, Red Hat 8, Ubuntu 12, Ubuntu 14, Ubuntu 16, Ubuntu 18, Alma.</li></ul>
+</li><li id="hss_01_0146__hss_01_0303_li689310592064">For Windows,<p id="hss_01_0146__hss_01_0303_p299113153611"><a name="hss_01_0146__hss_01_0303_li689310592064"></a><a name="hss_01_0303_li689310592064"></a>The cloud security practice baseline can check MongoDB, Apache2, MySQL, Nginx, Redis, Tomcat, Windows_2008, Windows_2012, Windows_2016, Windows_2019, and SqlServer.</p>
+</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="31.003100310031%" headers="mcps1.3.4.2.4.2.1.1.2.3.4.2.4.1.3 "><p id="hss_01_0146__p280731993114"><strong id="hss_01_0146__b128272249365839">Cloud security practices</strong>: Select all.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</li><li id="hss_01_0146__li2808101933110">Confirm the information, click <strong id="hss_01_0146__b101001682465839">Next</strong>, and select the server to be associated with the application based on the server name, server ID, EIP, or private IP address.<div class="fignone" id="hss_01_0146__fig158081019133111"><span class="figcap"><b>Figure 4 </b>Selecting servers</span><br><span><img id="hss_01_0146__image7808111963111" src="en-us_image_0000001785825720.png"></span></div>
+<p id="hss_01_0146__p18081219113117"></p>
+</li><li id="hss_01_0146__li1780891916314">Confirm the information and click <strong id="hss_01_0146__b9766132517916">OK</strong>. The baseline policy will be displayed in the policy list.</li></ol>
+</div>
+</p></li><li id="hss_01_0146__li2678881316"><span>In the upper left corner of the <strong id="hss_01_0146__b56791932121116">Baseline Inspection</strong> page, select the target baseline inspection policy.</span><p><div class="fignone" id="hss_01_0146__fig767938032"><span class="figcap"><b>Figure 5 </b>Selecting the target baseline policy</span><br><span><img id="hss_01_0146__image15679189315" src="en-us_image_0000001832628561.png"></span></div>
+</p></li><li id="hss_01_0146__li17679148738"><span>Click <span class="uicontrol" id="hss_01_0146__uicontrol13679282033"><b>Scan</b></span> in the upper right corner of the page.</span></li><li id="hss_01_0146__li2067916811310"><span>If the time displayed in the <strong id="hss_01_0146__b78405976565839">Last scanned</strong> area under the <strong id="hss_01_0146__b193799942365839">Baseline Check Policy</strong> is the actual check time, the check is complete.</span><p><div class="note" id="hss_01_0146__note126801081314"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0146__ul1680198431"><li id="hss_01_0146__li186801981936">After a manual check is performed, the button will display <strong id="hss_01_0146__b46606334266">Scanning</strong> and be disabled. If the check time exceeds 30 minutes, the button will be automatically enabled again. If the time displayed in the <strong id="hss_01_0146__b1066017338263">Last scanned</strong> area becomes the current check time, it indicates the check has completed.</li><li id="hss_01_0146__li1168048636">After the check is complete, you can view the check results and handling suggestions by referring to <a href="hss_01_0147.html">Viewing and Processing Baseline Check Results</a>.</li></ul>
+</div></div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0145.html">Baseline Inspection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0147.html b/docs/hss/umn/hss_01_0147.html
new file mode 100644
index 00000000..5d19e5f8
--- /dev/null
+++ b/docs/hss/umn/hss_01_0147.html
@@ -0,0 +1,239 @@
+<a name="hss_01_0147"></a><a name="hss_01_0147"></a>
+
+<h1 class="topictitle1">Viewing and Processing Baseline Check Results</h1>
+<div id="body0000001817674541"><p id="hss_01_0147__p156392054111110">This topic provides suggestions on how to fix baseline configuration risks on the server.</p>
+<div class="section" id="hss_01_0147__section179441338171410"><h4 class="sectiontitle">Constraints</h4><p id="hss_01_0147__p575523782719">Only enterprise edition, premium edition, web tamper protection edition, and container edition are supported.</p>
+</div>
+<div class="section" id="hss_01_0147__section6177111081010"><h4 class="sectiontitle">Viewing Baseline Check Overview Information</h4><ol id="hss_01_0147__ol675711194218"><li id="hss_01_0147__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0147__li830314169200"><span>Click <span><img id="hss_01_0147__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0147__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0147__hss_01_0571_b14857117404"><span id="hss_01_0147__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0147__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0147__li12629142221117"><span>In the navigation pane on the left, choose <strong id="hss_01_0147__b211975047365821">Prediction</strong> &gt; <strong id="hss_01_0147__b54786072265821">Baseline Checks</strong>.</span><p><div class="note" id="hss_01_0147__note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0147__hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+</p></li><li id="hss_01_0147__li1175731115421"><span>Click different tabs on the displayed page to check detected unsafe configurations. <a href="#hss_01_0147__table415319491112">Figure 1</a> lists the corresponding parameters.</span><p><div class="p" id="hss_01_0147__p14705102663913">To view the check results of servers under different manual baseline check policies, you can switch between baseline check policies.<div class="fignone" id="hss_01_0147__fig1724391210296"><span class="figcap"><b>Figure 1 </b>Baseline check overview</span><br><span><img id="hss_01_0147__en-us_topic_0000001517641794_image165241420433" src="en-us_image_0000001618285045.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0147__table415319491112"></a><a name="table415319491112"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0147__table415319491112" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Baseline check overview</caption><thead align="left"><tr id="hss_01_0147__row815344111112"><th align="left" class="cellrowborder" valign="top" width="29.45%" id="mcps1.3.3.2.4.2.1.2.2.3.1.1"><p id="hss_01_0147__p815324101117">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="70.55%" id="mcps1.3.3.2.4.2.1.2.2.3.1.2"><p id="hss_01_0147__p4153642112">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0147__row21548451112"><td class="cellrowborder" valign="top" width="29.45%" headers="mcps1.3.3.2.4.2.1.2.2.3.1.1 "><p id="hss_01_0147__p3154148118">Baseline check policy</p>
+</td>
+<td class="cellrowborder" valign="top" width="70.55%" headers="mcps1.3.3.2.4.2.1.2.2.3.1.2 "><p id="hss_01_0147__p015419413113">Available baseline check policies that have been added. You can select, create, edit, and delete these policies.</p>
+</td>
+</tr>
+<tr id="hss_01_0147__row915416413114"><td class="cellrowborder" valign="top" width="29.45%" headers="mcps1.3.3.2.4.2.1.2.2.3.1.1 "><p id="hss_01_0147__p715410414116">Scanned servers</p>
+</td>
+<td class="cellrowborder" valign="top" width="70.55%" headers="mcps1.3.3.2.4.2.1.2.2.3.1.2 "><p id="hss_01_0147__p5154246113">Total number of detected servers.</p>
+</td>
+</tr>
+<tr id="hss_01_0147__row18154134141120"><td class="cellrowborder" valign="top" width="29.45%" headers="mcps1.3.3.2.4.2.1.2.2.3.1.1 "><p id="hss_01_0147__p101540451113">Security baselines</p>
+</td>
+<td class="cellrowborder" valign="top" width="70.55%" headers="mcps1.3.3.2.4.2.1.2.2.3.1.2 "><p id="hss_01_0147__p19488391820">Number of baselines executed during the server detection.</p>
+</td>
+</tr>
+<tr id="hss_01_0147__row915410411116"><td class="cellrowborder" valign="top" width="29.45%" headers="mcps1.3.3.2.4.2.1.2.2.3.1.1 "><p id="hss_01_0147__p141548410111">Baseline check items</p>
+</td>
+<td class="cellrowborder" valign="top" width="70.55%" headers="mcps1.3.3.2.4.2.1.2.2.3.1.2 "><p id="hss_01_0147__p201556481112">Total number of checked server configuration items.</p>
+</td>
+</tr>
+<tr id="hss_01_0147__row18155204111116"><td class="cellrowborder" valign="top" width="29.45%" headers="mcps1.3.3.2.4.2.1.2.2.3.1.1 "><p id="hss_01_0147__p1115510441110">Safe settings rate</p>
+</td>
+<td class="cellrowborder" valign="top" width="70.55%" headers="mcps1.3.3.2.4.2.1.2.2.3.1.2 "><p id="hss_01_0147__p7155184111112">Percentage of configuration items that passed the baseline check to the total number of check items. Failed items are displayed by risk level.</p>
+</td>
+</tr>
+<tr id="hss_01_0147__row31551145113"><td class="cellrowborder" valign="top" width="29.45%" headers="mcps1.3.3.2.4.2.1.2.2.3.1.1 "><p id="hss_01_0147__p121557461110">Top 5 servers with unsafe settings</p>
+</td>
+<td class="cellrowborder" valign="top" width="70.55%" headers="mcps1.3.3.2.4.2.1.2.2.3.1.2 "><p id="hss_01_0147__p815554161115">Statistics on servers with server configuration risks.</p>
+<p id="hss_01_0147__p83601183228">The top 5 servers with the highest risks are preferentially sorted. If no high-risk settings exist, the servers are sorted into medium-risk and low-risk ones in sequence.</p>
+</td>
+</tr>
+<tr id="hss_01_0147__row315510420113"><td class="cellrowborder" valign="top" width="29.45%" headers="mcps1.3.3.2.4.2.1.2.2.3.1.1 "><p id="hss_01_0147__p161558451110">Servers with weak passwords</p>
+</td>
+<td class="cellrowborder" valign="top" width="70.55%" headers="mcps1.3.3.2.4.2.1.2.2.3.1.2 "><p id="hss_01_0147__p1155749117">Total number of detected servers, as well as the numbers of servers with weak passwords, those without weak passwords, and those with weak password detection disabled.</p>
+</td>
+</tr>
+<tr id="hss_01_0147__row1015574111118"><td class="cellrowborder" valign="top" width="29.45%" headers="mcps1.3.3.2.4.2.1.2.2.3.1.1 "><p id="hss_01_0147__p161551747117">Top 5 servers with weak passwords</p>
+</td>
+<td class="cellrowborder" valign="top" width="70.55%" headers="mcps1.3.3.2.4.2.1.2.2.3.1.2 "><p id="hss_01_0147__p13155154121116">Statistics on the top 5 servers with most weak password risks.</p>
+</td>
+</tr>
+<tr id="hss_01_0147__row915544191116"><td class="cellrowborder" valign="top" width="29.45%" headers="mcps1.3.3.2.4.2.1.2.2.3.1.1 "><p id="hss_01_0147__p151564401111">Unsafe configuration</p>
+</td>
+<td class="cellrowborder" valign="top" width="70.55%" headers="mcps1.3.3.2.4.2.1.2.2.3.1.2 "><p id="hss_01_0147__p715614412112">Alarms generated for servers with configuration risks and the risk statistics.</p>
+</td>
+</tr>
+<tr id="hss_01_0147__row9156154151117"><td class="cellrowborder" valign="top" width="29.45%" headers="mcps1.3.3.2.4.2.1.2.2.3.1.1 "><p id="hss_01_0147__p19156164141119">Password complexity policies</p>
+</td>
+<td class="cellrowborder" valign="top" width="70.55%" headers="mcps1.3.3.2.4.2.1.2.2.3.1.2 "><p id="hss_01_0147__p1415614419118">Statistics on servers with weak passwords that do not meet the baseline requirements.</p>
+</td>
+</tr>
+<tr id="hss_01_0147__row915612412116"><td class="cellrowborder" valign="top" width="29.45%" headers="mcps1.3.3.2.4.2.1.2.2.3.1.1 "><p id="hss_01_0147__p615618431115">Common weak passwords</p>
+</td>
+<td class="cellrowborder" valign="top" width="70.55%" headers="mcps1.3.3.2.4.2.1.2.2.3.1.2 "><p id="hss_01_0147__p16156749112">Statistics on servers with weak passwords and accounts.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0147__section19449181615131"><h4 class="sectiontitle">Viewing and Processing Configuration Check Results</h4><ol id="hss_01_0147__ol818919225134"><li id="hss_01_0147__li019172212133"><span>Click the <span class="wintitle" id="hss_01_0147__wintitle7991165185812"><b>Unsafe Configurations</b></span> tab to view the risk items. For more information, see <a href="#hss_01_0147__table134691656201019">Table 2</a>.</span><p>
+<div class="tablenoborder"><a name="hss_01_0147__table134691656201019"></a><a name="table134691656201019"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0147__table134691656201019" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Parameter description</caption><thead align="left"><tr id="hss_01_0147__row11469556171012"><th align="left" class="cellrowborder" valign="top" width="15.43%" id="mcps1.3.4.2.1.2.1.2.3.1.1"><p id="hss_01_0147__p6469105641012">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="84.57000000000001%" id="mcps1.3.4.2.1.2.1.2.3.1.2"><p id="hss_01_0147__p146917561104">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0147__row24691456171015"><td class="cellrowborder" valign="top" width="15.43%" headers="mcps1.3.4.2.1.2.1.2.3.1.1 "><p id="hss_01_0147__p6469256201010">Risk level</p>
+</td>
+<td class="cellrowborder" valign="top" width="84.57000000000001%" headers="mcps1.3.4.2.1.2.1.2.3.1.2 "><p id="hss_01_0147__p74701756111010">Level of a detection result.</p>
+<ul id="hss_01_0147__ul1234183411410"><li id="hss_01_0147__li534193410142">High</li><li id="hss_01_0147__li14835123541412">Low</li><li id="hss_01_0147__li73554373141">Medium</li><li id="hss_01_0147__li1544511399142">Secure</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0147__row947085611100"><td class="cellrowborder" valign="top" width="15.43%" headers="mcps1.3.4.2.1.2.1.2.3.1.1 "><p id="hss_01_0147__p134701556131018">Baseline name</p>
+</td>
+<td class="cellrowborder" valign="top" width="84.57000000000001%" headers="mcps1.3.4.2.1.2.1.2.3.1.2 "><p id="hss_01_0147__p1047095617100">Name of the baseline that is checked.</p>
+</td>
+</tr>
+<tr id="hss_01_0147__row14701056131012"><td class="cellrowborder" valign="top" width="15.43%" headers="mcps1.3.4.2.1.2.1.2.3.1.1 "><p id="hss_01_0147__p1470125617108">Type</p>
+</td>
+<td class="cellrowborder" valign="top" width="84.57000000000001%" headers="mcps1.3.4.2.1.2.1.2.3.1.2 "><p id="hss_01_0147__p204701567109">Policy type of the baseline that has been checked.</p>
+<ul id="hss_01_0147__ul1980215891513"><li id="hss_01_0147__li18802175812157">Cloud security practices</li><li id="hss_01_0147__li11134180151617">DJCP MLPS</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0147__row14470156191016"><td class="cellrowborder" valign="top" width="15.43%" headers="mcps1.3.4.2.1.2.1.2.3.1.1 "><p id="hss_01_0147__p3470656171015">Check item</p>
+</td>
+<td class="cellrowborder" valign="top" width="84.57000000000001%" headers="mcps1.3.4.2.1.2.1.2.3.1.2 "><p id="hss_01_0147__p547045681011">Total number of configuration items that are checked.</p>
+</td>
+</tr>
+<tr id="hss_01_0147__row94709567102"><td class="cellrowborder" valign="top" width="15.43%" headers="mcps1.3.4.2.1.2.1.2.3.1.1 "><p id="hss_01_0147__p347015621010">Risky item</p>
+</td>
+<td class="cellrowborder" valign="top" width="84.57000000000001%" headers="mcps1.3.4.2.1.2.1.2.3.1.2 "><p id="hss_01_0147__p164715562101">Total number of the risky configurations.</p>
+</td>
+</tr>
+<tr id="hss_01_0147__row847117569107"><td class="cellrowborder" valign="top" width="15.43%" headers="mcps1.3.4.2.1.2.1.2.3.1.1 "><p id="hss_01_0147__p24712056161015">Affected servers</p>
+</td>
+<td class="cellrowborder" valign="top" width="84.57000000000001%" headers="mcps1.3.4.2.1.2.1.2.3.1.2 "><p id="hss_01_0147__p18471115631019">Total number of servers affected by the detected risks in a baseline.</p>
+</td>
+</tr>
+<tr id="hss_01_0147__row114919295115"><td class="cellrowborder" valign="top" width="15.43%" headers="mcps1.3.4.2.1.2.1.2.3.1.1 "><p id="hss_01_0147__p51507292117">Last scanned</p>
+</td>
+<td class="cellrowborder" valign="top" width="84.57000000000001%" headers="mcps1.3.4.2.1.2.1.2.3.1.2 "><p id="hss_01_0147__p15150102914112">Time when the last detection was performed.</p>
+</td>
+</tr>
+<tr id="hss_01_0147__row104711956101020"><td class="cellrowborder" valign="top" width="15.43%" headers="mcps1.3.4.2.1.2.1.2.3.1.1 "><p id="hss_01_0147__p10471165641014">Description</p>
+</td>
+<td class="cellrowborder" valign="top" width="84.57000000000001%" headers="mcps1.3.4.2.1.2.1.2.3.1.2 "><p id="hss_01_0147__p4471195610103">Description of a baseline.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0147__li10728131013594"><span>Click the target baseline name in the list to view the baseline description, affected servers, and details about all check items.</span><p><div class="fignone" id="hss_01_0147__fig656412259498"><span class="figcap"><b>Figure 2 </b>Viewing baseline check details</span><br><span><img id="hss_01_0147__en-us_topic_0000001517162850_image34422417524" src="en-us_image_0000001618050385.png"></span></div>
+</p></li><li id="hss_01_0147__li129254112020"><span>Handle risk items.</span><p><ul id="hss_01_0147__ul8994815142119"><li id="hss_01_0147__li399419154219"><strong id="hss_01_0147__b17267153215207">Ignoring risks</strong><p id="hss_01_0147__p123441410337">Click <strong id="hss_01_0147__b875010352207">Ignore</strong> in the <strong id="hss_01_0147__b1875011358206">Operation</strong> column of the target check item to ignore a check item. Select multiple check items and click <strong id="hss_01_0147__b6624154082012">Ignore</strong> to ignore them in batches.</p>
+<div class="fignone" id="hss_01_0147__fig1540651213183"><span class="figcap"><b>Figure 3 </b>Ignoring risks</span><br><span><img id="hss_01_0147__en-us_topic_0000001568322061_image104536306815" src="en-us_image_0000001567973464.png"></span></div>
+</li><li id="hss_01_0147__li133452010334"><strong id="hss_01_0147__b204441764218">Fixing risks</strong><ol type="a" id="hss_01_0147__ol934511014316"><li id="hss_01_0147__li1134515101636">Click <strong id="hss_01_0147__b3197181011218">View Details</strong> in the <strong id="hss_01_0147__b19197010102113">Operation</strong> column of the target risk item to view the check item details.</li><li id="hss_01_0147__li434515101236">View the content in the <strong id="hss_01_0147__b1656154874014">Audit Description</strong>, <strong id="hss_01_0147__b20662513408">Suggestion</strong>, and <strong id="hss_01_0147__b191061756194013">Affected Servers</strong>. Rectify the unsafe configurations.<div class="note" id="hss_01_0147__note93464101630"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0147__en-us_topic_0000001196788729_ul991224215366"><li id="hss_01_0147__en-us_topic_0000001196788729_li139121842113619">You are advised to fix the settings with high severity immediately and fix those with medium or low severity.</li></ul>
+</div></div>
+</li><li id="hss_01_0147__li156791127151913">After the repair is complete, click <strong id="hss_01_0147__b7122934204313">Verify</strong> on the <strong id="hss_01_0147__b5862142410443">Affected Servers</strong> tab page to verify the result.<div class="p" id="hss_01_0147__en-us_topic_0000001196788729_p6827170105816">If a failed check item has been fixed, you can update its status through verification.<div class="note" id="hss_01_0147__en-us_topic_0000001196788729_note6821551101215"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0147__en-us_topic_0000001196788729_ul116522816132"><li id="hss_01_0147__en-us_topic_0000001196788729_li178696296134">Currently, baseline checks are not supported for Windows OSs.</li><li id="hss_01_0147__li8926450395">The agent status of the target server must be online.</li><li id="hss_01_0147__li20929459390">Only one risk item can be verified at a time. Other risk items can be verified only after the risk items are verified.</li><li id="hss_01_0147__en-us_topic_0000001196788729_li156613286133">Baseline checks are supported for the following Linux OSs: Apache 2, Docker, MongoDB, Redis, MySQL 5, Nginx, Tomcat, SSH, vsftp, CentOS 6, CentOS 7, CentOS 8, EulerOS, Debian 9, Debian 10, Debian 11, Red Hat 6, Red Hat 7, Red Hat 8, Ubuntu 12, Ubuntu 14, Ubuntu 16, Ubuntu 18.</li></ul>
+</div></div>
+</div>
+</li><li id="hss_01_0147__li12902452164814">Click <strong id="hss_01_0147__b29781035174514">Verify</strong>.</li><li id="hss_01_0147__li32791492502">Return to the check item list page and view the status of the risk item.<p id="hss_01_0147__p293285065017"><a name="hss_01_0147__li32791492502"></a><a name="li32791492502"></a>The status changes to <strong id="hss_01_0147__b185071730154614">Verifying</strong>. The system starts automatic verification. After the verification is complete, check the status. If a check item failed to be fixed, click <strong id="hss_01_0147__b2674123617256">View Cause</strong> to view the cause. Then, fix it again.</p>
+</li></ol>
+</li></ul>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0147__section10763204041316"><h4 class="sectiontitle">Viewing and Processing the Password Complexity Policy Detection Result</h4><ol id="hss_01_0147__ol19459743204519"><li id="hss_01_0147__li94621143114514"><span>Click the <span class="wintitle" id="hss_01_0147__wintitle16462643134518"><b>Password Complexity Policy Detection</b></span> tab to view the risk statistical items and handling suggestions. For more information, see <a href="#hss_01_0147__table14462543144512">Table 3</a>.</span><p>
+<div class="tablenoborder"><a name="hss_01_0147__table14462543144512"></a><a name="table14462543144512"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0147__table14462543144512" frame="border" border="1" rules="all"><caption><b>Table 3 </b>Parameter description</caption><thead align="left"><tr id="hss_01_0147__row10463174318451"><th align="left" class="cellrowborder" valign="top" width="15.440000000000001%" id="mcps1.3.5.2.1.2.1.2.3.1.1"><p id="hss_01_0147__p5463443114513">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="84.56%" id="mcps1.3.5.2.1.2.1.2.3.1.2"><p id="hss_01_0147__p4463543104510">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0147__row1146314364514"><td class="cellrowborder" valign="top" width="15.440000000000001%" headers="mcps1.3.5.2.1.2.1.2.3.1.1 "><p id="hss_01_0147__p1790016305495">Server</p>
+</td>
+<td class="cellrowborder" valign="top" width="84.56%" headers="mcps1.3.5.2.1.2.1.2.3.1.2 "><p id="hss_01_0147__p597111811514">Name and  IP address of the detected server.</p>
+</td>
+</tr>
+<tr id="hss_01_0147__row5464124319458"><td class="cellrowborder" valign="top" width="15.440000000000001%" headers="mcps1.3.5.2.1.2.1.2.3.1.1 "><p id="hss_01_0147__p12464114315450">Password length</p>
+</td>
+<td class="cellrowborder" valign="top" width="84.56%" headers="mcps1.3.5.2.1.2.1.2.3.1.2 "><p id="hss_01_0147__p746414324518">Whether the password length of the target server meets the requirements.</p>
+<ul id="hss_01_0147__ul186749371537"><li id="hss_01_0147__li167410378533">Passed</li><li id="hss_01_0147__li0674137205316">Failed</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0147__row24641343124510"><td class="cellrowborder" valign="top" width="15.440000000000001%" headers="mcps1.3.5.2.1.2.1.2.3.1.1 "><p id="hss_01_0147__p1464174310456">Uppercase letters</p>
+</td>
+<td class="cellrowborder" valign="top" width="84.56%" headers="mcps1.3.5.2.1.2.1.2.3.1.2 "><p id="hss_01_0147__p12310193865415">Whether the uppercase letters used in the target server password meet the requirements.</p>
+<ul id="hss_01_0147__ul03111338115416"><li id="hss_01_0147__li10311838165418">Passed</li><li id="hss_01_0147__li531113855420">Failed</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0147__row4464194312459"><td class="cellrowborder" valign="top" width="15.440000000000001%" headers="mcps1.3.5.2.1.2.1.2.3.1.1 "><p id="hss_01_0147__p6464943124519">Lowercase letters</p>
+</td>
+<td class="cellrowborder" valign="top" width="84.56%" headers="mcps1.3.5.2.1.2.1.2.3.1.2 "><p id="hss_01_0147__p58751641185418">Whether the lowercase letters used in the target server password meet the requirements.</p>
+<ul id="hss_01_0147__ul168754412540"><li id="hss_01_0147__li10875441135417">Passed</li><li id="hss_01_0147__li14875104175413">Failed</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0147__row346434313453"><td class="cellrowborder" valign="top" width="15.440000000000001%" headers="mcps1.3.5.2.1.2.1.2.3.1.1 "><p id="hss_01_0147__p184641443194518">Digits</p>
+</td>
+<td class="cellrowborder" valign="top" width="84.56%" headers="mcps1.3.5.2.1.2.1.2.3.1.2 "><p id="hss_01_0147__p545294455411">Whether the digits used in the target server password meet the requirements.</p>
+<ul id="hss_01_0147__ul14453544105411"><li id="hss_01_0147__li64539443546">Passed</li><li id="hss_01_0147__li645364455416">Failed</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0147__row1446517437459"><td class="cellrowborder" valign="top" width="15.440000000000001%" headers="mcps1.3.5.2.1.2.1.2.3.1.1 "><p id="hss_01_0147__p3465104324518">Special characters</p>
+</td>
+<td class="cellrowborder" valign="top" width="84.56%" headers="mcps1.3.5.2.1.2.1.2.3.1.2 "><p id="hss_01_0147__p997220210550">Whether the special characters used in the target server password meet the requirements.</p>
+<ul id="hss_01_0147__ul1221135765419"><li id="hss_01_0147__li522175785415">Passed</li><li id="hss_01_0147__li1322165710541">Failed</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0147__row1046594374518"><td class="cellrowborder" valign="top" width="15.440000000000001%" headers="mcps1.3.5.2.1.2.1.2.3.1.1 "><p id="hss_01_0147__p144658434459">Suggestion</p>
+</td>
+<td class="cellrowborder" valign="top" width="84.56%" headers="mcps1.3.5.2.1.2.1.2.3.1.2 "><p id="hss_01_0147__p0465114318458">Suggestion for fixing unsafe passwords</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0147__li8287481734"><span>Modify the password complexity policy on the server as recommended.</span></li><li id="hss_01_0147__li071611322617"><span>After modifying the password complexity policy, perform a manual check in the upper part of the <strong id="hss_01_0147__b53213432481">Baseline Checks</strong> page to verify the result.</span><p><p id="hss_01_0147__p112712034762">If you do not perform a manual verification, HSS will automatically check the settings at 00:00:00 the next day.</p>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0147__section19765164012136"><h4 class="sectiontitle">Viewing and Processing Common Weak Password Detection Results</h4><ol id="hss_01_0147__ol1644331135813"><li id="hss_01_0147__li174521911145813"><span>Click the Common Weak Password Detection tab to view the statistics of risky weak password accounts on the server. For more information, see <a href="#hss_01_0147__table34521611135818">Viewing common weak password detection</a>.</span><p>
+<div class="tablenoborder"><a name="hss_01_0147__table34521611135818"></a><a name="table34521611135818"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0147__table34521611135818" frame="border" border="1" rules="all"><caption><b>Table 4 </b>Parameter description</caption><thead align="left"><tr id="hss_01_0147__row17453811145811"><th align="left" class="cellrowborder" valign="top" width="19.55%" id="mcps1.3.6.2.1.2.1.2.3.1.1"><p id="hss_01_0147__p2453181120580">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="80.45%" id="mcps1.3.6.2.1.2.1.2.3.1.2"><p id="hss_01_0147__p104531211135817">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0147__row154531511165811"><td class="cellrowborder" valign="top" width="19.55%" headers="mcps1.3.6.2.1.2.1.2.3.1.1 "><p id="hss_01_0147__p147501959135919">Server</p>
+</td>
+<td class="cellrowborder" valign="top" width="80.45%" headers="mcps1.3.6.2.1.2.1.2.3.1.2 "><p id="hss_01_0147__p187503591591">Name and  IP address of the detected server.</p>
+</td>
+</tr>
+<tr id="hss_01_0147__row145401175814"><td class="cellrowborder" valign="top" width="19.55%" headers="mcps1.3.6.2.1.2.1.2.3.1.1 "><p id="hss_01_0147__p1075012592592">Account name</p>
+</td>
+<td class="cellrowborder" valign="top" width="80.45%" headers="mcps1.3.6.2.1.2.1.2.3.1.2 "><p id="hss_01_0147__p175462020410">Accounts with weak passwords that are detected on the target server.</p>
+</td>
+</tr>
+<tr id="hss_01_0147__row1845491135817"><td class="cellrowborder" valign="top" width="19.55%" headers="mcps1.3.6.2.1.2.1.2.3.1.1 "><p id="hss_01_0147__p1493256010">Account type</p>
+</td>
+<td class="cellrowborder" valign="top" width="80.45%" headers="mcps1.3.6.2.1.2.1.2.3.1.2 "><p id="hss_01_0147__p201131558115">Type of an account.</p>
+</td>
+</tr>
+<tr id="hss_01_0147__row1145401119581"><td class="cellrowborder" valign="top" width="19.55%" headers="mcps1.3.6.2.1.2.1.2.3.1.1 "><p id="hss_01_0147__p820718327210">Usage duration (Days)</p>
+</td>
+<td class="cellrowborder" valign="top" width="80.45%" headers="mcps1.3.6.2.1.2.1.2.3.1.2 "><p id="hss_01_0147__p445421145813">Period for using a weak password.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0147__li8580128779"><span>Log in to the server and change the weak password.</span><p><div class="note" id="hss_01_0147__note1724411221159"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0147__ul628718521215"><li id="hss_01_0147__li152878519124">To enhance server security, you are advised to modify the accounts with weak passwords in a timely manner, such as SSH accounts.</li><li id="hss_01_0147__li3287751128">To protect internal data of your server, you are advised to modify software accounts that use weak passwords, such as MySQL accounts and FTP accounts.</li></ul>
+<ul id="hss_01_0147__ul169876424123"><li id="hss_01_0147__li3858202812121">A password should contain more than eight characters, including uppercase letters, lowercase letters, digits, and special characters.</li></ul>
+</div></div>
+</p></li><li id="hss_01_0147__li379912215918"><span>After the weak password is changed, perform a manual check in the upper part of the <strong id="hss_01_0147__b16534131905017">Baseline Checks</strong> page to verify the result.</span><p><p id="hss_01_0147__p9799621196">If you do not perform a manual verification, HSS will automatically check the settings at 00:00:00 the next day.</p>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0145.html">Baseline Inspection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0149.html b/docs/hss/umn/hss_01_0149.html
new file mode 100644
index 00000000..b726f720
--- /dev/null
+++ b/docs/hss/umn/hss_01_0149.html
@@ -0,0 +1,13 @@
+<a name="hss_01_0149"></a><a name="hss_01_0149"></a>
+
+<h1 class="topictitle1">How Do I View Configuration Check Reports?</h1>
+<div id="body1574164571154"><p id="hss_01_0149__p2074094014371">You can view the configuration check details online.</p>
+<div class="section" id="hss_01_0149__section1313165020562"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0149__ol19541416431"><li id="hss_01_0149__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0149__li3439101117214"><span>In the navigation pane on the left, choose <strong id="hss_01_0149__b9617195863420">Prediction</strong> &gt; <strong id="hss_01_0149__b9617175833412">Baseline Checks</strong>.</span></li><li class="msonormal" id="hss_01_0149__li16990241163312"><span>On the <strong id="hss_01_0149__b734674013514">Unsafe Configurations</strong> tab, click the baseline name. The details page is displayed.</span></li><li id="hss_01_0149__li1934969423"><span>In the row containing the target check item, click <strong id="hss_01_0149__b1271523810363">View Details</strong> in the <strong id="hss_01_0149__b18189184113611">Operation</strong> column to view the check item details and affected servers.</span></li><li class="msonormal" id="hss_01_0149__li149547169310"><span>You can rectify unsafe configuration items and ignore trusted configuration items based on the suggestions provided.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0165.html">Unsafe Settings</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0153.html b/docs/hss/umn/hss_01_0153.html
new file mode 100644
index 00000000..60503a3d
--- /dev/null
+++ b/docs/hss/umn/hss_01_0153.html
@@ -0,0 +1,27 @@
+<a name="hss_01_0153"></a><a name="hss_01_0153"></a>
+
+<h1 class="topictitle1">WTP</h1>
+<div id="body1574040073869"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0216.html">Adding a Protected Directory</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0106.html">Configuring Remote Backup</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0466.html">Adding a Privileged Process</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0217.html">Enabling/Disabling Scheduled Static WTP</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0218.html">Enabling Dynamic WTP</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0576.html">Viewing WTP Reports</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0087.html">Viewing WTP Events</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0142.html">Prevention</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0164.html b/docs/hss/umn/hss_01_0164.html
new file mode 100644
index 00000000..93bc4c8b
--- /dev/null
+++ b/docs/hss/umn/hss_01_0164.html
@@ -0,0 +1,31 @@
+<a name="hss_01_0164"></a><a name="hss_01_0164"></a>
+
+<h1 class="topictitle1">Intrusions</h1>
+<div id="body0000001123241968"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0206.html">What Do I Do If My Servers Are Subjected to a Mining Attack?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0207.html">Why a Process Is Still Isolated After It Was Whitelisted?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0243.html">What Do I Do If a Mining Process Is Detected on a Server?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0193.html">Why Some Attacks on Servers Are Not Detected?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0013.html">Can I Unblock an IP Address Blocked by HSS, and How?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0204.html">Why a Blocked IP Address Is Automatically Unblocked?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0427.html">How Often Does HSS Detect, Isolate, and Kill Malicious Programs?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0429.html">What Do I Do If an IP Address Is Blocked by HSS?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0430.html">How Do I Defend Against Ransomware Attacks?</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0032.html">FAQs</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0165.html b/docs/hss/umn/hss_01_0165.html
new file mode 100644
index 00000000..01747f34
--- /dev/null
+++ b/docs/hss/umn/hss_01_0165.html
@@ -0,0 +1,21 @@
+<a name="hss_01_0165"></a><a name="hss_01_0165"></a>
+
+<h1 class="topictitle1">Unsafe Settings</h1>
+<div id="body1604307979814"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0043.html">How Do I Install a PAM and Set a Proper Password Complexity Policy in a Linux OS?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0095.html">How Do I Set a Proper Password Complexity Policy in a Windows OS?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0198.html">How Do I Handle Unsafe Configurations?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0149.html">How Do I View Configuration Check Reports?</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0032.html">FAQs</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0166.html b/docs/hss/umn/hss_01_0166.html
new file mode 100644
index 00000000..3d2c8fa4
--- /dev/null
+++ b/docs/hss/umn/hss_01_0166.html
@@ -0,0 +1,16 @@
+<a name="hss_01_0166"></a><a name="hss_01_0166"></a>
+
+<h1 class="topictitle1">How Do I Set a Secure Password?</h1>
+<div id="body1566284861162"><div class="p" id="hss_01_0166__p8060118">Comply with the following rules:<ul id="hss_01_0166__ul668410515716"><li id="hss_01_0166__li868465114712">Use a password with high complexity.<p id="hss_01_0166__p1068415514712"><a name="hss_01_0166__li868465114712"></a><a name="li868465114712"></a>The password must meet the following requirements:</p>
+<ol id="hss_01_0166__ol1868485110711"><li id="hss_01_0166__li868475110710">Contains at least eight characters.</li><li id="hss_01_0166__li12684651279">Contain at least three types of the following characters:<ol type="a" id="hss_01_0166__ol468419511279"><li id="hss_01_0166__li76842051174">Uppercase letters (A-Z)</li><li id="hss_01_0166__li1268411511971">Lowercase letters (a-z)</li><li id="hss_01_0166__li1368413516719">Digital (0-9)</li><li id="hss_01_0166__li56844513711">Special characters</li></ol>
+</li><li id="hss_01_0166__li1968414511079">The password cannot be the username or the username in reverse order.</li></ol>
+</li><li id="hss_01_0166__li468411517712">Do not use common weak passwords that are easy to crack, including:<ul id="hss_01_0166__ul176841519715"><li id="hss_01_0166__li76841251778">Birthday, name, ID card, mobile number, email address, user ID, time, or date</li><li id="hss_01_0166__li1120517597517">Consecutive digits and letters, adjacent keyboard characters, or passwords in rainbow tables</li><li id="hss_01_0166__li10224141655620">Phrases</li><li id="hss_01_0166__li36841151074">Common words, such as company names, <strong id="hss_01_0166__b191995553113">admin</strong>, and <strong id="hss_01_0166__b2097795116117">root</strong></li></ul>
+</li><li id="hss_01_0166__li16841851676">Do not use empty or default passwords.</li><li id="hss_01_0166__li23347365716">Do not reuse the latest five passwords you used.</li><li id="hss_01_0166__li116846511073">Use different passwords for different websites and accounts.</li><li id="hss_01_0166__li916912919018">Do not use the same pair of username and password for multiple systems.</li><li id="hss_01_0166__li1968515511273">Change your password at least once every 90 days.</li><li id="hss_01_0166__li1614413904519">If an account has an initial password, force the user to change the password upon first login or within a limited period of time.</li><li id="hss_01_0166__li279817375482">You are advised to set a locking policy for all accounts. If the consecutive login failures of an account exceed five times, the account will be locked, and will be automatically unlocked in 30 minutes.</li><li id="hss_01_0166__li4332105615505">You are advised to set a logout policy. Accounts that have been inactive for more than 10 minutes will be automatically logged out or locked.</li><li id="hss_01_0166__li5574218115117">You are advised to force users to change the initial passwords of their accounts upon their first login.</li><li id="hss_01_0166__li72885427510">You are advised to retain account login logs for at least 180 days. The logs cannot contain user passwords.</li></ul>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0196.html">Weak Passwords and Unsafe Accounts</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0174.html b/docs/hss/umn/hss_01_0174.html
new file mode 100644
index 00000000..73d05116
--- /dev/null
+++ b/docs/hss/umn/hss_01_0174.html
@@ -0,0 +1,24 @@
+<a name="hss_01_0174"></a><a name="hss_01_0174"></a>
+
+<h1 class="topictitle1">Switching the HSS Quota Edition </h1>
+<div id="body0000001096710491"><p id="hss_01_0174__p14737124916">You can switch the quota edition of a server to the enterprise or premium edition as needed.</p>
+<div class="section" id="hss_01_0174__section3236266543"><h4 class="sectiontitle">Precautions</h4><p id="hss_01_0174__p2814143210387">You can switch to the enterprise or premium edition.</p>
+<p id="hss_01_0174__p6331103692920"></p>
+</div>
+<div class="section" id="hss_01_0174__section19294112532518"><h4 class="sectiontitle">Prerequisites</h4><ul id="hss_01_0174__ul1052533083518"><li id="hss_01_0174__li1352563011354">The server whose protection quota is to be changed is in the <strong id="hss_01_0174__b9132039173712">Protected</strong> state.</li><li id="hss_01_0174__li1452533020358">Before switching to a lower edition, check the server, handle known risks, and record operation information to prevent O&amp;M errors and attacks.</li></ul>
+</div>
+<div class="section" id="hss_01_0174__section1260792753516"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0174__ol956143519379"><li id="hss_01_0174__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0174__li830314169200"><span>Click <span><img id="hss_01_0174__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0174__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0174__hss_01_0571_b14857117404"><span id="hss_01_0174__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0174__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0174__li7679159221"><span>In the navigation pane, choose <strong id="hss_01_0174__hss_01_0230_b19690153519239">Asset Management</strong> &gt; <strong id="hss_01_0174__hss_01_0230_b869113562316">Servers &amp; Quota</strong>. Click the <strong id="hss_01_0174__hss_01_0230_b1169173562312">Servers</strong> tab.</span><p><div class="fignone" id="hss_01_0174__hss_01_0230_fig1982141172018"><span class="figcap"><b>Figure 1 </b>Server list</span><br><span><img id="hss_01_0174__hss_01_0230_en-us_topic_0000001568441781_image16401167122512" src="en-us_image_0000001801549361.png"></span></div>
+</p></li></ol><ol start="4" id="hss_01_0174__ol051617535371"><li id="hss_01_0174__li1652094512387"><span>In the <strong id="hss_01_0174__b203671519184920">Operation</strong> column of a server, click <strong id="hss_01_0174__b11367191974912">Switch Edition</strong>.</span><p><div class="notice" id="hss_01_0174__note87442357174"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><ul id="hss_01_0174__ul9744173561710"><li id="hss_01_0174__li1591401213404">If <span id="hss_01_0174__text195155202211">HSS</span> is switched from a higher edition to a lower edition, protected servers will be more vulnerable to attacks.</li><li id="hss_01_0174__li1474463561717">You can switch from other editions to the enterprise, or premium edition. To use the WTP edition, you need to purchase and enable it separately.</li></ul>
+</div></div>
+</p></li><li id="hss_01_0174__li18411101512717"><span>Click <strong id="hss_01_0174__b14871633322249">OK</strong>.</span><p><p id="hss_01_0174__p395331617719">The edition information in the <strong id="hss_01_0174__b13849881222249">Edition</strong> column will be updated. If the edition information in the <strong id="hss_01_0174__b1039511310302">Edition</strong> column is updated, the <span id="hss_01_0174__text839514353014">HSS</span> edition switch succeeded.</p>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0174__section7226539817"><h4 class="sectiontitle">Follow-up Procedure</h4><ul id="hss_01_0174__ul13334143454"><li id="hss_01_0174__li1483427104717">After the edition is switched, you can allocate the idle edition quota to other servers.</li><li id="hss_01_0174__li193331131857">After switching to a lower edition, clear important data on the server, stop important applications on the server, and disconnect the server from the external network to avoid unnecessary loss caused by attacks.</li><li id="hss_01_0174__li173567110920">After switching to a higher edition, perform a security detection on the server, handle security risks on the server, and configure necessary functions in a timely manner.</li></ul>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0397.html">Server Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0176.html b/docs/hss/umn/hss_01_0176.html
new file mode 100644
index 00000000..e17189c7
--- /dev/null
+++ b/docs/hss/umn/hss_01_0176.html
@@ -0,0 +1,45 @@
+<a name="hss_01_0176"></a><a name="hss_01_0176"></a>
+
+<h1 class="topictitle1">What Do I Do If an Alarm Still Exists After I Fixed a Vulnerability?</h1>
+<div id="body0000001192337547"><p id="hss_01_0176__p149714314504">Perform the following operations to locate the cause and fix the problems.</p>
+<div class="note" id="hss_01_0176__note46467132530"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0176__p2583427514">For more information, see the section "Handling Vulnerabilities".</p>
+</div></div>
+<div class="section" id="hss_01_0176__section0301030174111"><h4 class="sectiontitle">Possible Causes and Solutions on a Linux Server</h4><ul id="hss_01_0176__ul1130313127111"><li id="hss_01_0176__li142771626112019">No yum sources have been configured.<p id="hss_01_0176__p1547174223513"><a name="hss_01_0176__li142771626112019"></a><a name="li142771626112019"></a>In this case, configure a yum source suitable for your Linux OS, and fix the vulnerability again.</p>
+</li><li id="hss_01_0176__li1391012167126">The yum source does not have the latest upgrade package of the corresponding software.<p id="hss_01_0176__p66981611285"><a name="hss_01_0176__li1391012167126"></a><a name="li1391012167126"></a>Switch to the yum source having the required package and fix the vulnerability again.</p>
+</li><li id="hss_01_0176__li031951661512">The intranet environment cannot connect to Internet.<p id="hss_01_0176__p1169272516362"><a name="hss_01_0176__li031951661512"></a><a name="li031951661512"></a>Servers need to access the Internet and use external yum sources to fix vulnerabilities. If your servers cannot access the Internet, or the external image sources cannot provide stable services, you can use the image source.</p>
+</li><li id="hss_01_0176__li1193712307457">The old kernel version remains.<p id="hss_01_0176__p1158103824511"><a name="hss_01_0176__li1193712307457"></a><a name="li1193712307457"></a>Old kernel versions often remain in servers after upgrade. You can run the <a href="#hss_01_0176__table1431544555412">verification commands</a> to check whether the current kernel version meets the vulnerability fix requirements. If it does, ignore the vulnerability on the <span class="uicontrol" id="hss_01_0176__uicontrol48183724910821"><b>Linux Vulnerabilities</b></span> tab of the <strong id="hss_01_0176__b22129263810821">Vulnerabilities</strong> page. You are not advised to delete the old kernel.</p>
+
+<div class="tablenoborder"><a name="hss_01_0176__table1431544555412"></a><a name="table1431544555412"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0176__table1431544555412" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Verification commands</caption><thead align="left"><tr id="hss_01_0176__row731613456548"><th align="left" class="cellrowborder" valign="top" width="38.85%" id="mcps1.3.3.2.4.2.2.3.1.1"><p id="hss_01_0176__p113164451548">OS</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="61.150000000000006%" id="mcps1.3.3.2.4.2.2.3.1.2"><p id="hss_01_0176__p14316645125420">Verification Command</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0176__row93161645165414"><td class="cellrowborder" valign="top" width="38.85%" headers="mcps1.3.3.2.4.2.2.3.1.1 "><p id="hss_01_0176__p1731674515549">CentOS/Fedora /Euler/Redhat/Oracle</p>
+</td>
+<td class="cellrowborder" valign="top" width="61.150000000000006%" headers="mcps1.3.3.2.4.2.2.3.1.2 "><p id="hss_01_0176__p14316114505411">rpm -qa | grep <em id="hss_01_0176__i180155960810821">Software_name</em></p>
+</td>
+</tr>
+<tr id="hss_01_0176__row173161345165419"><td class="cellrowborder" valign="top" width="38.85%" headers="mcps1.3.3.2.4.2.2.3.1.1 "><p id="hss_01_0176__p193161245175413">Debian/Ubuntu</p>
+</td>
+<td class="cellrowborder" valign="top" width="61.150000000000006%" headers="mcps1.3.3.2.4.2.2.3.1.2 "><p id="hss_01_0176__p13167453541">dpkg -l | grep <em id="hss_01_0176__i69414149110821">Software_name</em></p>
+</td>
+</tr>
+<tr id="hss_01_0176__row183161045115414"><td class="cellrowborder" valign="top" width="38.85%" headers="mcps1.3.3.2.4.2.2.3.1.1 "><p id="hss_01_0176__p931684515416">Gentoo</p>
+</td>
+<td class="cellrowborder" valign="top" width="61.150000000000006%" headers="mcps1.3.3.2.4.2.2.3.1.2 "><p id="hss_01_0176__p20316845155412">emerge --search <em id="hss_01_0176__i189461685110821">Software_name</em></p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</li><li id="hss_01_0176__li4385104514466"><strong id="hss_01_0176__b86941052134615">The server is not restarted after the kernel vulnerability is fixed.</strong><p id="hss_01_0176__p146981134164719">After the kernel vulnerability is fixed, restart the server. If the server is not restarted, the vulnerability alarm still exists.</p>
+</li></ul>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0246.html">Vulnerability Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0183.html b/docs/hss/umn/hss_01_0183.html
new file mode 100644
index 00000000..114696d0
--- /dev/null
+++ b/docs/hss/umn/hss_01_0183.html
@@ -0,0 +1,47 @@
+<a name="hss_01_0183"></a><a name="hss_01_0183"></a>
+
+<h1 class="topictitle1">How Do I Handle a Brute-force Attack Alarm?</h1>
+<div id="body0000001123241966"><ul id="hss_01_0183__ul8696155972013"><li id="hss_01_0183__li1069675917204">If a brute-force attack succeeded, take immediate measures to prevent attackers from further actions, such as breaching data, performing DDoS attacks, or implanting ransomware, miners, or Trojans.</li><li id="hss_01_0183__li36979597201">If a brute-force attack was blocked, take immediate measures to enhance your servers.</li></ul>
+<div class="section" id="hss_01_0183__section233504962118"><h4 class="sectiontitle">Mind map for troubleshooting</h4><p id="hss_01_0183__p164031541374">The following mind map describes how to handle a brute-force attack alarm.</p>
+<div class="fignone" id="hss_01_0183__fig824013488439"><span class="figcap"><b>Figure 1 </b>Mind map for troubleshooting</span><br><span><img id="hss_01_0183__image1753692715449" src="en-us_image_0000001568317709.png"></span></div>
+</div>
+<div class="section" id="hss_01_0183__section1676855114615"><h4 class="sectiontitle">Handling the Alarm of a Successful Brute-force Attack</h4><p id="hss_01_0183__p1445017512513">If you received an alarm notification indicating that your account had been cracked, you are advised to harden your servers as soon as possible.</p>
+<ol id="hss_01_0183__ol19414104442411"><li id="hss_01_0183__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0183__li8200185841419"><span>Check whether the IP address that triggered the alarm is valid.</span><p><ol type="a" id="hss_01_0183__ol0311231193218"><li id="hss_01_0183__li1044952154613">In the navigation pane, choose <span class="menucascade" id="hss_01_0183__menucascade462934117154"><b><span class="uicontrol" id="hss_01_0183__uicontrol862813412151">Detection</span></b> &gt; <b><span class="uicontrol" id="hss_01_0183__uicontrol17628144171519">Alarms</span></b></span>.</li><li id="hss_01_0183__li7566813330">In the <strong id="hss_01_0183__b443411165249">Alarm Types</strong> area, select <strong id="hss_01_0183__b5434131612414">Abnormal User Behavior</strong> &gt; <strong id="hss_01_0183__b154341616142420">Abnormal logins</strong> to view abnormal login alarm events.</li><li id="hss_01_0183__li11438183316324">Click the alarm event name. On the details page that is displayed, check the login IP address.<ul id="hss_01_0183__ul576214611475"><li id="hss_01_0183__li376214613475">If the IP address is from a normal user (for example, who entered incorrect password for multiple times but logged in before their account is blocked), your server is not intruded. In this case, you can click <strong id="hss_01_0183__b974019553101337">Handle</strong> and ignore the event.</li><li id="hss_01_0183__li170854884915">If the IP address is invalid, your server may have been intruded.<p id="hss_01_0183__p458864916551"><a name="hss_01_0183__li170854884915"></a><a name="li170854884915"></a>In this case, mark this event as handled, log in to the intruded server, and change its password to a stronger one. For details, see <a href="hss_01_0166.html">How Do I Set a Secure Password?</a></p>
+</li></ul>
+</li></ol>
+</p></li><li id="hss_01_0183__li14669152561415"><span>Check for and eliminate malicious programs.</span><p><ol type="a" id="hss_01_0183__ol1420694318400"><li id="hss_01_0183__li1566213574466">In the navigation pane, choose <span class="menucascade" id="hss_01_0183__menucascade105901749133710"><b><span class="uicontrol" id="hss_01_0183__uicontrol45902491371">Detection</span></b> &gt; <b><span class="uicontrol" id="hss_01_0183__uicontrol135906495377">Alarms</span></b></span>.</li><li id="hss_01_0183__li19687163075317">In the <strong id="hss_01_0183__b3338191315381">Alarm Types</strong> area, select <strong id="hss_01_0183__b12252510204917">Malware</strong> &gt; <strong id="hss_01_0183__b826617313491">Unclassified malware</strong> to filter the    unclassified malware.</li><li id="hss_01_0183__li1720613432406">In the <strong id="hss_01_0183__b14830785191">Alarm Type</strong> column, select <strong id="hss_01_0183__b7930182372119">Malicious program</strong> and check alarm events.<div class="p" id="hss_01_0183__p161247110447">You can click an alarm name to view alarm event details.<ul id="hss_01_0183__ul146791452105314"><li id="hss_01_0183__li767925215534">If you find malicious programs implanted in your servers, locate them based on their process paths, users running them, and startup time.<p id="hss_01_0183__p1076412611317"><a name="hss_01_0183__li767925215534"></a><a name="li767925215534"></a>To kill a malicious program in an alarm event, click <strong id="hss_01_0183__b1378602809101337">Handle</strong> in the <strong id="hss_01_0183__b1914419346462">Operation</strong> column of an alarm and select <strong id="hss_01_0183__b1873916872101337">Isolate and kill</strong>.</p>
+</li><li id="hss_01_0183__li178295195714">If you have confirmed that all the malicious program alarms are false, go to <a href="#hss_01_0183__li206265374135">Step 8</a>.</li></ul>
+</div>
+</li></ol>
+</p></li><li id="hss_01_0183__li206265374135"><a name="hss_01_0183__li206265374135"></a><a name="li206265374135"></a><span>Check for suspicious account change records.</span><p><ol type="a" id="hss_01_0183__ol1313372475119"><li id="hss_01_0183__li1713342465116">In the navigation pane on the left, choose <strong id="hss_01_0183__b1810517521110">Asset Management</strong> &gt; <strong id="hss_01_0183__b20151756113">Server Fingerprints</strong>.</li><li id="hss_01_0183__li1313316248511">Click the <strong id="hss_01_0183__b128316106457">Account Information</strong> tab. Detect suspicious account change records to prevent attackers from creating accounts or escalating account permissions (for example, adding login permissions to an account)..</li></ol>
+</p></li><li id="hss_01_0183__li4394151419134"><span><strong id="hss_01_0183__b3775381381">Check and handle invalid accounts.</strong></span><p><ol type="a" id="hss_01_0183__ol10865547104815"><li id="hss_01_0183__li519816615497">In the navigation pane, choose <span class="menucascade" id="hss_01_0183__menucascade159741641883"><b><span class="uicontrol" id="hss_01_0183__uicontrol7973174114810">Detection</span></b> &gt; <b><span class="uicontrol" id="hss_01_0183__uicontrol12974164119818">Alarms</span></b></span>.</li><li id="hss_01_0183__li5874193085014">In the <strong id="hss_01_0183__b1927121111238">Alarm Types</strong> area, select <strong id="hss_01_0183__b18527151413231">Abnormal User Behavior</strong> &gt; <strong id="hss_01_0183__b1543141820238">Invalid accounts</strong>.  View and handle the invalid account alarms.</li></ol>
+</p></li><li id="hss_01_0183__li1026793353016"><span>Check for and fix unsafe settings.</span><p><p id="hss_01_0183__p16535114073020">Check for and fix weak password complexity policies and unsafe software settings on your servers. </p>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0183__section1212965819218"><h4 class="sectiontitle">Handling the Alarm of a Blocked Brute-force Attack</h4><p id="hss_01_0183__p168601028151217">If you have enabled , <span id="hss_01_0183__text105596216018">HSS</span> will protect your servers against brute-force attacks.</p>
+<p id="hss_01_0183__p627710581129">You can configure a login security policy to specify the brute force cracking determination mode and blocking duration. </p>
+<p id="hss_01_0183__p13304155162219">If you have not configured any login security detection policy, the following default login security policy is used: HSS will block an IP address if it has five or more brute-force attack attempts detected within 30 seconds, or 15 or more brute-force attack attempts detected within 3,600 seconds.</p>
+<p id="hss_01_0183__p12284144273214">If you receive an alarm indicating that an attack source IP address is blocked, check whether the source IP address is a trusted IP address.</p>
+<div class="p" id="hss_01_0183__p239210103019"><strong id="hss_01_0183__b086765911013">Constraints and Limitations</strong><ul id="hss_01_0183__ul228519712710"><li id="hss_01_0183__li43091810278">Linux<p id="hss_01_0183__p19879610577"><a name="hss_01_0183__li43091810278"></a><a name="li43091810278"></a>On servers running the EulerOS with ARM, HSS does not block the IP addresses suspected of SSH brute-force attacks, but only generates alarms.</p>
+</li><li id="hss_01_0183__li862610130714">Windows<ul id="hss_01_0183__ul6287416121717"><li id="hss_01_0183__li1077713911718">Authorize the Windows firewall when you enable protection for a Windows server. Do not disable the Windows firewall during the <span id="hss_01_0183__text960184712312">HSS</span> in-service period. If the Windows firewall is disabled, HSS cannot block brute-force attack IP addresses.</li><li id="hss_01_0183__li07798915176">If the Windows firewall is manually enabled, HSS may also fail to block brute-force attack IP addresses.</li></ul>
+</li></ul>
+</div>
+<p id="hss_01_0183__p8534124911013"><strong id="hss_01_0183__b1714711571601">Procedure</strong></p>
+<ol id="hss_01_0183__ol3421174144710"><li id="hss_01_0183__li10624112935611"><span>Log in to the management console.</span></li><li id="hss_01_0183__li14778161420"><span>Choose <span class="menucascade" id="hss_01_0183__menucascade2752162019246"><b><span class="uicontrol" id="hss_01_0183__uicontrol975242017245">Detection</span></b> &gt; <b><span class="uicontrol" id="hss_01_0183__uicontrol1752192019240">Alarms</span></b></span>. Choose <strong id="hss_01_0183__b8753020182413">Abnormal User Behavior</strong> &gt; <span class="parmvalue" id="hss_01_0183__parmvalue1675314202249"><b>Brute-force attacks</b></span> to view account brute force events.</span><p><div class="p" id="hss_01_0183__p7823121414275">Brute-force attack alarms will be generated if:<ul id="hss_01_0183__ul117059459142"><li id="hss_01_0183__li37057451142">The system uses weak passwords, is under brute-force attacks, and attacker IP addresses are blocked.</li><li id="hss_01_0183__li1070534581413">Users fail to log in after several incorrect password attempts, and their IP addresses are blocked.</li></ul>
+</div>
+</p></li><li id="hss_01_0183__li245695182811"><span>Check whether the login IP address triggering the alarm is valid.</span><p><ul id="hss_01_0183__ul3596124092716"><li id="hss_01_0183__li17596164014275">If the IP address is valid,<ul id="hss_01_0183__ul728120418472"><li id="hss_01_0183__li72817414712">To handle a false alarm, click <strong id="hss_01_0183__b171616192252">Handle</strong> in the row of the alarm event. Mark this event as <strong id="hss_01_0183__b4813425184117">Ignore</strong> or <strong id="hss_01_0183__b11320439412">Add to <span id="hss_01_0183__text5899201810591">Login Whitelist</span></strong>.<p id="hss_01_0183__p2154136104715">This does not unblock the IP address.</p>
+</li><li id="hss_01_0183__li132821484717">To unblock the IP address, click <strong id="hss_01_0183__b9946124153219">View Details</strong> under <strong id="hss_01_0183__b1328809403101337">Blocked IP Addresses</strong>, select the IP address, and unblock it. Alternatively, you can just wait for it to be automatically unblocked when its blocking duration expires. The default blocking duration is 12 hours.</li></ul>
+</li><li id="hss_01_0183__li106476175346">If the source IP address is invalid or unknown,<p id="hss_01_0183__p1986131525018"><a name="hss_01_0183__li106476175346"></a><a name="li106476175346"></a>Mark this event as handled.</p>
+<p id="hss_01_0183__p7910786296">Immediately log in to your server and change your password to a stronger one. </p>
+</li></ul>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0183__section859681711467"><h4 class="sectiontitle">Helpful Links</h4><ul id="hss_01_0183__ul19706132215476"><li id="hss_01_0183__li17706182294717"><a href="hss_01_0008.html">How Does HSS Intercept Brute Force Attacks?</a></li><li id="hss_01_0183__li955412961919"><a href="hss_01_0287.html">How Do I Unblock an IP Address?</a></li></ul>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0038.html">Brute-force Attack Defense</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0185.html b/docs/hss/umn/hss_01_0185.html
new file mode 100644
index 00000000..ad790cc1
--- /dev/null
+++ b/docs/hss/umn/hss_01_0185.html
@@ -0,0 +1,13 @@
+<a name="hss_01_0185"></a><a name="hss_01_0185"></a>
+
+<h1 class="topictitle1">How Do I Modify a Protected Directory?</h1>
+<div id="body1568272552578"><ol id="hss_01_0185__ol94755191293"><li id="hss_01_0185__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0185__li20278542121116"><span>In the navigation pane, choose <strong id="hss_01_0185__b157451560322">Prevention</strong> &gt; <strong id="hss_01_0185__b1155072352215">Web Tamper Protection</strong>.</span></li><li id="hss_01_0185__li159591239193014"><span>Locate the target server and click <strong id="hss_01_0185__b17813477308">Configure Protection</strong> in the <strong id="hss_01_0185__b177904710303">Operation</strong> column.</span></li><li id="hss_01_0185__li87341013310"><span>Click <strong id="hss_01_0185__b1471195711286">Settings</strong>. On the <strong id="hss_01_0185__b769054193011">Protected Directory Settings</strong> page on the right, select the directory to be edited and click <strong id="hss_01_0185__b3735323192919">Edit</strong> in the <strong id="hss_01_0185__b6213163512911">Operation </strong>column.</span><p><div class="note" id="hss_01_0185__note6600826172812"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0185__ul196065142812"><li id="hss_01_0185__li16607513283">If you need to modify files in the protected directory, stop protection for the protected directory first.</li><li id="hss_01_0185__li161925213281">After the files are modified, resume protection for the directory in a timely manner.</li></ul>
+</div></div>
+</p></li><li id="hss_01_0185__li667328200"><span>In the <strong id="hss_01_0185__b123242054184714">Edit Protected Directory</strong> dialog box, modify the settings and click <strong id="hss_01_0185__b886315410488">OK</strong>.</span></li></ol>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0250.html">Web Tamper Protection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0188.html b/docs/hss/umn/hss_01_0188.html
new file mode 100644
index 00000000..b97c3715
--- /dev/null
+++ b/docs/hss/umn/hss_01_0188.html
@@ -0,0 +1,23 @@
+<a name="hss_01_0188"></a><a name="hss_01_0188"></a>
+
+<h1 class="topictitle1">Abnormal Logins</h1>
+<div id="body1604307979814"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0189.html">Why Do I Still Receive Remote Login Alarms After Configuring the Login IP Whitelist?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0091.html">How Do I Check the User IP address of a Remote Login?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0113.html">What Can I Do If an Alarm Indicating Successful Login Is Reported?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0120.html">Can I Disable Remote Login Detection?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0192.html">How Do I Know Whether an Intrusion Succeeded?</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0032.html">FAQs</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0189.html b/docs/hss/umn/hss_01_0189.html
new file mode 100644
index 00000000..79e2d9e4
--- /dev/null
+++ b/docs/hss/umn/hss_01_0189.html
@@ -0,0 +1,47 @@
+<a name="hss_01_0189"></a><a name="hss_01_0189"></a>
+
+<h1 class="topictitle1">Why Do I Still Receive Remote Login Alarms After Configuring the Login IP Whitelist?</h1>
+<div id="body1604650185044"><p id="hss_01_0189__p14454122165916">Even whitelisted IP addresses can certain trigger alarms. The SSH login IP address whitelist, <span id="hss_01_0189__text18668195213599">Login Whitelist</span>, and remote login functions focus on different aspects of security, as described in <a href="#hss_01_0189__table134501322352">Table 1</a>.</p>
+
+<div class="tablenoborder"><a name="hss_01_0189__table134501322352"></a><a name="table134501322352"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0189__table134501322352" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Functions</caption><thead align="left"><tr id="hss_01_0189__row1445017324351"><th align="left" class="cellrowborder" valign="top" width="17.811781178117812%" id="mcps1.3.2.2.4.1.1"><p id="hss_01_0189__p11450232133519">Function</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="38.413841384138415%" id="mcps1.3.2.2.4.1.2"><p id="hss_01_0189__p14501732183511">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="43.77437743774377%" id="mcps1.3.2.2.4.1.3"><p id="hss_01_0189__p1333193121720">How to Mask Alarm</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0189__row141164511287"><td class="cellrowborder" valign="top" width="17.811781178117812%" headers="mcps1.3.2.2.4.1.1 "><p id="hss_01_0189__p1811716514816">SSH login IP address whitelist</p>
+</td>
+<td class="cellrowborder" valign="top" width="38.413841384138415%" headers="mcps1.3.2.2.4.1.2 "><p id="hss_01_0189__p61171451689">Only the IP addresses in this whitelist can log in to specified servers via SSH.</p>
+<div class="notice" id="hss_01_0189__note290318506143"><span class="noticetitle"> NOTICE: </span><div class="noticebody"><p id="hss_01_0189__p2903125001412">To avoid connection issues, ensure you have not missed necessary IP addresses before enabling this function.</p>
+</div></div>
+</td>
+<td class="cellrowborder" valign="top" width="43.77437743774377%" headers="mcps1.3.2.2.4.1.3 "><p id="hss_01_0189__p19117145116818">-</p>
+</td>
+</tr>
+<tr id="hss_01_0189__row8451183253510"><td class="cellrowborder" valign="top" width="17.811781178117812%" headers="mcps1.3.2.2.4.1.1 "><p id="hss_01_0189__p1545114327357"><span id="hss_01_0189__text14870135416594">Login Whitelist</span></p>
+</td>
+<td class="cellrowborder" valign="top" width="38.413841384138415%" headers="mcps1.3.2.2.4.1.2 "><p id="hss_01_0189__p5536648115618">To reduce false brute-force attack alarms, add trusted login IP addresses and their destination server IP addresses to the <span id="hss_01_0189__text161616585593">Login Whitelist</span>.</p>
+</td>
+<td class="cellrowborder" valign="top" width="43.77437743774377%" headers="mcps1.3.2.2.4.1.3 "><p id="hss_01_0189__p1085184953811">Choose <strong id="hss_01_0189__b567384192613">Detection</strong> &gt; <strong id="hss_01_0189__b17674194118265">Whitelists</strong>. Click the <strong id="hss_01_0189__b18674641122611"><span id="hss_01_0189__text1236610594593">Login Whitelist</span></strong> tab, and add IP addresses. HSS will not generate brute-force alarms for these IP addresses.</p>
+</td>
+</tr>
+<tr id="hss_01_0189__row10451832123519"><td class="cellrowborder" valign="top" width="17.811781178117812%" headers="mcps1.3.2.2.4.1.1 "><p id="hss_01_0189__p15451632193516">Remote login</p>
+</td>
+<td class="cellrowborder" valign="top" width="38.413841384138415%" headers="mcps1.3.2.2.4.1.2 "><p id="hss_01_0189__p181038945918">Logins not from <strong id="hss_01_0189__b102688141561">Common Login Locations</strong> and <strong id="hss_01_0189__b874513226564">Common Login IP Addresses</strong> will trigger remote login alarms.</p>
+<p id="hss_01_0189__p19812498389">You will be informed of new IP addresses that log in to your servers.</p>
+</td>
+<td class="cellrowborder" valign="top" width="43.77437743774377%" headers="mcps1.3.2.2.4.1.3 "><p id="hss_01_0189__p1380204912381">Choose <strong id="hss_01_0189__b1906545112611">Installation &amp; Configuration</strong> and click <strong id="hss_01_0189__b8906104515263">Security Configuration</strong>. Add login information on the <strong id="hss_01_0189__b15906114542616">Common Login Locations</strong> and <strong id="hss_01_0189__b1090714517268">Common Login IP Addresses</strong> tabs. Whitelisted logins will no longer trigger remote alarms.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0188.html">Abnormal Logins</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0192.html b/docs/hss/umn/hss_01_0192.html
new file mode 100644
index 00000000..ca6201d5
--- /dev/null
+++ b/docs/hss/umn/hss_01_0192.html
@@ -0,0 +1,16 @@
+<a name="hss_01_0192"></a><a name="hss_01_0192"></a>
+
+<h1 class="topictitle1">How Do I Know Whether an Intrusion Succeeded?</h1>
+<div id="body1568273790283"><ul id="hss_01_0192__ul578581253518"><li id="hss_01_0192__li97851812143518">If you have enabled alarm notifications for intrusion detection, you will be notified immediately when an account is cracked or may be cracked.</li><li id="hss_01_0192__li4785812113518">You can also check whether attack IP addresses are blocked on the <strong id="hss_01_0192__b12653141016816">Detection</strong> page.</li><li id="hss_01_0192__li18214132816195">To further determine the details, perform the following steps:<ul id="hss_01_0192__ul39401532131919"><li id="hss_01_0192__hss_01_0091_li196212131113">Linux<p id="hss_01_0192__hss_01_0091_p829413509409"><a name="hss_01_0192__hss_01_0091_li196212131113"></a><a name="hss_01_0091_li196212131113"></a>For Linux servers, you can view logs in <strong id="hss_01_0192__hss_01_0091_b11383143184117">/var/log/secure</strong> and <strong id="hss_01_0192__hss_01_0091_b10301101632519">/var/log/message</strong> directories, or run the <strong id="hss_01_0192__hss_01_0091_b93011716192516">last</strong> command to check whether there are abnormal login records.</p>
+</li><li id="hss_01_0192__hss_01_0091_li135654307114">Windows<div class="p" id="hss_01_0192__hss_01_0091_p153161936131111"><a name="hss_01_0192__hss_01_0091_li135654307114"></a><a name="hss_01_0091_li135654307114"></a>To view server login logs, perform the following steps:<ol id="hss_01_0192__hss_01_0091_ol163245411012"><li id="hss_01_0192__hss_01_0091_li232444111118">Open <strong id="hss_01_0192__hss_01_0091_b171521446192816">Control Panel</strong>.</li><li id="hss_01_0192__hss_01_0091_li12841855219">Choose <strong id="hss_01_0192__hss_01_0091_b11825102012914">Administrative Tools</strong> &gt; <strong id="hss_01_0192__hss_01_0091_b1912202319296">Event Viewer</strong>. The <strong id="hss_01_0192__hss_01_0091_b77711226112915">Event Viewer</strong> page is displayed.</li><li id="hss_01_0192__hss_01_0091_li2039861414417">In the navigation tree on the left, choose <strong id="hss_01_0192__hss_01_0091_b1224894519">Windows Logs</strong> &gt; <strong id="hss_01_0192__hss_01_0091_b5162211195118">Security</strong>. The <strong id="hss_01_0192__hss_01_0091_b1714081755120">Security</strong> page is displayed.</li><li id="hss_01_0192__hss_01_0091_li1261111511755">In the navigation tree on the right, choose <strong id="hss_01_0192__hss_01_0091_b14460135615513">Security</strong> &gt; <strong id="hss_01_0192__hss_01_0091_b81504591519">Filter Current Log</strong>. The <strong id="hss_01_0192__hss_01_0091_b206369218528">Filter Current Log</strong> dialog box is displayed.</li><li id="hss_01_0192__hss_01_0091_li1969019194710">On the <strong id="hss_01_0192__hss_01_0091_b97701735105210">Filter</strong> tab, locate the <strong id="hss_01_0192__hss_01_0091_b238112531521">&lt;All Event IDs&gt;</strong>.</li><li id="hss_01_0192__hss_01_0091_li6137230395">Enter the login event ID and click <strong id="hss_01_0192__hss_01_0091_b4362202329">OK</strong> to filter the target login events.<ul id="hss_01_0192__hss_01_0091_ul0696165514920"><li id="hss_01_0192__hss_01_0091_li11696155517915">4624: ID of successful login events</li><li id="hss_01_0192__hss_01_0091_li135382099101">4625: ID of failed login events</li></ul>
+</li></ol>
+</div>
+</li></ul>
+</li></ul>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0188.html">Abnormal Logins</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0193.html b/docs/hss/umn/hss_01_0193.html
new file mode 100644
index 00000000..931df232
--- /dev/null
+++ b/docs/hss/umn/hss_01_0193.html
@@ -0,0 +1,11 @@
+<a name="hss_01_0193"></a><a name="hss_01_0193"></a>
+
+<h1 class="topictitle1">Why Some Attacks on Servers Are Not Detected?</h1>
+<div id="body0000001170081641"><ul id="hss_01_0193__ul16103822582"><li id="hss_01_0193__li510372215816">Intrusions to your servers before HSS is enabled cannot be detected.</li><li id="hss_01_0193__li104131550134117">If you have applied for <span id="hss_01_0193__text203432514202">HSS</span>, remember to enable it to detect intrusions.</li><li id="hss_01_0193__li8650162593616">Web attacks cannot be detected, because HSS mainly defends your servers. To protect websites, you can consult the security Solution Architect or use other secure services (such as WAF and Anti-DDoS).</li></ul>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0164.html">Intrusions</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0195.html b/docs/hss/umn/hss_01_0195.html
new file mode 100644
index 00000000..ee85e6f9
--- /dev/null
+++ b/docs/hss/umn/hss_01_0195.html
@@ -0,0 +1,12 @@
+<a name="hss_01_0195"></a><a name="hss_01_0195"></a>
+
+<h1 class="topictitle1">Do WTP and HSS Use the Same Agent?</h1>
+<div id="body1568274184701"><p id="hss_01_0195__p1290210510384">Yes.</p>
+<p id="hss_01_0195__p1919181810492">All HSS editions can use the same agent installed on a server.</p>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0321.html">Agent FAQs</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0196.html b/docs/hss/umn/hss_01_0196.html
new file mode 100644
index 00000000..6e8994bf
--- /dev/null
+++ b/docs/hss/umn/hss_01_0196.html
@@ -0,0 +1,19 @@
+<a name="hss_01_0196"></a><a name="hss_01_0196"></a>
+
+<h1 class="topictitle1">Weak Passwords and Unsafe Accounts</h1>
+<div id="body1604307979814"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0197.html">How Do I Handle a Weak Password Alarm?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0166.html">How Do I Set a Secure Password?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0274.html">Why Are the Weak Password Alarms Still Reported After the Weak Password Policy Is Disabled?</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0032.html">FAQs</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0197.html b/docs/hss/umn/hss_01_0197.html
new file mode 100644
index 00000000..67bea199
--- /dev/null
+++ b/docs/hss/umn/hss_01_0197.html
@@ -0,0 +1,77 @@
+<a name="hss_01_0197"></a><a name="hss_01_0197"></a>
+
+<h1 class="topictitle1">How Do I Handle a Weak Password Alarm?</h1>
+<div id="body1604404149053"><p id="hss_01_0197__p8060118">Servers using weak passwords are exposed to intrusions. If a weak password alarm is reported, you are advised to change the alarmed password immediately.</p>
+<div class="section" id="hss_01_0197__section051613911413"><h4 class="sectiontitle">Causes</h4><ul id="hss_01_0197__ul64499259374"><li id="hss_01_0197__li645016257379">If simple passwords are used and match those in the weak password library, a weak password alarm will be generated.</li><li id="hss_01_0197__li18450122593712">A password used by multiple member accounts will be regarded as a weak password and trigger an alarm.</li></ul>
+</div>
+<div class="section" id="hss_01_0197__section10721141714444"><h4 class="sectiontitle">Checking and Changing Weak Passwords</h4><ol id="hss_01_0197__ol1868913015445"><li id="hss_01_0197__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0197__li1582114478469"><span>Choose <span class="menucascade" id="hss_01_0197__menucascade16356811154716"><b><span class="uicontrol" id="hss_01_0197__uicontrol83561111473">Prediction</span></b> &gt; <b><span class="uicontrol" id="hss_01_0197__uicontrol15441516184710">Baseline Checks</span></b></span> and click the <strong id="hss_01_0197__b16359151617409">Common Weak Password Detection</strong> tab.</span></li><li id="hss_01_0197__li81861841194817"><span>Check the server, account name, account type, and usage duration of the weak password. Log in to the server and change the password.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0197__section35921020859"><h4 class="sectiontitle">Changing a Weak Password</h4>
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0197__table0234185118379" frame="border" border="1" rules="all"><thead align="left"><tr id="hss_01_0197__row4235195173719"><th align="left" class="cellrowborder" valign="top" width="16.611661166116612%" id="mcps1.3.4.2.1.4.1.1"><p id="hss_01_0197__p12354510378">System</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="47.054705470547056%" id="mcps1.3.4.2.1.4.1.2"><p id="hss_01_0197__p11235115112378">Procedure</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="36.33363336333633%" id="mcps1.3.4.2.1.4.1.3"><p id="hss_01_0197__p9235151203712">Remarks</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0197__row937861834419"><td class="cellrowborder" valign="top" width="16.611661166116612%" headers="mcps1.3.4.2.1.4.1.1 "><p id="hss_01_0197__p1537811188448">Windows OS</p>
+</td>
+<td class="cellrowborder" valign="top" width="47.054705470547056%" headers="mcps1.3.4.2.1.4.1.2 "><p id="hss_01_0197__p5379418104416">To change the password in the Windows 10, perform the following steps:</p>
+<ol id="hss_01_0197__ol5587195654619"><li id="hss_01_0197__li155871656114610">Log in to the Windows OS.</li><li id="hss_01_0197__li1822121494712">Click <span><img id="hss_01_0197__image9691643121617" src="en-us_image_0000001517477582.png"></span> in the lower left corner and click <span><img id="hss_01_0197__image193561355121616" src="en-us_image_0000001568317737.png"></span>.</li><li id="hss_01_0197__li1865124825015">In the <strong id="hss_01_0197__b1744214403378">Windows Settings</strong> window, click <span class="parmvalue" id="hss_01_0197__parmvalue11818163112514"><b>Accounts</b></span>.</li><li id="hss_01_0197__li24339336516">Choose <strong id="hss_01_0197__b1179081919430">Sign-in options</strong> from the navigation tree.</li><li id="hss_01_0197__li17656621185211">On the <strong id="hss_01_0197__b45193774319">Sign-in options</strong> tab, click <strong id="hss_01_0197__b1739942984516">Change</strong> under <strong id="hss_01_0197__b17950173494514">Password</strong>.</li></ol>
+</td>
+<td class="cellrowborder" valign="top" width="36.33363336333633%" headers="mcps1.3.4.2.1.4.1.3 "><p id="hss_01_0197__p10379121874418">None</p>
+</td>
+</tr>
+<tr id="hss_01_0197__row18235175110376"><td class="cellrowborder" valign="top" width="16.611661166116612%" headers="mcps1.3.4.2.1.4.1.1 "><p id="hss_01_0197__p22351451143714">Linux OS</p>
+</td>
+<td class="cellrowborder" valign="top" width="47.054705470547056%" headers="mcps1.3.4.2.1.4.1.2 "><p id="hss_01_0197__p1823516517378">Log in to the Linux server and run the following command:</p>
+<p id="hss_01_0197__p15707112518152"><strong id="hss_01_0197__b1352612617164">passwd [&lt;user&gt;]</strong></p>
+</td>
+<td class="cellrowborder" valign="top" width="36.33363336333633%" headers="mcps1.3.4.2.1.4.1.3 "><p id="hss_01_0197__p283791031710">If you do not specify any username, you are changing the password of the current user.</p>
+<p id="hss_01_0197__p6412836144119">After the command is executed, enter the new password as prompted.</p>
+<div class="note" id="hss_01_0197__note186515414419"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="hss_01_0197__p1566541114115">Replace <em id="hss_01_0197__i0849248512">&lt;user&gt;</em> with the username.</p>
+</div></div>
+</td>
+</tr>
+<tr id="hss_01_0197__row423545183714"><td class="cellrowborder" valign="top" width="16.611661166116612%" headers="mcps1.3.4.2.1.4.1.1 "><p id="hss_01_0197__p1423513516371">MySQL database</p>
+</td>
+<td class="cellrowborder" valign="top" width="47.054705470547056%" headers="mcps1.3.4.2.1.4.1.2 "><ol id="hss_01_0197__ol592731822113"><li id="hss_01_0197__li15927101814211">Log in to the MySQL database.</li><li id="hss_01_0197__li69271918192113">Run the following command to check the database user password:<p id="hss_01_0197__p86401199222"><a name="hss_01_0197__li69271918192113"></a><a name="li69271918192113"></a><strong id="hss_01_0197__b3749115819225">SELECT user, host, authentication_string From user;</strong></p>
+<p id="hss_01_0197__p567415481233">This command is probably invalid in certain MySQL versions.</p>
+<p id="hss_01_0197__p67514158247">In this case, run the following command:</p>
+<p id="hss_01_0197__p176846598247"><strong id="hss_01_0197__b496174332519">SELECT user, host password From user;</strong></p>
+</li><li id="hss_01_0197__li2550173215216">Run the following command to change the password:<p id="hss_01_0197__p1099061162713"><a name="hss_01_0197__li2550173215216"></a><a name="li2550173215216"></a><strong id="hss_01_0197__b1426912616543">SET PASSWORD FOR'<em id="hss_01_0197__i164101110549">Username</em>'@'<em id="hss_01_0197__i19206171495412">Host</em>'=PASSWORD('<em id="hss_01_0197__i47016212548">New_password</em>');</strong></p>
+</li><li id="hss_01_0197__li47712279594">Run the following command to refresh password settings:<p id="hss_01_0197__p15581916402"><a name="hss_01_0197__li47712279594"></a><a name="li47712279594"></a><strong id="hss_01_0197__b09041418008">flush privileges;</strong></p>
+</li></ol>
+</td>
+<td class="cellrowborder" valign="top" width="36.33363336333633%" headers="mcps1.3.4.2.1.4.1.3 "><p id="hss_01_0197__p52351951113715">None</p>
+</td>
+</tr>
+<tr id="hss_01_0197__row423517516377"><td class="cellrowborder" valign="top" width="16.611661166116612%" headers="mcps1.3.4.2.1.4.1.1 "><p id="hss_01_0197__p11235145123715">Redis database</p>
+</td>
+<td class="cellrowborder" valign="top" width="47.054705470547056%" headers="mcps1.3.4.2.1.4.1.2 "><ol id="hss_01_0197__ol1733391411411"><li id="hss_01_0197__li33331914124118">Open the Redis database configuration file <strong id="hss_01_0197__b1144457713">redis.conf</strong>.</li><li id="hss_01_0197__li7141125710411">Run the following command to change the password:<p id="hss_01_0197__p10512204516424"><a name="hss_01_0197__li7141125710411"></a><a name="li7141125710411"></a><strong id="hss_01_0197__b83941948194219">requirepass <em id="hss_01_0197__i187492411220">&lt;password&gt;</em>;</strong></p>
+</li></ol>
+</td>
+<td class="cellrowborder" valign="top" width="36.33363336333633%" headers="mcps1.3.4.2.1.4.1.3 "><ul id="hss_01_0197__ul44261728124318"><li id="hss_01_0197__li442632819439">If there is already a password, the command will change it to the new password.</li><li id="hss_01_0197__li14426132874317">If there has been no password set, the command will set the password.</li></ul>
+<div class="note" id="hss_01_0197__note357823219439"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="hss_01_0197__p1057813326432">Replace <em id="hss_01_0197__i1444221715517">&lt;password&gt;</em> with the new password.</p>
+</div></div>
+</td>
+</tr>
+<tr id="hss_01_0197__row16531197414"><td class="cellrowborder" valign="top" width="16.611661166116612%" headers="mcps1.3.4.2.1.4.1.1 "><p id="hss_01_0197__p46541793419">Tomcat</p>
+</td>
+<td class="cellrowborder" valign="top" width="47.054705470547056%" headers="mcps1.3.4.2.1.4.1.2 "><ol id="hss_01_0197__ol15222192420408"><li id="hss_01_0197__li17222172424012">Open the <span class="filepath" id="hss_01_0197__filepath1193165154013"><b>conf/tomcat-user.xml</b></span> configuration file in the Tomcat root directory.</li><li id="hss_01_0197__li19270133015401">Change the value of <strong id="hss_01_0197__b193929556123">password</strong> under the <strong id="hss_01_0197__b1231145961218">user</strong> node to a strong password.</li></ol>
+</td>
+<td class="cellrowborder" valign="top" width="36.33363336333633%" headers="mcps1.3.4.2.1.4.1.3 "><p id="hss_01_0197__p36544984110">None</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0196.html">Weak Passwords and Unsafe Accounts</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0198.html b/docs/hss/umn/hss_01_0198.html
new file mode 100644
index 00000000..cd3ebf37
--- /dev/null
+++ b/docs/hss/umn/hss_01_0198.html
@@ -0,0 +1,17 @@
+<a name="hss_01_0198"></a><a name="hss_01_0198"></a>
+
+<h1 class="topictitle1">How Do I Handle Unsafe Configurations?</h1>
+<div id="body1568771264124"><p id="hss_01_0198__p163697318392"><span id="hss_01_0198__text5546192621316">HSS</span> automatically performs a configuration detection for servers. You can repair unsafe configuration items or ignore the configuration items you trust based on the detection result.</p>
+<ul id="hss_01_0198__ul1151412731814"><li id="hss_01_0198__li1656512460552">Modifying unsafe configuration items<p id="hss_01_0198__p105662427"><a name="hss_01_0198__li1656512460552"></a><a name="li1656512460552"></a>View details about a detection rule, verify the detection result based on the audit description, and handle the exception based on the modification recommendation.</p>
+<p id="hss_01_0198__p164631815569">You are advised to repair the configurations with a high threat level immediately. The configurations with a medium or low threat level can be fixed later based on service requirements.</p>
+</li><li id="hss_01_0198__li7122718201910">Ignoring trusted configuration items<ol id="hss_01_0198__ol422017718116"><li id="hss_01_0198__li22202716118">Click the name of an ECS to view its details. Choose <span class="menucascade" id="hss_01_0198__menucascade1161517187275"><b><span class="uicontrol" id="hss_01_0198__uicontrol1615818172713">Baseline Checks</span></b> &gt; <b><span class="uicontrol" id="hss_01_0198__uicontrol1137913211279">Unsafe Configurations</span></b></span>.</li><li id="hss_01_0198__li2983131116116">Locate the target risk item, click <span><img id="hss_01_0198__image1345317224282" src="en-us_image_0000001568437337.png"></span> in front of its name to expand the check items and click <strong id="hss_01_0198__b1442011480818">Ignore</strong> in the <strong id="hss_01_0198__b1446518562816">Operation</strong> column. You can also select multiple detection rules and click <span class="uicontrol" id="hss_01_0198__uicontrol81679568413"><b>Ignore</b></span> in the upper part of the page to ignore them in batches.<p id="hss_01_0198__p71377499161">To unignore an ignored detection rule, click <strong id="hss_01_0198__b98979215589">Unignore</strong> in the <strong id="hss_01_0198__b269812485813">Operation</strong> column. You can also select multiple ignored detection rules and click <strong id="hss_01_0198__b18963162812596">Unignore</strong> in the upper part of the page to unignore them in batches.</p>
+</li></ol>
+</li><li id="hss_01_0198__li1187812503193">Verification<p id="hss_01_0198__en-us_topic_0188799245_p693775316564"><a name="hss_01_0198__li1187812503193"></a><a name="li1187812503193"></a>After modifying configuration items, you are advised to choose <span class="menucascade" id="hss_01_0198__menucascade893816185473"><b><span class="uicontrol" id="hss_01_0198__uicontrol6937118164720">Prediction</span></b> &gt; <b><span class="uicontrol" id="hss_01_0198__uicontrol135011425154718">Vulnerabilities</span></b></span> and click <span class="uicontrol" id="hss_01_0198__uicontrol109511034816"><b>Scan</b></span> to perform manual scan immediately to verify the result.</p>
+</li></ul>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0165.html">Unsafe Settings</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0199.html b/docs/hss/umn/hss_01_0199.html
new file mode 100644
index 00000000..0059f5c7
--- /dev/null
+++ b/docs/hss/umn/hss_01_0199.html
@@ -0,0 +1,11 @@
+<a name="hss_01_0199"></a><a name="hss_01_0199"></a>
+
+<h1 class="topictitle1">Why Do I Need to Add a Protected Directory?</h1>
+<div id="body1568772013155"><p id="hss_01_0199__p464512588568">WTP protects files in directories. If no directories are specified, WTP cannot take effect even if it is enabled.</p>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0250.html">Web Tamper Protection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0202.html b/docs/hss/umn/hss_01_0202.html
new file mode 100644
index 00000000..1f466161
--- /dev/null
+++ b/docs/hss/umn/hss_01_0202.html
@@ -0,0 +1,25 @@
+<a name="hss_01_0202"></a><a name="hss_01_0202"></a>
+
+<h1 class="topictitle1">What Should I Do If WTP Cannot Be Enabled?</h1>
+<div id="body1568775741011"><p id="hss_01_0202__p146308564264">The causes of this problem vary by scenarios.</p>
+<div class="section" id="hss_01_0202__section13317132414185"><h4 class="sectiontitle">Agent Status Is Abnormal</h4><ul id="hss_01_0202__ul13588781812"><li id="hss_01_0202__li16749183012610"><strong id="hss_01_0202__b15271102915335">Symptom</strong><p id="hss_01_0202__p1532603132615">The agent status is <strong id="hss_01_0202__b3420142013115">Offline</strong> or <strong id="hss_01_0202__b14420102023117">Not installed</strong> in the server list on the <strong id="hss_01_0202__b1142118201318">Web Tamper Protection</strong> page.</p>
+</li><li id="hss_01_0202__li1532184617287"><strong id="hss_01_0202__b3803639183616">Solution</strong><p id="hss_01_0202__p2568171818278">Rectify the fault by following the instructions provided in <em id="hss_01_0202__i1610515082712">How Do I Fix an Abnormal Agent</em>. Ensure that <strong id="hss_01_0202__b11054032710">Agent Status</strong> in the server list is <strong id="hss_01_0202__b181051901277">Online</strong>.</p>
+</li></ul>
+</div>
+<div class="section" id="hss_01_0202__section1561312125193"><h4 class="sectiontitle">Enterprise/Premium Edition HSS Has Been Enabled</h4><ul id="hss_01_0202__ul1670323731817"><li id="hss_01_0202__li1320114572914"><strong id="hss_01_0202__b8772227144016">Symptom</strong><p id="hss_01_0202__p8175165912714"><strong id="hss_01_0202__b18230155153520">Protection Status</strong> is <strong id="hss_01_0202__b15191137163518">Enabled</strong> in the server list on the <span id="hss_01_0202__text5898323202514">HSS</span> console.</p>
+</li><li id="hss_01_0202__li5139182163016"><strong id="hss_01_0202__b1179649124010">Solution</strong><div class="p" id="hss_01_0202__p11675101018300">Disable HSS and then enable WTP.<div class="note" id="hss_01_0202__note77091926181018"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0202__p1770992615103">HSS editions include the enterprise, premium, and WTP editions. Before enabling WTP for a server, ensure that enterprise, or premium edition HSS has been disabled for the server.</p>
+</div></div>
+</div>
+</li></ul>
+</div>
+<div class="section" id="hss_01_0202__section175933111205"><h4 class="sectiontitle">Protection Was Enabled on the Wrong Page</h4><p id="hss_01_0202__p17768125112120">To enable WTP, choose <strong id="hss_01_0202__b16281359155418">Web Tamper Protection</strong> &gt; <strong id="hss_01_0202__b196934065513">Servers</strong>.</p>
+<div class="note" id="hss_01_0202__note156621124125812"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0202__p1966372410589">If you have applied for the WTP edition, you can use all functions of the premium edition, and you can enable the server protection only on the <strong id="hss_01_0202__b124651615121517">Web Tamper Protection</strong>. After WTP is enabled, server protection of the premium edition is also enabled.</p>
+</div></div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0250.html">Web Tamper Protection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0204.html b/docs/hss/umn/hss_01_0204.html
new file mode 100644
index 00000000..3805b49d
--- /dev/null
+++ b/docs/hss/umn/hss_01_0204.html
@@ -0,0 +1,11 @@
+<a name="hss_01_0204"></a><a name="hss_01_0204"></a>
+
+<h1 class="topictitle1">Why a Blocked IP Address Is Automatically Unblocked?</h1>
+<div id="body0000001169921749"><p id="hss_01_0204__p8060118">If a blocked IP address does not perform brute-force attacks in the next 12 hours, the IP address will be automatically unblocked.</p>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0164.html">Intrusions</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0206.html b/docs/hss/umn/hss_01_0206.html
new file mode 100644
index 00000000..d5b070c2
--- /dev/null
+++ b/docs/hss/umn/hss_01_0206.html
@@ -0,0 +1,145 @@
+<a name="hss_01_0206"></a><a name="hss_01_0206"></a>
+
+<h1 class="topictitle1">What Do I Do If My Servers Are Subjected to a Mining Attack?</h1>
+<div id="body0000001170081639"><p id="hss_01_0206__p264484814518">Take immediate measures to contain the attack, preventing miners from occupying CPU or affecting other applications. If a server is intruded by a mining program, the mining program may penetrate the intranet and persist on the intruded server.</p>
+<p id="hss_01_0206__p19130153820321">You should also harden your servers to better block intrusions.</p>
+<div class="section" id="hss_01_0206__section9737192719285"><h4 class="sectiontitle">Troubleshooting Procedure</h4><ol id="hss_01_0206__ol10484472416"><li id="hss_01_0206__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0206__li599820141331"><span>Check <strong id="hss_01_0206__b10551115462018">Abnormal process behavior</strong> events.</span><p><p id="hss_01_0206__p1313152015334">Choose <strong id="hss_01_0206__b14350111531015">Detection</strong> &gt; <strong id="hss_01_0206__b27209230100">Alarms</strong> and click <strong id="hss_01_0206__b6967455107">Server Alarms</strong>. Choose <strong id="hss_01_0206__b1994081361111">Abnormal System Behavior</strong> &gt; <strong id="hss_01_0206__b150553419114">Abnormal process behavior</strong> to view and handle the abnormal process behavior alarms. Click <span class="uicontrol" id="hss_01_0206__uicontrol1268124210561"><b>Handle</b></span> in the <strong id="hss_01_0206__b1757325612207">Operation</strong> column of an event.</p>
+</p></li><li id="hss_01_0206__li86911726164012"><span>Check auto-startup items. Some of your auto-startup items were probably created by attackers to start mining programs upon server restart.</span><p><p id="hss_01_0206__p166934213565">Choose <span class="menucascade" id="hss_01_0206__menucascade745103602211"><b><span class="uicontrol" id="hss_01_0206__uicontrol1345193612215">Asset Management</span></b> &gt; <b><span class="uicontrol" id="hss_01_0206__uicontrol16458366223">Server Fingerprints</span></b></span>, click <span class="uicontrol" id="hss_01_0206__uicontrol184520366227"><b>Auto-startup</b></span>, and select <strong id="hss_01_0206__b184623617224">Operation History</strong> to view the change history.</p>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0206__section17266727163018"><h4 class="sectiontitle">Hardening Servers</h4><p id="hss_01_0206__p7759105014317">After you delete miner programs, harden your servers to better defend against intrusions.</p>
+<div class="p" id="hss_01_0206__p16302161863012"><strong id="hss_01_0206__b39848718316">Linux servers</strong><ol id="hss_01_0206__ol118974983014"><li id="hss_01_0206__li1789124919300">Let HSS automatically scan your servers and applications in the early morning every day to help you detect and eliminate security risks.</li><li id="hss_01_0206__li1489164903011">Set stronger passwords for all accounts (including system and application accounts), or change the login mode to key-based login.<ol type="a" id="hss_01_0206__ol166844916302"><li id="hss_01_0206__li12841324162911">Set the security password. For details, see <a href="hss_01_0166.html">How Do I Set a Secure Password?</a>.</li><li id="hss_01_0206__li684192415293">Use the key to log in to the server. </li></ol>
+</li><li id="hss_01_0206__li118944914303">Strictly control the usage of system administrator accounts. Grant only the least permissions required for applications and middleware and strictly control their usage.</li><li id="hss_01_0206__li168904910309">Configure access rules in security groups. Open only necessary ports. For special ports (such as remote login ports), only allow access from specified IP addresses or use VPN or bastion hosts to establish your own communications channels. </li></ol>
+</div>
+<p id="hss_01_0206__p20403151813117"><strong id="hss_01_0206__b1650010404317">Windows servers</strong></p>
+<div class="p" id="hss_01_0206__p1812121415578">Use HSS to comprehensively check for and eliminate security risks. Improve your account, password, and authorization security.<ul id="hss_01_0206__ul98967542401"><li id="hss_01_0206__li19896054174011"><strong id="hss_01_0206__b1637018497515">Account hardening</strong>
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0206__table11622602522" frame="border" border="1" rules="all"><thead align="left"><tr id="hss_01_0206__row26227014521"><th align="left" class="cellrowborder" valign="top" width="16.051605160516054%" id="mcps1.3.4.5.1.1.2.1.4.1.1"><p id="hss_01_0206__p14622180195214">Measure</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="30.213021302130212%" id="mcps1.3.4.5.1.1.2.1.4.1.2"><p id="hss_01_0206__p1862216013523">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="53.73537353735374%" id="mcps1.3.4.5.1.1.2.1.4.1.3"><p id="hss_01_0206__p196221302528">Procedure</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0206__row16226016523"><td class="cellrowborder" valign="top" width="16.051605160516054%" headers="mcps1.3.4.5.1.1.2.1.4.1.1 "><p id="hss_01_0206__p196221305520">Ensure default account security.</p>
+</td>
+<td class="cellrowborder" valign="top" width="30.213021302130212%" headers="mcps1.3.4.5.1.1.2.1.4.1.2 "><ul id="hss_01_0206__ul810416454525"><li id="hss_01_0206__li18254205405216">Disable user <strong id="hss_01_0206__b152444526101212">Guest</strong>.</li><li id="hss_01_0206__li191041145145210">Disable and delete unnecessary accounts. (You are advised to disable inactive accounts for three months before deleting them.)</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="53.73537353735374%" headers="mcps1.3.4.5.1.1.2.1.4.1.3 "><ol id="hss_01_0206__ol1180511158531"><li id="hss_01_0206__li12805101545316">Open <strong id="hss_01_0206__b566420214101212">Control Panel</strong>.</li><li id="hss_01_0206__li18441202215531">Click <strong id="hss_01_0206__b1823126881101212">Administrative Tools</strong>. Open <strong id="hss_01_0206__b961437702101212">Computer Management</strong>.</li><li id="hss_01_0206__li162527407541">Choose <strong id="hss_01_0206__b1094235295101212">System Tools</strong> &gt; <strong id="hss_01_0206__b569460726101212">Local Users and Groups</strong> &gt; <strong id="hss_01_0206__b475978083101212">Users</strong>.</li><li id="hss_01_0206__li17275105565514">Double-click <strong id="hss_01_0206__b13732049111018">Guest</strong>. In the <strong id="hss_01_0206__b437315494102">Guest Properties</strong> window, select <strong id="hss_01_0206__b937384912102">Account is disabled</strong>.</li><li id="hss_01_0206__li43356615582">Click <strong id="hss_01_0206__b1312340834101212">OK</strong>.</li></ol>
+</td>
+</tr>
+<tr id="hss_01_0206__row116235016524"><td class="cellrowborder" valign="top" width="16.051605160516054%" headers="mcps1.3.4.5.1.1.2.1.4.1.1 "><p id="hss_01_0206__p06230017527">Assign accounts with only necessary permissions to users.</p>
+</td>
+<td class="cellrowborder" valign="top" width="30.213021302130212%" headers="mcps1.3.4.5.1.1.2.1.4.1.2 "><p id="hss_01_0206__p9208630195919">Create users and user groups of specific types.</p>
+<p id="hss_01_0206__p7623180195210">Example: administrators, database users, audit users</p>
+</td>
+<td class="cellrowborder" valign="top" width="53.73537353735374%" headers="mcps1.3.4.5.1.1.2.1.4.1.3 "><ol id="hss_01_0206__ol637755435910"><li id="hss_01_0206__li1377654195912">Open <strong id="hss_01_0206__b94036221101212">Control Panel</strong>.</li><li id="hss_01_0206__li1937755435915">Click <strong id="hss_01_0206__b917398774101212">Administrative Tools</strong>. Open <strong id="hss_01_0206__b1209479801101212">Computer Management</strong>.</li><li id="hss_01_0206__li1379955535916">Choose <strong id="hss_01_0206__b898352581101212">System Tools</strong> &gt; <strong id="hss_01_0206__b1693534172101212">Local Users and Groups</strong>. Create users and groups as needed.</li></ol>
+</td>
+</tr>
+<tr id="hss_01_0206__row1162314018528"><td class="cellrowborder" valign="top" width="16.051605160516054%" headers="mcps1.3.4.5.1.1.2.1.4.1.1 "><p id="hss_01_0206__p562350185213">Periodically check and delete unnecessary accounts.</p>
+</td>
+<td class="cellrowborder" valign="top" width="30.213021302130212%" headers="mcps1.3.4.5.1.1.2.1.4.1.2 "><p id="hss_01_0206__p362414005216">Periodically delete or lock unnecessary accounts.</p>
+</td>
+<td class="cellrowborder" valign="top" width="53.73537353735374%" headers="mcps1.3.4.5.1.1.2.1.4.1.3 "><ol id="hss_01_0206__ol15146215332"><li id="hss_01_0206__li71465151837">Open <strong id="hss_01_0206__b260922994101212">Control Panel</strong>.</li><li id="hss_01_0206__li181461215635">Click <strong id="hss_01_0206__b1456529430101212">Administrative Tools</strong>. Open <strong id="hss_01_0206__b1696745467101212">Computer Management</strong>.</li><li id="hss_01_0206__li1514681512316">Choose <strong id="hss_01_0206__b384080566101212">System Tools</strong> &gt; <strong id="hss_01_0206__b965545338101212">Local Users and Groups</strong>.</li><li id="hss_01_0206__li638615578313">Choose <strong id="hss_01_0206__b15125121721119">Users</strong> or <strong id="hss_01_0206__b1112513172118">User Groups</strong> and delete unnecessary users or user groups.</li></ol>
+</td>
+</tr>
+<tr id="hss_01_0206__row10624208529"><td class="cellrowborder" valign="top" width="16.051605160516054%" headers="mcps1.3.4.5.1.1.2.1.4.1.1 "><p id="hss_01_0206__p15624101527">Do not display the last username.</p>
+</td>
+<td class="cellrowborder" valign="top" width="30.213021302130212%" headers="mcps1.3.4.5.1.1.2.1.4.1.2 "><p id="hss_01_0206__p7624107521">Forbid the login page from displaying the latest logged in user.</p>
+</td>
+<td class="cellrowborder" valign="top" width="53.73537353735374%" headers="mcps1.3.4.5.1.1.2.1.4.1.3 "><ol id="hss_01_0206__ol16811033456"><li id="hss_01_0206__li156813334518">Open <strong id="hss_01_0206__b1736585466101212">Control Panel</strong>.</li><li id="hss_01_0206__li1068115331518">Click <strong id="hss_01_0206__b351896759101212">Administrative Tools</strong>. Open <strong id="hss_01_0206__b1793411243101212">Local Security Policy</strong>.</li><li id="hss_01_0206__li1580810115612">Choose <strong id="hss_01_0206__b1146269148101212">Local Policies</strong> &gt; <strong id="hss_01_0206__b444526835101212">Security Options</strong>.</li><li id="hss_01_0206__li6388193510819">Double-click <strong id="hss_01_0206__b614050699101212">Interactive logon: Do not display last user name</strong>.</li><li id="hss_01_0206__li153411831691">In the displayed dialog box, select <strong id="hss_01_0206__b1844720170153">Enable </strong>and click <strong id="hss_01_0206__b1254795851017">OK</strong>.</li></ol>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</li><li id="hss_01_0206__li7896125414409"><strong id="hss_01_0206__b324115812163">Password hardening</strong>
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0206__table15191113131818" frame="border" border="1" rules="all"><thead align="left"><tr id="hss_01_0206__row3191613111817"><th align="left" class="cellrowborder" valign="top" width="15.981598159815983%" id="mcps1.3.4.5.1.2.2.1.4.1.1"><p id="hss_01_0206__p1191413161813">Setting</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="30.343034303430343%" id="mcps1.3.4.5.1.2.2.1.4.1.2"><p id="hss_01_0206__p9192713191813">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="53.67536753675367%" id="mcps1.3.4.5.1.2.2.1.4.1.3"><p id="hss_01_0206__p919231321818">Procedure</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0206__row141921413131817"><td class="cellrowborder" valign="top" width="15.981598159815983%" headers="mcps1.3.4.5.1.2.2.1.4.1.1 "><p id="hss_01_0206__p819210137183">Complexity</p>
+</td>
+<td class="cellrowborder" valign="top" width="30.343034303430343%" headers="mcps1.3.4.5.1.2.2.1.4.1.2 "><p id="hss_01_0206__p161921134181">In line with the requirements set in <a href="hss_01_0166.html">How Do I Set a Secure Password</a>.</p>
+</td>
+<td class="cellrowborder" valign="top" width="53.67536753675367%" headers="mcps1.3.4.5.1.2.2.1.4.1.3 "><ol id="hss_01_0206__ol44391554112210"><li id="hss_01_0206__li1743975417223">Open <strong id="hss_01_0206__b1311521856101212">Control Panel</strong>.</li><li id="hss_01_0206__li14391854192218">Click <strong id="hss_01_0206__b208912126101212">Administrative Tools</strong>. Open <strong id="hss_01_0206__b328817208101212">Local Security Policy</strong>.</li><li id="hss_01_0206__li12440205413227">Choose <strong id="hss_01_0206__b1132363702101212">Account Policies</strong> &gt; <strong id="hss_01_0206__b349316269101212">Password Policy</strong>.</li><li id="hss_01_0206__li3559133118231">Enable the policy <strong id="hss_01_0206__b1179229597101212">Password must meet complexity requirements</strong>.</li></ol>
+</td>
+</tr>
+<tr id="hss_01_0206__row1419261321811"><td class="cellrowborder" valign="top" width="15.981598159815983%" headers="mcps1.3.4.5.1.2.2.1.4.1.1 "><p id="hss_01_0206__p16192181311815">Maximum password age</p>
+</td>
+<td class="cellrowborder" valign="top" width="30.343034303430343%" headers="mcps1.3.4.5.1.2.2.1.4.1.2 "><p id="hss_01_0206__p20192101321810">In static password authentication mode, force users to change their passwords every 90 days or at shorter intervals.</p>
+</td>
+<td class="cellrowborder" valign="top" width="53.67536753675367%" headers="mcps1.3.4.5.1.2.2.1.4.1.3 "><ol id="hss_01_0206__ol35870720262"><li id="hss_01_0206__li19588157152613">Open <strong id="hss_01_0206__b125925906101212">Control Panel</strong>.</li><li id="hss_01_0206__li115888720263">Click <strong id="hss_01_0206__b1513949232101212">Administrative Tools</strong>. Open <strong id="hss_01_0206__b2037142218101212">Local Security Policy</strong>.</li><li id="hss_01_0206__li558818752618">Choose <strong id="hss_01_0206__b1655018713123">Account Policies</strong> &gt; <strong id="hss_01_0206__b185501576124">Password Policy</strong>.</li><li id="hss_01_0206__li712169142614">Set <strong id="hss_01_0206__b2043153238101212">Maximum password age</strong> to 90 days or shorter.</li></ol>
+</td>
+</tr>
+<tr id="hss_01_0206__row13192913141814"><td class="cellrowborder" valign="top" width="15.981598159815983%" headers="mcps1.3.4.5.1.2.2.1.4.1.1 "><p id="hss_01_0206__p8192161351811">Account lockout policy</p>
+</td>
+<td class="cellrowborder" valign="top" width="30.343034303430343%" headers="mcps1.3.4.5.1.2.2.1.4.1.2 "><p id="hss_01_0206__p1192201312187">In static password authentication mode, lock a user account if authentication for the user fails for 10 consecutive times.</p>
+</td>
+<td class="cellrowborder" valign="top" width="53.67536753675367%" headers="mcps1.3.4.5.1.2.2.1.4.1.3 "><ol id="hss_01_0206__ol286110420271"><li id="hss_01_0206__li1086174212276">Open <strong id="hss_01_0206__b1738217762101212">Control Panel</strong>.</li><li id="hss_01_0206__li15861442152711">Click <strong id="hss_01_0206__b1217746003101212">Administrative Tools</strong>. Open <strong id="hss_01_0206__b839207568101212">Local Security Policy</strong>.</li><li id="hss_01_0206__li886210422276">Choose <strong id="hss_01_0206__b1135738088101212">Account Policies</strong> &gt; <strong id="hss_01_0206__b1660490101212">Account Lockout Policy</strong>.</li><li id="hss_01_0206__li15184192316284">Set <strong id="hss_01_0206__b1471760715101212">Account lockout threshold</strong> to <strong id="hss_01_0206__b1355563343101212">10</strong> or smaller.</li></ol>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</li><li id="hss_01_0206__li789665424010"><strong id="hss_01_0206__b1419634312190">Authorization hardening</strong>
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0206__table15849149201915" frame="border" border="1" rules="all"><thead align="left"><tr id="hss_01_0206__row285064911919"><th align="left" class="cellrowborder" valign="top" width="16.781678167816782%" id="mcps1.3.4.5.1.3.2.1.4.1.1"><p id="hss_01_0206__p04901152171914">Authorization</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="30.003000300030003%" id="mcps1.3.4.5.1.3.2.1.4.1.2"><p id="hss_01_0206__p68504497198">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="53.21532153215321%" id="mcps1.3.4.5.1.3.2.1.4.1.3"><p id="hss_01_0206__p3850174915190">Procedure</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0206__row3850749171916"><td class="cellrowborder" valign="top" width="16.781678167816782%" headers="mcps1.3.4.5.1.3.2.1.4.1.1 "><p id="hss_01_0206__p1185044971917">Remote shutdowns</p>
+</td>
+<td class="cellrowborder" valign="top" width="30.003000300030003%" headers="mcps1.3.4.5.1.3.2.1.4.1.2 "><p id="hss_01_0206__p3850154914193">Assign the permission <strong id="hss_01_0206__b390528037101212">Force shutdown from a remote system</strong> only to the <strong id="hss_01_0206__b169123477101212">Administrators</strong> group.</p>
+</td>
+<td class="cellrowborder" valign="top" width="53.21532153215321%" headers="mcps1.3.4.5.1.3.2.1.4.1.3 "><ol id="hss_01_0206__ol14684522309"><li id="hss_01_0206__li868418223011">Open <strong id="hss_01_0206__b1124185519101212">Control Panel</strong>.</li><li id="hss_01_0206__li8684722301">Click <strong id="hss_01_0206__b412126977101212">Administrative Tools</strong>. Open <strong id="hss_01_0206__b602562138101212">Local Security Policy</strong>.</li><li id="hss_01_0206__li968518215302">Choose <strong id="hss_01_0206__b1592774771101212">Local Policies</strong> &gt; <strong id="hss_01_0206__b1773630481101212">User Rights Assignment</strong>.</li><li id="hss_01_0206__li138417710318">Assign the permission <strong id="hss_01_0206__b1373647204101212">Force shutdown from a remote system</strong> only to the <strong id="hss_01_0206__b791750959101212">Administrators</strong> group.</li></ol>
+</td>
+</tr>
+<tr id="hss_01_0206__row15850149171920"><td class="cellrowborder" valign="top" width="16.781678167816782%" headers="mcps1.3.4.5.1.3.2.1.4.1.1 "><p id="hss_01_0206__p1085016499199">Local shutdown</p>
+</td>
+<td class="cellrowborder" valign="top" width="30.003000300030003%" headers="mcps1.3.4.5.1.3.2.1.4.1.2 "><p id="hss_01_0206__p18501349141919">Assign the permission <strong id="hss_01_0206__b1348367526101212">Shut down the system</strong> only to the <strong id="hss_01_0206__b1145676811101212">Administrators</strong> group.</p>
+</td>
+<td class="cellrowborder" valign="top" width="53.21532153215321%" headers="mcps1.3.4.5.1.3.2.1.4.1.3 "><ol id="hss_01_0206__ol1089815565326"><li id="hss_01_0206__li17898195611323">Open <strong id="hss_01_0206__b1043758996101212">Control Panel</strong>.</li><li id="hss_01_0206__li1989855633215">Click <strong id="hss_01_0206__b1687575828101212">Administrative Tools</strong>. Open <strong id="hss_01_0206__b697798376101212">Local Security Policy</strong>.</li><li id="hss_01_0206__li13898155603219">Choose <strong id="hss_01_0206__b499658190101212">Local Policies</strong> &gt; <strong id="hss_01_0206__b279857945101212">User Rights Assignment</strong>.</li><li id="hss_01_0206__li13899056183210">Assign the permission <strong id="hss_01_0206__b920683636101212">Shut down the system</strong> only to the <strong id="hss_01_0206__b1403827778101212">Administrators</strong> group.</li></ol>
+</td>
+</tr>
+<tr id="hss_01_0206__row1285018497193"><td class="cellrowborder" valign="top" width="16.781678167816782%" headers="mcps1.3.4.5.1.3.2.1.4.1.1 "><p id="hss_01_0206__p208502496193">User rights assignment</p>
+</td>
+<td class="cellrowborder" valign="top" width="30.003000300030003%" headers="mcps1.3.4.5.1.3.2.1.4.1.2 "><p id="hss_01_0206__p13850249141914">Assign the permission <strong id="hss_01_0206__b576222729101212">Take ownership of files or other objects</strong> only to the <strong id="hss_01_0206__b2028888183101212">Administrators</strong> group.</p>
+</td>
+<td class="cellrowborder" valign="top" width="53.21532153215321%" headers="mcps1.3.4.5.1.3.2.1.4.1.3 "><ol id="hss_01_0206__ol129711638113315"><li id="hss_01_0206__li18971183883314">Open <strong id="hss_01_0206__b2112688578101212">Control Panel</strong>.</li><li id="hss_01_0206__li5971113814339">Click <strong id="hss_01_0206__b511834587101212">Administrative Tools</strong>. Open <strong id="hss_01_0206__b1820714970101212">Local Security Policy</strong>.</li><li id="hss_01_0206__li119721389338">Choose <strong id="hss_01_0206__b484730677101212">Local Policies</strong> &gt; <strong id="hss_01_0206__b234759880101212">User Rights Assignment</strong>.</li><li id="hss_01_0206__li897293810334">Assign the permission <strong id="hss_01_0206__b1892493547101212">Shut down the system</strong> only to the <strong id="hss_01_0206__b1641085820101212">Administrators</strong> group.</li></ol>
+</td>
+</tr>
+<tr id="hss_01_0206__row11101300202"><td class="cellrowborder" valign="top" width="16.781678167816782%" headers="mcps1.3.4.5.1.3.2.1.4.1.1 "><p id="hss_01_0206__p10111193016207">Login</p>
+</td>
+<td class="cellrowborder" valign="top" width="30.003000300030003%" headers="mcps1.3.4.5.1.3.2.1.4.1.2 "><p id="hss_01_0206__p31111130112017">Authorize users to log in to the computer locally.</p>
+</td>
+<td class="cellrowborder" valign="top" width="53.21532153215321%" headers="mcps1.3.4.5.1.3.2.1.4.1.3 "><ol id="hss_01_0206__ol1080892573412"><li id="hss_01_0206__li1780819254345">Open <strong id="hss_01_0206__b57588707101212">Control Panel</strong>.</li><li id="hss_01_0206__li13808125123414">Click <strong id="hss_01_0206__b398023934101212">Administrative Tools</strong>. Open <strong id="hss_01_0206__b333277009101212">Local Security Policy</strong>.</li><li id="hss_01_0206__li10808725143415">Choose <strong id="hss_01_0206__b193599941101212">Local Policies</strong> &gt; <strong id="hss_01_0206__b52953674101212">User Rights Assignment</strong>.</li><li id="hss_01_0206__li080962516343">Assign the permission <strong id="hss_01_0206__b1240070017101212">Allow log on locally</strong> to the users you want to authorize.</li></ol>
+</td>
+</tr>
+<tr id="hss_01_0206__row053442162017"><td class="cellrowborder" valign="top" width="16.781678167816782%" headers="mcps1.3.4.5.1.3.2.1.4.1.1 "><p id="hss_01_0206__p155474210205">Access from the network</p>
+</td>
+<td class="cellrowborder" valign="top" width="30.003000300030003%" headers="mcps1.3.4.5.1.3.2.1.4.1.2 "><p id="hss_01_0206__p7541421205">Allow only the authorized users to access this computer from the network (for example, by network sharing). Access from other terminals are not allowed.</p>
+</td>
+<td class="cellrowborder" valign="top" width="53.21532153215321%" headers="mcps1.3.4.5.1.3.2.1.4.1.3 "><ol id="hss_01_0206__ol17930173943512"><li id="hss_01_0206__li6930639113512">Open <strong id="hss_01_0206__b162921561101212">Control Panel</strong>.</li><li id="hss_01_0206__li16930163963518">Click <strong id="hss_01_0206__b1651921727101212">Administrative Tools</strong>. Open <strong id="hss_01_0206__b334355017101212">Local Security Policy</strong>.</li><li id="hss_01_0206__li119300399359">Choose <strong id="hss_01_0206__b515075338101212">Local Policies</strong> &gt; <strong id="hss_01_0206__b1441567054101212">User Rights Assignment</strong>.</li><li id="hss_01_0206__li11931239103513">Assign the permission <strong id="hss_01_0206__b1991033087101212">Access this computer from the network</strong> to the users you want to authorize.</li></ol>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</li></ul>
+</div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0164.html">Intrusions</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0207.html b/docs/hss/umn/hss_01_0207.html
new file mode 100644
index 00000000..0e2be670
--- /dev/null
+++ b/docs/hss/umn/hss_01_0207.html
@@ -0,0 +1,17 @@
+<a name="hss_01_0207"></a><a name="hss_01_0207"></a>
+
+<h1 class="topictitle1">Why a Process Is Still Isolated After It Was Whitelisted?</h1>
+<div id="body0000001123401794"><p id="hss_01_0207__p8060118">After you add a process to the whitelist, it will no longer trigger certain alarms, but its isolation will not be automatically canceled.</p>
+<div class="section" id="hss_01_0207__section67781447133012"><h4 class="sectiontitle">Isolating and Killing a Malicious Program</h4><ul id="hss_01_0207__ul1264719337464"><li id="hss_01_0207__li1057531363211">Choose <strong id="hss_01_0207__b318111220239">Installation &amp; Configuration</strong> and click the <strong id="hss_01_0207__b91812024234">Security Configuration</strong> tab. Click the <strong id="hss_01_0207__b1018112192320">Isolation and Killing of Malicious Programs</strong> tab and enable this function.</li><li id="hss_01_0207__li926081617328">Choose <strong id="hss_01_0207__b101759350101018">Detection</strong> &gt; <strong id="hss_01_0207__b1933309651101018">Alarms</strong>. In the <strong id="hss_01_0207__b946599600101018">Events</strong> area, manually isolate and kill malicious programs.</li></ul>
+<p id="hss_01_0207__p11251721316">If a program is isolated and killed, it will be terminated immediately and no longer able to perform read or write operations. Isolated source files of programs or processes are displayed on the <strong id="hss_01_0207__b1037706499101018">Isolated Files</strong> slide-out panel and cannot harm your servers.</p>
+</div>
+<div class="section" id="hss_01_0207__section41897712317"><h4 class="sectiontitle">Canceling the Isolation of Files</h4><ol id="hss_01_0207__ol1075213460175"><li id="hss_01_0207__li5752846121720">Choose <strong id="hss_01_0207__b1763011317203">Detection</strong> &gt; <strong id="hss_01_0207__b15631101315202">Alarms</strong>. Click the value above <strong id="hss_01_0207__b76321613122014">Isolated Files</strong> to view the isolated files.</li><li id="hss_01_0207__li207789221183">In the row containing the target server, click <strong id="hss_01_0207__b94123462511">Restore</strong> in the <strong id="hss_01_0207__b1667719384257">Operation</strong> column. The dialog box is displayed.</li><li id="hss_01_0207__li14752154615173">Click <strong id="hss_01_0207__b361612516258">OK</strong> to restore the isolation file.<p id="hss_01_0207__p8914165752316">After you cancel isolation, the read/write permissions of files will be restored, but terminated processes will not be automatically started.</p>
+</li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0164.html">Intrusions</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0209.html b/docs/hss/umn/hss_01_0209.html
new file mode 100644
index 00000000..7bf5db9d
--- /dev/null
+++ b/docs/hss/umn/hss_01_0209.html
@@ -0,0 +1,13 @@
+<a name="hss_01_0209"></a><a name="hss_01_0209"></a>
+
+<h1 class="topictitle1">How Do I Fix Vulnerabilities?</h1>
+<div id="body1570758134249"><div class="section" id="hss_01_0209__section153410172261"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0209__ol17231559181719"><li id="hss_01_0209__li172485919177"><span>Check the vulnerability detection results.</span></li><li id="hss_01_0209__li17990349183"><span>Based on provided solutions, fix vulnerabilities one by one in descending order by severity.</span><p><ul id="hss_01_0209__ul18279124154216"><li id="hss_01_0209__li1227974118420">Restart the Windows OS after you fix its vulnerabilities.</li><li id="hss_01_0209__li22791641154215">Restart the Linux OS after you fix its kernel vulnerabilities.</li></ul>
+</p></li><li id="hss_01_0209__li1844854517919"><span><span id="hss_01_0209__text2060193472217">HSS</span> scans all Linux servers, Windows servers, and Web-CMS servers for vulnerabilities every early morning. After you fix the vulnerabilities, you are advised to perform a check immediately to verify the result.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0246.html">Vulnerability Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0214.html b/docs/hss/umn/hss_01_0214.html
new file mode 100644
index 00000000..3e17f436
--- /dev/null
+++ b/docs/hss/umn/hss_01_0214.html
@@ -0,0 +1,58 @@
+<a name="hss_01_0214"></a><a name="hss_01_0214"></a>
+
+<h1 class="topictitle1">Enabling Web Tamper Protection</h1>
+<div id="body1571273307913"><p id="hss_01_0214__p1651050123115">Before enabling WTP, you need to allocate a quota to a specified server. If the service is disabled or the server is deleted, the quota can be allocated to other servers.</p>
+<p id="hss_01_0214__p16746120122219">The premium edition will be enabled when you enable WTP.</p>
+<div class="section" id="hss_01_0214__section6586124234917"><h4 class="sectiontitle">How WTP Prevents Web Page Tampering</h4>
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0214__table171301423115020" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Protection mechanisms</caption><thead align="left"><tr id="hss_01_0214__row101311123165010"><th align="left" class="cellrowborder" valign="top" width="17.669999999999998%" id="mcps1.3.3.2.2.3.1.1"><p id="hss_01_0214__p5131112316508">Type</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="82.33%" id="mcps1.3.3.2.2.3.1.2"><p id="hss_01_0214__p101312235504">Mechanism</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0214__row1213192345010"><td class="cellrowborder" valign="top" width="17.669999999999998%" headers="mcps1.3.3.2.2.3.1.1 "><p id="hss_01_0214__p191311323115011">Static web page protection</p>
+</td>
+<td class="cellrowborder" valign="top" width="82.33%" headers="mcps1.3.3.2.2.3.1.2 "><ol id="hss_01_0214__ol2079014295015"><li id="hss_01_0214__li117901542185014">Local directory lock<p id="hss_01_0214__p579011429509"><a name="hss_01_0214__li117901542185014"></a><a name="li117901542185014"></a>WTP locks files in a web file directory in a drive to prevent attackers from modifying them. Website administrators can update the website content by using privileged processes.</p>
+</li><li id="hss_01_0214__li1479013429505">Active backup and restoration<p id="hss_01_0214__p879014426509"><a name="hss_01_0214__li1479013429505"></a><a name="li1479013429505"></a>If WTP detects that a file in the protection directory is tampered with, it immediately uses the backup file on the local host to restore the file.</p>
+</li><li id="hss_01_0214__li879074275019">Remote backup and restoration<p id="hss_01_0214__p77900421506"><a name="hss_01_0214__li879074275019"></a><a name="li879074275019"></a>If a file directory or backup directory on the local server is invalid, you can use the remote backup service to restore the tampered web page.</p>
+</li></ol>
+</td>
+</tr>
+<tr id="hss_01_0214__row11131142385011"><td class="cellrowborder" valign="top" width="17.669999999999998%" headers="mcps1.3.3.2.2.3.1.1 "><p id="hss_01_0214__p11131122325014">Dynamic web page protection</p>
+</td>
+<td class="cellrowborder" valign="top" width="82.33%" headers="mcps1.3.3.2.2.3.1.2 "><p id="hss_01_0214__p2010813211226">Provides runtime application self-protection (RASP) for Tomcat applications in the following ways:</p>
+<ol id="hss_01_0214__ol411252115210"><li id="hss_01_0214__li811212110214">Malicious behavior filtering based on RASP<p id="hss_01_0214__p911212214212"><a name="hss_01_0214__li811212110214"></a><a name="li811212110214"></a>The unique runtime application self-protection (RASP) detects application program behaviors, preventing attackers from tampering with web pages through application programs.</p>
+</li><li id="hss_01_0214__li12112202112217">Network disk file access control<p id="hss_01_0214__p2112121823"><a name="hss_01_0214__li12112202112217"></a><a name="li12112202112217"></a>WTP implements fine-grained management to control permissions for adding, modifying, and querying file content in network disks, preventing tampering without affecting website content release.</p>
+</li></ol>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+<div class="section" id="hss_01_0214__section1167255181511"><h4 class="sectiontitle">Prerequisites</h4><ul id="hss_01_0214__ul156715591514"><li id="hss_01_0214__li18640529152513">Choose <span class="menucascade" id="hss_01_0214__menucascade477718426191"><b><span class="uicontrol" id="hss_01_0214__uicontrol1277734213193">Prevention</span></b> &gt; <b><span class="uicontrol" id="hss_01_0214__uicontrol1857934841911">Web Tamper Protection</span></b></span>. Click the <span class="uicontrol" id="hss_01_0214__uicontrol19711728424"><b>Servers</b></span> tab. The <strong id="hss_01_0214__b955915912232">Protection Status</strong> of the server is <strong id="hss_01_0214__b1301191712238">Unprotected</strong>.</li><li id="hss_01_0214__li14940175741210">Choose <strong id="hss_01_0214__b1348515217351">Asset Management</strong> &gt; <strong id="hss_01_0214__b848514253515">Servers &amp; Quota</strong>. The <strong id="hss_01_0214__b24855273513">Agent Status</strong> of a server is <strong id="hss_01_0214__b17485023354">Online</strong>, and the <strong id="hss_01_0214__b17485327353">Protection Status</strong> of the server is <strong id="hss_01_0214__b4486628357">Unprotected</strong>.</li></ul>
+</div>
+<div class="section" id="hss_01_0214__section16232142216125"><h4 class="sectiontitle">Setting Protected Directories</h4><p id="hss_01_0214__p439012814136">You can set:</p>
+<ul id="hss_01_0214__ul1205117181514"><li id="hss_01_0214__li132051317101516">You can add a maximum of 50 protected directories to a host. For details, see "Adding a Protected Directory".</li><li id="hss_01_0214__li239592071518">To record the running status of the server in real time, exclude the log files in the protected directory. You can grant high read and write permissions for log files to prevent attackers from viewing or tampering with the log files.</li></ul>
+
+</div>
+<div class="section" id="hss_01_0214__section640721810126"><h4 class="sectiontitle">Enabling WTP</h4><ol id="hss_01_0214__ol182261714201"><li id="hss_01_0214__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0214__li830314169200"><span>Click <span><img id="hss_01_0214__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0214__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0214__hss_01_0571_b14857117404"><span id="hss_01_0214__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0214__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0214__li10865171661710"><span>In the navigation pane, choose <strong id="hss_01_0214__b112733495282">Prevention</strong> &gt; <strong id="hss_01_0214__b2186755202814">Web Tamper Protection</strong>. On the <strong id="hss_01_0214__b76431458102814">Web Tamper Protection</strong> page, click <strong id="hss_01_0214__b57013512910">Add Server</strong>.</span><p><div class="fignone" id="hss_01_0214__fig537591101013"><span class="figcap"><b>Figure 1 </b>Adding protected servers</span><br><span><img id="hss_01_0214__en-us_topic_0000001517162878_image136051813376" src="en-us_image_0000001862372558.png"></span></div>
+</p></li><li id="hss_01_0214__li5813644101810"><span>On the <strong id="hss_01_0214__b685591210917">Add Server</strong> page, click the <strong id="hss_01_0214__b25046205432">Available servers</strong> tab. Select the target server, select a quota from the drop-down list or retain the default value, and click <strong id="hss_01_0214__b12126145861010">Add and Enable Protection</strong>.</span></li><li id="hss_01_0214__li11691322145218"><span>View the server status on the <strong id="hss_01_0214__b845217317507">Web Tamper Protection</strong> page.</span><p><p id="hss_01_0214__p19804165633310">The premium edition will be enabled when you enable WTP.</p>
+<ul id="hss_01_0214__ul18871127202418"><li id="hss_01_0214__li941464504014">Choose <strong id="hss_01_0214__b1199193612512">Prevention</strong> &gt; <strong id="hss_01_0214__b5991836185113">Web Tamper Protection</strong>. If the <strong id="hss_01_0214__b39924363513">Protection Status</strong> of the server is <strong id="hss_01_0214__b16992436155111">Protected</strong>, WTP has been enabled.</li><li id="hss_01_0214__li19872157102412">Choose <strong id="hss_01_0214__b12944203814511">Asset Management</strong> &gt; <strong id="hss_01_0214__b18945193810513">Servers &amp; Quota</strong> and click the <strong id="hss_01_0214__b11945183814516">Servers</strong> tab. If the protection status of server is <strong id="hss_01_0214__b179461338185117">Protected</strong>, and <strong id="hss_01_0214__b5946163814519">Disable</strong> and <strong id="hss_01_0214__b16947133895111">Switch Edition</strong> are grayed out in the <strong id="hss_01_0214__b6949103825120">Operation</strong> column, the premium edition included with the WTP edition has been enabled.</li></ul>
+</p></li></ol>
+<div class="notice" id="hss_01_0214__note451212932212"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><ul id="hss_01_0214__ul1727315114019"><li id="hss_01_0214__li161921974612">A quota can be bound to a server to protect it, on condition that the agent on the server is online. </li><li id="hss_01_0214__li122731351802">Disable WTP before updating a website and enable it after the update is complete. Otherwise, the website will fail to be updated.</li><li id="hss_01_0214__li12738511500">Your website is not protected while WTP is disabled. Enable it immediately after updating your website.</li></ul>
+</div></div>
+</div>
+<div class="section" id="hss_01_0214__section12525114195917"><h4 class="sectiontitle">Related Operations</h4><p id="hss_01_0214__p19590193255518"><strong id="hss_01_0214__b481139245">Disabling WTP</strong></p>
+<p id="hss_01_0214__p146191149173110">Choose <strong id="hss_01_0214__b1671119266116">Prevention</strong> &gt; <strong id="hss_01_0214__b0711126416">Web Tamper Protection</strong> and click the <strong id="hss_01_0214__b107021443114">Servers</strong> tab. Click <strong id="hss_01_0214__b116931724134612">Disable Protection</strong> in the <strong id="hss_01_0214__b196933247463">Operation</strong> column of a server.</p>
+<div class="notice" id="hss_01_0214__note785042833312"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><ul id="hss_01_0214__ul480812814203"><li id="hss_01_0214__li4494740143213">Before disabling WTP, perform a comprehensive detection on the server, handle known risks, and record operation information to prevent O&amp;M errors and attacks on the server.</li><li id="hss_01_0214__li1280583474818">If WTP is disabled, web applications are more likely to be tampered with. Therefore, you need to delete important data on the server, stop important services on the server, and disconnect the server from the external network in a timely manner to avoid unnecessary losses caused by attacks on the server.</li><li id="hss_01_0214__li585182193310">After you or disable WTP, files in the protected directory are no longer protected. You are advised to process files in the protected directory before performing these operations.</li><li id="hss_01_0214__li44901748144618">If you find some files missing after disabling WTP, search for them in the local or remote backup path.</li></ul>
+<ul id="hss_01_0214__ul7624635145910"><li id="hss_01_0214__li1859432516235">The premium edition will be disabled when you disable WTP.</li></ul>
+</div></div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0260.html">Enabling Protection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0216.html b/docs/hss/umn/hss_01_0216.html
new file mode 100644
index 00000000..fca92ed8
--- /dev/null
+++ b/docs/hss/umn/hss_01_0216.html
@@ -0,0 +1,84 @@
+<a name="hss_01_0216"></a><a name="hss_01_0216"></a>
+
+<h1 class="topictitle1">Adding a Protected Directory</h1>
+<div id="body1571281740672"><p id="hss_01_0216__p1324724922111">WTP monitors website directories in real time, backs up files, and restores tampered files using the backup, protecting websites from Trojans, illegal links, and tampering.</p>
+<div class="section" id="hss_01_0216__section3509171345215"><h4 class="sectiontitle">Prerequisites</h4><p id="hss_01_0216__en-us_topic_0000001360929817_p567051351211">You have enabled the WTP edition.</p>
+</div>
+<div class="section" id="hss_01_0216__section866616578415"><h4 class="sectiontitle">Constraints and Limitations</h4><ul id="hss_01_0216__ul1463121555719"><li id="hss_01_0216__li347781913287">Only the servers that are protected by the HSS WTP edition support the operations described in this section.</li></ul>
+<ul id="hss_01_0216__ul748394142712"><li id="hss_01_0216__li161065443619">The constraints on protected directories are as follows:<ul id="hss_01_0216__ul18571321183815"><li id="hss_01_0216__li20874161514384">For Linux,<ul id="hss_01_0216__ul163420753918"><li id="hss_01_0216__li12250195918384">A server can have up to 50 protected directories.</li><li id="hss_01_0216__li765982810399">The complete path of a protected directory cannot exceed 256 characters.</li><li id="hss_01_0216__li44942574390">The folder levels of a protected directory cannot exceed 100.</li><li id="hss_01_0216__li1249645753916">The total folders in protected directories cannot exceed 900,000.</li></ul>
+</li><li id="hss_01_0216__li18604183520388">For Windows,<ul id="hss_01_0216__ul10313597393"><li id="hss_01_0216__li842312433920">A server can have up to 50 protected directories.</li><li id="hss_01_0216__li16259131954119">The complete path of a protected directory cannot exceed 256 characters.</li></ul>
+</li></ul>
+</li><li id="hss_01_0216__li1656565063512">The constraints on local backup paths are as follows:<ul id="hss_01_0216__ul1756125553514"><li id="hss_01_0216__li794523712318">Local backup is supported only in Linux.</li><li id="hss_01_0216__li1248384162713">The local backup path must be valid, or web tamper protection will not take effect.</li><li id="hss_01_0216__li15816527280">The local backup path cannot overlap with the added protected directory.</li><li id="hss_01_0216__li731795532813">The available capacity of the disk where the local backup path is located is greater than the size of all protected directories.</li></ul>
+</li></ul>
+</div>
+<div class="section" id="hss_01_0216__section4367121594314"><a name="hss_01_0216__section4367121594314"></a><a name="section4367121594314"></a><h4 class="sectiontitle">Adding a Protected Directory</h4><ol id="hss_01_0216__ol187507191057"><li id="hss_01_0216__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0216__li830314169200"><span>Click <span><img id="hss_01_0216__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0216__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0216__hss_01_0571_b14857117404"><span id="hss_01_0216__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0216__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0216__li536591619511"><span>Choose <strong id="hss_01_0216__b114194892410">Prevention</strong> &gt; <strong id="hss_01_0216__b15114817245">Web Tamper Protection</strong>, click <strong id="hss_01_0216__b65124819244">Configure Protection</strong>.</span><p><div class="note" id="hss_01_0216__note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0216__hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0216__fig85317912311"><span class="figcap"><b>Figure 1 </b>Entering the page for protected directory settings</span><br><span><img id="hss_01_0216__image1139195181013" src="en-us_image_0000001854854673.png"></span></div>
+</p></li><li id="hss_01_0216__li162141510204"><span>Click <strong id="hss_01_0216__b1629171745010">Settings</strong> under <strong id="hss_01_0216__b2027522212514">Protected Directory Settings</strong>.</span><p><div class="fignone" id="hss_01_0216__fig163228187319"><span class="figcap"><b>Figure 2 </b>Protected directory settings</span><br><span><img id="hss_01_0216__image8431850162018" src="en-us_image_0000001669998725.png"></span></div>
+</p></li><li id="hss_01_0216__li18751172112572"><span>You can add a maximum of 50 protected directories.</span><p><ol type="a" id="hss_01_0216__ol2772102635811"><li id="hss_01_0216__li17772132695812">Click <strong id="hss_01_0216__b18216123153317">Add</strong>. In the <strong id="hss_01_0216__b22170323319">Add Protected Directory</strong> dialog box, set required parameters. For details, see <a href="#hss_01_0216__table1250954064918">Table 1</a>.<div class="fignone" id="hss_01_0216__fig350117517325"><span class="figcap"><b>Figure 3 </b>Adding a protected directory</span><br><span><img id="hss_01_0216__image913024114586" src="en-us_image_0000001831694242.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0216__table1250954064918"></a><a name="table1250954064918"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0216__table1250954064918" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameters for a protected directory</caption><thead align="left"><tr id="hss_01_0216__row55111140154917"><th align="left" class="cellrowborder" valign="top" width="16.38%" id="mcps1.3.4.2.5.2.1.1.5.2.4.1.1"><p id="hss_01_0216__p1529024612497"><strong id="hss_01_0216__b24725868162658">Parameter</strong></p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="42.63%" id="mcps1.3.4.2.5.2.1.1.5.2.4.1.2"><p id="hss_01_0216__p424710545498"><strong id="hss_01_0216__b129719412564">Description</strong></p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="40.99%" id="mcps1.3.4.2.5.2.1.1.5.2.4.1.3"><p id="hss_01_0216__p75081836142916"><strong id="hss_01_0216__b175551945135615">Restriction</strong></p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0216__row11512114018498"><td class="cellrowborder" valign="top" width="16.38%" headers="mcps1.3.4.2.5.2.1.1.5.2.4.1.1 "><p id="hss_01_0216__p18291154615491">Protected Directory</p>
+</td>
+<td class="cellrowborder" valign="top" width="42.63%" headers="mcps1.3.4.2.5.2.1.1.5.2.4.1.2 "><p id="hss_01_0216__p16330126162918">Files and folders in this directory are read-only.</p>
+</td>
+<td class="cellrowborder" valign="top" width="40.99%" headers="mcps1.3.4.2.5.2.1.1.5.2.4.1.3 "><p id="hss_01_0216__p1450833613292">Do not set it to any OS directories.</p>
+</td>
+</tr>
+<tr id="hss_01_0216__row19512840174916"><td class="cellrowborder" valign="top" width="16.38%" headers="mcps1.3.4.2.5.2.1.1.5.2.4.1.1 "><p id="hss_01_0216__p229164612495">Excluded Subdirectory</p>
+</td>
+<td class="cellrowborder" valign="top" width="42.63%" headers="mcps1.3.4.2.5.2.1.1.5.2.4.1.2 "><ul id="hss_01_0216__ul1794416554332"><li id="hss_01_0216__li113465943315">Subdirectories that do not need to be protected in the protected directory, such as temporary file directories.</li><li id="hss_01_0216__li094525533318">Separate subdirectories with semicolons (;). A maximum of 10 subdirectories can be added.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="40.99%" headers="mcps1.3.4.2.5.2.1.1.5.2.4.1.3 "><p id="hss_01_0216__p395421614328">The subdirectory is a relative directory in the protected directory.</p>
+</td>
+</tr>
+<tr id="hss_01_0216__row551254014498"><td class="cellrowborder" valign="top" width="16.38%" headers="mcps1.3.4.2.5.2.1.1.5.2.4.1.1 "><p id="hss_01_0216__p4291124614910">Excluded File Types</p>
+</td>
+<td class="cellrowborder" valign="top" width="42.63%" headers="mcps1.3.4.2.5.2.1.1.5.2.4.1.2 "><ul id="hss_01_0216__ul761217453336"><li id="hss_01_0216__li6836174883319">Types of files that do not need to be protected in the protected directory, such as log files.</li><li id="hss_01_0216__li953995013319">Separate file types with semicolons (;).</li><li id="hss_01_0216__li156121345113316">To record the running status of the server in real time, exclude the log files in the protected directory. You can grant high read and write permissions for log files to prevent attackers from viewing or tampering with the log files.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="40.99%" headers="mcps1.3.4.2.5.2.1.1.5.2.4.1.3 "><p id="hss_01_0216__p12771145692912">-</p>
+</td>
+</tr>
+<tr id="hss_01_0216__row3512104084919"><td class="cellrowborder" valign="top" width="16.38%" headers="mcps1.3.4.2.5.2.1.1.5.2.4.1.1 "><p id="hss_01_0216__p1429114654917">Local Backup Path</p>
+</td>
+<td class="cellrowborder" valign="top" width="42.63%" headers="mcps1.3.4.2.5.2.1.1.5.2.4.1.2 "><ul id="hss_01_0216__ul38357246332"><li id="hss_01_0216__li836272603315">Only Linux is supported.</li><li id="hss_01_0216__li281319305339">After WTP is enabled, files in the protected directory are automatically backed up to the local backup path.</li><li id="hss_01_0216__li1117933123311">Generally, the backup completes within 10 minutes. The actual duration depends on the size of files in the protected directory. Protection takes effect immediately when the backup completes.</li><li id="hss_01_0216__li93331735143317">Excluded subdirectories and types of files are not backed up.</li><li id="hss_01_0216__li2083511245339">If WTP detects that a file in the protection directory is tampered with, it immediately uses the backup file on the local host to restore the file.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="40.99%" headers="mcps1.3.4.2.5.2.1.1.5.2.4.1.3 "><p id="hss_01_0216__p550873682910">The local backup path cannot overlap with the added protected directory.</p>
+</td>
+</tr>
+<tr id="hss_01_0216__row133700465297"><td class="cellrowborder" valign="top" width="16.38%" headers="mcps1.3.4.2.5.2.1.1.5.2.4.1.1 "><p id="hss_01_0216__p1037014464299">Excluded File Path</p>
+</td>
+<td class="cellrowborder" valign="top" width="42.63%" headers="mcps1.3.4.2.5.2.1.1.5.2.4.1.2 "><ul id="hss_01_0216__ul180311423301"><li id="hss_01_0216__li8803144218302">Paths that do not need to be protected in the protected directory.</li><li id="hss_01_0216__li3803742153011">Separate multiple paths with semicolons (;). A maximum of 50 paths can be added. The maximum length of a path is 256 characters.</li><li id="hss_01_0216__li7323185245112">A single path cannot start with a space or end with a slash (/).</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="40.99%" headers="mcps1.3.4.2.5.2.1.1.5.2.4.1.3 "><p id="hss_01_0216__p83719460292">The excluded file path is the relative file path of the protected directory.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</li><li id="hss_01_0216__li077215269581">Click <strong id="hss_01_0216__b151731013123518">OK</strong>.<p id="hss_01_0216__p14609134115588">If you need to modify files in the protected directory, stop protection for the protected directory first. After the files are modified, resume protection for the directory in a timely manner.</p>
+</li></ol>
+</p></li><li id="hss_01_0216__li98082310482"><span>Enable remote backup.</span><p><p id="hss_01_0216__p13589132735713">By default, HSS backs up the files from the protected directories (excluding specified subdirectories and file types) to the local backup directory you specified when adding protected directories. To protect the local backup files from tampering, you must enable the remote backup function.</p>
+<p id="hss_01_0216__p106484094916">For details about how to add a remote backup server, see <a href="hss_01_0106.html">Configuring Remote Backup</a>.</p>
+<ol type="a" id="hss_01_0216__ol126191721115116"><li id="hss_01_0216__li1761962111514">On the <strong id="hss_01_0216__b1197082711119">Protected Directory Settings</strong> page, click <strong id="hss_01_0216__b178909420114">Enable Remote Backup</strong>.<div class="fignone" id="hss_01_0216__fig7877153517337"><span class="figcap"><b>Figure 4 </b>Enabling remote backup</span><br><span><img id="hss_01_0216__image589293195413" src="en-us_image_0000001669838757.png"></span></div>
+</li><li id="hss_01_0216__li10752823175116">Select a backup server from the drop-down list box.</li><li id="hss_01_0216__li107171947145114">Click <strong id="hss_01_0216__b1280982733910">OK</strong>.</li></ol>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0216__section911675819556"><h4 class="sectiontitle">Related Operations</h4><ul id="hss_01_0216__ul6589714115518"><li id="hss_01_0216__li1408933121714">Suspend protection: You can suspend WTP for a directory if needed. It is recommended that you resume WTP in a timely manner to prevent the files in the directory from being tampered with.</li><li id="hss_01_0216__li1559215319590">Edit a protected directory: You can modify the added protected directory as needed.</li><li id="hss_01_0216__li16592205385913">Delete a protected directory: You can delete the directories that do not need to be protected.</li></ul>
+<div class="notice" id="hss_01_0216__note194410260811"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><ul id="hss_01_0216__ul4856218335"><li id="hss_01_0216__li585182193310">After you suspend protection for a protected directory, delete it, or modify its path, files in the directory will no longer be protected. Before performing these operations, ensure you have taken other measures to protect the files.</li><li id="hss_01_0216__li285102110333">After you suspend protection for a protected directory, delete it, or modify its path, if you find your files missing in the directory, search for them in the local or remote backup path.</li></ul>
+</div></div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0153.html">WTP</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0217.html b/docs/hss/umn/hss_01_0217.html
new file mode 100644
index 00000000..156f331b
--- /dev/null
+++ b/docs/hss/umn/hss_01_0217.html
@@ -0,0 +1,31 @@
+<a name="hss_01_0217"></a><a name="hss_01_0217"></a>
+
+<h1 class="topictitle1">Enabling/Disabling Scheduled Static WTP</h1>
+<div id="body1571297608317"><p id="hss_01_0217__p193842367335">You can schedule WTP protection to allow website updates in specific periods.</p>
+<div class="note" id="hss_01_0217__note269513314012"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0217__p563914185435">Exercise caution when you set the periods to disable WTP, because files will not be protected in those periods.</p>
+</div></div>
+<div class="section" id="hss_01_0217__section112495541074"><h4 class="sectiontitle">Constraints</h4><p id="hss_01_0217__hss_01_0106_p15131401586">Only the servers that are protected by the HSS WTP edition support the operations described in this section.</p>
+</div>
+<div class="section" id="hss_01_0217__section1593890113710"><h4 class="sectiontitle">Rules for Setting an Unprotected Period</h4><ul id="hss_01_0217__ul1321412764310"><li id="hss_01_0217__li4214152704313">Unprotected period &gt;= 5 minutes</li><li id="hss_01_0217__li221482719438">Unprotected period &lt; 24 hours</li><li id="hss_01_0217__li1921419276439">Periods (except for those starting at 00:00 or ending at 23:59) cannot overlap and must have an at least 5-minute interval.</li><li id="hss_01_0217__li5214142720437">A period cannot span two days.</li><li id="hss_01_0217__li152148278439">The server time is used as a local time base.</li></ul>
+</div>
+<div class="section" id="hss_01_0217__section3732351193211"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0217__ol182261714201"><li id="hss_01_0217__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0217__li830314169200"><span>Click <span><img id="hss_01_0217__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0217__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0217__hss_01_0571_b14857117404"><span id="hss_01_0217__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0217__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0217__li18357954454"><span>Choose <strong id="hss_01_0217__hss_01_0216_b114194892410">Prevention</strong> &gt; <strong id="hss_01_0217__hss_01_0216_b15114817245">Web Tamper Protection</strong>, click <strong id="hss_01_0217__hss_01_0216_b65124819244">Configure Protection</strong>.</span><p><div class="note" id="hss_01_0217__hss_01_0216_note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0217__hss_01_0216_hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0217__hss_01_0216_fig85317912311"><span class="figcap"><b>Figure 1 </b>Entering the page for protected directory settings</span><br><span><img id="hss_01_0217__hss_01_0216_image1139195181013" src="en-us_image_0000001854854673.png"></span></div>
+</p></li><li id="hss_01_0217__li1093017347403"><span>On the <strong id="hss_01_0217__b5985112811153">Configure Protection</strong> tab, click <strong id="hss_01_0217__b998985611414">Settings</strong> under <strong id="hss_01_0217__b2090217219152">Scheduled Protection</strong>.</span><p><div class="fignone" id="hss_01_0217__fig1075952574514"><span class="figcap"><b>Figure 2 </b>Configuring scheduled protection</span><br><span><img id="hss_01_0217__image267881423420" src="en-us_image_0000001621162450.png"></span></div>
+</p></li><li id="hss_01_0217__li5125457195615"><span>Set the unprotected period and days in a week to automatically disable protection.</span><p><ol type="a" id="hss_01_0217__ol13108163884419"><li id="hss_01_0217__li1110813811440">Click <strong id="hss_01_0217__b4484101417187">Add Unprotected Period</strong>. Configure parameters in the dialog box that is displayed.<div class="fignone" id="hss_01_0217__fig67221441464"><span class="figcap"><b>Figure 3 </b>Adding an unprotected period</span><br><span><img id="hss_01_0217__image713115563356" src="en-us_image_0000001669682473.png"></span></div>
+<div class="note" id="hss_01_0217__note18105124654614"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0217__p340893012476">Configuration constraints:</p>
+<ul id="hss_01_0217__ul1827444613016"><li id="hss_01_0217__li11274646603">Unprotected period &gt;= 5 minutes</li><li id="hss_01_0217__li15274194612018">Unprotected period &lt; 24 hours</li><li id="hss_01_0217__li152741346301">Periods (except for those starting at 00:00 or ending at 23:59) cannot overlap and must have an at least 5-minute interval.</li><li id="hss_01_0217__li11274124613016">A period cannot span two days.</li><li id="hss_01_0217__li1827417461001">The server time is used as a time base.</li></ul>
+</div></div>
+</li><li id="hss_01_0217__li6767152118466">Click <strong id="hss_01_0217__b1834443716222">OK</strong>.</li><li id="hss_01_0217__li18344323144618">Select the days to disable protection.<p id="hss_01_0217__p11180192395619"><a name="hss_01_0217__li18344323144618"></a><a name="li18344323144618"></a>For example, if you select <strong id="hss_01_0217__b18635143315265">Mon.</strong>, <strong id="hss_01_0217__b78742045202615">Thu.</strong>, and <strong id="hss_01_0217__b12278135115262">Sat.</strong>, the server automatically disables the WTP function during the unprotected period on these days.</p>
+<div class="fignone" id="hss_01_0217__fig052194204615"><span class="figcap"><b>Figure 4 </b>Selecting days to disable protection</span><br><span><img id="hss_01_0217__image114291845183715" src="en-us_image_0000001620842718.png"></span></div>
+</li><li id="hss_01_0217__li123561628115315">Click <strong id="hss_01_0217__b5987819142416">OK</strong>.</li></ol>
+</p></li><li id="hss_01_0217__li131416349436"><span>Return to the <strong id="hss_01_0217__b914016202255">Configure Protection</strong> tab and toggle on <span><img id="hss_01_0217__image115871430163518" src="en-us_image_0000001568317625.png"></span> to enable <strong id="hss_01_0217__b164451137162520">Scheduled Protection</strong>.</span><p><div class="fignone" id="hss_01_0217__fig82461617475"><span class="figcap"><b>Figure 5 </b>Enabling scheduled protection</span><br><span><img id="hss_01_0217__image2056594512388" src="en-us_image_0000001621122554.png"></span></div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0153.html">WTP</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0218.html b/docs/hss/umn/hss_01_0218.html
new file mode 100644
index 00000000..97f3f838
--- /dev/null
+++ b/docs/hss/umn/hss_01_0218.html
@@ -0,0 +1,24 @@
+<a name="hss_01_0218"></a><a name="hss_01_0218"></a>
+
+<h1 class="topictitle1">Enabling Dynamic WTP</h1>
+<div id="body1571297608317"><p id="hss_01_0218__p193842367335">Dynamic WTP protects your web pages while Tomcat applications are running, and can detect tampering of dynamic data, such as database data. It can be enabled with static WTP or separately.</p>
+<div class="section" id="hss_01_0218__section112495541074"><h4 class="sectiontitle">Constraints and Limitations</h4><ul id="hss_01_0218__ul2484144620565"><li id="hss_01_0218__li94851546205620">Only the servers that are protected by the HSS WTP edition support the operations described in this section.</li></ul>
+</div>
+<ul id="hss_01_0218__ul8485154611560"><li id="hss_01_0218__li13485194612565">Dynamic WTP can be provided only for Tomcat of JDK 8.</li></ul>
+<div class="section" id="hss_01_0218__section6641161634110"><h4 class="sectiontitle">Prerequisites</h4><p id="hss_01_0218__p1295811954116">You are using a server running the Linux OS.</p>
+</div>
+<div class="section" id="hss_01_0218__section3732351193211"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0218__ol182261714201"><li id="hss_01_0218__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0218__li830314169200"><span>Click <span><img id="hss_01_0218__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0218__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0218__hss_01_0571_b14857117404"><span id="hss_01_0218__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0218__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0218__li18357954454"><span>Choose <strong id="hss_01_0218__hss_01_0216_b114194892410">Prevention</strong> &gt; <strong id="hss_01_0218__hss_01_0216_b15114817245">Web Tamper Protection</strong>, click <strong id="hss_01_0218__hss_01_0216_b65124819244">Configure Protection</strong>.</span><p><div class="note" id="hss_01_0218__hss_01_0216_note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0218__hss_01_0216_hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0218__hss_01_0216_fig85317912311"><span class="figcap"><b>Figure 1 </b>Entering the page for protected directory settings</span><br><span><img id="hss_01_0218__hss_01_0216_image1139195181013" src="en-us_image_0000001854854673.png"></span></div>
+</p></li><li id="hss_01_0218__li131416349436"><span>On the <strong id="hss_01_0218__b12376618467">Configure Protection</strong> tab, toggle on <span><img id="hss_01_0218__image115871430163518" src="en-us_image_0000001517637478.png"></span> to enable <strong id="hss_01_0218__b111061329174615">Dynamic WTP</strong>.</span><p><div class="fignone" id="hss_01_0218__fig33928502470"><span class="figcap"><b>Figure 2 </b>Enabling Dynamic WTP</span><br><span><img id="hss_01_0218__image2781101434614" src="en-us_image_0000001621322446.png"></span></div>
+</p></li><li id="hss_01_0218__li661284312711"><span>In the displayed dialog box, modify the <strong id="hss_01_0218__b1539372864819">Tomcat bin Directory</strong>.</span><p><p id="hss_01_0218__p95355481375">To enable dynamic WTP, you need to modify the Tomcat bin directory first. The system presets the <strong id="hss_01_0218__b114486319500">setenv.sh</strong> script in the bin directory for setting anti-tamper program startup parameters. After enabling dynamic WTP, restart Tomcat to make this setting take effect.</p>
+<div class="fignone" id="hss_01_0218__fig585508184814"><span class="figcap"><b>Figure 3 </b>Configuring a Tomcat directory</span><br><span><img id="hss_01_0218__image77831631184712" src="en-us_image_0000001669602353.png"></span></div>
+</p></li><li id="hss_01_0218__li116551174313"><span>Click <strong id="hss_01_0218__b154821059204713">OK</strong> to enable dynamic WTP.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0153.html">WTP</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0226.html b/docs/hss/umn/hss_01_0226.html
new file mode 100644
index 00000000..b42d3e6a
--- /dev/null
+++ b/docs/hss/umn/hss_01_0226.html
@@ -0,0 +1,21 @@
+<a name="hss_01_0226"></a><a name="hss_01_0226"></a>
+
+<h1 class="topictitle1">Scenarios</h1>
+<div id="body1571650883173"><div class="section" id="hss_01_0226__section1481516315272"><h4 class="sectiontitle">HSS</h4><ul id="hss_01_0226__ul7199145517285"><li id="hss_01_0226__li2200155532816">Centralized security management<p id="hss_01_0226__p6769257172812"><a name="hss_01_0226__li2200155532816"></a><a name="li2200155532816"></a>With <span id="hss_01_0226__text12426102311019">HSS</span>, you can manage the security configurations and events of all your cloud servers on the console, reducing risks and management costs.</p>
+</li><li id="hss_01_0226__li1520045513281">Security risk evaluation<p id="hss_01_0226__p1074425852815"><a name="hss_01_0226__li1520045513281"></a><a name="li1520045513281"></a>You can check and eliminate all the risks (such as risky accounts, open ports, software vulnerabilities, and weak passwords) on your servers.</p>
+</li><li id="hss_01_0226__li32001855152819">Proactive security<p id="hss_01_0226__p1732051122916"><a name="hss_01_0226__li32001855152819"></a><a name="li32001855152819"></a>Count and scan your server assets, check and fix vulnerabilities and unsafe settings, and proactively protect your network, applications, and files from attacks.</p>
+</li><li id="hss_01_0226__li820025572813">Intrusion detection<p id="hss_01_0226__p5347112102912"><a name="hss_01_0226__li820025572813"></a><a name="li820025572813"></a>Scan all possible attack vectors to detect and fight advanced persistent threats (APTs) and other threats in real time, protecting your system from their impact.</p>
+</li></ul>
+</div>
+<div class="section" id="hss_01_0226__section867619762917"><h4 class="sectiontitle">CGS</h4><ul id="hss_01_0226__ul1831161933011"><li id="hss_01_0226__li1831131912307">Container image security<p id="hss_01_0226__p712914218302"><a name="hss_01_0226__li1831131912307"></a><a name="li1831131912307"></a>Vulnerabilities will probably be introduced to your system through the images downloaded from Docker Hub or through open-source frameworks.</p>
+<p id="hss_01_0226__p176132633016">You can use CGS to scan images for risks, including image vulnerabilities, unsafe accounts, and malicious files. Receive reminders and suggestions and eliminate the risks accordingly.</p>
+</li><li id="hss_01_0226__li1083121933012">Container runtime security<p id="hss_01_0226__p17352127113019"><a name="hss_01_0226__li1083121933012"></a><a name="li1083121933012"></a>Develop a whitelist of container behaviors to ensure that containers run with the minimum permissions required, securing containers against potential threats.</p>
+</li></ul>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0042.html">Introduction</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0230.html b/docs/hss/umn/hss_01_0230.html
new file mode 100644
index 00000000..ed8fd800
--- /dev/null
+++ b/docs/hss/umn/hss_01_0230.html
@@ -0,0 +1,51 @@
+<a name="hss_01_0230"></a><a name="hss_01_0230"></a>
+
+<h1 class="topictitle1">Enabling the Enterprise, or Premium Edition</h1>
+<div id="body1571904118338"><p id="hss_01_0230__p1164014215119">Before enabling protection on servers, you need to allocate quota to a specified server. If the protection is disabled or the server is deleted, the quota can be allocated to other servers.</p>
+<p id="hss_01_0230__p14474174884217">For the WTP edition, choose <strong id="hss_01_0230__b10529152611521">Prevention</strong> &gt; <strong id="hss_01_0230__b145298268528">Web Tamper Protection</strong> &gt; <strong id="hss_01_0230__b11529122625218">Server Protection</strong> and then enable it.</p>
+<div class="note" id="hss_01_0230__note178388441193"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0230__p65411251185119">To enable the WTP edition, choose <span class="menucascade" id="hss_01_0230__menucascade275091214914"><b><span class="uicontrol" id="hss_01_0230__uicontrol16750151214498">Prevention</span></b> &gt; <b><span class="uicontrol" id="hss_01_0230__uicontrol20750151216498">Web Tamper Protection</span></b> &gt; <b><span class="uicontrol" id="hss_01_0230__uicontrol62871948913">Server Protection</span></b></span> and click the <strong id="hss_01_0230__b18162162622519">Servers</strong> tab. All the functions of the premium edition are included with the WTP edition.</p>
+</div></div>
+<div class="section" id="hss_01_0230__section1791462515136"><h4 class="sectiontitle">Check Mode</h4><p id="hss_01_0230__p398615432356">HSS performs a full scan in the early morning every day.</p>
+<p id="hss_01_0230__p1250171210364">After you enable server protection, you can view scan results after the automatic scan in the next early morning.</p>
+</div>
+<div class="section" id="hss_01_0230__section2256777914731"><h4 class="sectiontitle">Prerequisites</h4><ul id="hss_01_0230__ul364818503491"><li id="hss_01_0230__li9705153918575">The agent status of the server to be protected is <strong id="hss_01_0230__b20721631155217">Online</strong>. To check the status, choose <strong id="hss_01_0230__b1572114318523">Asset Management</strong> &gt; <strong id="hss_01_0230__b1172163118527">Servers &amp; Quota</strong> on the <span id="hss_01_0230__text1072193195213">HSS</span>.</li><li id="hss_01_0230__li849517485317">To better protect your containers, you are advised to set security configurations.</li></ul>
+</div>
+<div class="section" id="hss_01_0230__section76033247421"><h4 class="sectiontitle">Restrictions</h4><ul id="hss_01_0230__ul228519712710"><li id="hss_01_0230__li43091810278">Linux OS<p id="hss_01_0230__p19879610577"><a name="hss_01_0230__li43091810278"></a><a name="li43091810278"></a>On servers running the EulerOS with ARM, HSS does not block the IP addresses suspected of SSH brute-force attacks, but only generates alarms.</p>
+</li><li id="hss_01_0230__li862610130714">Windows OS<ul id="hss_01_0230__ul6287416121717"><li id="hss_01_0230__li1077713911718">Authorize the Windows firewall when you enable protection for a Windows server. Do not disable the Windows firewall during the <span id="hss_01_0230__text9909204317335">HSS</span> in-service period. If the Windows firewall is disabled, HSS cannot block brute-force attack IP addresses.</li><li id="hss_01_0230__li07798915176">If the Windows firewall is manually enabled, HSS may also fail to block brute-force attack IP addresses.</li></ul>
+</li></ul>
+</div>
+<div class="section" id="hss_01_0230__section570311385210"><h4 class="sectiontitle">Enabling Protection</h4><ol id="hss_01_0230__ol3706113818216"><li id="hss_01_0230__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0230__li830314169200"><span>Click <span><img id="hss_01_0230__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0230__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0230__hss_01_0571_b14857117404"><span id="hss_01_0230__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0230__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0230__li20278542121116"><span>In the navigation pane, choose <strong id="hss_01_0230__b19690153519239">Asset Management</strong> &gt; <strong id="hss_01_0230__b869113562316">Servers &amp; Quota</strong>. Click the <strong id="hss_01_0230__b1169173562312">Servers</strong> tab.</span><p><div class="fignone" id="hss_01_0230__fig1982141172018"><span class="figcap"><b>Figure 1 </b>Server list</span><br><span><img id="hss_01_0230__en-us_topic_0000001568441781_image16401167122512" src="en-us_image_0000001801549361.png"></span></div>
+</p></li><li id="hss_01_0230__li1117118159586"><span>Select the target server and click <strong id="hss_01_0230__b110886966410931">Enable</strong>.</span><p><p id="hss_01_0230__p82731116195816">In the <strong id="hss_01_0230__b1118184415212">Enable Protection</strong> dialog box, select an HSS edition.</p>
+<div class="fignone" id="hss_01_0230__fig11891113122210"><span class="figcap"><b>Figure 2 </b>Enabling HSS</span><br><span><img id="hss_01_0230__en-us_topic_0000001568441781_image15364122672710" src="en-us_image_0000001629357728.png"></span></div>
+<div class="fignone" id="hss_01_0230__fig76187132211"><span class="figcap"><b>Figure 3 </b>Confirming the protection information</span><br><span><img id="hss_01_0230__en-us_topic_0000001568441781_image19895511102910" src="en-us_image_0000001563224758.png"></span></div>
+<p id="hss_01_0230__p1514721714015"></p>
+</p></li><li id="hss_01_0230__li14707231111812"><span>Click <strong id="hss_01_0230__b3623392376">OK</strong>. View the server protection status in the server list.</span><p><p id="hss_01_0230__p1373745811350">If the <strong id="hss_01_0230__b1022413913526">Protection Status</strong> of the target server is <strong id="hss_01_0230__b12257394522">Enabled</strong>, the enterprise or premium edition has been enabled.</p>
+<div class="note" id="hss_01_0230__note1761653894320"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0230__ul141971904611"><li id="hss_01_0230__li161921974612">A quota can be bound to a server to protect it, on condition that the agent on the server is online.</li></ul>
+</div></div>
+<p id="hss_01_0230__p021202785320">After HSS is enabled, it will scan your servers for security issues. Check items vary according to the edition you enabled.</p>
+<div class="fignone" id="hss_01_0230__fig1725974173016"><span class="figcap"><b>Figure 4 </b>Automatic security check items</span><br><span><img id="hss_01_0230__en-us_topic_0000001568441781_image385012207566" src="en-us_image_0000001563713322.png"></span></div>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0230__section174914654610"><h4 class="sectiontitle">Viewing Detection Details</h4><p id="hss_01_0230__p1555520594507">After server protection is enabled, <span id="hss_01_0230__text16731621112710">HSS</span> will immediately perform comprehensive detection on the server. The detection may take a long time.</p>
+<p id="hss_01_0230__p7255453939">On the left of the protection list, click <strong id="hss_01_0230__b9410144155220">Risky</strong>.</p>
+<div class="fignone" id="hss_01_0230__fig2119162718349"><span class="figcap"><b>Figure 5 </b>Viewing risky items</span><br><span><img id="hss_01_0230__en-us_topic_0000001568441781_image266516575915" src="en-us_image_0000001908410077.png"></span></div>
+<p id="hss_01_0230__p1187510257388">Click a server name to go to the details page. On this page, you can quickly check the detected information and risks of the server.</p>
+<div class="fignone" id="hss_01_0230__fig1803121043516"><span class="figcap"><b>Figure 6 </b>Viewing the detection result</span><br><span><img id="hss_01_0230__en-us_topic_0000001568441781_image17995111711218" src="en-us_image_0000001563395342.png"></span></div>
+</div>
+<div class="section" id="hss_01_0230__section4937102714180"><h4 class="sectiontitle">Follow-up Procedure</h4><p id="hss_01_0230__p1667555195517">You can manually configure check items. Configurable items vary according to the edition you enabled.</p>
+<div class="fignone" id="hss_01_0230__fig104989914551"><span class="figcap"><b>Figure 7 </b>Manual check items</span><br><span><img id="hss_01_0230__image35781856195016" src="en-us_image_0000001558495162.png"></span></div>
+</div>
+<div class="section" id="hss_01_0230__section88524719456"><h4 class="sectiontitle">Related Operations</h4><p id="hss_01_0230__p17188218122013"><strong id="hss_01_0230__b159271053192317">Disabling HSS</strong></p>
+<p id="hss_01_0230__p9897195617291">On the <strong id="hss_01_0230__b20645182043310">Servers</strong> tab of the <strong id="hss_01_0230__b165072003319">Servers &amp; Quotas</strong> page, click <strong id="hss_01_0230__b36501620163310">Disable</strong> in the <strong id="hss_01_0230__b18651720163311">Operation</strong> column of a server.</p>
+<div class="notice" id="hss_01_0230__note2054272615116"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><ul id="hss_01_0230__ul8341202015407"><li id="hss_01_0230__li4494740143213">Before disabling protection, perform a comprehensive detection on the server, handle known risks, and record operation information to prevent attacks.</li><li id="hss_01_0230__li6855132175310">After protection is disabled, clear important data on the server, stop important applications on the server, and disconnect the server from the external network to avoid unnecessary loss caused by attacks.</li></ul>
+</div></div>
+<p id="hss_01_0230__p3563152143217"><strong id="hss_01_0230__b2874104911233">Unbinding quota</strong></p>
+<p id="hss_01_0230__p99281535161012">Choose <span class="menucascade" id="hss_01_0230__menucascade3430154911299"><b><span class="uicontrol" id="hss_01_0230__uicontrol1343004932920">Asset Management</span></b> &gt; <b><span class="uicontrol" id="hss_01_0230__uicontrol64301249172913">Servers &amp; Quota</span></b></span>, and click the <span class="uicontrol" id="hss_01_0230__uicontrol124307496292"><b>Quotas</b></span> tab. Click <strong id="hss_01_0230__b143184910290">Unbind</strong> in the <strong id="hss_01_0230__b14311649102913">Operation</strong> column. The usage status of the unbound quota will change from <strong id="hss_01_0230__b1443114912919">In use</strong> to <strong id="hss_01_0230__b1043134919293">Idle</strong>. HSS will automatically disable protection for the server unbound from the quota.</p>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0260.html">Enabling Protection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0233.html b/docs/hss/umn/hss_01_0233.html
new file mode 100644
index 00000000..8c5f3f6d
--- /dev/null
+++ b/docs/hss/umn/hss_01_0233.html
@@ -0,0 +1,17 @@
+<a name="hss_01_0233"></a><a name="hss_01_0233"></a>
+
+<h1 class="topictitle1">Installing an Agent</h1>
+<div id="body1571904118338"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0571.html">Installing an Agent on Linux</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0236.html">Installing the Agent for Windows</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0292.html">Enabling HSS</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0236.html b/docs/hss/umn/hss_01_0236.html
new file mode 100644
index 00000000..55f670a4
--- /dev/null
+++ b/docs/hss/umn/hss_01_0236.html
@@ -0,0 +1,23 @@
+<a name="hss_01_0236"></a><a name="hss_01_0236"></a>
+
+<h1 class="topictitle1">Installing the Agent for Windows</h1>
+<div id="body0000001122572616"><p id="hss_01_0236__p1252513301978">You can enable <span id="hss_01_0236__text1535354517303">HSS</span> only after the agent is installed on your servers. This topic describes how to install the agent on a server running a Windows OS. For details about how to install an agent on the Linux OS, see <a href="hss_01_0571.html">Installing an Agent on Linux</a>.</p>
+<div class="section" id="hss_01_0236__section317082216338"><h4 class="sectiontitle">Default Installation Path</h4><p id="hss_01_0236__p1956895711613">The agent installation path on servers running the Windows OS cannot be customized. The default path is:</p>
+<p id="hss_01_0236__p1211316271338"><span class="filepath" id="hss_01_0236__filepath138546491334"><b>C:\Program Files\HostGuard</b></span></p>
+</div>
+<div class="section" id="hss_01_0236__section18170162364713"><h4 class="sectiontitle">Precaution</h4><p id="hss_01_0236__p1538394817471">If you uninstall an agent and install it again on a Windows server, the message "Installation failed" will probably be displayed. This is a misreport and you can ignore it.</p>
+</div>
+<div class="section" id="hss_01_0236__section145381446145316"><h4 class="sectiontitle">Prerequisite</h4><ul id="hss_01_0236__ul1969023341320"><li id="hss_01_0236__li3922154310138">The server runs Windows OS.</li><li id="hss_01_0236__li15235161525214">A remote management tool, such as pcAnywhere and UltraVNC, has been installed on your PC.</li></ul>
+</div>
+<div class="section" id="hss_01_0236__section192703820307"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0236__ol548341610490"><li id="hss_01_0236__li5127654447"><span>Log in to the management console.</span></li><li id="hss_01_0236__li1435352195816"><span>Click <span><img id="hss_01_0236__image9939115511526" src="en-us_image_0000001568517705.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0236__b14669089579">Security</strong> &gt; <strong id="hss_01_0236__b96692813572"><span id="hss_01_0236__text46697895714">HSS</span></strong>. The <span id="hss_01_0236__text1767013875715">HSS</span> page is displayed.</span></li><li id="hss_01_0236__li837712583910"><span>In the navigation pane, choose <strong id="hss_01_0236__b3256124211408">Installation &amp; Configuration</strong>. Click the <strong id="hss_01_0236__b10623111118416">Agents</strong> tab. Click <strong id="hss_01_0236__b184574338415">Offline</strong>.</span><p><div class="fignone" id="hss_01_0236__fig17794151116225"><span class="figcap"><b>Figure 1 </b>Accessing the agent management page</span><br><span><img id="hss_01_0236__en-us_topic_0000001517641870_image59841340132010" src="en-us_image_0000001563539818.png"></span></div>
+</p></li><li id="hss_01_0236__li1339342620496"><a name="hss_01_0236__li1339342620496"></a><a name="li1339342620496"></a><span>In the <strong id="hss_01_0236__b173121350144217">Operation</strong> column of the server, click <strong id="hss_01_0236__b780115864212">Install Agent</strong> to obtain the link for downloading the agent installation script.</span></li><li id="hss_01_0236__li1698919222915"><span>Remotely log in to the server where the agent is to be installed.</span><p><ul id="hss_01_0236__ul202956451355"><li id="hss_01_0236__li11443181219158">You can log in to the ECS management console and click <strong id="hss_01_0236__b38493390210939">Remote Login</strong> in the ECS list.</li><li id="hss_01_0236__li6296445163516">If an EIP has been bound to the server, you can log in to the server by using Windows Remote Desktop Connection or a third-party remote management tool, such as pcAnywhere or UltraVNC.</li></ul>
+</p></li><li id="hss_01_0236__li1530444519163"><span>On the server where the agent is to be installed, open the link obtained in <a href="#hss_01_0236__li1339342620496">4</a> by using the Internet Explorer. Download the agent installation script.</span></li><li id="hss_01_0236__li118941950121811"><span>Run the agent installation script as the administrator.</span></li><li id="hss_01_0236__li1252293112815"><span>Check the <strong id="hss_01_0236__b767492194718">HostGuard.exe</strong> and <strong id="hss_01_0236__b14674102104711">HostWatch.exe</strong> processes in the Windows Task Manager.</span><p><p id="hss_01_0236__p136675344280">If the processes do not exist, the agent installation fails. In this case, reinstall the agent.</p>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0233.html">Installing an Agent</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0241.html b/docs/hss/umn/hss_01_0241.html
new file mode 100644
index 00000000..b82162a4
--- /dev/null
+++ b/docs/hss/umn/hss_01_0241.html
@@ -0,0 +1,352 @@
+<a name="hss_01_0241"></a><a name="hss_01_0241"></a>
+
+<h1 class="topictitle1">Enabling Alarm Notifications</h1>
+<div id="body1601278593466"><div class="p" id="hss_01_0241__p3920434164711">After alarm notification is enabled, you can receive alarm notifications sent by <span id="hss_01_0241__text183524516304">HSS</span> to learn about security risks facing your servers and web pages. Without this function, you have to log in to the management console to view alarms.<ul id="hss_01_0241__ul658793511217"><li id="hss_01_0241__li4587203515129">Alarm notification settings are effective only for the current region. To receive notifications from another region, switch to that region and configure alarm notification.</li><li id="hss_01_0241__li1930864325615">Alarm notifications may be mistakenly blocked. If you have enabled notifications but not received any, check whether they have been blocked as spasms.</li></ul>
+</div>
+<div class="section" id="hss_01_0241__section136527177206"><h4 class="sectiontitle">Enabling Alarm Notifications</h4><ol id="hss_01_0241__ol1204026810744"><li id="hss_01_0241__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0241__li830314169200"><span>Click <span><img id="hss_01_0241__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0241__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0241__hss_01_0571_b14857117404"><span id="hss_01_0241__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0241__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0241__li118871124175310"><span>In the navigation pane, choose <strong id="hss_01_0241__b5481540133016">Installation &amp; Configuration</strong>, and click <strong id="hss_01_0241__b161389531304">Alarm Notifications</strong>. <a href="#hss_01_0241__table139821351163419">Table 1</a> describes the parameters.</span><p>
+<div class="tablenoborder"><a name="hss_01_0241__table139821351163419"></a><a name="table139821351163419"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0241__table139821351163419" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Alarm configurations</caption><thead align="left"><tr id="hss_01_0241__row1198215511348"><th align="left" class="cellrowborder" valign="top" width="18.67186718671867%" id="mcps1.3.2.2.3.2.1.2.4.1.1"><p id="hss_01_0241__p177161565349">Notification Item</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="38.73387338733873%" id="mcps1.3.2.2.3.2.1.2.4.1.2"><p id="hss_01_0241__p1471615643418">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="42.594259425942596%" id="mcps1.3.2.2.3.2.1.2.4.1.3"><p id="hss_01_0241__p271719562342">Suggestion</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0241__row119834518347"><td class="cellrowborder" valign="top" width="18.67186718671867%" headers="mcps1.3.2.2.3.2.1.2.4.1.1 "><p id="hss_01_0241__p107174562344">Daily alarm notification</p>
+</td>
+<td class="cellrowborder" valign="top" width="38.73387338733873%" headers="mcps1.3.2.2.3.2.1.2.4.1.2 "><p id="hss_01_0241__p17174564347"><span id="hss_01_0241__text2061734517491">HSS</span> scans the accounts, web directories, vulnerabilities, malicious programs, and key configurations in the server system at 00:00 every day, and sends the summarized detection results to the recipients you set in SMN, depending on which one you chose.</p>
+<p id="hss_01_0241__p335403823815">To view notification items, click <strong id="hss_01_0241__b13102123283313">View Default Daily Notification Events</strong>.</p>
+</td>
+<td class="cellrowborder" valign="top" width="42.594259425942596%" headers="mcps1.3.2.2.3.2.1.2.4.1.3 "><ul id="hss_01_0241__ul97171656143412"><li id="hss_01_0241__li1717856153420">It is recommended that you receive and periodically check all the content in the daily alarm notification to eliminate risks in a timely manner.</li><li id="hss_01_0241__li5717175673410">Daily alarm notifications contain a lot of check items. If you want to send the notifications to recipients set in an SMN topic, you are advised to set the topic protocol to <strong id="hss_01_0241__b202902620210759">Email</strong>.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0241__row1598317516341"><td class="cellrowborder" valign="top" width="18.67186718671867%" headers="mcps1.3.2.2.3.2.1.2.4.1.1 "><p id="hss_01_0241__p137181756163412">Real-time alarm notification</p>
+</td>
+<td class="cellrowborder" valign="top" width="38.73387338733873%" headers="mcps1.3.2.2.3.2.1.2.4.1.2 "><p id="hss_01_0241__p7718165613412">When an attacker intrudes a server, alarms are sent to the recipients you set in SMN, depending on which one you chose.</p>
+<p id="hss_01_0241__p7181521113915">To view notification items, click <strong id="hss_01_0241__b62781414153415">View Default Real-time Notification Events</strong>.</p>
+</td>
+<td class="cellrowborder" valign="top" width="42.594259425942596%" headers="mcps1.3.2.2.3.2.1.2.4.1.3 "><ul id="hss_01_0241__ul197183564340"><li id="hss_01_0241__li167181456193420">It is recommended that you receive all the content in the real-time alarm notification and view them in time. The HSS system monitors the security of servers in real time, detects the attacker's intrusion, and sends real-time alarm notifications for you to quickly handle the problem.</li><li id="hss_01_0241__li197181356173411">Real-time alarm notifications are about urgent issues. If you want to send the notifications to recipients set in an SMN topic, you are advised to set the topic protocol to <strong id="hss_01_0241__b31421892174459">SMS</strong>.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0241__row1798315193413"><td class="cellrowborder" valign="top" width="18.67186718671867%" headers="mcps1.3.2.2.3.2.1.2.4.1.1 "><p id="hss_01_0241__p9719155617349">Severity</p>
+</td>
+<td class="cellrowborder" valign="top" width="38.73387338733873%" headers="mcps1.3.2.2.3.2.1.2.4.1.2 "><p id="hss_01_0241__p127194561345">Select the severities of alarms that you want to be notified of.</p>
+</td>
+<td class="cellrowborder" valign="top" width="42.594259425942596%" headers="mcps1.3.2.2.3.2.1.2.4.1.3 "><p id="hss_01_0241__p1271911565346">All</p>
+</td>
+</tr>
+<tr id="hss_01_0241__row898365112344"><td class="cellrowborder" valign="top" width="18.67186718671867%" headers="mcps1.3.2.2.3.2.1.2.4.1.1 "><p id="hss_01_0241__p8719956123411">Masked Events</p>
+</td>
+<td class="cellrowborder" valign="top" width="38.73387338733873%" headers="mcps1.3.2.2.3.2.1.2.4.1.2 "><p id="hss_01_0241__p162061825184519">Select the events that you do not wish to be notified of.</p>
+<p id="hss_01_0241__p19719105683420">Select events to be masked from the drop-down list box.</p>
+</td>
+<td class="cellrowborder" valign="top" width="42.594259425942596%" headers="mcps1.3.2.2.3.2.1.2.4.1.3 "><p id="hss_01_0241__p471925663419">Determine the events to be masked based on the description in <a href="#hss_01_0241__section8982419163410">Alarm Notifications</a>.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0241__li175253512337"><span>Select the alarm notification mode.</span><p><ul id="hss_01_0241__ul204672035194018"><li id="hss_01_0241__li146753524020"><strong id="hss_01_0241__b4895192661719">Use SMN topic settings</strong><p id="hss_01_0241__p246710354403">Select an available topic from the drop-down list or click <strong id="hss_01_0241__b171654193110759">View Topics</strong> and create a topic.</p>
+<p id="hss_01_0241__p1146793584019">You can create multiple notification topics based on the O&amp;M plan and alarm notification type to receive different types of alarm notifications. For details about topics and subscriptions, see the <i><cite id="hss_01_0241__cite14677351404">Simple Message Notification User Guide</cite></i>.</p>
+</li></ul>
+</p></li><li id="hss_01_0241__li8295111815363"><span>Click <strong id="hss_01_0241__b109189844210759">Apply</strong>. A message will be displayed indicating that the alarm notification is set successfully.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0241__section8982419163410"><a name="hss_01_0241__section8982419163410"></a><a name="section8982419163410"></a><h4 class="sectiontitle">Alarm Notifications</h4>
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0241__table8613143112516" frame="border" border="1" rules="all"><thead align="left"><tr id="hss_01_0241__en-us_topic_0000001517322266_row139514391503"><th align="left" class="cellrowborder" valign="top" width="16.71%" id="mcps1.3.3.2.1.4.1.1"><p id="hss_01_0241__en-us_topic_0000001517322266_p1639533913019">Notification Item</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="19.64%" id="mcps1.3.3.2.1.4.1.2"><p id="hss_01_0241__en-us_topic_0000001517322266_p7395103919010">Item</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="63.65%" id="mcps1.3.3.2.1.4.1.3"><p id="hss_01_0241__en-us_topic_0000001517322266_p8395339501">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0241__en-us_topic_0000001517322266_row93081812121515"><td class="cellrowborder" colspan="3" valign="top" headers="mcps1.3.3.2.1.4.1.1 mcps1.3.3.2.1.4.1.2 mcps1.3.3.2.1.4.1.3 "><p id="hss_01_0241__en-us_topic_0000001517322266_p1630851291516"><strong id="hss_01_0241__en-us_topic_0000001517322266_b18104192851510">Daily Alarm Notifications</strong></p>
+<p id="hss_01_0241__en-us_topic_0000001517322266_p117531329123314">The service checks risks in your servers in the early morning every day, summarizes and collects detection results, and sends the results to your mobile phone or email box at 10:00 every day.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row839515391309"><td class="cellrowborder" valign="top" width="16.71%" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p83953390010">Assets</p>
+</td>
+<td class="cellrowborder" valign="top" width="19.64%" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p195811524151413">Dangerous ports</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.65%" headers="mcps1.3.3.2.1.4.1.3 "><p id="hss_01_0241__en-us_topic_0000001517322266_p18581112412141">Check for high-risk open ports and unnecessary ports.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row33961739001"><td class="cellrowborder" valign="top" width="16.71%" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p739643918017">Vulnerabilities</p>
+</td>
+<td class="cellrowborder" valign="top" width="19.64%" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p261332471317">Critical vulnerabilities</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.65%" headers="mcps1.3.3.2.1.4.1.3 "><p id="hss_01_0241__en-us_topic_0000001517322266_p19609324191313">Detect critical vulnerabilities and fix them in a timely manner.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row7605742144315"><td class="cellrowborder" rowspan="2" valign="top" width="16.71%" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p1860514216438">Unsafe settings</p>
+</td>
+<td class="cellrowborder" valign="top" width="19.64%" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p560513427432">Unsafe configurations</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.65%" headers="mcps1.3.3.2.1.4.1.3 "><p id="hss_01_0241__en-us_topic_0000001517322266_p13198114314411">Detect unsafe settings of key applications that will probably be exploited by hackers to intrude servers.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row111666383435"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p616683874312">Common weak passwords</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p118581551204416">Detect weak passwords in MySQL, FTP, and system accounts.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row1981384012146"><td class="cellrowborder" rowspan="22" valign="top" width="16.71%" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p1181464020149">Intrusions</p>
+</td>
+<td class="cellrowborder" valign="top" width="19.64%" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p168772718449">Malicious programs</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.65%" headers="mcps1.3.3.2.1.4.1.3 "><p id="hss_01_0241__en-us_topic_0000001517322266_p18687827144420">Check and handle detected malicious programs all in one place, including web shells, Trojan, mining software, worms, and viruses.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row127381385220"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p186861027194415">Web shells</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p19287025113817">Check whether the files (often PHP and JSP files) detected by HSS in your web directories are web shells.</p>
+<ul id="hss_01_0241__en-us_topic_0000001517322266_ul328115466486"><li id="hss_01_0241__en-us_topic_0000001517322266_li161401822121613">Web shell information includes the Trojan file path, status, first discovery time, and last discovery time. You can choose to ignore warning on trusted files.</li><li id="hss_01_0241__en-us_topic_0000001517322266_li11281446194818">You can use the manual detection function to detect web shells on servers.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row14624142216523"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p1168602718445">Reverse shells</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p125361034891">Monitor user process behaviors in real time to detect reverse shells caused by invalid connections.</p>
+<p id="hss_01_0241__en-us_topic_0000001517322266_p14686162774415">Reverse shells can be detected for protocols including TCP, UDP, and ICMP.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row028610610526"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p14525141616593">File privilege escalations</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p11647175417020">Check the file privilege escalations in your system.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row13992518135211"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p968692744418">Process privilege escalations</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><div class="p" id="hss_01_0241__en-us_topic_0000001517322266_p1355201613144">The following process privilege escalation operations can be detected:<ul id="hss_01_0241__en-us_topic_0000001517322266_ul6552151618142"><li id="hss_01_0241__en-us_topic_0000001517322266_li1755281618148">Root privilege escalation by exploiting SUID program vulnerabilities</li><li id="hss_01_0241__en-us_topic_0000001517322266_li145529168145">Root privilege escalation by exploiting kernel vulnerabilities</li></ul>
+</div>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row1799301875217"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p0903450115817">Critical file changes</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p890311504583">Receive alarms when critical system files are modified.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row420232481811"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p18452111587">File/Directory changes</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p1284571114584">System files and directories are monitored. When a file or directory is modified, an alarm is generated, indicating that the file or directory may be tampered with.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row617643471810"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p76714710585">Abnormal process behaviors</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p667119795812">Check the processes on servers, including their IDs, command lines, process paths, and behavior.</p>
+<p id="hss_01_0241__en-us_topic_0000001517322266_p15671167175810">Send alarms on unauthorized process operations and intrusions.</p>
+<p id="hss_01_0241__en-us_topic_0000001517322266_p15671117165815">The following abnormal process behavior can be detected:</p>
+<ul id="hss_01_0241__en-us_topic_0000001517322266_ul86710715815"><li id="hss_01_0241__en-us_topic_0000001517322266_li2672117125810">Abnormal CPU usage</li><li id="hss_01_0241__en-us_topic_0000001517322266_li66729710584">Processes accessing malicious IP addresses</li><li id="hss_01_0241__en-us_topic_0000001517322266_li16672197115816">Abnormal increase in concurrent process connections</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row113691958151814"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p14458127175712">High-risk command execution</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p17458927125713">Check executed commands in real time and generate alarms if high-risk commands are detected.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row192525591912"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p19340198155718">Abnormal shells</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p1734018875710">Detect actions on abnormal shells, including moving, copying, and deleting shell files, and modifying the access permissions and hard links of the files.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row14778122311194"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p1041715120478">Abnormal logins</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p8661448154712">Check and handle remote logins.</p>
+<p id="hss_01_0241__en-us_topic_0000001517322266_p149761339104715">If a user's login location is not any common login location you set, an alarm will be triggered.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row18691203418191"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p461212716463">Invalid accounts</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p1661252704618">Scan accounts on servers and list suspicious accounts in a timely manner.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row1780817549469"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p128091354154611">Vulnerability escapes</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p13731311501">The service reports an alarm if it detects container process behavior that matches the behavior of known vulnerabilities (such as Dirty COW, brute-force attack, runC, and shocker).</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row88116124716"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p3812917472">File escapes</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p1053818618220">The service reports an alarm if it detects that a container process accesses a key file directory (for example, <strong id="hss_01_0241__en-us_topic_0000001517322266_b122684675074459">/etc/shadow</strong> or <strong id="hss_01_0241__en-us_topic_0000001517322266_b214612932474459">/etc/crontab</strong>). Directories that meet the container directory mapping rules can also trigger such alarms.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row56521159114610"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p2754845204713">Abnormal container processes</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p9388185220581">Container services are usually simple. If you are sure that only specific processes run in a container, you can add the processes to the whitelist of a policy, and associate the policy with the container.</p>
+<p id="hss_01_0241__en-us_topic_0000001517322266_p74293451583">The service reports an alarm if it detects that a process not in the whitelist is running in the container.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row1972919611479"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p8730126124716">Abnormal container startups</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p12730561474">Check for unsafe parameter settings used during container startup.</p>
+<p id="hss_01_0241__en-us_topic_0000001517322266_p188215417229">Certain startup parameters specify container permissions. If their settings are inappropriate, they may be exploited by attackers to intrude containers.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row561912934716"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p18619129164716">High-risk system calls</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p765317620546">Users can run tasks in kernels by Linux system calls. The service reports an alarm if it detects a high-risk call, such as <span class="parmvalue" id="hss_01_0241__en-us_topic_0000001517322266_parmvalue349018114193"><b>open_by_handle_at</b></span>, <span class="parmvalue" id="hss_01_0241__en-us_topic_0000001517322266_parmvalue1049091171915"><b>ptrace</b></span>, <span class="parmvalue" id="hss_01_0241__en-us_topic_0000001517322266_parmvalue6491171112198"><b>setns</b></span>, and <span class="parmvalue" id="hss_01_0241__en-us_topic_0000001517322266_parmvalue549121112192"><b>reboot</b></span>.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row9916131184714"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p791641184716">Sensitive file access</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p491691104718">Detect suspicious access behaviors (such as privilege escalation and persistence) on important files.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row14743855104819"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p574475512484">Critical third-party DDoS vulnerabilities</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p1974435584817">Detects third-party DDoS vulnerabilities that urgently need to be fixed.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row15521186104917"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p155217619498">Malicious scan</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p11521362499">Detects abnormal scanning of server assets.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row78540819491"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p2854108154915">Mining</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p7964104373710">Detects the use of devices (computers, smartphones, tablets, or servers) to mine encrypted currencies without users' consent or knowledge. Once detected, an alarm is reported immediately.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row11589192610356"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p185661145205316">Brute-force attacks</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p129951524125412">Check for brute-force attack attempts and successful brute-force attacks.</p>
+<ul id="hss_01_0241__en-us_topic_0000001517322266_ul399916280557"><li id="hss_01_0241__en-us_topic_0000001517322266_li699910287559">Your accounts are protected from brute-force attacks. HSS will block the attacking hosts when detecting such attacks.</li><li id="hss_01_0241__en-us_topic_0000001517322266_li61596393557">Trigger an alarm if a user logs in to the host by a brute-force attack.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row149888525158"><td class="cellrowborder" colspan="3" valign="top" headers="mcps1.3.3.2.1.4.1.1 mcps1.3.3.2.1.4.1.2 mcps1.3.3.2.1.4.1.3 "><p id="hss_01_0241__en-us_topic_0000001517322266_p17676947168"><strong id="hss_01_0241__en-us_topic_0000001517322266_b359456141615">Real-Time Alarm Notifications</strong></p>
+<p id="hss_01_0241__en-us_topic_0000001517322266_p12536598342">When an event occurs, an alarm notification is immediately sent.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row5706455111519"><td class="cellrowborder" rowspan="21" valign="top" width="16.71%" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p16706105561510">Intrusions</p>
+</td>
+<td class="cellrowborder" valign="top" width="19.64%" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p8155154411428">Malicious programs</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.65%" headers="mcps1.3.3.2.1.4.1.3 "><p id="hss_01_0241__en-us_topic_0000001517322266_p715564474210">Check and handle detected malicious programs all in one place, including web shells, Trojans, mining software, worms, and viruses.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row39761773211"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p315514447428">Web shells</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p14155154416429">Check whether the files (often PHP and JSP files) detected by HSS in your web directories are web shells.</p>
+<ul id="hss_01_0241__en-us_topic_0000001517322266_ul115512443426"><li id="hss_01_0241__en-us_topic_0000001517322266_li17155844144217">Web shell information includes the Trojan file path, status, first discovery time, and last discovery time. You can choose to ignore warning on trusted files.</li><li id="hss_01_0241__en-us_topic_0000001517322266_li19156174419421">You can use the manual detection function to detect web shells on servers.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row4777910123"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p1715610442423">Reverse shell</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p1315694414426">Monitor user process behaviors in real time to detect reverse shells caused by invalid connections.</p>
+<p id="hss_01_0241__en-us_topic_0000001517322266_p13156144174214">Reverse shells can be detected for protocols including TCP, UDP, and ICMP.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row1588064914521"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p1415611441421">File privilege escalations</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p1715619445426">Check the file privilege escalations in your system.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row2088094925210"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p915634464214">Process privilege escalations</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><div class="p" id="hss_01_0241__en-us_topic_0000001517322266_p1015634444219">The following process privilege escalation operations can be detected:<ul id="hss_01_0241__en-us_topic_0000001517322266_ul19156144144213"><li id="hss_01_0241__en-us_topic_0000001517322266_li1815618449423">Root privilege escalation by exploiting SUID program vulnerabilities</li><li id="hss_01_0241__en-us_topic_0000001517322266_li1515684494212">Root privilege escalation by exploiting kernel vulnerabilities</li></ul>
+</div>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row11454123614213"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p1715694444216">Critical file changes</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p41572443426">Receive alarms when critical system files are modified.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row67301381425"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p11157544194216">File/Directory changes</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p815744411422">System files and directories are monitored. When a file or directory is modified, an alarm is generated, indicating that the file or directory may be tampered with.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row1422794113215"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p8157174416427">Abnormal process behaviors</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p815754464213">Check the processes on servers, including their IDs, command lines, process paths, and behavior.</p>
+<p id="hss_01_0241__en-us_topic_0000001517322266_p615704413424">Send alarms on unauthorized process operations and intrusions.</p>
+<p id="hss_01_0241__en-us_topic_0000001517322266_p8157244184217">The following abnormal process behavior can be detected:</p>
+<ul id="hss_01_0241__en-us_topic_0000001517322266_ul21571944164211"><li id="hss_01_0241__en-us_topic_0000001517322266_li12157184420427">Abnormal CPU usage</li><li id="hss_01_0241__en-us_topic_0000001517322266_li1115734464215">Processes accessing malicious IP addresses</li><li id="hss_01_0241__en-us_topic_0000001517322266_li915714414215">Abnormal increase in concurrent process connections</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row7880249165216"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p10157244114213">High-risk command execution</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p131571444124219">Check executed commands in real time and generate alarms if high-risk commands are detected.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row1588074935217"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p81571144134211">Abnormal shells</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p5157644164218">Detect actions on abnormal shells, including moving, copying, and deleting shell files, and modifying the access permissions and hard links of the files.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row17736151214"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p515744424212">Exception Stat</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p1315784419424">Check and handle remote logins.</p>
+<p id="hss_01_0241__en-us_topic_0000001517322266_p1715711445426">If a user's login location is not any common login location you set, an alarm will be triggered.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row14210112415213"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p515713442421">Invalid accounts</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p9158194464218">Scan accounts on servers and list suspicious accounts in a timely manner.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row1156283042114"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p715864434215">Vulnerability escapes</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p12158134413428">The service reports an alarm if it detects container process behavior that matches the behavior of known vulnerabilities (such as Dirty COW, brute-force attack, runC, and shocker).</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row137071638132112"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p2158144464214">File escapes</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p0158544124215">The service reports an alarm if it detects that a container process accesses a key file directory (for example, <strong id="hss_01_0241__en-us_topic_0000001517322266_b681543267">/etc/shadow</strong> or <strong id="hss_01_0241__en-us_topic_0000001517322266_b1415214690">/etc/crontab</strong>). Directories that meet the container directory mapping rules can also trigger such alarms.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row9160533852"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p2158114418424">Abnormal container processes</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p1215944454210">Container services are usually simple. If you are sure that only specific processes run in a container, you can add the processes to the whitelist of a policy, and associate the policy with the container.</p>
+<p id="hss_01_0241__en-us_topic_0000001517322266_p201593448421">The service reports an alarm if it detects that a process not in the whitelist is running in the container.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row12251255122117"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p415944411427">Abnormal container startups</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p115994416424">Check for unsafe parameter settings used during container startup.</p>
+<p id="hss_01_0241__en-us_topic_0000001517322266_p5159154414210">Certain startup parameters specify container permissions. If their settings are inappropriate, they may be exploited by attackers to intrude containers.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row19415184162211"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p2159744144212">High-risk system calls</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p1615914414214">Users can run tasks in kernels by Linux system calls. The service reports an alarm if it detects a high-risk call, such as <span class="parmvalue" id="hss_01_0241__en-us_topic_0000001517322266_parmvalue1905957909"><b>open_by_handle_at</b></span>, <span class="parmvalue" id="hss_01_0241__en-us_topic_0000001517322266_parmvalue1569975887"><b>ptrace</b></span>, <span class="parmvalue" id="hss_01_0241__en-us_topic_0000001517322266_parmvalue1184366476"><b>setns</b></span>, and <span class="parmvalue" id="hss_01_0241__en-us_topic_0000001517322266_parmvalue806526521"><b>reboot</b></span>.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row95791044165018"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p16159164412424">Sensitive file access</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p7160194413420">Detect suspicious access behaviors (such as privilege escalation and persistence) on important files.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row17606135911509"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p816010445428">Critical third-party DDoS vulnerabilities</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p131601644144215">Detects third-party DDoS vulnerabilities that urgently need to be fixed.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row88064317516"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p201601644154213">Malicious scan</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p916054412422">Detects abnormal scanning of server assets.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row1954891195110"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p8160744134215">Mining</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p416024415420">Detects the use of devices (computers, smartphones, tablets, or servers) to mine encrypted currencies without users' consent or knowledge. Once detected, an alarm is reported immediately.</p>
+</td>
+</tr>
+<tr id="hss_01_0241__en-us_topic_0000001517322266_row1311435512505"><td class="cellrowborder" valign="top" width="16.71%" headers="mcps1.3.3.2.1.4.1.1 "><p id="hss_01_0241__en-us_topic_0000001517322266_p1061992044315">Login</p>
+</td>
+<td class="cellrowborder" valign="top" width="19.64%" headers="mcps1.3.3.2.1.4.1.2 "><p id="hss_01_0241__en-us_topic_0000001517322266_p1116044416423">Success login</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.65%" headers="mcps1.3.3.2.1.4.1.3 "><p id="hss_01_0241__en-us_topic_0000001517322266_p1721672620441">Notifications are sent to accounts that have successfully logged in.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0292.html">Enabling HSS</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0243.html b/docs/hss/umn/hss_01_0243.html
new file mode 100644
index 00000000..4ed39b5f
--- /dev/null
+++ b/docs/hss/umn/hss_01_0243.html
@@ -0,0 +1,12 @@
+<a name="hss_01_0243"></a><a name="hss_01_0243"></a>
+
+<h1 class="topictitle1">What Do I Do If a Mining Process Is Detected on a Server?</h1>
+<div id="body0000001169921747"><p id="hss_01_0243__p19130153820321">You are advised to:</p>
+<ol id="hss_01_0243__ol185171617103615"><li id="hss_01_0243__li105181717123615">Back up data and disable unnecessary ports.</li><li id="hss_01_0243__li8518717163611">Set a stronger server password.</li><li id="hss_01_0243__li751818175367">Enable <span id="hss_01_0243__text2060193472217">HSS</span>. Your servers will be protected from mining processes by its intrusion detection functions, such as account cracking prevention, remote login detection, malicious program detection, and web shell detection; as well as malicious program killing and vulnerability fixing functions.</li></ol>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0164.html">Intrusions</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0245.html b/docs/hss/umn/hss_01_0245.html
new file mode 100644
index 00000000..faeb0e4c
--- /dev/null
+++ b/docs/hss/umn/hss_01_0245.html
@@ -0,0 +1,87 @@
+<a name="hss_01_0245"></a><a name="hss_01_0245"></a>
+
+<h1 class="topictitle1">What Is the HSS Agent?</h1>
+<div id="body1571995890937"><p id="hss_01_0245__p96591448890">The <span id="hss_01_0245__text2085933731117">HSS</span> agent is used to scan all servers and containers, monitor their status in real time, and collect their information and report to the cloud protection center.</p>
+<div class="section" id="hss_01_0245__section578316264579"><h4 class="sectiontitle">Functions of the Agent</h4><ul id="hss_01_0245__ul10604174116312"><li id="hss_01_0245__li186041441153112">The agent runs scan tasks every day in the early morning to scan all servers and containers, monitors their security, and reports information collected from them to the cloud protection center.</li><li id="hss_01_0245__li960414418315">The agent blocks attacks targeted at servers and containers based on the security policies you configured.</li></ul>
+<div class="note" id="hss_01_0245__note5604341173118"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0245__ul16604104119311"><li id="hss_01_0245__li8604134113311">If no agent is installed or the agent installed is abnormal, the <span id="hss_01_0245__text975318515190">HSS</span> is unavailable.</li></ul>
+</div></div>
+</div>
+<div class="section" id="hss_01_0245__section175781030115617"><h4 class="sectiontitle">Linux Agent Processes</h4><p id="hss_01_0245__p1027854831412">The agent process needs to be run by the <strong id="hss_01_0245__b2883812185318">root</strong> user.</p>
+<p id="hss_01_0245__p694475661416">The agent contains the following processes:</p>
+
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0245__table14932168797" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Agent running process on a Linux server</caption><thead align="left"><tr id="hss_01_0245__hss_01_0386_row59321388920"><th align="left" class="cellrowborder" valign="top" width="22.972297229722972%" id="mcps1.3.3.4.2.4.1.1"><p id="hss_01_0245__hss_01_0386_p20932681498">Agent Process Name</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="35.153515351535155%" id="mcps1.3.3.4.2.4.1.2"><p id="hss_01_0245__hss_01_0386_p139321815913">Function</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="41.874187418741876%" id="mcps1.3.3.4.2.4.1.3"><p id="hss_01_0245__hss_01_0386_p149321081598">Path</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0245__hss_01_0386_row1493312813910"><td class="cellrowborder" valign="top" width="22.972297229722972%" headers="mcps1.3.3.4.2.4.1.1 "><p id="hss_01_0245__hss_01_0386_p39331281594">hostguard</p>
+</td>
+<td class="cellrowborder" valign="top" width="35.153515351535155%" headers="mcps1.3.3.4.2.4.1.2 "><p id="hss_01_0245__hss_01_0386_p14933386910">Detects security issues, protects the system, and monitors the agent.</p>
+</td>
+<td class="cellrowborder" valign="top" width="41.874187418741876%" headers="mcps1.3.3.4.2.4.1.3 "><p id="hss_01_0245__hss_01_0386_p59331981591">/usr/local/hostguard/bin/hostguard</p>
+</td>
+</tr>
+<tr id="hss_01_0245__hss_01_0386_row38355207235"><td class="cellrowborder" valign="top" width="22.972297229722972%" headers="mcps1.3.3.4.2.4.1.1 "><p id="hss_01_0245__hss_01_0386_p083619202238">hostwatch</p>
+</td>
+<td class="cellrowborder" valign="top" width="35.153515351535155%" headers="mcps1.3.3.4.2.4.1.2 "><p id="hss_01_0245__hss_01_0386_p193031313181315">Monitors the agent process.</p>
+</td>
+<td class="cellrowborder" valign="top" width="41.874187418741876%" headers="mcps1.3.3.4.2.4.1.3 "><p id="hss_01_0245__hss_01_0386_p2023717192228">/usr/local/hostguard/bin/hostwatch</p>
+</td>
+</tr>
+<tr id="hss_01_0245__hss_01_0386_row1840814501176"><td class="cellrowborder" valign="top" width="22.972297229722972%" headers="mcps1.3.3.4.2.4.1.1 "><p id="hss_01_0245__hss_01_0386_p6409155018172">upgrade</p>
+</td>
+<td class="cellrowborder" valign="top" width="35.153515351535155%" headers="mcps1.3.3.4.2.4.1.2 "><p id="hss_01_0245__hss_01_0386_p19409950101714">Upgrades the agent.</p>
+</td>
+<td class="cellrowborder" valign="top" width="41.874187418741876%" headers="mcps1.3.3.4.2.4.1.3 "><p id="hss_01_0245__hss_01_0386_p124091350111719">/usr/local/hostguard/bin/upgrade</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+<div class="section" id="hss_01_0245__section19445943152910"><h4 class="sectiontitle">Windows Agent Processes</h4><p id="hss_01_0245__p15445154342917">The agent process needs to be run by the <strong id="hss_01_0245__b1730915145316">system</strong> user.</p>
+<p id="hss_01_0245__p344615437294">The agent contains the following processes:</p>
+
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0245__table644613431296" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Agent running process on a Windows server</caption><thead align="left"><tr id="hss_01_0245__hss_01_0386_row193301210134811"><th align="left" class="cellrowborder" valign="top" width="22.972297229722972%" id="mcps1.3.4.4.2.4.1.1"><p id="hss_01_0245__hss_01_0386_p123301510194818">Agent Process Name</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="35.153515351535155%" id="mcps1.3.4.4.2.4.1.2"><p id="hss_01_0245__hss_01_0386_p233011054811">Function</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="41.874187418741876%" id="mcps1.3.4.4.2.4.1.3"><p id="hss_01_0245__hss_01_0386_p63301410164813">Path</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0245__hss_01_0386_row6804181835018"><td class="cellrowborder" valign="top" width="22.972297229722972%" headers="mcps1.3.4.4.2.4.1.1 "><p id="hss_01_0245__hss_01_0386_p134472043132913">hostguard.exe</p>
+</td>
+<td class="cellrowborder" valign="top" width="35.153515351535155%" headers="mcps1.3.4.4.2.4.1.2 "><p id="hss_01_0245__hss_01_0386_p19926152141320">Detects security issues, protects the system, and monitors the agent.</p>
+</td>
+<td class="cellrowborder" valign="top" width="41.874187418741876%" headers="mcps1.3.4.4.2.4.1.3 "><p id="hss_01_0245__hss_01_0386_p64473437292">C:\Program Files\HostGuard\HostGuard.exe</p>
+</td>
+</tr>
+<tr id="hss_01_0245__hss_01_0386_row880401895013"><td class="cellrowborder" valign="top" width="22.972297229722972%" headers="mcps1.3.4.4.2.4.1.1 "><p id="hss_01_0245__hss_01_0386_p12447443192915">hostwatch.exe</p>
+</td>
+<td class="cellrowborder" valign="top" width="35.153515351535155%" headers="mcps1.3.4.4.2.4.1.2 "><p id="hss_01_0245__hss_01_0386_p9447343112914">Monitors the agent process.</p>
+</td>
+<td class="cellrowborder" valign="top" width="41.874187418741876%" headers="mcps1.3.4.4.2.4.1.3 "><p id="hss_01_0245__hss_01_0386_p194472435299">C:\Program Files\HostGuard\HostWatch.exe</p>
+</td>
+</tr>
+<tr id="hss_01_0245__hss_01_0386_row2803111845016"><td class="cellrowborder" valign="top" width="22.972297229722972%" headers="mcps1.3.4.4.2.4.1.1 "><p id="hss_01_0245__hss_01_0386_p4222654142410">upgrade.exe</p>
+</td>
+<td class="cellrowborder" valign="top" width="35.153515351535155%" headers="mcps1.3.4.4.2.4.1.2 "><p id="hss_01_0245__hss_01_0386_p1422211544249">Upgrades the agent.</p>
+</td>
+<td class="cellrowborder" valign="top" width="41.874187418741876%" headers="mcps1.3.4.4.2.4.1.3 "><p id="hss_01_0245__hss_01_0386_p17222454182418">C:\Program Files\HostGuard\upgrade.exe</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0258.html">About HSS</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0246.html b/docs/hss/umn/hss_01_0246.html
new file mode 100644
index 00000000..9fe5ee31
--- /dev/null
+++ b/docs/hss/umn/hss_01_0246.html
@@ -0,0 +1,21 @@
+<a name="hss_01_0246"></a><a name="hss_01_0246"></a>
+
+<h1 class="topictitle1">Vulnerability Management</h1>
+<div id="body1571993044676"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0209.html">How Do I Fix Vulnerabilities?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0176.html">What Do I Do If an Alarm Still Exists After I Fixed a Vulnerability?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0247.html">Why a Server Displayed in Vulnerability Information Does Not Exist?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0114.html">Do I Need to Restart a Server After Fixing its Vulnerabilities?</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0032.html">FAQs</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0247.html b/docs/hss/umn/hss_01_0247.html
new file mode 100644
index 00000000..0d9ca2b2
--- /dev/null
+++ b/docs/hss/umn/hss_01_0247.html
@@ -0,0 +1,11 @@
+<a name="hss_01_0247"></a><a name="hss_01_0247"></a>
+
+<h1 class="topictitle1">Why a Server Displayed in Vulnerability Information Does Not Exist?</h1>
+<div id="body1571993044676"><p id="hss_01_0247__p4177725510">The vulnerability list displays vulnerabilities detected in the last seven days. After a vulnerability is detected for a server, if you change the server name and do not perform a vulnerability scan again, the vulnerability list still displays the original server name.</p>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0246.html">Vulnerability Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0250.html b/docs/hss/umn/hss_01_0250.html
new file mode 100644
index 00000000..87c0bb18
--- /dev/null
+++ b/docs/hss/umn/hss_01_0250.html
@@ -0,0 +1,25 @@
+<a name="hss_01_0250"></a><a name="hss_01_0250"></a>
+
+<h1 class="topictitle1">Web Tamper Protection</h1>
+<div id="body1571993044676"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0199.html">Why Do I Need to Add a Protected Directory?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0185.html">How Do I Modify a Protected Directory?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0202.html">What Should I Do If WTP Cannot Be Enabled?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0255.html">How Do I Modify a File After WTP Is Enabled?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0014.html">What Can I Do If I Enabled Dynamic WTP But Its Status Is Enabled but not in effect?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0017.html">What Are the Differences Between the Web Tamper Protection Functions of HSS and WAF?</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0032.html">FAQs</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0255.html b/docs/hss/umn/hss_01_0255.html
new file mode 100644
index 00000000..f7414e20
--- /dev/null
+++ b/docs/hss/umn/hss_01_0255.html
@@ -0,0 +1,17 @@
+<a name="hss_01_0255"></a><a name="hss_01_0255"></a>
+
+<h1 class="topictitle1">How Do I Modify a File After WTP Is Enabled?</h1>
+<div id="body1573544180787"><p id="hss_01_0255__p2809185041413">Protected directories are read-only. To modify files or update the website, perform any of the following operations.</p>
+<div class="section" id="hss_01_0255__section15552111813319"><h4 class="sectiontitle">Temporarily Disabling WTP</h4><p id="hss_01_0255__p126891725237">Disable WTP while you modify files in protected directories.</p>
+<p id="hss_01_0255__p16910172314419">Your website is not protected from tampering while WTP is disabled. Enable it immediately after updating your website.</p>
+</div>
+<div class="section" id="hss_01_0255__section17524172953115"><h4 class="sectiontitle">Setting Scheduled Protection</h4><p id="hss_01_0255__p074494418310">You can set periodic static WTP, and update websites while WTP is automatically disabled.</p>
+<p id="hss_01_0255__p176833527203">Exercise caution when you set the periods to disable WTP, because files will not be protected in those periods.</p>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0250.html">Web Tamper Protection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0256.html b/docs/hss/umn/hss_01_0256.html
new file mode 100644
index 00000000..082e0d6c
--- /dev/null
+++ b/docs/hss/umn/hss_01_0256.html
@@ -0,0 +1,46 @@
+<a name="hss_01_0256"></a><a name="hss_01_0256"></a>
+
+<h1 class="topictitle1">How Do I Defend Against Brute-force Attacks?</h1>
+<div id="body0000001170081635"><div class="section" id="hss_01_0256__section7251131111371"><h4 class="sectiontitle">Impact of Account Cracking</h4><p id="hss_01_0256__p152914295295">Intruders who cracked server accounts can exploit permissions to steal or tamper with data on servers, interrupting enterprise services and causing great loss.</p>
+</div>
+<div class="section" id="hss_01_0256__section9553175714356"><h4 class="sectiontitle">Preventive Measures</h4><ul id="hss_01_0256__ul8978238175418"><li id="hss_01_0256__li4493711133818">Configure the SSH login whitelist.<p id="hss_01_0256__p1349341133814"><a name="hss_01_0256__li4493711133818"></a><a name="li4493711133818"></a>The SSH login whitelist allows logins from only whitelisted IP address, effectively preventing account cracking. </p>
+</li><li id="hss_01_0256__li997813815411">Enable 2FA.<p id="hss_01_0256__p14876164432415"><a name="hss_01_0256__li997813815411"></a><a name="li997813815411"></a>2FA requires users to provide verification codes before they log in. The codes will be sent to their mobile phones or email boxes.</p>
+<p id="hss_01_0256__p1683517456247">Choose <strong id="hss_01_0256__b1960805155101423">Installation &amp; Configuration</strong>. On the <strong id="hss_01_0256__b1597583421101423">Two-Factor Authentication</strong> tab, select servers and click <strong id="hss_01_0256__b2072141744101423">Enable 2FA</strong>. </p>
+</li><li id="hss_01_0256__li13738752104911">Use non-default ports.<p id="hss_01_0256__p1738155214497"><a name="hss_01_0256__li13738752104911"></a><a name="li13738752104911"></a>Change the default remote management ports 22 and 3389 to other ports.</p>
+</li><li id="hss_01_0256__li67631465619">Configure security group rules to prevent the attacking IP addresses from accessing your service ports.<div class="note" id="hss_01_0256__note1275014135615"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0256__p10720169155717">You are advised to allow only specified IP addresses to access open remote management ports (for example, for SSH and remote desktop login).</p>
+</div></div>
+<p id="hss_01_0256__p167519145565">You can configure security group rules to control access to your servers. For a port used for remote login, you can set IP addresses that are allowed to remotely log in to your ECSs.</p>
+<p id="hss_01_0256__p275101435615">To allow IP address <strong id="hss_01_0256__b669353552101423">192.168.20.2</strong> to remotely access Linux ECSs in a security group over the SSH protocol and port 22, you can configure the following security group rule.</p>
+
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0256__table1076141418569" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Setting IP addresses to remotely connect to ECSs</caption><thead align="left"><tr id="hss_01_0256__row8750140566"><th align="left" class="cellrowborder" valign="top" width="12.11%" id="mcps1.3.2.2.4.4.2.5.1.1"><p id="hss_01_0256__p675121485620">Direction</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="23.61%" id="mcps1.3.2.2.4.4.2.5.1.2"><p id="hss_01_0256__p775614145618">Protocol/Application</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="22.63%" id="mcps1.3.2.2.4.4.2.5.1.3"><p id="hss_01_0256__p5751514185610">Port</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="41.65%" id="mcps1.3.2.2.4.4.2.5.1.4"><p id="hss_01_0256__p15751114175619">Source</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0256__row97681455618"><td class="cellrowborder" valign="top" width="12.11%" headers="mcps1.3.2.2.4.4.2.5.1.1 "><p id="hss_01_0256__p1676181445615">Inbound</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.61%" headers="mcps1.3.2.2.4.4.2.5.1.2 "><p id="hss_01_0256__p676141414562">SSH (22)</p>
+</td>
+<td class="cellrowborder" valign="top" width="22.63%" headers="mcps1.3.2.2.4.4.2.5.1.3 "><p id="hss_01_0256__p876191405619">22</p>
+</td>
+<td class="cellrowborder" valign="top" width="41.65%" headers="mcps1.3.2.2.4.4.2.5.1.4 "><p id="hss_01_0256__p1776714105610">For example, 192.168.20.2/32</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</li><li id="hss_01_0256__li1297853818543">Set a strong password.<p id="hss_01_0256__p19796240155619"><a name="hss_01_0256__li1297853818543"></a><a name="li1297853818543"></a>HSS baseline checks include the password policy check and weak password detection, which can find accounts that use weak passwords on your servers. You can view and handle password risks on the console.</p>
+</li></ul>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0038.html">Brute-force Attack Defense</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0258.html b/docs/hss/umn/hss_01_0258.html
new file mode 100644
index 00000000..2b0eed4d
--- /dev/null
+++ b/docs/hss/umn/hss_01_0258.html
@@ -0,0 +1,23 @@
+<a name="hss_01_0258"></a><a name="hss_01_0258"></a>
+
+<h1 class="topictitle1">About HSS</h1>
+<div id="body1573715133785"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0033.html">What Is Host Security?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0318.html">What Is Container Security?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0319.html">What Is Web Tamper Protection?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0320.html">What Are the Relationships Between Images, Containers, and Applications?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0245.html">What Is the HSS Agent?</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0032.html">FAQs</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0260.html b/docs/hss/umn/hss_01_0260.html
new file mode 100644
index 00000000..b8de126f
--- /dev/null
+++ b/docs/hss/umn/hss_01_0260.html
@@ -0,0 +1,19 @@
+<a name="hss_01_0260"></a><a name="hss_01_0260"></a>
+
+<h1 class="topictitle1">Enabling Protection</h1>
+<div id="body1574040073868"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0230.html">Enabling the Enterprise, or Premium Edition</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0214.html">Enabling Web Tamper Protection</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0293.html">Enabling Container Protection</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0292.html">Enabling HSS</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0269.html b/docs/hss/umn/hss_01_0269.html
new file mode 100644
index 00000000..78bbe35e
--- /dev/null
+++ b/docs/hss/umn/hss_01_0269.html
@@ -0,0 +1,12 @@
+<a name="hss_01_0269"></a><a name="hss_01_0269"></a>
+
+<h1 class="topictitle1">How Do I Use the Windows Remote Desktop Connection Tool to Connect to a Server?</h1>
+<div id="body0000001123401800"><div class="section" id="hss_01_0269__section1218595454218"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0269__ol170217184212"><li id="hss_01_0269__li87021013423"><span>On the local PC, choose <span class="menucascade" id="hss_01_0269__menucascade363241838101315"><b><span class="uicontrol" id="hss_01_0269__uicontrol116324989101315">Startup</span></b> &gt; <b><span class="uicontrol" id="hss_01_0269__uicontrol88882900101315">Running</span></b></span>, and then run the <strong id="hss_01_0269__b646713973101315">mstsc</strong> command to start Windows Remote Desktop Connection.</span></li><li id="hss_01_0269__li7990144134214"><span>Click <strong id="hss_01_0269__b1537959243101315">Options</strong>, and then click the <strong id="hss_01_0269__b2094588099101315">Local Resources</strong> tab. In the <strong id="hss_01_0269__b1938312341101315">Local devices and resources</strong> area, select <strong id="hss_01_0269__b24456412101315">Clipboard</strong>.</span></li><li id="hss_01_0269__li146117913424"><span>Click the <strong id="hss_01_0269__b842352706153621">General</strong> tab. In <strong id="hss_01_0269__b842352706153644">Computer</strong>, enter the EIP of the server on which you want to install an agent. In <strong id="hss_01_0269__b842352706154132">User name</strong>, enter <strong id="hss_01_0269__b842352706154136">Administrator</strong>. Then click <strong id="hss_01_0269__b842352706154141">Connect</strong>.</span></li><li id="hss_01_0269__li1336151411424"><span>In the displayed dialog box, enter the user password of the server and click <strong id="hss_01_0269__b1441594073101315">OK</strong> to connect to the server.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0101.html">Others</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0274.html b/docs/hss/umn/hss_01_0274.html
new file mode 100644
index 00000000..0b7aaab6
--- /dev/null
+++ b/docs/hss/umn/hss_01_0274.html
@@ -0,0 +1,14 @@
+<a name="hss_01_0274"></a><a name="hss_01_0274"></a>
+
+<h1 class="topictitle1">Why Are the Weak Password Alarms Still Reported After the Weak Password Policy Is Disabled?</h1>
+<div id="body0000001169921745"><p id="hss_01_0274__p10640158816">If you have enhanced passwords before disabling the weak password policy, the weak password alarm will not be reported again.</p>
+<p id="hss_01_0274__p81957291132">If you do not enhance passwords before disabling the weak password policy, the reported alarm will persist and be retained for 30 days.</p>
+<ul id="hss_01_0274__ul13901750105614"><li id="hss_01_0274__li93901150155617">To enhance server security, you are advised to modify the accounts with weak passwords in a timely manner, such as SSH accounts.</li><li id="hss_01_0274__li03911450165618">To protect internal data of your server, you are advised to modify software accounts that use weak passwords, such as MySQL accounts and FTP accounts.</li></ul>
+<p id="hss_01_0274__p18391185016562">After modifying weak passwords, you are advised to perform manual detection immediately to verify the result. If you do not perform manual verification and do not disable the weak password scan, HSS will automatically check the settings the next day in the early morning.</p>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0196.html">Weak Passwords and Unsafe Accounts</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0277.html b/docs/hss/umn/hss_01_0277.html
new file mode 100644
index 00000000..4ba0255e
--- /dev/null
+++ b/docs/hss/umn/hss_01_0277.html
@@ -0,0 +1,659 @@
+<a name="hss_01_0277"></a><a name="hss_01_0277"></a>
+
+<h1 class="topictitle1">Server Alarms</h1>
+<div id="body1600137200709"><p id="hss_01_0277__p71788598295"><span id="hss_01_0277__text13201426616">HSS</span> generates alarms on a range of intrusion events, including brute-force attacks, abnormal process behaviors, web shells, abnormal logins, and malicious processes. You can learn all these events on the console, and eliminate security risks in your assets in a timely manner.</p>
+<div class="section" id="hss_01_0277__section114261122184518"><h4 class="sectiontitle">Constraints</h4><p id="hss_01_0277__p11935163695913">Servers that are not protected by HSS do not support alarm-related operations.</p>
+</div>
+<div class="section" id="hss_01_0277__section12747185531611"><h4 class="sectiontitle">Supported Alarms and Events</h4>
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0277__table6748135513166" frame="border" border="1" rules="all"><thead align="left"><tr id="hss_01_0277__row1774965541619"><th align="left" class="cellrowborder" valign="top" width="7.670392285776903%" id="mcps1.3.3.2.1.10.1.1"><p id="hss_01_0277__p774915513168">Event Type</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="7.516984440061364%" id="mcps1.3.3.2.1.10.1.2"><p id="hss_01_0277__p1074985591619">Alarm Name</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="43.90751698444007%" id="mcps1.3.3.2.1.10.1.3"><p id="hss_01_0277__p107496556162">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="6.202060048213895%" id="mcps1.3.3.2.1.10.1.4"><p id="hss_01_0277__p197498559166">Enterprise Edition</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="7.670392285776903%" id="mcps1.3.3.2.1.10.1.5"><p id="hss_01_0277__p1174914551164">Premium Edition</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="7.2211264518956835%" id="mcps1.3.3.2.1.10.1.6"><p id="hss_01_0277__p15749455101620">WTP Edition</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="8.097742713127328%" id="mcps1.3.3.2.1.10.1.7"><p id="hss_01_0277__p13749755101617">Supported OS</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="6.004821389436775%" id="mcps1.3.3.2.1.10.1.8"><p id="hss_01_0277__p77491955151612">Add to Alarm Whitelist</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="5.708963401271094%" id="mcps1.3.3.2.1.10.1.9"><p id="hss_01_0277__p8749145521614">Isolate and Kill</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0277__row5749155513166"><td class="cellrowborder" rowspan="11" valign="top" width="7.670392285776903%" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p97491555111610">Malware</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.516984440061364%" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p075035511165">Malicious programs</p>
+</td>
+<td class="cellrowborder" valign="top" width="43.90751698444007%" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p975085551614">Malicious programs include Trojans and web shells implanted by hackers to steal your data or control your servers.</p>
+<p id="hss_01_0277__p16750145510169">For example, hackers will probably use your servers as miners or DDoS zombies. This occupies a large number of CPU and network resources, affecting service stability.</p>
+<p id="hss_01_0277__p17750115581612">Check malware, such as web shells, Trojan horses, mining software, worms, and other viruses and variants, and kill them in one-click. The malware is found and removed by analysis on program characteristics and behaviors, AI image fingerprint algorithms, and cloud scanning and killing.</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.202060048213895%" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p37504557168">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.670392285776903%" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p47509552164">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.2211264518956835%" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p20750655181618">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="8.097742713127328%" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p12750125561610">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.004821389436775%" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p975015511163">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="5.708963401271094%" headers="mcps1.3.3.2.1.10.1.9 "><p id="hss_01_0277__p1475065510161">√</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row97501255151612"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p575013557162">Viruses</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p187501255161613">Detect viruses in server assets, report alarms, and support automatic or manual viruses isolation and killing based on the alarms.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p157511455151614">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p1475125561615">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p157513556160">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p675125510166">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p15751125510166">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p375110552162">√</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row8751185561614"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p17751135510165">Worms</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p97511955121612">Detect and kill worms on servers and report alarms.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p137511755121617">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p10751165512168">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p1875185581613">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p2751115501614">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p975225513166">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p167529552169">√</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row127521755181614"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p12752125511614">Trojans</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p147521555191613">Detect and remove Trojan and viruses on servers and report alarms.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p18752755151614">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p1375245510164">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p157533551162">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p2753145591612">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p475345531610">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p875345510163">√</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row1753135581618"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p37533554163">Botnets</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p2075475512164">Detect and kill botnets on servers and report alarms.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p117541455121617">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p17754135571619">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p19754115531613">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p5754125511162">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p7755145515166">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p13755145571611">√</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row77554554166"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p157551155161616">Backdoors</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p197551855121620">Detect backdoors in servers and reports alarms.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p1975585531618">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p1075515551162">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p16755955181617">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p11755155501615">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p7756195591615">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p12756055131611">√</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row20756135501618"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p17561558162">Rootkits</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p575605518164">Detect server assets and report alarms for suspicious kernel modules, files, and folders.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p19756165514165">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p775616554165">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p275613559163">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p15756105518168">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p5756145511162">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p7756145514161">×</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row177565554163"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p1075665515169">Ransomware</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p13756175541615">Check for ransomware in web pages, software, emails, and storage media.</p>
+<p id="hss_01_0277__p875795591618">Ransomware can encrypt and control your data assets, such as documents, emails, databases, source code, images, and compressed files, to leverage victim extortion.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p19757155561616">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p9757155541617">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p197571855121616">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p20757655131615">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p14757195514168">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p1575716553166">√ (Partially supported)</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row67571855101613"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p137571557163">Hacker tools</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p2075725541618">Detect and kill hacker tools on servers and reports alarms.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p18758105561617">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p10758125519166">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p27581355171613">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p275815553162">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p197582554161">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p5758855191611">√</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row4758455151611"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p7758755161619">Web shells</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p1775855515165">Check whether the files (often PHP and JSP files) detected by HSS in your web directories are web shells.</p>
+<p id="hss_01_0277__p20758145512165">You can configure the web shell detection rule in the <strong id="hss_01_0277__b1872637314">Web Shell Detection</strong> rule on the <strong id="hss_01_0277__b2036335668">Policies</strong> page. HSS will check for suspicious or remotely executed commands.</p>
+<p id="hss_01_0277__p6758105541610">You need to add a protected directory in policy management. For details, see <a href="hss_01_0044.html#hss_01_0044__section1575063012457">Web Shell Detection</a>.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p17589552164">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p1675925561619">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p6759115591616">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p3759145531618">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p1975975521616">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p11759185551615">×</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row16759165519165"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p9759205501613">Mining</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p1275985517161">Detect, scan, and remove mining software on servers, and report alarms.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p197598556167">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p47591055161611">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p275965571619">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p1375917554164">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p47604552168">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p776035531610">√</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row1176018552169"><td class="cellrowborder" valign="top" width="7.670392285776903%" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p276010559164">Vulnerability Exploits</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.516984440061364%" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p57607553164">Remote code execution</p>
+</td>
+<td class="cellrowborder" valign="top" width="43.90751698444007%" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p7760115512163">Detect and report alarms on server intrusions that exploit vulnerabilities in real time.</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.202060048213895%" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p976015551169">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.670392285776903%" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p276015551618">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.2211264518956835%" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p2760115510166">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="8.097742713127328%" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p67601556168">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.004821389436775%" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p9760105501613">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="5.708963401271094%" headers="mcps1.3.3.2.1.10.1.9 "><p id="hss_01_0277__p167601555181616">×</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row376312553168"><td class="cellrowborder" rowspan="12" valign="top" width="7.670392285776903%" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p876325519167">Abnormal System Behavior</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.516984440061364%" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p7763135531619">Reverse shells</p>
+</td>
+<td class="cellrowborder" valign="top" width="43.90751698444007%" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p10763125519167">Monitor user process behaviors in real time to detect reverse shells caused by invalid connections.</p>
+<p id="hss_01_0277__p19763105515162">Reverse shells can be detected for protocols including TCP, UDP, and ICMP.</p>
+<p id="hss_01_0277__p1676355516166">You can configure the reverse shell detection rule in the <strong id="hss_01_0277__b2099551676">Malicious File Detection</strong> rule on the <strong id="hss_01_0277__b595302402">Policies</strong> page. HSS will check for suspicious or remotely executed commands.</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.202060048213895%" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p11764145501618">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.670392285776903%" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p167641955151614">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.2211264518956835%" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p876415591613">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="8.097742713127328%" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p9764185511614">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.004821389436775%" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p11764155531620">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="5.708963401271094%" headers="mcps1.3.3.2.1.10.1.9 "><p id="hss_01_0277__p4764145513164">×</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row1776465516167"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p1983162713484">File privilege escalations</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p9831132715488">Detect file privilege escalation operations and generate alarms.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p1676575517164">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p107654553162">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p97651455201614">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p1076511557164">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p107661255201611">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p776655501618">×</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row2766165516169"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p1483282713485">Process privilege escalations</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><div class="p" id="hss_01_0277__p148321272481">Detect the privilege escalation operations of the following processes and generate alarms:<ul id="hss_01_0277__ul208324279483"><li id="hss_01_0277__li983272713483">Root privilege escalation by exploiting SUID program vulnerabilities</li><li id="hss_01_0277__li12832172744812">Root privilege escalation by exploiting kernel vulnerabilities</li></ul>
+</div>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p1576745531618">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p97671555131610">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p157683558163">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p17768455141620">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p47681655201615">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p1676815561613">×</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row12768255181617"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p1783202764813">Important file changes</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p883215272489">Monitor important system files (such as ls, ps, login, and top) in real time and generate alarms if these files are modified. For details about the monitored paths, see <a href="#hss_01_0277__section74562591392">Monitored Important File Paths</a>.</p>
+<p id="hss_01_0277__p78320274482">HSS reports all the changes on important files, regardless of whether the changes are performed manually or by processes.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p47691955141614">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p2769165591615">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p11769165516163">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p10770165510165">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p177045501610">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p377075519162">×</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row11770205517166"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p983392718483">File/Directory changes</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p1583302794812">Monitor system files and directories in real time and generate alarms if such files are created, deleted, moved, or if their attributes or content are modified.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p1777065510169">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p1777135510162">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p1277145510168">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p1477115510166">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p7771755161618">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p777115511165">×</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row67711955121618"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p77711055181610">Abnormal process behaviors</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p67711855161616">Check the processes on servers, including their IDs, command lines, process paths, and behavior.</p>
+<p id="hss_01_0277__p877145515160">Send alarms on unauthorized process operations and intrusions.</p>
+<p id="hss_01_0277__p3771655171613">The following abnormal process behavior can be detected:</p>
+<ul id="hss_01_0277__ul1177145511613"><li id="hss_01_0277__li477111551162">Abnormal CPU usage</li><li id="hss_01_0277__li1177114556164">Processes accessing malicious IP addresses</li><li id="hss_01_0277__li167721155191617">Abnormal increase in concurrent process connections</li></ul>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p1577285518167">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p1977220554163">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p19772185581620">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p377225512164">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p177235541613">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p777215551620">x (Partially supported)</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row1277265541620"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p777225520165">High-risk command executions</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p77728554160">You can configure what commands will trigger alarms in the <strong id="hss_01_0277__b2093053509">High-risk Command Scan</strong> rule on the <strong id="hss_01_0277__b1519313582">Policies</strong> page.</p>
+<p id="hss_01_0277__p147731955171611">HSS checks executed commands in real time and generates alarms if high-risk commands are detected.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p1677311551166">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p8773145561619">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p1773255121615">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p147730555168">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p10773755121614">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p107742550161">×</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row777410554168"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p197743555162">Abnormal shells</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p6774855131614">Detect actions on abnormal shells, including moving, copying, and deleting shell files, and modifying the access permissions and hard links of the files.</p>
+<p id="hss_01_0277__p27744555163">You can configure the abnormal shell detection rule in the <strong id="hss_01_0277__b544996725">Malicious File Detection</strong> rule on the <strong id="hss_01_0277__b358158510">Policies</strong> page. HSS will check for suspicious or remotely executed commands.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p15774155591613">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p177413556165">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p87751855191616">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p10775105541619">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p137751755181614">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p137759552167">×</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row1577585513164"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p277505518168">Suspicious crontab tasks</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p147756554164">Check and list auto-started services, scheduled tasks, pre-loaded dynamic libraries, run registry keys, and startup folders.</p>
+<p id="hss_01_0277__p67751355121615">You can get notified immediately when abnormal automatic auto-start items are detected and quickly locate Trojans.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p0776135561613">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p6776165515161">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p57761455161612">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p97761655191611">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p8776135511611">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p777675511620">×</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row2776255121617"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p29621585195">Windows defender protection disabled</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p14963105813196">Detect the preparations for ransomware encryption: Disable the Windows defender real-time protection function through the registry. Once the function is disabled, an alarm is reported immediately.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p1776175519168">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p167779557162">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p077745511164">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p1777714553163">Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p7777155514167">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p17771755121611">×</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row1577715519167"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p177775519161">Backup deletion</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p1877717554162">Detect the preparations for ransomware encryption: Delete backup files or files in the <strong id="hss_01_0277__b1326136142">Backup</strong> folder. Once backup deletion is detected, an alarm is reported immediately.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p9777115531617">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p167781655151618">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p2778115551617">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p1077813557166">Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p47781552167">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p87781455131615">×</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row8778125591618"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p777819551168">Suspicious registry operations</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p477815513166">Detect operations such as disabling the system firewall through the registry and using the ransomware <strong id="hss_01_0277__b111748611">Stop</strong> to modify the registry and write specific strings in the registry. An alarm is reported immediately when such operations are detected.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p207793558160">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p877919550168">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p167797551162">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p15779175501611">Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p15779195571611">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p11779135518161">×</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row1378135513165"><td class="cellrowborder" rowspan="5" valign="top" width="7.670392285776903%" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p578185541617">Abnormal User Behavior</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.516984440061364%" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p14782155181613">Brute-force attacks</p>
+</td>
+<td class="cellrowborder" valign="top" width="43.90751698444007%" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p2078245531613">If hackers log in to your servers through brute-force attacks, they can obtain the control permissions of the servers and perform malicious operations, such as steal user data; implant ransomware, miners, or Trojans; encrypt data; or use your servers as zombies to perform DDoS attacks.</p>
+<div class="p" id="hss_01_0277__p4782255171616">Detect brute-force attacks on SSH, RDP, FTP, SQL Server, and MySQL accounts.<ul id="hss_01_0277__ul13782555201618"><li id="hss_01_0277__li11782855131611">If the number of brute-force attacks (consecutive incorrect password attempts) from an IP address reaches 5 within 30 seconds, the IP address will be blocked. The default blocking duration is 12 hours.</li><li id="hss_01_0277__li6782855191617">You can check whether the IP address is trustworthy based on its attack type and how many times it has been blocked. You can manually unblock the IP addresses you trust.</li></ul>
+</div>
+</td>
+<td class="cellrowborder" valign="top" width="6.202060048213895%" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p178412553164">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.670392285776903%" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p1784145513167">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.2211264518956835%" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p14784855141615">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="8.097742713127328%" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p978485516160">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.004821389436775%" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p5785165517165">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="5.708963401271094%" headers="mcps1.3.3.2.1.10.1.9 "><p id="hss_01_0277__p1178510550166">×</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row37853555168"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p0785145520163">Abnormal logins</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p177853552169">Detect abnormal login behavior, such as remote login and brute-force attacks. If abnormal logins are reported, your servers may have been intruded by hackers.</p>
+<ul id="hss_01_0277__ul97867555168"><li id="hss_01_0277__li2787145541611">Check and handle remote logins.<p id="hss_01_0277__p117873556167"><a name="hss_01_0277__li2787145541611"></a><a name="li2787145541611"></a>You can check the blocked login IP addresses, and who used them to log in to which server at what time.</p>
+<p id="hss_01_0277__p14788105511620">If a user's login location is not any common login location, an alarm will be triggered.</p>
+</li><li id="hss_01_0277__li478895511620">Trigger an alarm if a user logs in to the server by a brute-force attack.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p0789175501619">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p5790255201615">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p13790205541613">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p9790455141615">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p12790155131612">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p117901455111618">×</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row20790125519168"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p12790455141612">Invalid accounts</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p37901955181617">Hackers can probably crack unsafe accounts on your servers and control the servers.</p>
+<p id="hss_01_0277__p1379085511618">HSS checks suspicious hidden accounts and cloned accounts and generates alarms on them.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p1779125591619">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p379117556161">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p16791185591611">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p10791255191619">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p6791155517169">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p1379175521614">×</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row187915552162"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p1279155512163">User account added</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p1791555111612">Detect the commands used to create hidden accounts. Hidden accounts cannot be found in the user interaction interface or be queried by commands.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p879275510164">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p15792195551612">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p17792105519165">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p1979255517162">Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p579275551611">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p11792255101615">×</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row1279214559169"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p13792555191619">Password theft</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p1379314557168">Detect the abnormal obtaining of system accounts and password hashes on servers and report alarms.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p57933553162">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p13793195518166">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p1779319558163">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p1679395516161">Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p779319557169">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p97941655181619">×</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row13796455141611"><td class="cellrowborder" rowspan="2" valign="top" width="7.670392285776903%" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p579618553161">Reconnaissance</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.516984440061364%" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p1579612554167">Port scan</p>
+</td>
+<td class="cellrowborder" valign="top" width="43.90751698444007%" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p1679713550167">Detect scanning or sniffing on specified ports and report alarms.</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.202060048213895%" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p279725571611">×</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.670392285776903%" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p7797055201614">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.2211264518956835%" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p1797185515162">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="8.097742713127328%" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p18797195518169">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.004821389436775%" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p27976557161">×</p>
+</td>
+<td class="cellrowborder" valign="top" width="5.708963401271094%" headers="mcps1.3.3.2.1.10.1.9 "><p id="hss_01_0277__p1279814553166">×</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row177981455171619"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.1 "><p id="hss_01_0277__p137982055101616">Host scan</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.2 "><p id="hss_01_0277__p1879805591610">Detect the network scan activities based on server rules (including ICMP, ARP, and nbtscan) and report alarms.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.3 "><p id="hss_01_0277__p8798195501614">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.4 "><p id="hss_01_0277__p3798655151616">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.5 "><p id="hss_01_0277__p10799185514161">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.6 "><p id="hss_01_0277__p1779916552163">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.7 "><p id="hss_01_0277__p9800175510169">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.1.10.1.8 "><p id="hss_01_0277__p78011355171618">×</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+<div class="section" id="hss_01_0277__section74562591392"><a name="hss_01_0277__section74562591392"></a><a name="section74562591392"></a><h4 class="sectiontitle">Monitored Important File Paths</h4>
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0277__table12589192543419" frame="border" border="1" rules="all"><thead align="left"><tr id="hss_01_0277__row35906255345"><th align="left" class="cellrowborder" valign="top" width="20.69%" id="mcps1.3.4.2.1.3.1.1"><p id="hss_01_0277__p2591125193416">Type</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="79.31%" id="mcps1.3.4.2.1.3.1.2"><p id="hss_01_0277__p8596142573411">Linux</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0277__row1859762563410"><td class="cellrowborder" valign="top" width="20.69%" headers="mcps1.3.4.2.1.3.1.1 "><p id="hss_01_0277__p4597625133415">bin</p>
+</td>
+<td class="cellrowborder" valign="top" width="79.31%" headers="mcps1.3.4.2.1.3.1.2 "><p id="hss_01_0277__p1959762519349">/bin/ls</p>
+<p id="hss_01_0277__p1759818254341">/bin/ps</p>
+<p id="hss_01_0277__p10598725203414">/bin/bash</p>
+<p id="hss_01_0277__p135982025193411">/bin/netstat</p>
+<p id="hss_01_0277__p3598325183412">/bin/login</p>
+<p id="hss_01_0277__p7598152583415">/bin/find</p>
+<p id="hss_01_0277__p18599102512349">/bin/lsmod</p>
+<p id="hss_01_0277__p359992553413">/bin/pidof</p>
+<p id="hss_01_0277__p259932516349">/bin/lsof</p>
+<p id="hss_01_0277__p1859942510344">/bin/ss</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row25997256340"><td class="cellrowborder" valign="top" width="20.69%" headers="mcps1.3.4.2.1.3.1.1 "><p id="hss_01_0277__p6599525133420">usr</p>
+</td>
+<td class="cellrowborder" valign="top" width="79.31%" headers="mcps1.3.4.2.1.3.1.2 "><p id="hss_01_0277__p9600202516346">/usr/bin/ls</p>
+<p id="hss_01_0277__p1060012255348">/usr/bin/ps</p>
+<p id="hss_01_0277__p760012533410">/usr/sbin/ps</p>
+<p id="hss_01_0277__p26001025163413">/usr/bin/bash</p>
+<p id="hss_01_0277__p460019258341">/usr/bin/netstat</p>
+<p id="hss_01_0277__p4600132513346">/usr/sbin/netstat</p>
+<p id="hss_01_0277__p10600122517343">/usr/sbin/rsyslogd</p>
+<p id="hss_01_0277__p116011325183410">/usr/sbin/ifconfig</p>
+<p id="hss_01_0277__p260172511341">/usr/bin/login</p>
+<p id="hss_01_0277__p106011225123411">/usr/bin/find</p>
+<p id="hss_01_0277__p4601325183418">/usr/sbin/lsmod</p>
+<p id="hss_01_0277__p1760118250344">/usr/sbin/pidof</p>
+<p id="hss_01_0277__p126011125183412">/usr/bin/lsof</p>
+<p id="hss_01_0277__p17601122516342">/usr/sbin/lsof</p>
+<p id="hss_01_0277__p9602112517345">/usr/sbin/tcpd</p>
+<p id="hss_01_0277__p156022025143415">/usr/bin/passwd</p>
+<p id="hss_01_0277__p460202517342">/usr/bin/top</p>
+<p id="hss_01_0277__p13602625203412">/usr/bin/du</p>
+<p id="hss_01_0277__p18602122593411">/usr/bin/chfn</p>
+<p id="hss_01_0277__p12602725193412">/usr/bin/chsh</p>
+<p id="hss_01_0277__p106022258343">/usr/bin/killall</p>
+<p id="hss_01_0277__p7603162510346">/usr/bin/ss</p>
+<p id="hss_01_0277__p11603192543415">/usr/sbin/ss</p>
+<p id="hss_01_0277__p146031225113411">/usr/bin/ssh</p>
+<p id="hss_01_0277__p960372553419">/usr/bin/scp</p>
+</td>
+</tr>
+<tr id="hss_01_0277__row260317256343"><td class="cellrowborder" valign="top" width="20.69%" headers="mcps1.3.4.2.1.3.1.1 "><p id="hss_01_0277__p20604625123418">sbin</p>
+</td>
+<td class="cellrowborder" valign="top" width="79.31%" headers="mcps1.3.4.2.1.3.1.2 "><p id="hss_01_0277__p146041125103412">/sbin/syslog-ng</p>
+<p id="hss_01_0277__p18604225173412">/sbin/rsyslogd</p>
+<p id="hss_01_0277__p360492563418">/sbin/ifconfig</p>
+<p id="hss_01_0277__p18605162563415">/sbin/lsmod</p>
+<p id="hss_01_0277__p17605172511342">/sbin/pidof</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0030.html">Intrusion Detection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0287.html b/docs/hss/umn/hss_01_0287.html
new file mode 100644
index 00000000..bbc9d44f
--- /dev/null
+++ b/docs/hss/umn/hss_01_0287.html
@@ -0,0 +1,16 @@
+<a name="hss_01_0287"></a><a name="hss_01_0287"></a>
+
+<h1 class="topictitle1">How Do I Unblock an IP Address?</h1>
+<div id="body0000001123401792"><p id="hss_01_0287__p8769194816915">HSS will block an IP address if it has five or more brute-force attack attempts detected within 30 seconds, or 15 or more brute-force attack attempts detected within 3600 seconds. If a normal IP address is blocked by mistake (for example, after O&amp;M personnel enter incorrect passwords for multiple times), you can unblock the IP address.</p>
+<p id="hss_01_0287__p1456862181713">If you manually unblocked an IP address, but incorrect password attempts from this IP address reach the threshold again, this IP address will be blocked again.</p>
+<div class="note" id="hss_01_0287__note646134520174"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0287__ul6417105871810"><li id="hss_01_0287__li15346165913188">The default blocking duration is 12 hours.</li><li id="hss_01_0287__li154181158161810">If a blocked IP address does not perform brute-force attacks in the default blocking duration, it will be automatically unblocked.</li></ul>
+</div></div>
+<div class="section" id="hss_01_0287__section172111354812"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0287__ol19766224171013"><li id="hss_01_0287__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0287__li085562310112"><span>In the navigation tree on the left, choose <span class="menucascade" id="hss_01_0287__menucascade1039192016475"><b><span class="uicontrol" id="hss_01_0287__uicontrol1138320154719">Detection</span></b> &gt; <b><span class="uicontrol" id="hss_01_0287__uicontrol16381620184713">Alarms</span></b></span> and click <span class="uicontrol" id="hss_01_0287__uicontrol1917416381424"><b>Server Alarms</b></span>.</span></li><li id="hss_01_0287__li08914476120"><span>In the <strong id="hss_01_0287__b16254152716433">Alarm Statistics</strong> area, click <strong id="hss_01_0287__b6730924352">View Details</strong> under <span class="parmname" id="hss_01_0287__parmname689174711213"><b>Blocked IP Addresses</b></span>.</span></li><li id="hss_01_0287__li14581244104518"><span>In the blocked IP address list, select an IP address and click <strong id="hss_01_0287__b1795919339343">Cancel Interception</strong>.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0038.html">Brute-force Attack Defense</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0292.html b/docs/hss/umn/hss_01_0292.html
new file mode 100644
index 00000000..060154b6
--- /dev/null
+++ b/docs/hss/umn/hss_01_0292.html
@@ -0,0 +1,17 @@
+<a name="hss_01_0292"></a><a name="hss_01_0292"></a>
+
+<h1 class="topictitle1">Enabling HSS</h1>
+<div id="body0000001125091309"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0233.html">Installing an Agent</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0260.html">Enabling Protection</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0241.html">Enabling Alarm Notifications</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0051.html">Common Security Configuration</a></strong><br>
+</li>
+</ul>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0293.html b/docs/hss/umn/hss_01_0293.html
new file mode 100644
index 00000000..354b4b32
--- /dev/null
+++ b/docs/hss/umn/hss_01_0293.html
@@ -0,0 +1,27 @@
+<a name="hss_01_0293"></a><a name="hss_01_0293"></a>
+
+<h1 class="topictitle1">Enabling Container Protection</h1>
+<div id="body0000001124709683"><p id="hss_01_0293__p06016211265">Before enabling protection for a container node, you need to allocate quota to a specified node. If the protection is disabled or the node is deleted, the quota can be allocated to other nodes.</p>
+<div class="section" id="hss_01_0293__section11644953742"><h4 class="sectiontitle">Check Frequency</h4><p id="hss_01_0293__p981415359460"><span id="hss_01_0293__text183524516304">HSS</span> performs a full check in the early morning every day.</p>
+<p id="hss_01_0293__p177871819580">After you enable server protection, you can view scan results after the automatic scan in the next early morning.</p>
+</div>
+<div class="section" id="hss_01_0293__section1071994843613"><h4 class="sectiontitle">Prerequisites</h4><ul id="hss_01_0293__ul175501015154615"><li id="hss_01_0293__li11421299164">The <strong id="hss_01_0293__b2098241810283">Agent Status</strong> of a server is <strong id="hss_01_0293__b6301723142818">Online</strong>. To check the status, choose <strong id="hss_01_0293__b4847182913281">Asset Management</strong> &gt; <strong id="hss_01_0293__b1951744122819">Containers &amp; Quota</strong>.</li><li id="hss_01_0293__li12417165919259">You have created nodes on CCE.</li><li id="hss_01_0293__li7550101574617">The <strong id="hss_01_0293__b19356350899">Protection Status</strong> of the node is <strong id="hss_01_0293__b8409115418920">Unprotected</strong>.</li></ul>
+</div>
+<div class="section" id="hss_01_0293__section28221635595"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0293__ol1926811717169"><li id="hss_01_0293__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0293__li830314169200"><span>Click <span><img id="hss_01_0293__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0293__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0293__hss_01_0571_b14857117404"><span id="hss_01_0293__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0293__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0293__li13785124016491"><span>In the navigation pane, choose <strong id="hss_01_0293__b12496192119196">Asset Management</strong> &gt; <strong id="hss_01_0293__b549614217195">Containers &amp; Quota</strong>.</span><p><div class="fignone" id="hss_01_0293__fig129731442691"><span class="figcap"><b>Figure 1 </b>Accessing the container node management page</span><br><span><img id="hss_01_0293__image75748424247" src="en-us_image_0000001735474790.png"></span></div>
+</p></li><li id="hss_01_0293__li73373463511"><span>In the <strong id="hss_01_0293__b39013415185">Operation </strong>column of the node list, click <strong id="hss_01_0293__b896154112181">Enable Protection</strong>.</span></li><li id="hss_01_0293__li1946931614261"><span>In the displayed dialog box, confirm the server information.</span></li><li id="hss_01_0293__li15441174320116"><span>Click <strong id="hss_01_0293__b883265915472">OK</strong>. If the <strong id="hss_01_0293__b126302014131910">Protection Status</strong> of the server changes to <strong id="hss_01_0293__b1096579121920">Protected</strong>, protection has been enabled.</span><p><div class="note" id="hss_01_0293__note320365904514"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0293__p629772710258">A container security quota protects one cluster node.</p>
+</div></div>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0293__section139911511101"><h4 class="sectiontitle">Related Operations</h4><p id="hss_01_0293__p9229125712016"><strong id="hss_01_0293__b893225713012">Disabling protection for a node</strong></p>
+<p id="hss_01_0293__p21201448102115">Choose <strong id="hss_01_0293__b17422125464411">Asset Management</strong> &gt; <strong id="hss_01_0293__b1542885411441">Containers &amp; Quota</strong>, click the <strong id="hss_01_0293__b642825424411">Container Nodes</strong> tab, and click <strong id="hss_01_0293__b24289541448">Nodes</strong>. In the <strong id="hss_01_0293__b6428155484417">Operation</strong> column, click <strong id="hss_01_0293__b842835417449">Disable Protection</strong>.</p>
+<p id="hss_01_0293__p1333674019375">If protection is disabled, the quota status will change from occupied to idle. You can allocate the idle quota to another node to avoid quota waste.</p>
+<div class="notice" id="hss_01_0293__note2054272615116"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><ul id="hss_01_0293__ul8341202015407"><li id="hss_01_0293__li4494740143213">Before disabling protection, perform a comprehensive detection on the container, handle detected risks, and record operation information to prevent O&amp;M errors and attacks on the container.</li><li id="hss_01_0293__li6855132175310">After protection is disabled, clear important data on the container, stop important applications on the container, and disconnect the container from the external network to avoid unnecessary loss caused by attacks.</li></ul>
+</div></div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0260.html">Enabling Protection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0294.html b/docs/hss/umn/hss_01_0294.html
new file mode 100644
index 00000000..c55cc74f
--- /dev/null
+++ b/docs/hss/umn/hss_01_0294.html
@@ -0,0 +1,19 @@
+<a name="hss_01_0294"></a><a name="hss_01_0294"></a>
+
+<h1 class="topictitle1">Asset Management</h1>
+<div id="body0000001124701031"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0387.html">Asset Management</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0463.html">Server Fingerprints</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0464.html">Container Fingerprints</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0397.html">Server Management</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0295.html">Container Management</a></strong><br>
+</li>
+</ul>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0295.html b/docs/hss/umn/hss_01_0295.html
new file mode 100644
index 00000000..8f612e8f
--- /dev/null
+++ b/docs/hss/umn/hss_01_0295.html
@@ -0,0 +1,21 @@
+<a name="hss_01_0295"></a><a name="hss_01_0295"></a>
+
+<h1 class="topictitle1">Container Management</h1>
+<div id="body0000001125082713"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0296.html">Viewing the Container Node Protection List</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0398.html">Enabling Container Security Protection</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0401.html">Disabling Protection for Container Edition</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0297.html">Container Images</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0294.html">Asset Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0296.html b/docs/hss/umn/hss_01_0296.html
new file mode 100644
index 00000000..52140e1c
--- /dev/null
+++ b/docs/hss/umn/hss_01_0296.html
@@ -0,0 +1,49 @@
+<a name="hss_01_0296"></a><a name="hss_01_0296"></a>
+
+<h1 class="topictitle1">Viewing the Container Node Protection List</h1>
+<div id="body0000001125465183"><p id="hss_01_0296__p158131911451">The <strong id="hss_01_0296__b10772103593212">Container Nodes</strong> page displays the protection, node, and Agent status of clusters in Cloud Container Engine (CCE), helping you learn the security status of clusters in real time.</p>
+<div class="section" id="hss_01_0296__section114261122184518"><h4 class="sectiontitle">Constraints</h4><ul id="hss_01_0296__ul1527714714393"><li id="hss_01_0296__li227724713392">Only Linux servers are supported.</li><li id="hss_01_0296__li527712470395">Servers that are not protected by HSS enterprise, premium, WTP, or container editions cannot perform container-related operations.</li></ul>
+</div>
+<div class="section" id="hss_01_0296__section20437340112410"><h4 class="sectiontitle">Viewing the Clusters and Protection Quotas</h4><ol id="hss_01_0296__ol183675120119"><li id="hss_01_0296__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0296__li830314169200"><span>Click <span><img id="hss_01_0296__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0296__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0296__hss_01_0571_b14857117404"><span id="hss_01_0296__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0296__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0296__li1387813511315"><span>In the navigation pane on the left, choose <span class="menucascade" id="hss_01_0296__menucascade2019081623217"><b><span class="uicontrol" id="hss_01_0296__uicontrol161849163321">Asset Management</span></b> &gt; <b><span class="uicontrol" id="hss_01_0296__uicontrol319071611327">Containers &amp; Quota</span></b></span>. Click <strong id="hss_01_0296__b11916161328">Container Nodes</strong>.</span></li><li id="hss_01_0296__li91131333194918"><span>View the node protection status on the <strong id="hss_01_0296__b119270161359">Nodes</strong> page. You can obtain the details in <a href="#hss_01_0296__table13936165011391">Table 1</a>.</span><p><div class="note" id="hss_01_0296__note1433010015413"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0296__p6330130840">In the HSS container node list, you can view only the servers where the agent has been installed. To view the servers where the agent has not been installed, choose <strong id="hss_01_0296__b135491611512">Asset Management</strong> &gt; <strong id="hss_01_0296__b785411412110">Servers &amp; Quota</strong>.</p>
+</div></div>
+
+<div class="tablenoborder"><a name="hss_01_0296__table13936165011391"></a><a name="table13936165011391"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0296__table13936165011391" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameter description</caption><thead align="left"><tr id="hss_01_0296__row3920205053911"><th align="left" class="cellrowborder" valign="top" width="34%" id="mcps1.3.3.2.4.2.2.2.3.1.1"><p id="hss_01_0296__p492017507391">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="66%" id="mcps1.3.3.2.4.2.2.2.3.1.2"><p id="hss_01_0296__p19920135012399">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0296__row92695418218"><td class="cellrowborder" valign="top" width="34%" headers="mcps1.3.3.2.4.2.2.2.3.1.1 "><p id="hss_01_0296__p527084122119">Server Name</p>
+</td>
+<td class="cellrowborder" valign="top" width="66%" headers="mcps1.3.3.2.4.2.2.2.3.1.2 "><p id="hss_01_0296__p192707417215">Server name.</p>
+</td>
+</tr>
+<tr id="hss_01_0296__row492010507398"><td class="cellrowborder" valign="top" width="34%" headers="mcps1.3.3.2.4.2.2.2.3.1.1 "><p id="hss_01_0296__p2920185016391">Protection Status</p>
+</td>
+<td class="cellrowborder" valign="top" width="66%" headers="mcps1.3.3.2.4.2.2.2.3.1.2 "><p id="hss_01_0296__p4612432191413">Protection status of a node. The options are as follows:</p>
+<ul id="hss_01_0296__ul72181449101418"><li id="hss_01_0296__li921864921412"><strong id="hss_01_0296__b8524115521219">Unprotected</strong>: HSS is disabled for the server. After the agent is installed, click <strong id="hss_01_0296__b176175720122">Enable</strong> in the <strong id="hss_01_0296__b1761165714128">Operation</strong> column to enable protection.</li><li id="hss_01_0296__li732595317145"><strong id="hss_01_0296__b1610755913123">Enabled</strong>: The server is fully protected by HSS.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0296__row1654294813412"><td class="cellrowborder" valign="top" width="34%" headers="mcps1.3.3.2.4.2.2.2.3.1.1 "><p id="hss_01_0296__p690418614592">Server Status</p>
+</td>
+<td class="cellrowborder" valign="top" width="66%" headers="mcps1.3.3.2.4.2.2.2.3.1.2 "><ul id="hss_01_0296__ul1637324111718"><li id="hss_01_0296__li330116433154">Running</li><li id="hss_01_0296__li2060234971513">Unavailable</li><li id="hss_01_0296__li290434212020">Normal</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0296__row177681562595"><td class="cellrowborder" valign="top" width="34%" headers="mcps1.3.3.2.4.2.2.2.3.1.1 "><p id="hss_01_0296__p18769556135912">Agent Status</p>
+</td>
+<td class="cellrowborder" valign="top" width="66%" headers="mcps1.3.3.2.4.2.2.2.3.1.2 "><p id="hss_01_0296__p15202171816553">You can select a status to view the server.</p>
+<ul id="hss_01_0296__ul196768151907"><li id="hss_01_0296__li1967620152018"><strong id="hss_01_0296__b1668813414134">Online</strong>: The agent is running properly.</li><li id="hss_01_0296__li684520191414"><strong id="hss_01_0296__b1166826121319">Offline</strong>: The communication between the agent and the HSS server is abnormal, and HSS cannot protect your servers.</li><li id="hss_01_0296__li1667716151406"><strong id="hss_01_0296__b1944192571417">Not installed</strong>: The agent has not been installed or successfully started.</li></ul>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0295.html">Container Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0297.html b/docs/hss/umn/hss_01_0297.html
new file mode 100644
index 00000000..2ceba403
--- /dev/null
+++ b/docs/hss/umn/hss_01_0297.html
@@ -0,0 +1,19 @@
+<a name="hss_01_0297"></a><a name="hss_01_0297"></a>
+
+<h1 class="topictitle1">Container Images</h1>
+<div id="body0000001169375131"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0298.html">Local Images</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0299.html">Managing SWR Private Images</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0088.html">Managing SWR Shared Images</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0295.html">Container Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0298.html b/docs/hss/umn/hss_01_0298.html
new file mode 100644
index 00000000..6ae62da5
--- /dev/null
+++ b/docs/hss/umn/hss_01_0298.html
@@ -0,0 +1,20 @@
+<a name="hss_01_0298"></a><a name="hss_01_0298"></a>
+
+<h1 class="topictitle1">Local Images</h1>
+<div id="body0000001125222067"><p id="hss_01_0298__p8060118">You can manually scan local images for vulnerabilities and software information and provides scan reports. This section describes how to perform security scans on local images and view scan reports.</p>
+<div class="section" id="hss_01_0298__section1920201514181"><h4 class="sectiontitle">Constraints</h4><ul id="hss_01_0298__ul325716561917"><li id="hss_01_0298__li1029841412492">Only the HSS container edition supports this function.</li></ul>
+<ul id="hss_01_0298__ul583913714494"><li id="hss_01_0298__li432864475017">Only the local images of the Docker engine can be reported to the <span id="hss_01_0298__text195214631311">HSS</span> console.</li><li id="hss_01_0298__li138399734912">Security scans can be performed only on Linux images.</li></ul>
+</div>
+<div class="section" id="hss_01_0298__section189231726162812"><h4 class="sectiontitle">Viewing Local Images</h4><ol id="hss_01_0298__ol1926811717169"><li id="hss_01_0298__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0298__li830314169200"><span>Click <span><img id="hss_01_0298__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0298__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0298__hss_01_0571_b14857117404"><span id="hss_01_0298__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0298__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0298__li14702153011545"><span>In the navigation pane on the left, choose <strong id="hss_01_0298__b628063153017">Asset Management</strong> &gt; <strong id="hss_01_0298__b828016318304">Containers &amp; Quota</strong>. Click the <strong id="hss_01_0298__b028010317307">Container Images</strong> tab and click <span class="uicontrol" id="hss_01_0298__uicontrol728012363016"><b>Local image</b></span> to view local images.</span><p><div class="fignone" id="hss_01_0298__fig1049983817542"><span class="figcap"><b>Figure 1 </b>Viewing the local image scan results</span><br><span><img id="hss_01_0298__en-us_topic_0000001568522277_image92327121051" src="en-us_image_0000001564547244.png"></span></div>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0298__section0614133318482"><h4 class="sectiontitle">Viewing Local Image Vulnerability Reports and Software Information</h4><ol id="hss_01_0298__ol132381049204412"><li id="hss_01_0298__li18422356256"><span>Log in to the management console and go to the <span id="hss_01_0298__text1695075633314">HSS</span> page.</span></li><li id="hss_01_0298__li1199389549"><span>In the navigation pane on the left, choose <strong id="hss_01_0298__hss_01_0298_b628063153017">Asset Management</strong> &gt; <strong id="hss_01_0298__hss_01_0298_b828016318304">Containers &amp; Quota</strong>. Click the <strong id="hss_01_0298__hss_01_0298_b028010317307">Container Images</strong> tab and click <span class="uicontrol" id="hss_01_0298__hss_01_0298_uicontrol728012363016"><b>Local image</b></span> to view local images.</span><p><div class="fignone" id="hss_01_0298__hss_01_0298_fig1049983817542"><span class="figcap"><b>Figure 2 </b>Viewing the local image scan results</span><br><span><img id="hss_01_0298__hss_01_0298_en-us_topic_0000001568522277_image92327121051" src="en-us_image_0000001564547244.png"></span></div>
+</p></li><li id="hss_01_0298__li223934914413"><span>Click <span class="uicontrol" id="hss_01_0298__uicontrol1562424920425"><b>View Report</b></span> in the <strong id="hss_01_0298__b116242494115">Operation</strong> column of the target image to view the basic information, vulnerability report, and software information about the image.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0297.html">Container Images</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0299.html b/docs/hss/umn/hss_01_0299.html
new file mode 100644
index 00000000..76b9cbfd
--- /dev/null
+++ b/docs/hss/umn/hss_01_0299.html
@@ -0,0 +1,77 @@
+<a name="hss_01_0299"></a><a name="hss_01_0299"></a>
+
+<h1 class="topictitle1">Managing SWR Private Images</h1>
+<div id="body0000001122775278"><p id="hss_01_0299__p1944001174110">Images in the private image repository come from SWR images. You can manually scan for and check reports on vulnerabilities, malicious files, software information, file information, baseline check, sensitive information.</p>
+<div class="section" id="hss_01_0299__section1920201514181"><h4 class="sectiontitle">Constraints</h4><ul id="hss_01_0299__hss_01_0298_ul325716561917"><li id="hss_01_0299__hss_01_0298_li1029841412492">Only the HSS container edition supports this function.</li></ul>
+<ul id="hss_01_0299__hss_01_0298_ul583913714494"><li id="hss_01_0299__hss_01_0298_li138399734912">Security scans can be performed only on Linux images.</li></ul>
+</div>
+<div class="section" id="hss_01_0299__section9526832124513"><h4 class="sectiontitle">Viewing Private Images</h4><ol id="hss_01_0299__ol15176145281320"><li id="hss_01_0299__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0299__li830314169200"><span>Click <span><img id="hss_01_0299__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0299__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0299__hss_01_0571_b14857117404"><span id="hss_01_0299__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0299__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0299__li272918391358"><span>In the navigation pane, choose <strong id="hss_01_0299__b7368164518610">Asset Management</strong> <strong id="hss_01_0299__b7368245763">Container &amp; Quota</strong>. On the displayed page, click the <strong id="hss_01_0299__b4862712479">Container Images</strong> tab and click <strong id="hss_01_0299__b18623124714">SWR private image</strong>.</span><p><div class="fignone" id="hss_01_0299__fig9872359587"><span class="figcap"><b>Figure 1 </b>Accessing the private image list</span><br><span><img id="hss_01_0299__image585635704912" src="en-us_image_0000001852172057.png"></span></div>
+</p></li><li id="hss_01_0299__li1780151762614"><span>You can click <strong id="hss_01_0299__b11301193018238">Update Private Images from SWR</strong> to update self-owned images from SWR.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0299__section20185253131315"><h4 class="sectiontitle">Scanning a Private Image</h4><p id="hss_01_0299__p1030685692511">You can choose all images, multiple images, or a single image and manually start a scan. The duration of a security scan depends on the scanned image size. Generally, scanning an image takes shorter than 3 minutes. After the scan is complete, click <strong id="hss_01_0299__b41029504375">View Report</strong> to check the report.</p>
+<p id="hss_01_0299__p1325071114">Scan items of private images in SWR are as follows:</p>
+
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0299__table10351134510119" frame="border" border="1" rules="all"><thead align="left"><tr id="hss_01_0299__hss_01_0088_row1345162119020"><th align="left" class="cellrowborder" valign="top" width="21.55%" id="mcps1.3.4.4.1.3.1.1"><p id="hss_01_0299__hss_01_0088_p10345152111020">Scan Item</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="78.45%" id="mcps1.3.4.4.1.3.1.2"><p id="hss_01_0299__hss_01_0088_p034512218020">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0299__hss_01_0088_row143451721100"><td class="cellrowborder" valign="top" width="21.55%" headers="mcps1.3.4.4.1.3.1.1 "><p id="hss_01_0299__hss_01_0088_p134511218019">Vulnerability</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.45%" headers="mcps1.3.4.4.1.3.1.2 "><p id="hss_01_0299__hss_01_0088_p434517219020">Detect system and application vulnerabilities in images.</p>
+</td>
+</tr>
+<tr id="hss_01_0299__hss_01_0088_row103454219015"><td class="cellrowborder" valign="top" width="21.55%" headers="mcps1.3.4.4.1.3.1.1 "><p id="hss_01_0299__hss_01_0088_p1034511211003">Malicious file</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.45%" headers="mcps1.3.4.4.1.3.1.2 "><p id="hss_01_0299__hss_01_0088_p934512119019">Detects malicious files in images.</p>
+</td>
+</tr>
+<tr id="hss_01_0299__hss_01_0088_row934515211105"><td class="cellrowborder" valign="top" width="21.55%" headers="mcps1.3.4.4.1.3.1.1 "><p id="hss_01_0299__hss_01_0088_p183454217014">Software information</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.45%" headers="mcps1.3.4.4.1.3.1.2 "><p id="hss_01_0299__hss_01_0088_p834562119019">Collects software information in an image.</p>
+</td>
+</tr>
+<tr id="hss_01_0299__hss_01_0088_row1345152118014"><td class="cellrowborder" valign="top" width="21.55%" headers="mcps1.3.4.4.1.3.1.1 "><p id="hss_01_0299__hss_01_0088_p183461821206">File information</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.45%" headers="mcps1.3.4.4.1.3.1.2 "><p id="hss_01_0299__hss_01_0088_p1334662118010">Collects file information in an image.</p>
+</td>
+</tr>
+<tr id="hss_01_0299__hss_01_0088_row117037141719"><td class="cellrowborder" valign="top" width="21.55%" headers="mcps1.3.4.4.1.3.1.1 "><p id="hss_01_0299__hss_01_0088_p570351419115">Unsafe setting</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.45%" headers="mcps1.3.4.4.1.3.1.2 "><ul id="hss_01_0299__hss_01_0088_ul132761935099"><li id="hss_01_0299__hss_01_0088_li112091943164418">Configuration check:<ul id="hss_01_0299__hss_01_0088_ul564574917440"><li id="hss_01_0299__hss_01_0088_li1187374610444">Checks the images configurations of CentOS 7, Debian 10, EulerOS, and Ubuntu16.</li><li id="hss_01_0299__hss_01_0088_li036082514719">Checks SSH configurations.</li></ul>
+</li><li id="hss_01_0299__hss_01_0088_li22761035196">Weak password check: detects weak passwords in images.</li><li id="hss_01_0299__hss_01_0088_li16276163518911">Password complexity check: detects insecure password complexity policies in images.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0299__hss_01_0088_row67275201811"><td class="cellrowborder" valign="top" width="21.55%" headers="mcps1.3.4.4.1.3.1.1 "><p id="hss_01_0299__hss_01_0088_p7728112014116">Sensitive information</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.45%" headers="mcps1.3.4.4.1.3.1.2 "><p id="hss_01_0299__hss_01_0088_p18728720714">Detects files that contain sensitive information in images.</p>
+<ul id="hss_01_0299__hss_01_0088_ul23106439311"><li id="hss_01_0299__hss_01_0088_li2562205912419">The paths that are not checked by default are as follows:<ul id="hss_01_0299__hss_01_0088_ul187571441428"><li id="hss_01_0299__hss_01_0088_li1031054314319">/usr/*</li><li id="hss_01_0299__hss_01_0088_li12310443133118">/lib/*</li><li id="hss_01_0299__hss_01_0088_li63101043203110">/lib32/*</li><li id="hss_01_0299__hss_01_0088_li1831017430314">/bin/*</li><li id="hss_01_0299__hss_01_0088_li231004383112">/sbin/*</li><li id="hss_01_0299__hss_01_0088_li13101243163114">/var/lib/*</li><li id="hss_01_0299__hss_01_0088_li133101343203113">/var/log/*</li><li id="hss_01_0299__li0522410102819"><em id="hss_01_0299__i10635105817117">Any path</em>/node_modules/<em id="hss_01_0299__i146356584114">any path</em>/<em id="hss_01_0299__i5635135831118">any name</em>.md</li><li id="hss_01_0299__li12562177163012"><em id="hss_01_0299__i16466106127">Any path</em>/node_modules/<em id="hss_01_0299__i64676021218">any path</em>/test/<em id="hss_01_0299__i74674016121">any path</em></li><li id="hss_01_0299__li14703738123517">*/service/iam/examples_test.go</li><li id="hss_01_0299__li8862933511"><em id="hss_01_0299__i124176281213">Any path</em>/grafana/public/build/<em id="hss_01_0299__i1341715271220">any name</em>.js</li></ul>
+<div class="note" id="hss_01_0299__hss_01_0088_note1521121811425"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="hss_01_0299__ul16594202412620"><li id="hss_01_0299__li6594162417261">Any path: indicates that the current path is a customized value and can be any path in the system.</li><li id="hss_01_0299__li14861151234718">Any name: indicates that the file name in the current path is a customized value, which can be any name ended with .md or .js in the system.</li><li id="hss_01_0299__li22301831142816">On the <span class="menucascade" id="hss_01_0299__menucascade18497317819"><b><span class="uicontrol" id="hss_01_0299__uicontrol98484315813">View Report</span></b> &gt; <b><span class="uicontrol" id="hss_01_0299__uicontrol784893681">Sensitive Information</span></b></span> tab, click <strong id="hss_01_0299__b108511231786">Configure Sensitive File Path</strong> to set the Linux path of the file that does not need to be checked. A maximum of 20 paths can be added.</li></ul>
+</div></div>
+</li><li id="hss_01_0299__hss_01_0088_li077819017435">No checks are performed in the following scenarios:<ul id="hss_01_0299__hss_01_0088_ul1390814283441"><li id="hss_01_0299__hss_01_0088_li154757331443">The file size is greater than 20 MB.</li><li id="hss_01_0299__hss_01_0088_li1176123654410">The file type can be binary, common process, or auto generation.</li></ul>
+</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0299__hss_01_0088_row14424133115118"><td class="cellrowborder" valign="top" width="21.55%" headers="mcps1.3.4.4.1.3.1.1 "><p id="hss_01_0299__hss_01_0088_p14253311719">Software compliance</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.45%" headers="mcps1.3.4.4.1.3.1.2 "><p id="hss_01_0299__hss_01_0088_p1242520311014">Detects software and tools that are not allowed to be used.</p>
+</td>
+</tr>
+<tr id="hss_01_0299__hss_01_0088_row38711441919"><td class="cellrowborder" valign="top" width="21.55%" headers="mcps1.3.4.4.1.3.1.1 "><p id="hss_01_0299__hss_01_0088_p1087116412119">Basic image information</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.45%" headers="mcps1.3.4.4.1.3.1.2 "><p id="hss_01_0299__hss_01_0088_p1087212411710">Detects service images that are not created using base images.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+<ol id="hss_01_0299__ol181787389512"><li id="hss_01_0299__li18422356256"><span>Log in to the management console and go to the <span id="hss_01_0299__text884355121412">HSS</span> page.</span></li><li id="hss_01_0299__li725573013715"><span>In the navigation pane, choose <strong id="hss_01_0299__b38281537124514">Asset Management</strong> &gt; <strong id="hss_01_0299__b5828143714458">Containers &amp; Quota</strong>.</span></li><li id="hss_01_0299__li990994410315"><span>Click the <strong id="hss_01_0299__b18923145117210">Container Images</strong> tab and select <strong id="hss_01_0299__b6923115112118">Private images</strong>. In the <span class="parmname" id="hss_01_0299__parmname1892411516217"><b>Operation</b></span> column of an image, click <span class="uicontrol" id="hss_01_0299__uicontrol14924351112111"><b>Scan</b></span>.</span></li><li id="hss_01_0299__li12265154641910"><span>In the displayed dialog box, click <strong id="hss_01_0299__b31533864962149">OK</strong> to start the scan job.</span></li><li id="hss_01_0299__li450613123810"><span><strong id="hss_01_0299__b226653813417">Scanned</strong> in the <strong id="hss_01_0299__b17362312344">Scan Status</strong> column indicates the target image scan completed.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0297.html">Container Images</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0302.html b/docs/hss/umn/hss_01_0302.html
new file mode 100644
index 00000000..0d0a75f6
--- /dev/null
+++ b/docs/hss/umn/hss_01_0302.html
@@ -0,0 +1,300 @@
+<a name="hss_01_0302"></a><a name="hss_01_0302"></a>
+
+<h1 class="topictitle1">Vulnerability Management Overview</h1>
+<div id="body0000001160868997"><p id="hss_01_0302__p1060717239235">Vulnerability management can detect Linux, Windows, Web-CMS, and application vulnerabilities and provide suggestions, helping you learn about server vulnerabilities in real time. Linux and Windows vulnerabilities can be fixed in one-click mode. This section describes how the vulnerabilities are detected and the vulnerabilities that can be scanned and fixed in each HSS edition.</p>
+<div class="note" id="hss_01_0302__note12291128103417"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0302__p36681229173414">The vulnerability list displays vulnerabilities detected in the last seven days. After a vulnerability is detected for a server, if you change the server name and do not perform a vulnerability scan again, the vulnerability list still displays the original server name.</p>
+<p id="hss_01_0302__p1775165184610"></p>
+</div></div>
+<div class="section" id="hss_01_0302__section1242633819176"><h4 class="sectiontitle">How Vulnerability Scan Works</h4><p id="hss_01_0302__p0801827571"><a href="#hss_01_0302__table1554622162011">Table 1</a> describes how different types of vulnerabilities are detected.</p>
+
+<div class="tablenoborder"><a name="hss_01_0302__table1554622162011"></a><a name="table1554622162011"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0302__table1554622162011" frame="border" border="1" rules="all"><caption><b>Table 1 </b>How vulnerability scan works</caption><thead align="left"><tr id="hss_01_0302__row954762122016"><th align="left" class="cellrowborder" valign="top" width="20.66%" id="mcps1.3.3.3.2.3.1.1"><p id="hss_01_0302__p9547721207">Type</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="79.34%" id="mcps1.3.3.3.2.3.1.2"><p id="hss_01_0302__p95471525202">Mechanism</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0302__row1954752202018"><td class="cellrowborder" valign="top" width="20.66%" headers="mcps1.3.3.3.2.3.1.1 "><p id="hss_01_0302__p1054720252012">Linux vulnerability</p>
+</td>
+<td class="cellrowborder" valign="top" width="79.34%" headers="mcps1.3.3.3.2.3.1.2 "><p id="hss_01_0302__p65401614255">Based on the vulnerability database, checks and handles vulnerabilities in the software (such as kernel, OpenSSL, vim, glibc) you obtained from official Linux sources and have not compiled, reports the results to the management console, and generates alarms.</p>
+</td>
+</tr>
+<tr id="hss_01_0302__row1654817222015"><td class="cellrowborder" valign="top" width="20.66%" headers="mcps1.3.3.3.2.3.1.1 "><p id="hss_01_0302__p1354819210206">Windows vulnerability</p>
+</td>
+<td class="cellrowborder" valign="top" width="79.34%" headers="mcps1.3.3.3.2.3.1.2 "><p id="hss_01_0302__p754813252014">Synchronizes Microsoft official patches, checks whether the patches on the server have been updated, pushes Microsoft official patches, reports the results to the management console, and generates vulnerability alarms.</p>
+</td>
+</tr>
+<tr id="hss_01_0302__row954816213201"><td class="cellrowborder" valign="top" width="20.66%" headers="mcps1.3.3.3.2.3.1.1 "><p id="hss_01_0302__p195486219207">Web-CMS vulnerability</p>
+</td>
+<td class="cellrowborder" valign="top" width="79.34%" headers="mcps1.3.3.3.2.3.1.2 "><p id="hss_01_0302__p155481262019">Checks web directories and files for Web-CMS vulnerabilities, reports the results to the management console, and generates vulnerability alarms.</p>
+</td>
+</tr>
+<tr id="hss_01_0302__row592512507182"><td class="cellrowborder" valign="top" width="20.66%" headers="mcps1.3.3.3.2.3.1.1 "><p id="hss_01_0302__p18926650131813">Application vulnerability</p>
+</td>
+<td class="cellrowborder" valign="top" width="79.34%" headers="mcps1.3.3.3.2.3.1.2 "><p id="hss_01_0302__p139266503185">HSS detects the vulnerabilities in the software and dependency packages running on servers and container server machines, reports risky vulnerabilities to the console, and displays vulnerability alarms.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+<div class="section" id="hss_01_0302__section9935230153717"><a name="hss_01_0302__section9935230153717"></a><a name="section9935230153717"></a><h4 class="sectiontitle">Types of Vulnerabilities That Can Be Scanned and Fixed</h4><p id="hss_01_0302__p56621332173712">For details about the types of vulnerabilities that can be scanned and fixed in different HSS editions, see <a href="#hss_01_0302__table1949513415213">Types of vulnerabilities that can be scanned and fixed in each HSS edition</a>.</p>
+<p id="hss_01_0302__p14715733810">The meanings of the symbols in the table are as follows:</p>
+<ul id="hss_01_0302__ul1262772473911"><li id="hss_01_0302__li862732413391">√: supported</li><li id="hss_01_0302__li8562032153912">×: not supported</li></ul>
+
+<div class="tablenoborder"><a name="hss_01_0302__table1949513415213"></a><a name="table1949513415213"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0302__table1949513415213" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Types of vulnerabilities that can be scanned and fixed in each HSS edition</caption><thead align="left"><tr id="hss_01_0302__row849553419526"><th align="left" class="cellrowborder" valign="top" width="18.11538461538462%" id="mcps1.3.4.5.2.7.1.1"><p id="hss_01_0302__p1549514341529">Vulnerability Type</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="25.474358974358974%" id="mcps1.3.4.5.2.7.1.2"><p id="hss_01_0302__p1549553435211">Function</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="14.102564102564106%" id="mcps1.3.4.5.2.7.1.3"><p id="hss_01_0302__p20495173495211">Enterprise Edition</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="14.102564102564106%" id="mcps1.3.4.5.2.7.1.4"><p id="hss_01_0302__p549653445218">Premium Edition</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="14.102564102564106%" id="mcps1.3.4.5.2.7.1.5"><p id="hss_01_0302__p144964349526">Web Tamper Protection Edition</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="14.102564102564106%" id="mcps1.3.4.5.2.7.1.6"><p id="hss_01_0302__p7496113495218">Container Edition</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0302__row549619346527"><td class="cellrowborder" rowspan="5" valign="top" width="18.11538461538462%" headers="mcps1.3.4.5.2.7.1.1 "><p id="hss_01_0302__p8496193455218">Linux vulnerability</p>
+</td>
+<td class="cellrowborder" valign="top" width="25.474358974358974%" headers="mcps1.3.4.5.2.7.1.2 "><p id="hss_01_0302__p949623485210">Automatic vulnerability scan (reporting based on the software asset collection period)</p>
+</td>
+<td class="cellrowborder" valign="top" width="14.102564102564106%" headers="mcps1.3.4.5.2.7.1.3 "><p id="hss_01_0302__p1649615345521">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="14.102564102564106%" headers="mcps1.3.4.5.2.7.1.4 "><p id="hss_01_0302__p44962034145219">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="14.102564102564106%" headers="mcps1.3.4.5.2.7.1.5 "><p id="hss_01_0302__p849693418524">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="14.102564102564106%" headers="mcps1.3.4.5.2.7.1.6 "><p id="hss_01_0302__p1749716347521">√</p>
+</td>
+</tr>
+<tr id="hss_01_0302__row84971344528"><td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.1 "><p id="hss_01_0302__p12497143416523">Scheduled vulnerability scan (By default, vulnerabilities are scanned once a week. You can change the scan period by configuring vulnerability policies.)</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.2 "><p id="hss_01_0302__p24971334175220">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.3 "><p id="hss_01_0302__p154971834125219">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.4 "><p id="hss_01_0302__p184971634145210">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.5 "><p id="hss_01_0302__p549713411528">√</p>
+</td>
+</tr>
+<tr id="hss_01_0302__row1446851815319"><td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.1 "><p id="hss_01_0302__p0468121814531">Vulnerability whitelist</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.2 "><p id="hss_01_0302__p11249173035312">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.3 "><p id="hss_01_0302__p32491630185317">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.4 "><p id="hss_01_0302__p1925017307533">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.5 "><p id="hss_01_0302__p5250130155318">√</p>
+</td>
+</tr>
+<tr id="hss_01_0302__row849713465214"><td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.1 "><p id="hss_01_0302__p11497113416524">Manual vulnerability scan</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.2 "><p id="hss_01_0302__p1449715342529">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.3 "><p id="hss_01_0302__p74971534175217">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.4 "><p id="hss_01_0302__p16498153435215">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.5 "><p id="hss_01_0302__p11498123415213">√</p>
+</td>
+</tr>
+<tr id="hss_01_0302__row9498133475217"><td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.1 "><p id="hss_01_0302__p1149823465211">One-click vulnerability fix</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.2 "><p id="hss_01_0302__p14981734175212">√</p>
+<p id="hss_01_0302__p449883419529">(A maximum of 50 vulnerabilities can be fixed at a time.)</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.3 "><p id="hss_01_0302__p194987346524">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.4 "><p id="hss_01_0302__p11498193485212">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.5 "><p id="hss_01_0302__p2498163413522">√</p>
+</td>
+</tr>
+<tr id="hss_01_0302__row18498203417527"><td class="cellrowborder" rowspan="5" valign="top" width="18.11538461538462%" headers="mcps1.3.4.5.2.7.1.1 "><p id="hss_01_0302__p94992034175215">Windows vulnerability</p>
+</td>
+<td class="cellrowborder" valign="top" width="25.474358974358974%" headers="mcps1.3.4.5.2.7.1.2 "><p id="hss_01_0302__p1499734115217">Automatic vulnerability scan (reporting based on the software asset collection period)</p>
+</td>
+<td class="cellrowborder" valign="top" width="14.102564102564106%" headers="mcps1.3.4.5.2.7.1.3 "><p id="hss_01_0302__p13499153485210">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="14.102564102564106%" headers="mcps1.3.4.5.2.7.1.4 "><p id="hss_01_0302__p16499103412524">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="14.102564102564106%" headers="mcps1.3.4.5.2.7.1.5 "><p id="hss_01_0302__p74991634135214">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="14.102564102564106%" headers="mcps1.3.4.5.2.7.1.6 "><p id="hss_01_0302__p34991934145213">×</p>
+</td>
+</tr>
+<tr id="hss_01_0302__row84991134115211"><td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.1 "><p id="hss_01_0302__p6718651145820">Scheduled vulnerability scan (By default, vulnerabilities are scanned once a week. You can change the scan period by configuring vulnerability policies.)</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.2 "><p id="hss_01_0302__p17499103415211">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.3 "><p id="hss_01_0302__p1049913347525">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.4 "><p id="hss_01_0302__p150043415525">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.5 "><p id="hss_01_0302__p195002034175211">×</p>
+</td>
+</tr>
+<tr id="hss_01_0302__row1778714377534"><td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.1 "><p id="hss_01_0302__p1333614955320">Vulnerability whitelist</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.2 "><p id="hss_01_0302__p19805142175310">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.3 "><p id="hss_01_0302__p8805174219534">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.4 "><p id="hss_01_0302__p18059423539">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.5 "><p id="hss_01_0302__p1080574275310">×</p>
+</td>
+</tr>
+<tr id="hss_01_0302__row85005343524"><td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.1 "><p id="hss_01_0302__p19500193419523">Manual vulnerability scan</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.2 "><p id="hss_01_0302__p1250011341526">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.3 "><p id="hss_01_0302__p175001334115212">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.4 "><p id="hss_01_0302__p195001534165216">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.5 "><p id="hss_01_0302__p145006341527">×</p>
+</td>
+</tr>
+<tr id="hss_01_0302__row6500203417522"><td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.1 "><p id="hss_01_0302__p1350013344524">One-click vulnerability fix</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.2 "><p id="hss_01_0302__p1050110344528">√</p>
+<p id="hss_01_0302__p1950113465211">(A maximum of 50 vulnerabilities can be fixed at a time.)</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.3 "><p id="hss_01_0302__p17501113414523">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.4 "><p id="hss_01_0302__p15011349527">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.5 "><p id="hss_01_0302__p1501734135219">×</p>
+</td>
+</tr>
+<tr id="hss_01_0302__row13501153419529"><td class="cellrowborder" rowspan="5" valign="top" width="18.11538461538462%" headers="mcps1.3.4.5.2.7.1.1 "><p id="hss_01_0302__p050133405217">Web-CMS vulnerability</p>
+</td>
+<td class="cellrowborder" valign="top" width="25.474358974358974%" headers="mcps1.3.4.5.2.7.1.2 "><p id="hss_01_0302__p4501734165218">Automatic vulnerability scan (reporting based on the software asset collection period)</p>
+</td>
+<td class="cellrowborder" valign="top" width="14.102564102564106%" headers="mcps1.3.4.5.2.7.1.3 "><p id="hss_01_0302__p10501183414527">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="14.102564102564106%" headers="mcps1.3.4.5.2.7.1.4 "><p id="hss_01_0302__p25019347521">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="14.102564102564106%" headers="mcps1.3.4.5.2.7.1.5 "><p id="hss_01_0302__p10502143419524">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="14.102564102564106%" headers="mcps1.3.4.5.2.7.1.6 "><p id="hss_01_0302__p5502153485213">√</p>
+</td>
+</tr>
+<tr id="hss_01_0302__row1350293495216"><td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.1 "><p id="hss_01_0302__p718025515816">Scheduled vulnerability scan (By default, vulnerabilities are scanned once a week. You can change the scan period by configuring vulnerability policies.)</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.2 "><p id="hss_01_0302__p1150213347524">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.3 "><p id="hss_01_0302__p16502634175210">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.4 "><p id="hss_01_0302__p1850214348527">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.5 "><p id="hss_01_0302__p1550283475210">√</p>
+</td>
+</tr>
+<tr id="hss_01_0302__row511220555533"><td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.1 "><p id="hss_01_0302__p16112165514539">Vulnerability whitelist</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.2 "><p id="hss_01_0302__p9837137155415">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.3 "><p id="hss_01_0302__p148373775416">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.4 "><p id="hss_01_0302__p1583707185410">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.5 "><p id="hss_01_0302__p1183777105411">√</p>
+</td>
+</tr>
+<tr id="hss_01_0302__row9502103485213"><td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.1 "><p id="hss_01_0302__p550219344520">Manual vulnerability scan</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.2 "><p id="hss_01_0302__p195031734115215">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.3 "><p id="hss_01_0302__p850313418523">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.4 "><p id="hss_01_0302__p650313420527">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.5 "><p id="hss_01_0302__p850383445215">√</p>
+</td>
+</tr>
+<tr id="hss_01_0302__row1550393420528"><td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.1 "><p id="hss_01_0302__p1350313418521">One-click vulnerability fix</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.2 "><p id="hss_01_0302__p35031834125210">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.3 "><p id="hss_01_0302__p16503334145218">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.4 "><p id="hss_01_0302__p1050317341521">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.5 "><p id="hss_01_0302__p1450373411523">×</p>
+</td>
+</tr>
+<tr id="hss_01_0302__row35032034135218"><td class="cellrowborder" rowspan="5" valign="top" width="18.11538461538462%" headers="mcps1.3.4.5.2.7.1.1 "><p id="hss_01_0302__p17504183411523">Application vulnerability</p>
+</td>
+<td class="cellrowborder" valign="top" width="25.474358974358974%" headers="mcps1.3.4.5.2.7.1.2 "><p id="hss_01_0302__p11504153412526">Automatic vulnerability scan (reporting based on the middleware asset collection period)</p>
+</td>
+<td class="cellrowborder" valign="top" width="14.102564102564106%" headers="mcps1.3.4.5.2.7.1.3 "><p id="hss_01_0302__p195041234115216">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="14.102564102564106%" headers="mcps1.3.4.5.2.7.1.4 "><p id="hss_01_0302__p1350493414528">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="14.102564102564106%" headers="mcps1.3.4.5.2.7.1.5 "><p id="hss_01_0302__p8504834185214">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="14.102564102564106%" headers="mcps1.3.4.5.2.7.1.6 "><p id="hss_01_0302__p55041934125211">√</p>
+</td>
+</tr>
+<tr id="hss_01_0302__row10504193425219"><td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.1 "><p id="hss_01_0302__p57894587588">Scheduled vulnerability scan (By default, vulnerabilities are scanned once a week. You can change the scan period by configuring vulnerability policies.)</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.2 "><p id="hss_01_0302__p15504534145212">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.3 "><p id="hss_01_0302__p145052034125218">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.4 "><p id="hss_01_0302__p125051634175218">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.5 "><p id="hss_01_0302__p2505734185213">√</p>
+</td>
+</tr>
+<tr id="hss_01_0302__row53197134549"><td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.1 "><p id="hss_01_0302__p911201985411">Vulnerability whitelist</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.2 "><p id="hss_01_0302__p818225115418">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.3 "><p id="hss_01_0302__p13181225125418">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.4 "><p id="hss_01_0302__p1218152518543">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.5 "><p id="hss_01_0302__p9180253547">√</p>
+</td>
+</tr>
+<tr id="hss_01_0302__row1450583445215"><td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.1 "><p id="hss_01_0302__p750523417528">Manual vulnerability scan</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.2 "><p id="hss_01_0302__p65052034195219">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.3 "><p id="hss_01_0302__p3505123410523">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.4 "><p id="hss_01_0302__p1750543435220">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.5 "><p id="hss_01_0302__p6505434175210">√</p>
+</td>
+</tr>
+<tr id="hss_01_0302__row1950513343527"><td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.1 "><p id="hss_01_0302__p350523485216">One-click vulnerability fix</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.2 "><p id="hss_01_0302__p4506123420521">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.3 "><p id="hss_01_0302__p450653495215">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.4 "><p id="hss_01_0302__p14506734195211">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.5.2.7.1.5 "><p id="hss_01_0302__p650623415219">×</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+<div class="note" id="hss_01_0302__note20437121716018"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0302__p1088472520175">HSS can scan for Web-CMS and application vulnerabilities but cannot fix them. You can log in to your server to manually fix the vulnerability by referring to the suggestions displayed on the vulnerability details page.</p>
+</div></div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0140.html">Vulnerability Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0303.html b/docs/hss/umn/hss_01_0303.html
new file mode 100644
index 00000000..0501604b
--- /dev/null
+++ b/docs/hss/umn/hss_01_0303.html
@@ -0,0 +1,86 @@
+<a name="hss_01_0303"></a><a name="hss_01_0303"></a>
+
+<h1 class="topictitle1">Baseline Inspection Overview</h1>
+<div id="body0000001792253477"><p id="hss_01_0303__p1272342814284">Baseline Inspection includes password complexity policy detection, common weak password detection, and configuration check. It can detect insecure password configurations and risky configurations in key software on servers, and provide <a href="hss_01_0147.html">rectification suggestions</a> for detected risks, helping you correctly handle risky configurations on servers.</p>
+<div class="section" id="hss_01_0303__section33296267370"><h4 class="sectiontitle">Baseline Inspection Content</h4>
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0303__table05918811441" frame="border" border="1" rules="all"><thead align="left"><tr id="hss_01_0303__row4911030319"><th align="left" class="cellrowborder" valign="top" width="13.139999999999999%" id="mcps1.3.2.2.1.5.1.1"><p id="hss_01_0303__p1591231831"><strong id="hss_01_0303__b109479245365834">Item</strong></p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="54.11%" id="mcps1.3.2.2.1.5.1.2"><p id="hss_01_0303__p19921936320"><strong id="hss_01_0303__b127670929165834">Description</strong></p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="18.9%" id="mcps1.3.2.2.1.5.1.3"><p id="hss_01_0303__p10651721194210">Supported Check Mode</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="13.850000000000001%" id="mcps1.3.2.2.1.5.1.4"><p id="hss_01_0303__p0382114619343">Supported HSS Version</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0303__row65936834418"><td class="cellrowborder" valign="top" width="13.139999999999999%" headers="mcps1.3.2.2.1.5.1.1 "><p id="hss_01_0303__p4241214389">Unsafe configuration</p>
+</td>
+<td class="cellrowborder" valign="top" width="54.11%" headers="mcps1.3.2.2.1.5.1.2 "><p id="hss_01_0303__p244774133519">Check the unsafe Tomcat, Nginx, SSH login, and system configurations found by HSS.</p>
+<p id="hss_01_0303__p62813482110">Currently, the following check standards and types are supported:</p>
+<ul id="hss_01_0303__ul20138439132310"><li id="hss_01_0303__li948193265218">For Linux,<ul id="hss_01_0303__ul94816326529"><li id="hss_01_0303__li164811532125218">The cloud security practice baseline can check Apache2, Docker, MongoDB, Redis, MySQL5, Nginx, Tomcat, SSH, vsftp, CentOS7, EulerOS, EulerOS_ext, Kubernetes-Node, Kubernetes-Master.</li><li id="hss_01_0303__li467072261120">DJCP MLPS compliance: Apache 2, MongoDB, MySQL 5, Nginx, Tomcat, CentOS 6, CentOS 7, CentOS 8, Debian 9, Debian 10, Debian 11, Red Hat 6, Red Hat 7, Red Hat 8, Ubuntu 12, Ubuntu 14, Ubuntu 16, Ubuntu 18, Alma.</li></ul>
+</li><li id="hss_01_0303__li689310592064">For Windows,<p id="hss_01_0303__p299113153611"><a name="hss_01_0303__li689310592064"></a><a name="li689310592064"></a>The cloud security practice baseline can check MongoDB, Apache2, MySQL, Nginx, Redis, Tomcat, Windows_2008, Windows_2012, Windows_2016, Windows_2019, and SqlServer.</p>
+</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="18.9%" headers="mcps1.3.2.2.1.5.1.3 "><ul id="hss_01_0303__ul795904919444"><li id="hss_01_0303__li795914994415">Automated baseline checks</li><li id="hss_01_0303__li5960134964420">Manual baseline checks</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="13.850000000000001%" headers="mcps1.3.2.2.1.5.1.4 "><p id="hss_01_0303__p1638214469344">Enterprise, premium, WTP, and container edition</p>
+</td>
+</tr>
+<tr id="hss_01_0303__row17485956463"><td class="cellrowborder" valign="top" width="13.139999999999999%" headers="mcps1.3.2.2.1.5.1.1 "><p id="hss_01_0303__p42010118383">Password complexity policies</p>
+</td>
+<td class="cellrowborder" valign="top" width="54.11%" headers="mcps1.3.2.2.1.5.1.2 "><p id="hss_01_0303__p1523910383">Check whether your password complexity policy of Linux system account is proper and modify it based on suggestions provided by HSS, improving password security.</p>
+</td>
+<td class="cellrowborder" valign="top" width="18.9%" headers="mcps1.3.2.2.1.5.1.3 "><p id="hss_01_0303__p225271164312">Manual baseline checks</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.850000000000001%" headers="mcps1.3.2.2.1.5.1.4 "><p id="hss_01_0303__p11382144613420">All versions</p>
+</td>
+</tr>
+<tr id="hss_01_0303__row1797084954314"><td class="cellrowborder" valign="top" width="13.139999999999999%" headers="mcps1.3.2.2.1.5.1.1 "><p id="hss_01_0303__p10587130385">Common weak passwords</p>
+</td>
+<td class="cellrowborder" valign="top" width="54.11%" headers="mcps1.3.2.2.1.5.1.2 "><p id="hss_01_0303__p49162985410">Weak passwords defined in the common weak password library. You can check for accounts and remind users to change them.</p>
+<p id="hss_01_0303__p145816135380">Common weak passwords of MySQL, FTP, and system accounts.</p>
+</td>
+<td class="cellrowborder" valign="top" width="18.9%" headers="mcps1.3.2.2.1.5.1.3 "><ul id="hss_01_0303__ul1242981614618"><li id="hss_01_0303__li154291516164613">Automated baseline checks</li><li id="hss_01_0303__li9429716104617">Manually Performing a Baseline Check</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="13.850000000000001%" headers="mcps1.3.2.2.1.5.1.4 "><p id="hss_01_0303__p5382146183415">All</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+<div class="section" id="hss_01_0303__section12716021164813"><h4 class="sectiontitle">Usage Process</h4>
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0303__table12674101364911" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Usage process</caption><thead align="left"><tr id="hss_01_0303__row1867441310492"><th align="left" class="cellrowborder" valign="top" width="7.610761076107611%" id="mcps1.3.3.2.2.4.1.1"><p id="hss_01_0303__p26759136496">No.</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="18.161816181618164%" id="mcps1.3.3.2.2.4.1.2"><p id="hss_01_0303__p126751013124910">Operation</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="74.22742274227421%" id="mcps1.3.3.2.2.4.1.3"><p id="hss_01_0303__p19675813154920">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0303__row15675101314499"><td class="cellrowborder" valign="top" width="7.610761076107611%" headers="mcps1.3.3.2.2.4.1.1 "><p id="hss_01_0303__p1667501334914">1</p>
+</td>
+<td class="cellrowborder" valign="top" width="18.161816181618164%" headers="mcps1.3.3.2.2.4.1.2 "><p id="hss_01_0303__p16675111344914"><a href="hss_01_0146.html">Performing baseline inspection</a></p>
+</td>
+<td class="cellrowborder" valign="top" width="74.22742274227421%" headers="mcps1.3.3.2.2.4.1.3 "><p id="hss_01_0303__p9977135514816">The baseline inspection supports automatic and manual baseline checks.</p>
+<ul id="hss_01_0303__ul17982255144814"><li id="hss_01_0303__li4290950114912">Automatic baseline check:  automatically performs a check for all server configurations and common weak passwords <strong id="hss_01_0303__b6202824124614">at 01:00 every day</strong>. Premium edition, web tamper protection edition, and container edition allow you to customize the automatic detection period for configurations and common weak passwords. For details, see <a href="hss_01_0044.html#hss_01_0044__section6401323142512">Configuration Check</a> and <a href="hss_01_0044.html#hss_01_0044__section2225201363514">Weak Password Scan</a>.</li><li id="hss_01_0303__li1982135520480">Manual baseline inspection: To view the real-time baseline risks of a specified server, you can manually perform a baseline inspection.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0303__row136751137494"><td class="cellrowborder" valign="top" width="7.610761076107611%" headers="mcps1.3.3.2.2.4.1.1 "><p id="hss_01_0303__p166751113154915">2</p>
+</td>
+<td class="cellrowborder" valign="top" width="18.161816181618164%" headers="mcps1.3.3.2.2.4.1.2 "><p id="hss_01_0303__p4675131354914"><a href="hss_01_0147.html">Viewing and processing baseline inspection results</a></p>
+</td>
+<td class="cellrowborder" valign="top" width="74.22742274227421%" headers="mcps1.3.3.2.2.4.1.3 "><p id="hss_01_0303__p106751513124914">After the baseline inspection is complete, you need to view and handle baseline configuration risks.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0145.html">Baseline Inspection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0304.html b/docs/hss/umn/hss_01_0304.html
new file mode 100644
index 00000000..b65a05d0
--- /dev/null
+++ b/docs/hss/umn/hss_01_0304.html
@@ -0,0 +1,19 @@
+<a name="hss_01_0304"></a><a name="hss_01_0304"></a>
+
+<h1 class="topictitle1">Container Image Security</h1>
+<div id="body0000001124839463"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0305.html">Image Vulnerabilities</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0306.html">Viewing Malicious File Detection Results</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0307.html">Image Baseline Check</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0025.html">Risk Prevention</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0305.html b/docs/hss/umn/hss_01_0305.html
new file mode 100644
index 00000000..fe7be5d3
--- /dev/null
+++ b/docs/hss/umn/hss_01_0305.html
@@ -0,0 +1,60 @@
+<a name="hss_01_0305"></a><a name="hss_01_0305"></a>
+
+<h1 class="topictitle1">Image Vulnerabilities</h1>
+<div id="body0000001124926747"><p id="hss_01_0305__p19179145212813">This section describes how to check the vulnerabilities on the private image and determine whether to ignore the vulnerabilities.</p>
+<div class="section" id="hss_01_0305__section1071994843613"><h4 class="sectiontitle">Prerequisites</h4><p id="hss_01_0305__p8957115293319">Container node protection has been enabled.</p>
+</div>
+<div class="section" id="hss_01_0305__section114261122184518"><h4 class="sectiontitle">Constraints</h4><p id="hss_01_0305__p437161674716">Only vulnerabilities in Linux images can be checked.</p>
+</div>
+<div class="section" id="hss_01_0305__section1476163992514"><h4 class="sectiontitle">Viewing Vulnerabilities in Private Images</h4><ol id="hss_01_0305__ol1676193912517"><li id="hss_01_0305__li1554152661520"><span>Log in to the management console and go to the <span id="hss_01_0305__text167451171917">HSS</span> page.</span></li><li id="hss_01_0305__li77621239112516"><span>In the navigation pane on the left, choose <strong id="hss_01_0305__b692516451397">Prediction</strong> &gt; <strong id="hss_01_0305__b59251145495">Container Images</strong>. On the displayed page, click <strong id="hss_01_0305__b189251945991">Image Vulnerabilities</strong> and click <strong id="hss_01_0305__b179252451895">Private Image Vulnerabilities</strong> to view private image vulnerabilities.</span><p><div class="note" id="hss_01_0305__note5762123914251"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0305__p1762173913251">Click a risky image to check its vulnerability overview, including the vulnerability name, urgency, status, the number of affected images, and vulnerability description.</p>
+</div></div>
+<div class="fignone" id="hss_01_0305__fig15238154402"><span class="figcap"><b>Figure 1 </b>Viewing vulnerabilities in private images</span><br><span><img id="hss_01_0305__image2332123604119" src="en-us_image_0000001808243728.png"></span></div>
+
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0305__table127621539132513" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameter description</caption><thead align="left"><tr id="hss_01_0305__row147621398255"><th align="left" class="cellrowborder" valign="top" width="23.392339233923394%" id="mcps1.3.4.2.2.2.3.2.4.1.1"><p id="hss_01_0305__p876243910256">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="30.073007300730076%" id="mcps1.3.4.2.2.2.3.2.4.1.2"><p id="hss_01_0305__p1576363912258">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="46.53465346534653%" id="mcps1.3.4.2.2.2.3.2.4.1.3"><p id="hss_01_0305__p17763539112510">Operation</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0305__row1676319392251"><td class="cellrowborder" valign="top" width="23.392339233923394%" headers="mcps1.3.4.2.2.2.3.2.4.1.1 "><p id="hss_01_0305__p1776311392254">Vulnerability Name</p>
+</td>
+<td class="cellrowborder" valign="top" width="30.073007300730076%" headers="mcps1.3.4.2.2.2.3.2.4.1.2 "><p id="hss_01_0305__p7763193992520">-</p>
+</td>
+<td class="cellrowborder" valign="top" width="46.53465346534653%" headers="mcps1.3.4.2.2.2.3.2.4.1.3 "><ul id="hss_01_0305__ul19763339142517"><li id="hss_01_0305__li0763039182513">Click <span><img id="hss_01_0305__image127631639122511" src="en-us_image_0000001517637590.png"></span> to view the details of a vulnerability, including <strong id="hss_01_0305__b1894142413126">CVE ID</strong>, <strong id="hss_01_0305__b10951024161214">CVSS Score</strong>, <strong id="hss_01_0305__b1695524141220">Disclosed</strong>, and <strong id="hss_01_0305__b195122481217">Vulnerability Details</strong>.</li><li id="hss_01_0305__li187636390251">Click the name of a vulnerability to view the images affected by the vulnerability. For details, see <a href="#hss_01_0305__li197631039152513">3</a>.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0305__row17638394257"><td class="cellrowborder" valign="top" width="23.392339233923394%" headers="mcps1.3.4.2.2.2.3.2.4.1.1 "><p id="hss_01_0305__p976373992517">Repair Urgency</p>
+</td>
+<td class="cellrowborder" valign="top" width="30.073007300730076%" headers="mcps1.3.4.2.2.2.3.2.4.1.2 "><p id="hss_01_0305__p14763939172519">Shows whether the vulnerability should be repaired immediately.</p>
+</td>
+<td class="cellrowborder" valign="top" width="46.53465346534653%" headers="mcps1.3.4.2.2.2.3.2.4.1.3 "><p id="hss_01_0305__p2076316395256">-</p>
+</td>
+</tr>
+<tr id="hss_01_0305__row8763173916257"><td class="cellrowborder" valign="top" width="23.392339233923394%" headers="mcps1.3.4.2.2.2.3.2.4.1.1 "><p id="hss_01_0305__p7763439182519">Historically Affected Images</p>
+</td>
+<td class="cellrowborder" valign="top" width="30.073007300730076%" headers="mcps1.3.4.2.2.2.3.2.4.1.2 "><p id="hss_01_0305__p276323919255">Shows the number of images that have been affected.</p>
+</td>
+<td class="cellrowborder" valign="top" width="46.53465346534653%" headers="mcps1.3.4.2.2.2.3.2.4.1.3 "><p id="hss_01_0305__p1576303982515">-</p>
+</td>
+</tr>
+<tr id="hss_01_0305__row876343952516"><td class="cellrowborder" valign="top" width="23.392339233923394%" headers="mcps1.3.4.2.2.2.3.2.4.1.1 "><p id="hss_01_0305__p167631839162518">Solution</p>
+</td>
+<td class="cellrowborder" valign="top" width="30.073007300730076%" headers="mcps1.3.4.2.2.2.3.2.4.1.2 "><p id="hss_01_0305__p07633392254">Provides a solution to fix the vulnerability.</p>
+</td>
+<td class="cellrowborder" valign="top" width="46.53465346534653%" headers="mcps1.3.4.2.2.2.3.2.4.1.3 "><p id="hss_01_0305__p1476393982517">Click the link in the <span class="parmname" id="hss_01_0305__parmname176315397259"><b>Solution</b></span> column to view the solution.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0305__li197631039152513"><a name="hss_01_0305__li197631039152513"></a><a name="li197631039152513"></a><span>Click the vulnerability name to view its basic information and affected images.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0304.html">Container Image Security</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0306.html b/docs/hss/umn/hss_01_0306.html
new file mode 100644
index 00000000..1b28b3e7
--- /dev/null
+++ b/docs/hss/umn/hss_01_0306.html
@@ -0,0 +1,20 @@
+<a name="hss_01_0306"></a><a name="hss_01_0306"></a>
+
+<h1 class="topictitle1">Viewing Malicious File Detection Results</h1>
+<div id="body0000001124703093"><p id="hss_01_0306__p8358259404">Malicious files in the private images can be automatically detected, helping you discover and eliminate the security threats in your assets.</p>
+<div class="section" id="hss_01_0306__section9782020194416"><h4 class="sectiontitle">Check Frequency</h4><p id="hss_01_0306__p9566162584419">A comprehensive check is automatically performed in the early morning every day.</p>
+</div>
+<div class="section" id="hss_01_0306__section13431172754515"><h4 class="sectiontitle">Prerequisites</h4><p id="hss_01_0306__p4464453154520">Container protection has been enabled.</p>
+</div>
+<div class="section" id="hss_01_0306__section114261122184518"><h4 class="sectiontitle">Constraints</h4><p id="hss_01_0306__p1694894819223">Only malicious files in Linux images can be detected.</p>
+</div>
+<div class="section" id="hss_01_0306__section108711468520"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0306__ol16862205211"><li id="hss_01_0306__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0306__li830314169200"><span>Click <span><img id="hss_01_0306__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0306__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0306__hss_01_0571_b14857117404"><span id="hss_01_0306__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0306__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0306__li19447328121910"><span>In the navigation tree on the left, choose <strong id="hss_01_0306__b15126147112410">Prediction</strong> &gt; <strong id="hss_01_0306__b77739496242">Container Images</strong>.</span></li><li id="hss_01_0306__li144615514496"><span>Click the <strong id="hss_01_0306__b154116617255">Malicious Files</strong> tab to view details about the malicious files in private images. Delete the malicious files or create images again as needed based on the scan result.</span><p><ul id="hss_01_0306__ul1583410427525"><li id="hss_01_0306__li6834642145214">Malicious files include Trojans, worms, viruses, and Adware.</li><li id="hss_01_0306__li4139194515522">In the <strong id="hss_01_0306__b1542439291101233">Image Tag</strong> column, click an image version to view its vulnerability report.</li></ul>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0304.html">Container Image Security</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0307.html b/docs/hss/umn/hss_01_0307.html
new file mode 100644
index 00000000..af5c0510
--- /dev/null
+++ b/docs/hss/umn/hss_01_0307.html
@@ -0,0 +1,21 @@
+<a name="hss_01_0307"></a><a name="hss_01_0307"></a>
+
+<h1 class="topictitle1">Image Baseline Check</h1>
+<div id="body0000001125084767"><p id="hss_01_0307__p416352614710">Your private image repository is scanned for unsafe configurations and provides suggestions for modifying the configurations, helping you fight intrusions and meet compliance requirements.</p>
+<div class="section" id="hss_01_0307__section58413180109"><h4 class="sectiontitle">Check Frequency</h4><p id="hss_01_0307__p2591173451020">A comprehensive check is automatically performed by <span id="hss_01_0307__text2897154921710">HSS</span> at 04:10 every day.</p>
+</div>
+<div class="section" id="hss_01_0307__section13431172754515"><h4 class="sectiontitle">Prerequisites</h4><p id="hss_01_0307__p4464453154520">Container protection has been enabled.</p>
+</div>
+<div class="section" id="hss_01_0307__section114261122184518"><h4 class="sectiontitle">Constraints</h4><p id="hss_01_0307__p20152171574512">Only configuration risks in Linux images can be detected.</p>
+</div>
+<div class="section" id="hss_01_0307__section121325331652"><h4 class="sectiontitle">Check Items</h4><ul id="hss_01_0307__ul142136293917"><li id="hss_01_0307__li201541224133913">Accounts with duplicate names or UIDs</li><li id="hss_01_0307__li172531527173910">Non-root accounts whose UIDs are 0</li><li id="hss_01_0307__li952243093913">Password check in code</li><li id="hss_01_0307__li1149912338392">Accounts with duplicate password hash values</li><li id="hss_01_0307__li17705193543912">Weak password hash algorithms</li><li id="hss_01_0307__li152131428399">The account password is not empty.</li><li id="hss_01_0307__li147066322500">Duplicate group names or GIDs</li><li id="hss_01_0307__li4471153916503">Non-privileged account incorrectly included in the privilege group</li><li id="hss_01_0307__li860214765017">Old "+" entries in the /etc/passwd file</li><li id="hss_01_0307__li985915215017">Old "+" entries in the /etc/shadow file</li><li id="hss_01_0307__li861215219518">Old "+" entries in the /etc/group file</li><li id="hss_01_0307__li1192015158515">Ensuring all groups in the /etc/passwd file are in the /etc/group file</li><li id="hss_01_0307__li1198562213518">Unconfigured password validity period</li><li id="hss_01_0307__li18507203525111">Ensuring that the password change dates of all users are past dates.</li><li id="hss_01_0307__li184813403511">Host trust relationship</li><li id="hss_01_0307__li9135194515119">Preset root-level trust relationship establishment</li><li id="hss_01_0307__li1275125218162">The default group of user <strong id="hss_01_0307__b106706717417">root</strong> is <strong id="hss_01_0307__b3491115302410">GID 0</strong>.</li><li id="hss_01_0307__li4659185981615">Members in the shadow group</li></ul>
+</div>
+<div class="section" id="hss_01_0307__section917142113714"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0307__ol722102043619"><li id="hss_01_0307__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0307__li830314169200"><span>Click <span><img id="hss_01_0307__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0307__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0307__hss_01_0571_b14857117404"><span id="hss_01_0307__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0307__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0307__li19447328121910"><span>In the navigation tree on the left, choose <strong id="hss_01_0307__hss_01_0306_b15126147112410">Prediction</strong> &gt; <strong id="hss_01_0307__hss_01_0306_b77739496242">Container Images</strong>.</span></li><li id="hss_01_0307__li1753414421083"><span>Click the <strong id="hss_01_0307__b15491359174417">Unsafe Settings</strong> tab to view the unsafe settings in the image.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0304.html">Container Image Security</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0312.html b/docs/hss/umn/hss_01_0312.html
new file mode 100644
index 00000000..504e83f6
--- /dev/null
+++ b/docs/hss/umn/hss_01_0312.html
@@ -0,0 +1,164 @@
+<a name="hss_01_0312"></a><a name="hss_01_0312"></a>
+
+<h1 class="topictitle1">Container Alarm Events</h1>
+<div id="body0000001169514085"><p id="hss_01_0312__p93021457885">After node protection is enabled, an agent is deployed on each container host to monitor the running status of containers in real time. The agents support escape detection, high-risk system calls, abnormal processes, abnormal files, and container environment detection. You can learn alarm events comprehensively on the <strong id="hss_01_0312__b749235212559">Container Alarms</strong> page, and eliminate security risks in your assets in a timely manner.</p>
+<div class="section" id="hss_01_0312__section4431111810468"><h4 class="sectiontitle">Container Alarm Types</h4>
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0312__table19431181816467" frame="border" border="1" rules="all"><thead align="left"><tr id="hss_01_0312__row7431171894617"><th align="left" class="cellrowborder" valign="top" width="12.2%" id="mcps1.3.2.2.1.4.1.1"><p id="hss_01_0312__p2431818104615">Event Type</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="15.299999999999999%" id="mcps1.3.2.2.1.4.1.2"><p id="hss_01_0312__p1243101818466">Alarm Name</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="72.5%" id="mcps1.3.2.2.1.4.1.3"><p id="hss_01_0312__p6431181874613">Mechanism</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0312__row18431161814466"><td class="cellrowborder" rowspan="3" valign="top" width="12.2%" headers="mcps1.3.2.2.1.4.1.1 "><p id="hss_01_0312__p17431618154617">Malware</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.299999999999999%" headers="mcps1.3.2.2.1.4.1.2 "><p id="hss_01_0312__p17431151894614">Unclassified malware</p>
+</td>
+<td class="cellrowborder" valign="top" width="72.5%" headers="mcps1.3.2.2.1.4.1.3 "><p id="hss_01_0312__p1043161816466">Check malware, such as web shells, Trojan horses, mining software, worms, and other viruses and variants. The malware is found and removed by analysis on program characteristics and behaviors, AI image fingerprint algorithms, and cloud scanning and killing.</p>
+</td>
+</tr>
+<tr id="hss_01_0312__row18431718154618"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.1 "><p id="hss_01_0312__p1431101811469">Ransomware</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.2 "><p id="hss_01_0312__p1943117180468">Check for ransomware in web pages, software, emails, and storage media.</p>
+<p id="hss_01_0312__p134311718124613">Ransomware can encrypt and control your data assets, such as documents, emails, databases, source code, images, and compressed files, to leverage victim extortion.</p>
+</td>
+</tr>
+<tr id="hss_01_0312__row1543121819468"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.1 "><p id="hss_01_0312__p54314186463">Web shells</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.2 "><p id="hss_01_0312__p043151844610">Check whether the files (often PHP and JSP files) in the web directories on containers are web shells.</p>
+</td>
+</tr>
+<tr id="hss_01_0312__row2432121884617"><td class="cellrowborder" rowspan="2" valign="top" width="12.2%" headers="mcps1.3.2.2.1.4.1.1 "><p id="hss_01_0312__p9432818144611">Vulnerability Exploits</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.299999999999999%" headers="mcps1.3.2.2.1.4.1.2 "><p id="hss_01_0312__p943316185461">Vulnerability escapes</p>
+</td>
+<td class="cellrowborder" valign="top" width="72.5%" headers="mcps1.3.2.2.1.4.1.3 "><p id="hss_01_0312__p0433111818461">HSS reports an alarm if it detects container process behavior that matches the behavior of known vulnerabilities (such as Dirty COW, brute-force attack, runC, and shocker).</p>
+</td>
+</tr>
+<tr id="hss_01_0312__row134331118134611"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.1 "><p id="hss_01_0312__p8433201810464">File escapes</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.2 "><p id="hss_01_0312__p5434111814467">HSS reports an alarm if it detects that a container process accesses a key file directory (for example, <strong id="hss_01_0312__b1500592108101022">/etc/shadow</strong> or <strong id="hss_01_0312__b1339050104101022">/etc/crontab</strong>). Directories that meet the container directory mapping rules can also trigger such alarms.</p>
+</td>
+</tr>
+<tr id="hss_01_0312__row104341418174615"><td class="cellrowborder" rowspan="8" valign="top" width="12.2%" headers="mcps1.3.2.2.1.4.1.1 "><p id="hss_01_0312__p9434201834617">Abnormal System Behaviors</p>
+<p id="hss_01_0312__p7434518184616"></p>
+</td>
+<td class="cellrowborder" valign="top" width="15.299999999999999%" headers="mcps1.3.2.2.1.4.1.2 "><p id="hss_01_0312__p16434121818468">Reverse shells</p>
+</td>
+<td class="cellrowborder" valign="top" width="72.5%" headers="mcps1.3.2.2.1.4.1.3 "><p id="hss_01_0312__p194341018204620">Monitor user process behaviors in real time to detect reverse shells caused by invalid connections.</p>
+<p id="hss_01_0312__p1043411814467">Reverse shells can be detected for protocols including TCP, UDP, and ICMP.</p>
+<p id="hss_01_0312__p13434121816467">You can configure the reverse shell detection rule in the <strong id="hss_01_0312__b3127145468337">Malicious File Detection</strong> rule on the <strong id="hss_01_0312__b10171073748337">Policies</strong> page. HSS will check for suspicious or remotely executed commands.</p>
+</td>
+</tr>
+<tr id="hss_01_0312__row6435618104613"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.1 "><p id="hss_01_0312__p12435418184614">Process privilege escalations</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.2 "><p id="hss_01_0312__p04351418184612">After hackers intrude containers, they will try exploiting vulnerabilities to grant themselves the root permissions or add permissions for files. In this way, they can illegally create system accounts, modify account permissions, and tamper with files.</p>
+<p id="hss_01_0312__p134351418104619">HSS can detect the following abnormal privilege escalation operations:</p>
+<ul id="hss_01_0312__ul14435201813465"><li id="hss_01_0312__li443519187467">Root privilege escalation by exploiting SUID program vulnerabilities</li><li id="hss_01_0312__li743521812468">Root privilege escalation by exploiting kernel vulnerabilities</li><li id="hss_01_0312__li1143511824611">File privilege escalation</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0312__row1943651804616"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.1 "><p id="hss_01_0312__p134364187468">High-risk system calls</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.2 "><p id="hss_01_0312__p8436151814466">Users can run tasks in kernels by Linux system calls. CGS reports an alarm if it detects a high-risk call, such as <span class="parmvalue" id="hss_01_0312__parmvalue229010071711"><b>open_by_handle_at</b></span>, <span class="parmvalue" id="hss_01_0312__parmvalue929011012171"><b>ptrace</b></span>, <span class="parmvalue" id="hss_01_0312__parmvalue1290203172"><b>setns</b></span>, and <span class="parmvalue" id="hss_01_0312__parmvalue92901408177"><b>reboot</b></span>.</p>
+</td>
+</tr>
+<tr id="hss_01_0312__row2436918124612"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.1 "><p id="hss_01_0312__p743619189463">High-risk command executions</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.2 "><p id="hss_01_0312__p5436618104618">Check executed commands in containers and generate alarms if high-risk commands are detected.</p>
+</td>
+</tr>
+<tr id="hss_01_0312__row10437181804617"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.1 "><p id="hss_01_0312__p643771854616">Abnormal container processes</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.2 "><ul id="hss_01_0312__ul14437718174615"><li id="hss_01_0312__li14437118184611">Malicious container program<p id="hss_01_0312__p154371318154614"><a name="hss_01_0312__li14437118184611"></a><a name="li14437118184611"></a>HSS monitors container process behavior and process file fingerprints. It reports an alarm if it detects a process whose behavior characteristics match those of a predefined malicious program.</p>
+</li><li id="hss_01_0312__li114375188466">Abnormal processes<p id="hss_01_0312__p3437618184617"><a name="hss_01_0312__li114375188466"></a><a name="li114375188466"></a>Container services are usually simple. If you are sure that only specific processes run in a container, you can whitelist the processes on the <strong id="hss_01_0312__b61861742544">Policy Groups</strong> page, and associate the policy with the container.</p>
+<p id="hss_01_0312__p1443711820465">HSS reports an alarm if it detects that a process not in the whitelist is running in the container.</p>
+</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0312__row54375188461"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.1 "><p id="hss_01_0312__p3437141844610">Sensitive file access</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.2 "><p id="hss_01_0312__p18437618194614">HSS monitors the container image files associated with file protection policies, and reports an alarm if the files are modified.</p>
+</td>
+</tr>
+<tr id="hss_01_0312__row1343791815464"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.1 "><p id="hss_01_0312__p3437101874611">Abnormal container startups</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.2 "><p id="hss_01_0312__p5437718134611">HSS monitors container startups and reports an alarm if it detects that a container with too many permissions is started. This alarm does not indicate an actual attack. Attacks exploiting this risk will trigger other HSS container alarms.</p>
+<p id="hss_01_0312__p18437718114614">HSS container check items include:</p>
+<ul id="hss_01_0312__ul18437318104610"><li id="hss_01_0312__li11437151814465">Privileged container startup (<strong id="hss_01_0312__b2020523834101022">privileged:true</strong>)<p id="hss_01_0312__p643718186464">Alarms are triggered by the containers started with the maximum permissions. Settings that can trigger such alarms include the <span class="parmvalue" id="hss_01_0312__parmvalue1517624268101022"><b>–privileged=true</b></span> parameter in the <strong id="hss_01_0312__b1999257979101022">docker run</strong> command, and <strong id="hss_01_0312__b1509908277101022">privileged: true</strong> in the <strong id="hss_01_0312__b1446144196101022">securityContext</strong> of the container in a Kubernetes pod.</p>
+<p id="hss_01_0312__p10438201810465">If the alarm name is <span class="parmvalue" id="hss_01_0312__parmvalue958117417399"><b>Container Security Options</b></span> and the alarm content contains <span class="parmvalue" id="hss_01_0312__parmvalue11753201213398"><b>privileged:true</b></span>, it indicates that the container is started in privileged container mode.</p>
+</li><li id="hss_01_0312__li13438181811463">Too many container capabilities (<strong id="hss_01_0312__b48817597101022">capability:[xxx]</strong>)<p id="hss_01_0312__p4438618114618">In Linux OSs, system permissions are divided into groups before assigned to containers. A container only has a limited number of permissions, and the impact scope of this container is limited in the case of an incident. However, malicious users can grant all the system permissions to a container by modifying its startup configurations.</p>
+<p id="hss_01_0312__p19438131814464">If the alarm name is <span class="parmvalue" id="hss_01_0312__parmvalue10517122014394"><b>Container Security Options</b></span> and the alarm content contains <span class="parmvalue" id="hss_01_0312__parmvalue17332327103911"><b>capabilities:[xxx]</b></span>, it indicates that the container is started with an overlarge capability set, which poses risks.</p>
+</li><li id="hss_01_0312__li1943871817467">Seccomp not enabled (<strong id="hss_01_0312__b1026626054101022">seccomp=unconfined</strong>)<p id="hss_01_0312__p5438718204617">Secure computing mode (seccomp) is a Linux kernel feature. It can restrict system calls invoked by processes to reduce the attack surface of the kernel. If <span class="parmvalue" id="hss_01_0312__parmvalue9925123710250"><b>seccomp=unconfined</b></span> is configured when a container is started, system calls will not be restricted for the container.</p>
+<p id="hss_01_0312__p1043881894619">If the alarm name is <span class="parmvalue" id="hss_01_0312__parmvalue5290142164114"><b>Container Security Options</b></span> and the alarm content contains <span class="parmvalue" id="hss_01_0312__parmvalue97271233174117"><b>seccomp=unconfined</b></span>, it indicates that the container is started without seccomp, which poses risks.</p>
+<div class="note" id="hss_01_0312__note94389189468"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="hss_01_0312__p1143911188461">If seccomp is enabled, permissions will be verified for every system call. The verifications will probably affect services if system calls are frequent. Before you decide whether to enable seccomp, you are advised to test-enable it and analyze the impact on your services.</p>
+</div></div>
+</li><li id="hss_01_0312__li843951812467">Container privilege escalation (<strong id="hss_01_0312__b29955812414">no-new-privileges:false</strong>)<p id="hss_01_0312__p13439181874613">Processes can escalate permissions by running the <strong id="hss_01_0312__b840320016517">sudo</strong> command and using SUID or SGID bits. Default container configurations do not allow privilege escalation.</p>
+<p id="hss_01_0312__p04392187463">If <strong id="hss_01_0312__b16147420175">–no-new-privileges=false</strong> is specified when a container is started, the container can escalate privileges.</p>
+<p id="hss_01_0312__p64397184467">If the alarm name is <span class="parmvalue" id="hss_01_0312__parmvalue9998164564216"><b>Container Security Options</b></span> and the alarm content contains <span class="parmvalue" id="hss_01_0312__parmvalue622395674215"><b>no-new-privileges:false</b></span>, it indicates that privilege escalation restriction is disabled for the container, which poses risks.</p>
+</li><li id="hss_01_0312__li1843911812468">High-risk directory mapping (<strong id="hss_01_0312__b1729186125101022">mounts:[...]</strong>)<p id="hss_01_0312__p19439191874618">For convenience purposes, when a container is started on a server, the directories of the server can be mapped to the container. In this way, services in the container can directly read and write resources on the server. However, this mapping incurs security risks. If any critical directory in the server OS is mapped to the container, improper operations in the container will probably damage the server OS.</p>
+<p id="hss_01_0312__p20439121817462">HSS reports an alarm if it detects that a critical server path (<span class="parmvalue" id="hss_01_0312__parmvalue989718512101022"><b>/boot</b></span>, <span class="parmvalue" id="hss_01_0312__parmvalue898744520101022"><b>/dev</b></span>, <span class="parmvalue" id="hss_01_0312__parmvalue2103206513101022"><b>/etc</b></span>, <span class="parmvalue" id="hss_01_0312__parmvalue932404393101022"><b>/sys</b></span>, and <span class="parmvalue" id="hss_01_0312__parmvalue1644490700101022"><b>/var/run</b></span>) is mounted during container startup.</p>
+<p id="hss_01_0312__p1843941864618">If the alarm name is <span class="parmvalue" id="hss_01_0312__parmvalue141951931114315"><b>Container Mount Point</b></span> and the alarm content contains <span class="parmvalue" id="hss_01_0312__parmvalue187851941114319"><b>mounts:[{"source":"xxx","destination":"yyy"...]</b></span>, it indicates that a file path mapped to the container is unsafe. In this case, check for risky directory mappings. You can configure the mount paths that are considered secure in the container information collection policy.</p>
+<div class="note" id="hss_01_0312__note204401018124613"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="hss_01_0312__p444011186468">Alarms will not be triggered for the files that need to be frequently accessed by Docker containers, such as <span class="parmvalue" id="hss_01_0312__parmvalue612148202101022"><b>/etc/hosts</b></span> and <span class="parmvalue" id="hss_01_0312__parmvalue100888869101022"><b>/etc/resolv.conf</b></span>.</p>
+</div></div>
+</li><li id="hss_01_0312__li154405184467">Startup of containers in the <strong id="hss_01_0312__b95905463015">host</strong> namespace<p id="hss_01_0312__p94401818124612">The namespace of a container must be isolated from that of a server. If a container and a server use the same namespace, the container can access and modify the content on the server, which incurs container escape risks. To prevent such problems, HSS checks the container PID, network, and whether the container namespace is <strong id="hss_01_0312__b76521030854">host</strong>.</p>
+<p id="hss_01_0312__p15440191815464">If the alarm name is <span class="parmvalue" id="hss_01_0312__parmvalue42105210475"><b>Container Namespace</b></span> and the alarm content contains <span class="parmvalue" id="hss_01_0312__parmvalue1455614584812"><b>Container PID Namespace Mode</b></span>, <span class="parmvalue" id="hss_01_0312__parmvalue3701131584811"><b>Container IPC Namespace Mode</b></span>, or <span class="parmvalue" id="hss_01_0312__parmvalue442282614489"><b>Container Network Namespace Mode</b></span>, it indicates that a container whose namespace is <strong id="hss_01_0312__b18496730135215">host</strong> is started. In this case, check the container startup options based on the alarm information. If you are sure that the container can be trusted, you can ignore the alarm.</p>
+</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0312__row1044011814464"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.1 "><p id="hss_01_0312__p1444091812462">Container Image blocking</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.2 "><p id="hss_01_0312__p744091814619">If a container contains insecure images specified in the <a href="hss_01_0044.html#hss_01_0044__section1718012455468">Suspicious Image Behaviors</a>, before the container is started, an alarm will be generated for the insecure images.</p>
+<div class="note" id="hss_01_0312__note1444119185469"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="hss_01_0312__p1444121874611">You need to .</p>
+</div></div>
+</td>
+</tr>
+<tr id="hss_01_0312__row7441318164612"><td class="cellrowborder" rowspan="2" valign="top" width="12.2%" headers="mcps1.3.2.2.1.4.1.1 "><p id="hss_01_0312__p204411918144619">Abnormal User Behavior</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.299999999999999%" headers="mcps1.3.2.2.1.4.1.2 "><p id="hss_01_0312__p19441121815463">Invalid accounts</p>
+</td>
+<td class="cellrowborder" valign="top" width="72.5%" headers="mcps1.3.2.2.1.4.1.3 "><p id="hss_01_0312__p444171819466">Hackers can probably crack unsafe accounts on your containers and control the containers.</p>
+<p id="hss_01_0312__p4441161864616">HSS checks suspicious hidden accounts and cloned accounts and generates alarms on them.</p>
+</td>
+</tr>
+<tr id="hss_01_0312__row1744117181464"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.1 "><p id="hss_01_0312__p1444161834620">Brute-force attacks</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.2 "><p id="hss_01_0312__p14441111894615">Detect and report alarms for brute-force attack behaviors, such as brute-force attack attempts and successful brute-force attacks, on containers.</p>
+<p id="hss_01_0312__p18442718184617">Detect SSH, web, and Enumdb brute-force attacks on containers.</p>
+<div class="note" id="hss_01_0312__note6442151815461"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="hss_01_0312__p744281844615">Currently, brute-force attacks can be detected only in the Docker runtime.</p>
+</div></div>
+</td>
+</tr>
+<tr id="hss_01_0312__row14442918174618"><td class="cellrowborder" rowspan="4" valign="top" width="12.2%" headers="mcps1.3.2.2.1.4.1.1 "><p id="hss_01_0312__p12442151814468">Abnormal Cluster Behaviors</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.299999999999999%" headers="mcps1.3.2.2.1.4.1.2 "><p id="hss_01_0312__p1244211810462">Abnormal pod behaviors</p>
+</td>
+<td class="cellrowborder" valign="top" width="72.5%" headers="mcps1.3.2.2.1.4.1.3 "><p id="hss_01_0312__p1144211817464">Detect abnormal operations such as creating privileged pods, static pods, and sensitive pods in a cluster and abnormal operations performed on existing pods and report alarms.</p>
+</td>
+</tr>
+<tr id="hss_01_0312__row34434185464"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.1 "><p id="hss_01_0312__p34431718114616">User information enumerations</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.2 "><p id="hss_01_0312__p0443518184614">Detect the operations of enumerating the permissions and executable operation list of cluster users and report alarms.</p>
+</td>
+</tr>
+<tr id="hss_01_0312__row94432018164618"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.1 "><p id="hss_01_0312__p144431818164612">Binding cluster roles</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.2 "><p id="hss_01_0312__p184431718154616">Detect operations such as binding or creating a high-privilege cluster role or service account and report alarms.</p>
+</td>
+</tr>
+<tr id="hss_01_0312__row7443101810469"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.1 "><p id="hss_01_0312__p164431818194615">Kubernetes event deletions</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.1.4.1.2 "><p id="hss_01_0312__p154431218134619">Detect the deletion of Kubernetes events and report alarms.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0030.html">Intrusion Detection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0313.html b/docs/hss/umn/hss_01_0313.html
new file mode 100644
index 00000000..ac5e19e7
--- /dev/null
+++ b/docs/hss/umn/hss_01_0313.html
@@ -0,0 +1,23 @@
+<a name="hss_01_0313"></a><a name="hss_01_0313"></a>
+
+<h1 class="topictitle1">Viewing Container Alarms</h1>
+<div id="body0000001169633975"><p id="hss_01_0313__p8060118"><span id="hss_01_0313__text2897154921710">HSS</span> displays alarm and event statistics and their summary all on one page. You can have a quick overview of alarms, including the numbers of containers with alarms, handled alarms, and unhandled alarms.</p>
+<p id="hss_01_0313__p1662417155">The <strong id="hss_01_0313__b1662711383014">Events</strong> page displays the alarm events generated in the last 30 days.</p>
+<p id="hss_01_0313__p95591432204515">The status of a handled event changes from <strong id="hss_01_0313__b47358089310133">Unhandled</strong> to <strong id="hss_01_0313__b95146270710133">Handled</strong>.</p>
+<div class="section" id="hss_01_0313__section1378819553473"><h4 class="sectiontitle">Constraints</h4><p id="hss_01_0313__en-us_topic_0000001196708827_p11935163695913">Servers that are not protected by HSS do not support operations related to alarms and events.</p>
+</div>
+<div class="section" id="hss_01_0313__section418952255910"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0313__ol1926811717169"><li id="hss_01_0313__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0313__li830314169200"><span>Click <span><img id="hss_01_0313__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0313__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0313__hss_01_0571_b14857117404"><span id="hss_01_0313__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0313__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0313__li150151423810"><span>In the navigation pane, choose <strong id="hss_01_0313__b692419111489">Detection</strong> &gt; <strong id="hss_01_0313__b25033694813">Alarms</strong> and click the <strong id="hss_01_0313__b0881739204810">Container Alarms</strong> tab to view container alarms and events.</span><p><div class="fignone" id="hss_01_0313__fig185501215162916"><span class="figcap"><b>Figure 1 </b>Viewing container alarms</span><br><span><img id="hss_01_0313__image12936143035510" src="en-us_image_0000001670234665.png"></span></div>
+<ul id="hss_01_0313__ul06244195212"><li id="hss_01_0313__li10621241185214">View the overview of container alarms and events.<ul id="hss_01_0313__ul9577458155210"><li id="hss_01_0313__li6626175285217"><strong id="hss_01_0313__b14924115011576">Alarm Statistics</strong>: You can view the number of containers that have alarms and the number of alarms to be handled and that have been handled.</li><li id="hss_01_0313__li290505711542"><strong id="hss_01_0313__b365816401212">Threats</strong>: You can view the number of alarms in a container by severity.</li><li id="hss_01_0313__li852504765516"><strong id="hss_01_0313__b260436111210">Top 5 Events</strong>: You can view the top 5 events with the largest number of alarms in a container.</li></ul>
+</li><li id="hss_01_0313__li5331171320585">View the container alarms of a certain type.<p id="hss_01_0313__p179053331301"><a name="hss_01_0313__li5331171320585"></a><a name="li5331171320585"></a>In the <span class="parmvalue" id="hss_01_0313__parmvalue981019483596"><b>Event Types</b></span> area, select an alarm event type to view the corresponding alarm event list. In the alarm event list, you can view the alarm threat level, alarm name, and affected container name.</p>
+</li><li id="hss_01_0313__li7316471045">View details about container alarms and events.<p id="hss_01_0313__p27106576161"><a name="hss_01_0313__li7316471045"></a><a name="li7316471045"></a>Click an alarm name to go to its details page. You can view the container ID, IP address, VM name, and image ID.</p>
+<p id="hss_01_0313__p1956616482285"></p>
+</li></ul>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0030.html">Intrusion Detection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0314.html b/docs/hss/umn/hss_01_0314.html
new file mode 100644
index 00000000..58010f3b
--- /dev/null
+++ b/docs/hss/umn/hss_01_0314.html
@@ -0,0 +1,21 @@
+<a name="hss_01_0314"></a><a name="hss_01_0314"></a>
+
+<h1 class="topictitle1">Policy Management</h1>
+<div id="body0000001124924611"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0045.html">Overview</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0368.html">Creating a Policy Group</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0044.html">Configuring Policies</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0596.html">Deleting a Policy Group</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0041.html">Security Operations</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0317.html b/docs/hss/umn/hss_01_0317.html
new file mode 100644
index 00000000..4046a8c1
--- /dev/null
+++ b/docs/hss/umn/hss_01_0317.html
@@ -0,0 +1,21 @@
+<a name="hss_01_0317"></a><a name="hss_01_0317"></a>
+
+<h1 class="topictitle1">Agent Management</h1>
+<div id="body0000001115029090"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0374.html">Viewing Agent Status</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0570.html">Installing an Agent</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0462.html">Upgrading the Agent</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0376.html">Uninstalling an Agent</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0373.html">Installation &amp; Configuration</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0318.html b/docs/hss/umn/hss_01_0318.html
new file mode 100644
index 00000000..a8924347
--- /dev/null
+++ b/docs/hss/umn/hss_01_0318.html
@@ -0,0 +1,11 @@
+<a name="hss_01_0318"></a><a name="hss_01_0318"></a>
+
+<h1 class="topictitle1">What Is Container Security?</h1>
+<div id="body0000001170081633"><p id="hss_01_0318__p8060118">Container Security Service (CGS) scans vulnerabilities and configuration information in images, helping enterprises detect container risks that cannot be found using conventional security software. CGS also provides functions such as container process whitelist, container file monitoring, container information collection, and container escape detection to reduce risks.</p>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0258.html">About HSS</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0319.html b/docs/hss/umn/hss_01_0319.html
new file mode 100644
index 00000000..66f6d805
--- /dev/null
+++ b/docs/hss/umn/hss_01_0319.html
@@ -0,0 +1,89 @@
+<a name="hss_01_0319"></a><a name="hss_01_0319"></a>
+
+<h1 class="topictitle1">What Is Web Tamper Protection?</h1>
+<div id="body0000001170082497"><p id="hss_01_0319__p8060118">Web Tamper Protection (WTP) monitors website directories in real time, backs up files, and restores tampered files using the backup. WTP protects your websites from Trojans, illegal links, and tampering.</p>
+<p id="hss_01_0319__p10203151163711">Web Tamper Protection (WTP) can detect and prevent tampering of files in specified directories, including web pages, documents, and images, and quickly restore them using valid backup files.</p>
+<p id="hss_01_0319__p9111152062514">This section describes the operation process and main functions of WTP. See <a href="#hss_01_0319__fig453535010386">Figure 1</a> and <a href="#hss_01_0319__table6968307253">Table 1</a>.</p>
+<div class="fignone" id="hss_01_0319__fig453535010386"><a name="hss_01_0319__fig453535010386"></a><a name="fig453535010386"></a><span class="figcap"><b>Figure 1 </b>WTP operation process</span><br><span><img id="hss_01_0319__image4917221165916" src="en-us_image_0000001630512626.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0319__table6968307253"></a><a name="table6968307253"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0319__table6968307253" frame="border" border="1" rules="all"><caption><b>Table 1 </b>WTP operation process and function description</caption><thead align="left"><tr id="hss_01_0319__row39691207259"><th align="left" class="cellrowborder" valign="top" width="23.4781405644715%" id="mcps1.3.5.2.4.1.1"><p id="hss_01_0319__p096950132511">Type</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="20.462091864969565%" id="mcps1.3.5.2.4.1.2"><p id="hss_01_0319__p819902614326">Operation</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="56.05976757055894%" id="mcps1.3.5.2.4.1.3"><p id="hss_01_0319__p1896910172514">Description and Reference</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0319__row696917092513"><td class="cellrowborder" valign="top" width="23.4781405644715%" headers="mcps1.3.5.2.4.1.1 "><p id="hss_01_0319__p09695092517">Preparations</p>
+</td>
+<td class="cellrowborder" valign="top" width="20.462091864969565%" headers="mcps1.3.5.2.4.1.2 "><p id="hss_01_0319__p1199132620321">--</p>
+</td>
+<td class="cellrowborder" valign="top" width="56.05976757055894%" headers="mcps1.3.5.2.4.1.3 "><p id="hss_01_0319__p59691703259">If no VDC operator account is available, contact an operations administrator to create a VDC administrator account, and then use the VDC administrator account to create a VDC operator.</p>
+</td>
+</tr>
+<tr id="hss_01_0319__row1096919012515"><td class="cellrowborder" rowspan="4" valign="top" width="23.4781405644715%" headers="mcps1.3.5.2.4.1.1 "><p id="hss_01_0319__p1896990182519">Getting Started with WTP</p>
+</td>
+<td class="cellrowborder" valign="top" width="20.462091864969565%" headers="mcps1.3.5.2.4.1.2 "><p id="hss_01_0319__p519902616322">Applying for Quota</p>
+</td>
+<td class="cellrowborder" valign="top" width="56.05976757055894%" headers="mcps1.3.5.2.4.1.3 "><p id="hss_01_0319__p47901048184511">Apply for WTP quota.</p>
+</td>
+</tr>
+<tr id="hss_01_0319__row10969110172517"><td class="cellrowborder" valign="top" headers="mcps1.3.5.2.4.1.1 "><p id="hss_01_0319__p13199926193219">Installing an Agent</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.5.2.4.1.2 "><p id="hss_01_0319__p11115115594311">The agent is provided by HSS. It runs scan tasks to scan all servers, monitors server security, and reports collected server information to the cloud protection center.</p>
+<p id="hss_01_0319__p1481222364316">You can enable WTP only after the agent is installed.</p>
+</td>
+</tr>
+<tr id="hss_01_0319__row1797014032520"><td class="cellrowborder" valign="top" headers="mcps1.3.5.2.4.1.1 "><p id="hss_01_0319__p161991726173212">Parameters required for configuring alarm notifications</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.5.2.4.1.2 "><p id="hss_01_0319__p1852215014484">After alarm notification is enabled, you can receive alarm notifications sent by HSS to learn about security risks facing your servers and web pages.</p>
+<p id="hss_01_0319__p1166894034716">Without this function, you have to log in to the management console to view alarms.</p>
+</td>
+</tr>
+<tr id="hss_01_0319__row99701206253"><td class="cellrowborder" valign="top" headers="mcps1.3.5.2.4.1.1 "><p id="hss_01_0319__p14199326203215">Enabling HSS</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.5.2.4.1.2 "><p id="hss_01_0319__p79991742174816">Allocate a quota to a server and enable HSS for the server.</p>
+</td>
+</tr>
+<tr id="hss_01_0319__row1512891715408"><td class="cellrowborder" rowspan="6" valign="top" width="23.4781405644715%" headers="mcps1.3.5.2.4.1.1 "><p id="hss_01_0319__p17129617164012">Enable WTP</p>
+</td>
+<td class="cellrowborder" valign="top" width="20.462091864969565%" headers="mcps1.3.5.2.4.1.2 "><p id="hss_01_0319__p1412918177406">Adding a Protected Directory</p>
+</td>
+<td class="cellrowborder" valign="top" width="56.05976757055894%" headers="mcps1.3.5.2.4.1.3 "><p id="hss_01_0319__p11291017154018">Add a directory to be protected by WTP.</p>
+</td>
+</tr>
+<tr id="hss_01_0319__row66671938506"><td class="cellrowborder" valign="top" headers="mcps1.3.5.2.4.1.1 "><p id="hss_01_0319__p1866716355015">Create remote backup</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.5.2.4.1.2 "><p id="hss_01_0319__p11667135503">By default, HSS backs up the files from the protected directories to the local backup directory you specified when you added protected directories. To protect the local backup files from tampering, you must enable the remote backup function.</p>
+</td>
+</tr>
+<tr id="hss_01_0319__row859112139506"><td class="cellrowborder" valign="top" headers="mcps1.3.5.2.4.1.1 "><p id="hss_01_0319__p11591151335020">Adding a privileged process</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.5.2.4.1.2 "><p id="hss_01_0319__p1559117135506">After WTP is enabled, the content in the protected directories is read-only. To allow certain processes to modify files in the directories, add them to the privileged process list.</p>
+</td>
+</tr>
+<tr id="hss_01_0319__row4998622185016"><td class="cellrowborder" valign="top" headers="mcps1.3.5.2.4.1.1 "><p id="hss_01_0319__p299802255014">Set scheduled WTP protection</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.5.2.4.1.2 "><p id="hss_01_0319__p15998322185013">You can schedule WTP protection to allow website updates in specific periods.</p>
+</td>
+</tr>
+<tr id="hss_01_0319__row21601133185012"><td class="cellrowborder" valign="top" headers="mcps1.3.5.2.4.1.1 "><p id="hss_01_0319__p18160163335013">Enabling dynamic WTP</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.5.2.4.1.2 "><p id="hss_01_0319__p10160173345015">Dynamic WTP protects your data while Tomcat is running, detecting dynamic data tampering in databases.</p>
+</td>
+</tr>
+<tr id="hss_01_0319__row26171712913"><td class="cellrowborder" valign="top" headers="mcps1.3.5.2.4.1.1 "><p id="hss_01_0319__p962317895">View WTP reports</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.5.2.4.1.2 "><p id="hss_01_0319__p362101712913">After WTP is enabled, HSS will immediately check the protected directories you specified. You can check records about detected tampering.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0258.html">About HSS</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0320.html b/docs/hss/umn/hss_01_0320.html
new file mode 100644
index 00000000..27b82b0b
--- /dev/null
+++ b/docs/hss/umn/hss_01_0320.html
@@ -0,0 +1,11 @@
+<a name="hss_01_0320"></a><a name="hss_01_0320"></a>
+
+<h1 class="topictitle1">What Are the Relationships Between Images, Containers, and Applications?</h1>
+<div id="body0000001125361743"><ul id="hss_01_0320__en-us_topic_0129849647_ul9606170145012"><li id="hss_01_0320__en-us_topic_0129849647_li560615019509">An image is a special file system. It provides programs, libraries, resources, configuration files and other files required for a running container. An image also contains some configuration parameters (such as anonymous volumes, environment variables, and users) prepared for a running container. An image does not contain any dynamic data, and its content is unchangeable after creation.</li><li id="hss_01_0320__en-us_topic_0129849647_li16060019504">The relationship between the image and container is similar to that between the class and instance in the program design. An image is static, and a container is the entity for a running image. A container can be created, started, stopped, deleted, and suspended.</li><li id="hss_01_0320__en-us_topic_0129849647_li686521662613">Multiple containers can be started for an image.</li><li id="hss_01_0320__en-us_topic_0129849647_li060613012507">An application may include one or a set of containers.</li></ul>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0258.html">About HSS</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0321.html b/docs/hss/umn/hss_01_0321.html
new file mode 100644
index 00000000..89b04c1e
--- /dev/null
+++ b/docs/hss/umn/hss_01_0321.html
@@ -0,0 +1,33 @@
+<a name="hss_01_0321"></a><a name="hss_01_0321"></a>
+
+<h1 class="topictitle1">Agent FAQs</h1>
+<div id="body0000001123401790"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0037.html">Is the Agent in Conflict with Any Other Security Software?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0119.html">How Do I Uninstall the Agent?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0069.html">What Should I Do If Agent Installation Failed?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0036.html">How Do I Fix an Abnormal Agent?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0096.html">What Is the Default Agent Installation Path?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0116.html">How Many CPU and Memory Resources Are Occupied by the Agent When It Performs Scans?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0195.html">Do WTP and HSS Use the Same Agent?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0007.html">How Do I View Servers Where No Agents Have Been Installed?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0394.html">What Can I Do If the Agent Status Is Still "Not installed" After Installation?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0409.html">What Do I Do If the Upgrade Fails?</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0032.html">FAQs</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0323.html b/docs/hss/umn/hss_01_0323.html
new file mode 100644
index 00000000..803d6d60
--- /dev/null
+++ b/docs/hss/umn/hss_01_0323.html
@@ -0,0 +1,17 @@
+<a name="hss_01_0323"></a><a name="hss_01_0323"></a>
+
+<h1 class="topictitle1">Container Guard Service</h1>
+<div id="body0000001125220273"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0325.html">How Do I Disable Node Protection?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0324.html">How Do I Enable Node Protection?</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0032.html">FAQs</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0324.html b/docs/hss/umn/hss_01_0324.html
new file mode 100644
index 00000000..9fcc7d17
--- /dev/null
+++ b/docs/hss/umn/hss_01_0324.html
@@ -0,0 +1,14 @@
+<a name="hss_01_0324"></a><a name="hss_01_0324"></a>
+
+<h1 class="topictitle1">How Do I Enable Node Protection?</h1>
+<div id="body0000001125025549"><p id="hss_01_0324__en-us_topic_0129849645_p1590569143411">When you enable node protection, the system automatically installs the CGS plug-in on the node.</p>
+<ol id="hss_01_0324__en-us_topic_0129849645_ol08085572113"><li id="hss_01_0324__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0324__en-us_topic_0000001124709683_li13785124016491"><span>In the navigation pane, choose <strong id="hss_01_0324__b9615205618252">Asset Management</strong> &gt; <strong id="hss_01_0324__b7488192113267">Containers &amp; Quota</strong>.</span></li><li id="hss_01_0324__en-us_topic_0000001124709683_li73373463511"><span>In the <strong id="hss_01_0324__b1488768163513">Operation </strong>column of a node, click <strong id="hss_01_0324__b1596123783514">Enable Protection</strong>.</span></li><li id="hss_01_0324__en-us_topic_0000001124709683_li15441174320116"><span>Click <strong id="hss_01_0324__b162821240194212">OK </strong>to enable protection for the node. If <strong id="hss_01_0324__b646613570432">Protection Status</strong> of the node is <strong id="hss_01_0324__b1841110015449">Protected</strong>, protection is enabled for the node.</span><p><div class="note" id="hss_01_0324__en-us_topic_0000001124709683_note320365904514"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0324__en-us_topic_0000001124709683_ul15661153889"><li id="hss_01_0324__en-us_topic_0000001124709683_li16701117194015">An <span id="hss_01_0324__text49671424309">HSS</span> quota protects one cluster node.</li></ul>
+</div></div>
+</p></li></ol>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0323.html">Container Guard Service</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0325.html b/docs/hss/umn/hss_01_0325.html
new file mode 100644
index 00000000..b92a1913
--- /dev/null
+++ b/docs/hss/umn/hss_01_0325.html
@@ -0,0 +1,24 @@
+<a name="hss_01_0325"></a><a name="hss_01_0325"></a>
+
+<h1 class="topictitle1">How Do I Disable Node Protection?</h1>
+<div id="body0000001125025551"><div class="section" id="hss_01_0325__section1303437171317"><h4 class="sectiontitle">Before You Start</h4><p id="hss_01_0325__hss_01_0401_p875614393311">Disabling protection does not affect services, but will increase security risks. You are advised to keep your servers protected.</p>
+</div>
+<div class="section" id="hss_01_0325__section37840212917"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0325__hss_01_0401_ol1926811717169"><li id="hss_01_0325__hss_01_0401_li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0325__hss_01_0401_li830314169200"><span>Click <span><img id="hss_01_0325__hss_01_0401_hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0325__hss_01_0401_hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0325__hss_01_0401_hss_01_0571_b14857117404"><span id="hss_01_0325__hss_01_0401_hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0325__hss_01_0401_hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0325__hss_01_0401_li13785124016491"><span>In the navigation pane, choose <strong id="hss_01_0325__hss_01_0401_b104381058205518">Asset Management</strong> &gt; <strong id="hss_01_0325__hss_01_0401_b9438358105513">Containers &amp; Quota</strong>.</span><p><div class="note" id="hss_01_0325__hss_01_0401_note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0325__hss_01_0401_hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0325__hss_01_0401_fig1949311875816"><span class="figcap"><b>Figure 1 </b>Accessing the container node management page</span><br><span><img id="hss_01_0325__hss_01_0401_image2448143620569" src="en-us_image_0000001806095454.png"></span></div>
+</p></li><li id="hss_01_0325__hss_01_0401_li1817814441415"><span>Disable protection for one or multiple servers.</span><p><ul id="hss_01_0325__hss_01_0401_ul1525610351753"><li id="hss_01_0325__hss_01_0401_li20256143513520"><strong id="hss_01_0325__hss_01_0401_b711915419420">Disabling protection for a server</strong><ol type="a" id="hss_01_0325__hss_01_0401_ol2069313571653"><li id="hss_01_0325__hss_01_0401_li66935576511">In the node list, click <strong id="hss_01_0325__hss_01_0401_b16259121875">Disable Protection</strong> in the <strong id="hss_01_0325__hss_01_0401_b1130412151571">Operation</strong> column of a server.</li><li id="hss_01_0325__hss_01_0401_li3178161218460">In the dialog box that is displayed, confirm the information and click <strong id="hss_01_0325__hss_01_0401_b151751317712">OK</strong>.</li><li id="hss_01_0325__hss_01_0401_li1960783716107">Choose <span class="menucascade" id="hss_01_0325__hss_01_0401_menucascade9471939971"><b><span class="uicontrol" id="hss_01_0325__hss_01_0401_uicontrol941639278">Asset Management</span></b> &gt; <b><span class="uicontrol" id="hss_01_0325__hss_01_0401_uicontrol19461539975">Containers &amp; Quota</span></b></span> and click the <strong id="hss_01_0325__hss_01_0401_b1647539271">Container Nodes</strong> tab. Check the protection status in the server list. If it is <strong id="hss_01_0325__hss_01_0401_b5474391978">Unprotected</strong>, the protection has been disabled.<div class="caution" id="hss_01_0325__hss_01_0401_note111313303466"><span class="cautiontitle"><img src="public_sys-resources/caution_3.0-en-us.png"> </span><div class="cautionbody"><p id="hss_01_0325__hss_01_0401_p852755064610">Disabling protection does not affect services, but will increase security risks. You are advised to keep your servers protected.</p>
+</div></div>
+</li></ol>
+</li><li id="hss_01_0325__hss_01_0401_li22396391451"><strong id="hss_01_0325__hss_01_0401_b1677413251682">Disabling protection in batches</strong><ol type="a" id="hss_01_0325__hss_01_0401_ol124362461618"><li id="hss_01_0325__hss_01_0401_li1924352491613">In the node list, select servers, and click <strong id="hss_01_0325__hss_01_0401_b87952618818">Disable Protection</strong> above the list.</li><li id="hss_01_0325__hss_01_0401_li199221737125410">In the dialog box that is displayed, confirm the information and click <strong id="hss_01_0325__hss_01_0401_b1240683813812">OK</strong>.</li><li id="hss_01_0325__hss_01_0401_li492283745410">Choose <span class="menucascade" id="hss_01_0325__hss_01_0401_menucascade4131194811814"><b><span class="uicontrol" id="hss_01_0325__hss_01_0401_uicontrol1213115481583">Asset Management</span></b> &gt; <b><span class="uicontrol" id="hss_01_0325__hss_01_0401_uicontrol41313487811">Containers &amp; Quota</span></b></span> and click the <strong id="hss_01_0325__hss_01_0401_b9132124814813">Container Nodes</strong> tab. Check the protection status in the server list. If it is <strong id="hss_01_0325__hss_01_0401_b1413274817819">Unprotected</strong>, the protection has been disabled.<div class="caution" id="hss_01_0325__hss_01_0401_note17923143714546"><span class="cautiontitle"><img src="public_sys-resources/caution_3.0-en-us.png"> </span><div class="cautionbody"><p id="hss_01_0325__hss_01_0401_p139237371543">Disabling protection does not affect services, but will increase security risks. You are advised to keep your servers protected.</p>
+</div></div>
+</li></ol>
+</li></ul>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0323.html">Container Guard Service</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0331.html b/docs/hss/umn/hss_01_0331.html
new file mode 100644
index 00000000..12b18cb1
--- /dev/null
+++ b/docs/hss/umn/hss_01_0331.html
@@ -0,0 +1,114 @@
+<a name="hss_01_0331"></a><a name="hss_01_0331"></a>
+
+<h1 class="topictitle1">Managing Isolated Files</h1>
+<div id="body1585531035589"><p id="hss_01_0331__p8060118"><span id="hss_01_0331__text2897154921710">HSS</span> can isolate detected threat files. Files that have been isolated are displayed on a slide-out panel on the <strong id="hss_01_0331__b53973155335">Server Alarms</strong> page. You can click <strong id="hss_01_0331__b12397315143311">Isolated Files</strong> on the upper right corner to check them, and can recover isolated files anytime.</p>
+<p id="hss_01_0331__p1276941511109">For details about events that can be isolated and killed, see <a href="hss_01_0277.html">Server Alarms</a>.</p>
+<div class="section" id="hss_01_0331__section1378819553473"><h4 class="sectiontitle">Constraints</h4><p id="hss_01_0331__hss_01_0277_p11935163695913">Servers that are not protected by HSS do not support alarm-related operations.</p>
+</div>
+<div class="section" id="hss_01_0331__section10799201191118"><h4 class="sectiontitle">Isolation and Killing Operations</h4><ol id="hss_01_0331__ol253514591140"><li id="hss_01_0331__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0331__li830314169200"><span>Click <span><img id="hss_01_0331__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0331__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0331__hss_01_0571_b14857117404"><span id="hss_01_0331__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0331__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0331__li16280131615521"><span>In the navigation pane on the left, choose <strong id="hss_01_0331__hss_01_0026_b18377447191219">Detection</strong> &gt; <strong id="hss_01_0331__hss_01_0026_b7811141812132">Alarms</strong> and click <strong id="hss_01_0331__hss_01_0026_b12667936171318">Server Alarms</strong>.</span><p><div class="note" id="hss_01_0331__hss_01_0026_note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0331__hss_01_0026_hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0331__hss_01_0026_fig9988155212375"><span class="figcap"><b>Figure 1 </b>Server alarms</span><br><span><img id="hss_01_0331__hss_01_0026_image83101973150" src="en-us_image_0000001621827002.png"></span></div>
+
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0331__hss_01_0026_table185876181727" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Alarm statistics</caption><thead align="left"><tr id="hss_01_0331__hss_01_0026_row1258817180217"><th align="left" class="cellrowborder" colspan="2" valign="top" id="mcps1.3.4.2.3.2.3.2.4.1.1"><p id="hss_01_0331__hss_01_0026_p94362044109">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" id="mcps1.3.4.2.3.2.3.2.4.1.2"><p id="hss_01_0331__hss_01_0026_p958861819213">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0331__hss_01_0026_row148882134232"><td class="cellrowborder" colspan="2" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0331__hss_01_0026_p7104173222317">Enterprise Project</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.2 "><p id="hss_01_0331__hss_01_0026_p157294282317">Select an enterprise project and view alarm details by enterprise project.</p>
+</td>
+</tr>
+<tr id="hss_01_0331__hss_01_0026_row1146916442556"><td class="cellrowborder" colspan="2" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0331__hss_01_0026_p2046924445514">Time range</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.2 "><p id="hss_01_0331__hss_01_0026_p154691644125510">You can select a fixed time period or customize a time period to filter alarms. Only alarms generated within 30 days can be queried.</p>
+<p id="hss_01_0331__hss_01_0026_p1082114712614">The options are as follows:</p>
+<ul id="hss_01_0331__hss_01_0026_ul142371443720"><li id="hss_01_0331__hss_01_0026_li1923717411717">Last 24 hours</li><li id="hss_01_0331__hss_01_0026_li2440551276">Last 3 days</li><li id="hss_01_0331__hss_01_0026_li65694121672">Last 7 days</li><li id="hss_01_0331__hss_01_0026_li536218181879">Last 30 days</li><li id="hss_01_0331__hss_01_0026_li727320012124">Custom</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0331__hss_01_0026_row158819182218"><td class="cellrowborder" rowspan="5" valign="top" width="9.68%" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0331__hss_01_0026_p164377441907">Server Alarms</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.49%" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0331__hss_01_0026_p658817181029">Affected Servers</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.83%" headers="mcps1.3.4.2.3.2.3.2.4.1.2 "><p id="hss_01_0331__hss_01_0026_p158819181929">Number of servers for which alarms are generated.</p>
+</td>
+</tr>
+<tr id="hss_01_0331__hss_01_0026_row195881118921"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0331__hss_01_0026_p18588191819211">Alarms to be Handled</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0331__hss_01_0026_p1058871813211">Number of alarms to be handled.</p>
+<p id="hss_01_0331__hss_01_0026_p213174416312">By default, all alarms to be handled are displayed.</p>
+</td>
+</tr>
+<tr id="hss_01_0331__hss_01_0026_row125883181627"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0331__hss_01_0026_p05885181228">Handled Alarms</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0331__hss_01_0026_p175880189210">Number of handled alarms.</p>
+</td>
+</tr>
+<tr id="hss_01_0331__hss_01_0026_row42871218311"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0331__hss_01_0026_p1028862533">Blocked IP Addresses</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0331__hss_01_0026_p89448319411">Number of blocked IP addresses. You can click the number to check blocked IP address list.</p>
+<p id="hss_01_0331__hss_01_0026_p114491243184">The blocked IP address list displays the server name, attack source IP address, login type, blocking status, number of blocks, blocking start time, and the latest blocking time.</p>
+<p id="hss_01_0331__hss_01_0026_p02881821539">If a valid IP address is blocked by mistake (for example, after O&amp;M personnel enter incorrect passwords for multiple times), you can manually unblock it. If a server is frequently attacked, you are advised to fix its vulnerabilities in a timely manner and eliminate risks.</p>
+<div class="notice" id="hss_01_0331__hss_01_0026_note106951035202915"><span class="noticetitle"> NOTICE: </span><div class="noticebody"><ul id="hss_01_0331__hss_01_0026_ul873664454119"><li id="hss_01_0331__hss_01_0026_li19736544204118">After a blocked IP address is unblocked, HSS will no longer block the operations performed by the IP address.</li><li id="hss_01_0331__hss_01_0026_li13901734194211">A maximum of 10,000 IP addresses can be blocked for each type of software.<p id="hss_01_0331__hss_01_0026_p164171344194210"><a name="hss_01_0331__hss_01_0026_li13901734194211"></a><a name="hss_01_0026_li13901734194211"></a>If your Linux server does not support ipset, a maximum of 50 IP addresses can be clocked for MySQL and vsftp.</p>
+<p id="hss_01_0331__hss_01_0026_p29243369425">If your Linux server does not support ipset or hosts.deny, a maximum of 50 IP addresses can be blocked for SSH.</p>
+</li></ul>
+</div></div>
+</td>
+</tr>
+<tr id="hss_01_0331__hss_01_0026_row36761916637"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0331__hss_01_0026_p1067616161131">Isolated Files</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0331__hss_01_0026_p15536140963">HSS can isolate detected threat files. Files that have been isolated are displayed on a slide-out panel on the <strong id="hss_01_0331__hss_01_0026_b1570718482015">Server Alarms</strong> page. You can click <strong id="hss_01_0331__hss_01_0026_b1636910452024">Isolated Files</strong> on the upper right corner to check them.</p>
+<p id="hss_01_0331__hss_01_0026_p36769161313">You can recover isolated files. For details, see <a href="hss_01_0331.html">Managing Isolated Files</a>.</p>
+</td>
+</tr>
+<tr id="hss_01_0331__hss_01_0026_row1570741018115"><td class="cellrowborder" rowspan="5" valign="top" width="9.68%" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0331__hss_01_0026_p770712103113">Container Alarms</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.49%" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0331__hss_01_0026_p1929111513812">Affected Servers</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.83%" headers="mcps1.3.4.2.3.2.3.2.4.1.2 "><p id="hss_01_0331__hss_01_0026_p49291715488">Number of servers for which alarms are generated.</p>
+</td>
+</tr>
+<tr id="hss_01_0331__hss_01_0026_row2079910122817"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0331__hss_01_0026_p293017151281">Alarms to be Handled</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0331__hss_01_0026_p39301515688">Number of alarms to be handled.</p>
+<p id="hss_01_0331__hss_01_0026_p2930415288">By default, all alarms to be handled are displayed.</p>
+</td>
+</tr>
+<tr id="hss_01_0331__hss_01_0026_row1591320144819"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0331__hss_01_0026_p1393019151289">Handled Alarms</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0331__hss_01_0026_p1893017158815">Number of handled alarms</p>
+</td>
+</tr>
+<tr id="hss_01_0331__hss_01_0026_row4468310984"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0331__hss_01_0026_p5468610680">Threats</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0331__hss_01_0026_p046820107812">Displays the statistics on alarms by severity.</p>
+<ul id="hss_01_0331__hss_01_0026_ul323742412914"><li id="hss_01_0331__hss_01_0026_li142379241697">Critical</li><li id="hss_01_0331__hss_01_0026_li1057952611917">High</li><li id="hss_01_0331__hss_01_0026_li1581816283910">Medium</li><li id="hss_01_0331__hss_01_0026_li1312915311195">Low</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0331__hss_01_0026_row2041964418815"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0331__hss_01_0026_p1141911441984">Top 5 Events</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.3.2.3.2.4.1.1 "><p id="hss_01_0331__hss_01_0026_p19420644887">Displays the top 5 alarm types and their quantities.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0331__li523747152217"><span>Locate an event that can be isolated and killed, click <strong id="hss_01_0331__b78169404308">Handle</strong> in the <strong id="hss_01_0331__b17258134615300">Operation</strong> column, and select <strong id="hss_01_0331__b022015493110">Isolate and Kill</strong> in the displayed box.</span><p><div class="note" id="hss_01_0331__note19646455121812"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0331__p1687872814336">For details about events that can be isolated and killed, see <a href="hss_01_0277.html">Server Alarms</a>.</p>
+</div></div>
+</p></li><li id="hss_01_0331__li17184351362"><span>Click <span class="uicontrol" id="hss_01_0331__uicontrol107211359368"><b>OK</b></span> and isolate and kill the target alarm event.</span><p><p id="hss_01_0331__p14481143643620">Files that have been isolated are displayed on a slide-out panel on the <strong id="hss_01_0331__b62559557190">Server Alarms</strong> page and cannot harm your servers. You can click <strong id="hss_01_0331__b925575531919">Isolated Files</strong> on the upper right corner to check them.</p>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0331__section122124201718"><h4 class="sectiontitle">Checking Isolated Files</h4><ol id="hss_01_0331__ol17061418121718"><li id="hss_01_0331__li837455203318"><span>In the alarm statistics area on the <strong id="hss_01_0331__b1789173071411">Server Alarms</strong> page, click <strong id="hss_01_0331__b19438193820157">View Details</strong> under <strong id="hss_01_0331__b17892830181419">Isolated Files</strong> to check the isolated files.</span></li><li id="hss_01_0331__li56251144101716"><span>Check the servers, names, paths, and modification time of the isolated files.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0331__section95425471714"><h4 class="sectiontitle">One-click Restoration</h4><ol id="hss_01_0331__ol96901479719"><li id="hss_01_0331__li2690647976"><span>Click restore in the <strong id="hss_01_0331__b520111414229">Operation</strong> column of the file isolation box list. You can specify that isolated files are removed from the isolation box.</span></li><li id="hss_01_0331__li20311452151410"><span>Click <strong id="hss_01_0331__b8153444385">OK</strong>.</span><p><div class="note" id="hss_01_0331__note1969017471272"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0331__p36908478715">Recovered files will no longer be isolated. Exercise caution when performing this operation.</p>
+</div></div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0030.html">Intrusion Detection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0346.html b/docs/hss/umn/hss_01_0346.html
new file mode 100644
index 00000000..bb9c80f0
--- /dev/null
+++ b/docs/hss/umn/hss_01_0346.html
@@ -0,0 +1,21 @@
+<a name="hss_01_0346"></a><a name="hss_01_0346"></a>
+
+<h1 class="topictitle1">Ransomware Prevention</h1>
+<div id="body0000001223433823"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0348.html">Enabling Ransomware Prevention</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0347.html">Viewing Ransomware Protection</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0349.html">Managing Ransomware Prevention Policies</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0350.html">Disabling Ransomware Prevention</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0142.html">Prevention</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0347.html b/docs/hss/umn/hss_01_0347.html
new file mode 100644
index 00000000..0084ed75
--- /dev/null
+++ b/docs/hss/umn/hss_01_0347.html
@@ -0,0 +1,412 @@
+<a name="hss_01_0347"></a><a name="hss_01_0347"></a>
+
+<h1 class="topictitle1">Viewing Ransomware Protection</h1>
+<div id="body0000001223596615"><div class="section" id="hss_01_0347__section268216245291"><h4 class="sectiontitle">Prerequisites</h4><p id="hss_01_0347__p13974154414498">You have enabled <span id="hss_01_0347__text13861142212149">HSS</span> premium, WTP, or container edition.</p>
+</div>
+<div class="section" id="hss_01_0347__section96942419450"><h4 class="sectiontitle">Constraints</h4><ul id="hss_01_0347__ul6928190153712"><li id="hss_01_0347__li167042011144410">After ransomware protection is enabled, you need to handle ransomware alarms and fix the vulnerabilities in your systems and middleware in a timely manner.</li></ul>
+</div>
+<div class="section" id="hss_01_0347__section2160144843314"><h4 class="sectiontitle">Checking the Ransomware Prevention Overview</h4><ol id="hss_01_0347__ol1288111230383"><li id="hss_01_0347__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0347__li830314169200"><span>Click <span><img id="hss_01_0347__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0347__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0347__hss_01_0571_b14857117404"><span id="hss_01_0347__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0347__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0347__li3622821468"><span>In the navigation pane, choose <strong id="hss_01_0347__b1689222472015">Prevention</strong> &gt; <strong id="hss_01_0347__b17618028172010">Ransomware Prevention</strong>. Check ransomware prevention details.</span><p><div class="fignone" id="hss_01_0347__fig113221958347"><span class="figcap"><b>Figure 1 </b>Ransomware prevention overview</span><br><span><img id="hss_01_0347__image143513251318" src="en-us_image_0000001808126138.png"></span></div>
+
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0347__table1419764263" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Ransomware prevention parameters</caption><thead align="left"><tr id="hss_01_0347__row1519816415612"><th align="left" class="cellrowborder" colspan="2" valign="top" id="mcps1.3.3.2.3.2.2.2.5.1.1"><p id="hss_01_0347__p4198741668">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" id="mcps1.3.3.2.3.2.2.2.5.1.2"><p id="hss_01_0347__p4198134668">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" id="mcps1.3.3.2.3.2.2.2.5.1.3"><p id="hss_01_0347__p819834469">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0347__row161986414612"><td class="cellrowborder" colspan="2" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p17198154164">Enterprise Project</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p201981945618">After an enterprise project is selected, the overview page will display the data in the project only.</p>
+<p id="hss_01_0347__p111981841869">You can select an existing enterprise project. By default, data of all servers is displayed.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.3 "><p id="hss_01_0347__p7198194863">-</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row1919994862"><td class="cellrowborder" colspan="2" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p1119944768">Time range</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p141991341565">Select a time range to check ransomware defense statistics.</p>
+<p id="hss_01_0347__p1199941265">Valid values: <strong id="hss_01_0347__b2002466111">Last 24 hours</strong>, <strong id="hss_01_0347__b1348210152">Last 3 days</strong>, <strong id="hss_01_0347__b2117403093">Last 7 days</strong>, <strong id="hss_01_0347__b1279025565">Last 30 days</strong></p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.3 "><p id="hss_01_0347__p419917417613">Last 30 days</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row8199144166"><td class="cellrowborder" rowspan="2" valign="top" width="9.83%" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p181991241767">Protection Statistics</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.52%" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p6199241769">Protected Servers</p>
+</td>
+<td class="cellrowborder" valign="top" width="47.620000000000005%" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p141994417620">Number of servers protected against ransomware.</p>
+</td>
+<td class="cellrowborder" valign="top" width="27.029999999999998%" headers="mcps1.3.3.2.3.2.2.2.5.1.3 "><p id="hss_01_0347__p020094667">-</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row7200841368"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p1020094469">Events</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p42003415620">Number of ransomware-related events detected within the specified time range.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p4200194567">-</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row1120010410611"><td class="cellrowborder" rowspan="2" valign="top" width="9.83%" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p8200144862">Backup Statistics</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.52%" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p19200848612">Backed Up Servers</p>
+</td>
+<td class="cellrowborder" valign="top" width="47.620000000000005%" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p172001419610">Number of servers whose data has been backed up.</p>
+</td>
+<td class="cellrowborder" valign="top" width="27.029999999999998%" headers="mcps1.3.3.2.3.2.2.2.5.1.3 "><p id="hss_01_0347__p202003416618">-</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row3200441768"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p192001941966">Backup and Restoration Tasks</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p102001341163">Number of server data restoration tasks. You can click the number to view the task progress.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p172004419617">-</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row320115411617"><td class="cellrowborder" rowspan="14" valign="top" width="9.83%" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p2201144767">Protected Servers</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.52%" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p5201941163">Server Name/ID</p>
+</td>
+<td class="cellrowborder" valign="top" width="47.620000000000005%" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p8201441561">Server name and ID. You can click a server name to view its details.</p>
+</td>
+<td class="cellrowborder" valign="top" width="27.029999999999998%" headers="mcps1.3.3.2.3.2.2.2.5.1.3 "><p id="hss_01_0347__p62011343617">-</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row1820184663"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p92012413614">IP Address</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p32011347617">EIP and private IP address of a server.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p18201144610">-</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row6201245615"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p32011341365">OS</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p320224562">Server OS.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p152021341567">Linux</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row1520219415613"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p19202146614">Server Status</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p72021441060">Server status. It can be:</p>
+<ul id="hss_01_0347__ul19202146614"><li id="hss_01_0347__li620254462"><strong id="hss_01_0347__b2000633758">Running</strong></li><li id="hss_01_0347__li12021941765"><strong id="hss_01_0347__b659121183">Stopped</strong></li></ul>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p6202194769">-</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row13202741266"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p14202141465">Ransomware Protection Status</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p12202141617">Ransomware protection status of a server. Its value can be:</p>
+<ul id="hss_01_0347__ul5202194768"><li id="hss_01_0347__li1820216420620"><strong id="hss_01_0347__b1392348620">Enabling</strong></li><li id="hss_01_0347__li720218411617"><strong id="hss_01_0347__b392764117">Enabled</strong></li><li id="hss_01_0347__li8202941967"><strong id="hss_01_0347__b1719054014">Disabling</strong></li><li id="hss_01_0347__li2020244260"><strong id="hss_01_0347__b1611977317">Disabled</strong></li></ul>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p92031141863">Enabled</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row1920312417619"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p220315419611">Policy</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p15203248617">Policy used for the server.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p1820313419614">-</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row82033413615"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p1203841569">Events</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p102038413612">Number of events detected within the selected time range.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p6203144068">-</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row1203545615"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p1320314419616">Backup Status</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p102032041563">Status of the backup function. Its value can be:</p>
+<ul id="hss_01_0347__ul5203341614"><li id="hss_01_0347__li10203441612"><strong id="hss_01_0347__b1717461959">Enabled</strong>: Automatic full data backup has been enabled for a server.</li><li id="hss_01_0347__li020384869"><strong id="hss_01_0347__b1743945560">Disabled</strong>: Automatic full data backup is disabled for a server.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p142041141615">Enabled</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row172041741866"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p22041341612">Backup Policy Status</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p72041441861">Status of the backup policy associated with the target server</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p142041947611"><strong id="hss_01_0347__b400282913">Enabled</strong></p>
+</td>
+</tr>
+<tr id="hss_01_0347__row7204841765"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p52041242611">Vault Status</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p2020412414614">Status of the vault associated with the backup on the target server</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p1204154268"><strong id="hss_01_0347__b1792973382">Available</strong></p>
+</td>
+</tr>
+<tr id="hss_01_0347__row82041641569"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p62041147616">Associated Vault</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p112041841769">Name of the vault bound to the target server</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p11204845610">-</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row12041241611"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p182041415618">Bound Servers</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p620411419615">Number of servers associated with the backup vault</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p132051349613">3</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row0205204762"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p1420518417616">Used/Total Vault Capacity (GB)</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p9205941363">The used capacity and total capacity of the vault associated with the target server</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p620511414612">30/400</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row172051746610"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p1205842614">Backups</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p142053414612">Number of backups generated in the vault</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p22051441863">18</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row1205341261"><td class="cellrowborder" rowspan="5" valign="top" width="9.83%" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p020520415618">Policies</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.52%" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p4205194768">Policy</p>
+</td>
+<td class="cellrowborder" valign="top" width="47.620000000000005%" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p202054410612">Policy name.</p>
+</td>
+<td class="cellrowborder" valign="top" width="27.029999999999998%" headers="mcps1.3.3.2.3.2.2.2.5.1.3 "><p id="hss_01_0347__p16205147610">-</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row32051241165"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p120519419614">Action</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p1420515418613">Action of a policy. Its value can be:</p>
+<ul id="hss_01_0347__ul13206042612"><li id="hss_01_0347__li62061841369"><strong id="hss_01_0347__b1795371266">Report alarm</strong>: If a virus is detected, an alarm will be reported.</li><li id="hss_01_0347__li17206842611"><strong id="hss_01_0347__b860755216">Report alarm and isolate</strong>: If a virus is detected, an alarm will be reported and the virus will be isolated.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p10206641613">Report alarm and isolate</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row18206441466"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p8206541161">Bait File</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p2206174063">Files and directories that store invalid data on servers and are used as bait files.</p>
+<p id="hss_01_0347__p3206249614">If ransomware prevention is enabled, this function is enabled by default.</p>
+<p id="hss_01_0347__p32061445614">After bait file is enabled, the system deploys bait files in protected directories and key directories (unless otherwise specified by users). A bait file occupies only a few resources and does not affect your server performance.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p2206141615">Enabled</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row112068416615"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p020794566">OS</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p16207241568">OS of the server to which the target policy is bound.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p72070419611">Windows</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row120715417611"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p1520716416616">Associated Servers</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.1 "><p id="hss_01_0347__p120712420614">Number of servers associated with the policy.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.3.2.2.2.5.1.2 "><p id="hss_01_0347__p52071540612">-</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0347__section2284192034416"><h4 class="sectiontitle">Viewing Backup and Restoration Tasks</h4><div class="notice" id="hss_01_0347__note17993154815466"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="hss_01_0347__p119941148134611">The backup of <span id="hss_01_0347__text1381952105012">HSS</span> ransomware protection depends on Cloud Backup and Recovery (CBR). Before enabling server backup, ensure that you have applied for CBR.</p>
+</div></div>
+<ol id="hss_01_0347__ol169407324415"><li id="hss_01_0347__li79003342712"><span>Log in to the management console and go to the <span id="hss_01_0347__text16780131614148">HSS</span> page.</span></li><li id="hss_01_0347__li1273393413477"><span>In the navigation pane, choose <strong id="hss_01_0347__b6581101322617">Prevention</strong> &gt; <strong id="hss_01_0347__b827541116267">Ransomware Prevention</strong>. Click the number of backup and restoration tasks.</span></li><li id="hss_01_0347__li2910135115417"><span>In the dialog box that is displayed, view the backup and restoration task details. You can filter or search for a server by its name or status. For more information, see <a href="#hss_01_0347__table88217551915">Table 2</a>.</span><p>
+<div class="tablenoborder"><a name="hss_01_0347__table88217551915"></a><a name="table88217551915"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0347__table88217551915" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Backup and restoration task parameters</caption><thead align="left"><tr id="hss_01_0347__row482125514110"><th align="left" class="cellrowborder" valign="top" width="24.632463246324633%" id="mcps1.3.4.3.3.2.1.2.4.1.1"><p id="hss_01_0347__p188217551014">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="42.03420342034204%" id="mcps1.3.4.3.3.2.1.2.4.1.2"><p id="hss_01_0347__p58213558111">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="33.33333333333333%" id="mcps1.3.4.3.3.2.1.2.4.1.3"><p id="hss_01_0347__p282119552011">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0347__row982185520110"><td class="cellrowborder" valign="top" width="24.632463246324633%" headers="mcps1.3.4.3.3.2.1.2.4.1.1 "><p id="hss_01_0347__p1682116551310">Server Name/ID</p>
+</td>
+<td class="cellrowborder" valign="top" width="42.03420342034204%" headers="mcps1.3.4.3.3.2.1.2.4.1.2 "><p id="hss_01_0347__p98214551417">Name or ID of a server that executes a restoration task.</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.4.3.3.2.1.2.4.1.3 "><p id="hss_01_0347__p8821195510111">-</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row18221955016"><td class="cellrowborder" valign="top" width="24.632463246324633%" headers="mcps1.3.4.3.3.2.1.2.4.1.1 "><p id="hss_01_0347__p1822655411">Backup Name</p>
+</td>
+<td class="cellrowborder" valign="top" width="42.03420342034204%" headers="mcps1.3.4.3.3.2.1.2.4.1.2 "><p id="hss_01_0347__p128222552119">Name of a backup file.</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.4.3.3.2.1.2.4.1.3 "><p id="hss_01_0347__p148221855712">-</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row482212553118"><td class="cellrowborder" valign="top" width="24.632463246324633%" headers="mcps1.3.4.3.3.2.1.2.4.1.1 "><p id="hss_01_0347__p1782225510111">Restoration Status</p>
+</td>
+<td class="cellrowborder" valign="top" width="42.03420342034204%" headers="mcps1.3.4.3.3.2.1.2.4.1.2 "><p id="hss_01_0347__p5822105511117">Restoration status of a server. It can be:</p>
+<ul id="hss_01_0347__ul1673185214416"><li id="hss_01_0347__li97324522417"><strong id="hss_01_0347__b105058125217">Succeeded</strong></li><li id="hss_01_0347__li47321652344"><strong id="hss_01_0347__b106662819528">Skipped</strong></li><li id="hss_01_0347__li20732852942"><strong id="hss_01_0347__b192501985218">Failed</strong></li><li id="hss_01_0347__li137326521417"><strong id="hss_01_0347__b385913965218">In progress</strong></li><li id="hss_01_0347__li1273275213416"><strong id="hss_01_0347__b6485171018521">Timed out</strong></li><li id="hss_01_0347__li13361155513"><strong id="hss_01_0347__b459515113523">Waiting</strong></li></ul>
+<p id="hss_01_0347__p9704111111411">If a task was skipped, failed, or timed out, perform restoration again.</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.4.3.3.2.1.2.4.1.3 "><p id="hss_01_0347__p148227553120">Succeeded</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row168226559116"><td class="cellrowborder" valign="top" width="24.632463246324633%" headers="mcps1.3.4.3.3.2.1.2.4.1.1 "><p id="hss_01_0347__p7822055717">Start/End Time</p>
+</td>
+<td class="cellrowborder" valign="top" width="42.03420342034204%" headers="mcps1.3.4.3.3.2.1.2.4.1.2 "><p id="hss_01_0347__p18228551116">Start and end time of backup and restoration.</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.4.3.3.2.1.2.4.1.3 "><p id="hss_01_0347__p198221055213">-</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0347__section2565818911"><h4 class="sectiontitle">Restoring Server Data</h4><div class="notice" id="hss_01_0347__note184374117503"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="hss_01_0347__hss_01_0347_p119941148134611">The backup of <span id="hss_01_0347__hss_01_0347_text1381952105012">HSS</span> ransomware protection depends on Cloud Backup and Recovery (CBR). Before enabling server backup, ensure that you have applied for CBR.</p>
+</div></div>
+<ol id="hss_01_0347__ol199801421141314"><li id="hss_01_0347__li559411383142"><span>Log in to the management console and go to the <span id="hss_01_0347__text20974037679037">HSS</span> page.</span></li><li id="hss_01_0347__li6683134641416"><span>In the navigation pane, choose <strong id="hss_01_0347__b1667535418402">Prevention</strong> &gt; <strong id="hss_01_0347__b1491785110401">Ransomware Prevention</strong>. Click the <strong id="hss_01_0347__b1961210910418">Protected Servers</strong> tab. In the <strong id="hss_01_0347__b628115814114">Operation</strong> column of the target server, click <strong id="hss_01_0347__b8148181318217">More</strong> &gt; <strong id="hss_01_0347__b14948182304215">Restore Data</strong>.</span></li><li id="hss_01_0347__li7328965170"><span>In the dialog box that is displayed, view information about the server to be restored. You can search for the backup data source to be restored by filtering the backup status and searching for the backup name. For more information, see <a href="#hss_01_0347__table17472183015292">Table 3</a>.</span><p>
+<div class="tablenoborder"><a name="hss_01_0347__table17472183015292"></a><a name="table17472183015292"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0347__table17472183015292" frame="border" border="1" rules="all"><caption><b>Table 3 </b>Backup data source parameters</caption><thead align="left"><tr id="hss_01_0347__row2473163052920"><th align="left" class="cellrowborder" valign="top" width="16.39163916391639%" id="mcps1.3.5.3.3.2.1.2.4.1.1"><p id="hss_01_0347__p44738300295">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="50.27502750275028%" id="mcps1.3.5.3.3.2.1.2.4.1.2"><p id="hss_01_0347__p1747314304294">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="33.33333333333333%" id="mcps1.3.5.3.3.2.1.2.4.1.3"><p id="hss_01_0347__p6473193072918">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0347__row547343062915"><td class="cellrowborder" valign="top" width="16.39163916391639%" headers="mcps1.3.5.3.3.2.1.2.4.1.1 "><p id="hss_01_0347__p14731930182916">Backup Name</p>
+</td>
+<td class="cellrowborder" valign="top" width="50.27502750275028%" headers="mcps1.3.5.3.3.2.1.2.4.1.2 "><p id="hss_01_0347__p1047313012913">Name of a backup file.</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.3.2.1.2.4.1.3 "><p id="hss_01_0347__p2473133022910">-</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row1947383015293"><td class="cellrowborder" valign="top" width="16.39163916391639%" headers="mcps1.3.5.3.3.2.1.2.4.1.1 "><p id="hss_01_0347__p17473173072910">Status</p>
+</td>
+<td class="cellrowborder" valign="top" width="50.27502750275028%" headers="mcps1.3.5.3.3.2.1.2.4.1.2 "><p id="hss_01_0347__p194731530112916">Backup status. It can be:</p>
+<ul id="hss_01_0347__ul1018518118450"><li id="hss_01_0347__li188818122311"><strong id="hss_01_0347__b76761424538">Available</strong></li><li id="hss_01_0347__li1224616265312"><strong id="hss_01_0347__b16765443145310">Creating</strong></li><li id="hss_01_0347__li1324303517319"><strong id="hss_01_0347__b55068442535">Deleting</strong></li><li id="hss_01_0347__li187712384316"><strong id="hss_01_0347__b2012254519532">Restoring</strong></li><li id="hss_01_0347__li51868113451"><strong id="hss_01_0347__b4749645125319">Error</strong></li></ul>
+<p id="hss_01_0347__p763095664217">A backup in <strong id="hss_01_0347__b842717211143">Available</strong> state can be used for restoration.</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.3.2.1.2.4.1.3 "><p id="hss_01_0347__p7473030132910">Available</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row32749062819"><td class="cellrowborder" valign="top" width="16.39163916391639%" headers="mcps1.3.5.3.3.2.1.2.4.1.1 "><p id="hss_01_0347__p102741104285">Purpose</p>
+</td>
+<td class="cellrowborder" valign="top" width="50.27502750275028%" headers="mcps1.3.5.3.3.2.1.2.4.1.2 "><p id="hss_01_0347__p1727460162815">Backup purpose. It can be:</p>
+<ul id="hss_01_0347__ul3839174318297"><li id="hss_01_0347__li17839114372913"><strong id="hss_01_0347__b898197154712">Periodic execution</strong>: Data is backed up based on the backup period configured in the backup policy.</li><li id="hss_01_0347__li24751249122913"><strong id="hss_01_0347__b393154012468">Ransomware protection</strong>: Data is backed up immediately when a server is attacked by ransomware.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.3.2.1.2.4.1.3 "><p id="hss_01_0347__p82741002287">Periodic execution</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row447373016295"><td class="cellrowborder" valign="top" width="16.39163916391639%" headers="mcps1.3.5.3.3.2.1.2.4.1.1 "><p id="hss_01_0347__p13473193012291">Execution Time</p>
+</td>
+<td class="cellrowborder" valign="top" width="50.27502750275028%" headers="mcps1.3.5.3.3.2.1.2.4.1.2 "><p id="hss_01_0347__p154731930102917">Time when the data source was backed up.</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.5.3.3.2.1.2.4.1.3 "><p id="hss_01_0347__p34732030142914">-</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0347__li15391458192614"><span>In the <strong id="hss_01_0347__b16117133110469">Operation</strong> column of a backup, click <strong id="hss_01_0347__b194118428469">Restore Data</strong>.</span><p><div class="note" id="hss_01_0347__note6728985116"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0347__p18721495514">Only a backup in the available state can be restored.</p>
+</div></div>
+</p></li><li id="hss_01_0347__li1472793518"><span>In the dialog box that is displayed, confirm the server information and click <strong id="hss_01_0347__b257575012115">OK</strong>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0347__section9812153053818"><h4 class="sectiontitle">Modifying a Backup Policy</h4><div class="notice" id="hss_01_0347__note5401312131419"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="hss_01_0347__hss_01_0347_p119941148134611_1">The backup of <span id="hss_01_0347__hss_01_0347_text1381952105012_1">HSS</span> ransomware protection depends on Cloud Backup and Recovery (CBR). Before enabling server backup, ensure that you have applied for CBR.</p>
+</div></div>
+<ol id="hss_01_0347__ol825143733813"><li id="hss_01_0347__li59946891511"><span>Log in to the management console and go to the <span id="hss_01_0347__text7015365399037">HSS</span> page.</span></li><li id="hss_01_0347__li13287193464710"><span>In the navigation pane, choose <span class="menucascade" id="hss_01_0347__menucascade9409951184718"><b><span class="uicontrol" id="hss_01_0347__uicontrol741017519475">Prevention</span></b> &gt; <b><span class="uicontrol" id="hss_01_0347__uicontrol7410195154719">Ransomware Prevention</span></b></span>. The protected server list is displayed. Click the policy name in the <span class="parmname" id="hss_01_0347__parmname654361717202"><b>Backup Policy Status</b></span> column of the target server.</span></li><li id="hss_01_0347__li980119519497"><span>Configure the policy in the dialog box that is displayed. For more information, see <a href="#hss_01_0347__table1463142913399">Table 4</a>.</span><p>
+<div class="tablenoborder"><a name="hss_01_0347__table1463142913399"></a><a name="table1463142913399"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0347__table1463142913399" frame="border" border="1" rules="all"><caption><b>Table 4 </b>Policy parameters</caption><thead align="left"><tr id="hss_01_0347__row144631291395"><th align="left" class="cellrowborder" valign="top" width="13.961396139613964%" id="mcps1.3.6.3.3.2.1.2.4.1.1"><p id="hss_01_0347__p24631029183919">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="57.48574857485749%" id="mcps1.3.6.3.3.2.1.2.4.1.2"><p id="hss_01_0347__p4463142916399">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="28.552855285528555%" id="mcps1.3.6.3.3.2.1.2.4.1.3"><p id="hss_01_0347__p1846314295391">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0347__row24631029123911"><td class="cellrowborder" valign="top" width="13.961396139613964%" headers="mcps1.3.6.3.3.2.1.2.4.1.1 "><p id="hss_01_0347__p144630293398">Backup Frequency</p>
+</td>
+<td class="cellrowborder" valign="top" width="57.48574857485749%" headers="mcps1.3.6.3.3.2.1.2.4.1.2 "><p id="hss_01_0347__p134631629163910">Data can be automatically backed up on specific days in a week, or at a fixed interval.</p>
+<ul id="hss_01_0347__ul2491315124211"><li id="hss_01_0347__li6491115174216"><strong id="hss_01_0347__b6749183515417">Weekly</strong>: Select one or more days in a week to back up data.</li><li id="hss_01_0347__li17491215134219"><strong id="hss_01_0347__b533134017414">Day based</strong>: The range of the backup interval is 1 to 30 days.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="28.552855285528555%" headers="mcps1.3.6.3.3.2.1.2.4.1.3 "><p id="hss_01_0347__p16463329133911">Weekly</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row10463202983918"><td class="cellrowborder" valign="top" width="13.961396139613964%" headers="mcps1.3.6.3.3.2.1.2.4.1.1 "><p id="hss_01_0347__p746315296390">Execution Time</p>
+</td>
+<td class="cellrowborder" valign="top" width="57.48574857485749%" headers="mcps1.3.6.3.3.2.1.2.4.1.2 "><p id="hss_01_0347__p546392903917">Time when automated backup is started.</p>
+<div class="note" id="hss_01_0347__note8957132484611"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="hss_01_0347__p1095911354819">Example of policy configurations</p>
+<p id="hss_01_0347__p91001159145016">Policy 1: Set <strong id="hss_01_0347__b1257333737">Backup Frequency</strong> to <strong id="hss_01_0347__b1247164811312">Weekly</strong>, select <strong id="hss_01_0347__b96481353939">Wednesday</strong> and <strong id="hss_01_0347__b6699154930">Saturday</strong>, and set <strong id="hss_01_0347__b1072820228614">Execution Time</strong> to <strong id="hss_01_0347__b36649261462">00:00</strong> and <strong id="hss_01_0347__b41357291367">13:00</strong>. Data will be automatically backed up at 00:00 and 13:00 every Wednesday and Saturday.</p>
+<p id="hss_01_0347__p127911418115115">Policy 2: Set <strong id="hss_01_0347__b162461619375">Backup Frequency</strong> to <strong id="hss_01_0347__b73747231376">Day based</strong> and set the interval to two days. Set <strong id="hss_01_0347__b13554133210713">Execution Time</strong> to <strong id="hss_01_0347__b1255113319814">02:00</strong> and <strong id="hss_01_0347__b5321651785">14:00</strong>. Data will be automatically backed up at 02:00 and 14:00 at an interval of two days.</p>
+</div></div>
+</td>
+<td class="cellrowborder" valign="top" width="28.552855285528555%" headers="mcps1.3.6.3.3.2.1.2.4.1.3 "><p id="hss_01_0347__p1463162933913">00:00, 07:00</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row74631529153915"><td class="cellrowborder" valign="top" width="13.961396139613964%" headers="mcps1.3.6.3.3.2.1.2.4.1.1 "><p id="hss_01_0347__p1546313295394">Timezone</p>
+</td>
+<td class="cellrowborder" valign="top" width="57.48574857485749%" headers="mcps1.3.6.3.3.2.1.2.4.1.2 "><p id="hss_01_0347__p154631129113910">Select the time zone of the backup time.</p>
+</td>
+<td class="cellrowborder" valign="top" width="28.552855285528555%" headers="mcps1.3.6.3.3.2.1.2.4.1.3 "><p id="hss_01_0347__p14631129143912">UTC+08:00</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0347__li18698552144914"><span>Confirm the settings and click <strong id="hss_01_0347__b46916281191">Next</strong>. Configure the backup retention rule.</span><p><ul id="hss_01_0347__ul174667291901"><li id="hss_01_0347__li197966401384"><span class="parmname" id="hss_01_0347__parmname87311327499"><b>Type</b></span>: <span class="parmvalue" id="hss_01_0347__parmvalue148686301492"><b>Backup Quantity</b></span><p id="hss_01_0347__p1619915411982">Configure the backup policy. For more information, see <a href="#hss_01_0347__table238419613134">Table 5</a>.</p>
+
+<div class="tablenoborder"><a name="hss_01_0347__table238419613134"></a><a name="table238419613134"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0347__table238419613134" frame="border" border="1" rules="all"><caption><b>Table 5 </b>Parameters for data retention by quantity</caption><thead align="left"><tr id="hss_01_0347__row193845614133"><th align="left" class="cellrowborder" valign="top" width="16.021602160216023%" id="mcps1.3.6.3.4.2.1.1.4.2.4.1.1"><p id="hss_01_0347__p538456141316">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="50.645064506450645%" id="mcps1.3.6.3.4.2.1.1.4.2.4.1.2"><p id="hss_01_0347__p638556141319">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="33.33333333333333%" id="mcps1.3.6.3.4.2.1.1.4.2.4.1.3"><p id="hss_01_0347__p438512616137">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0347__row93853615132"><td class="cellrowborder" valign="top" width="16.021602160216023%" headers="mcps1.3.6.3.4.2.1.1.4.2.4.1.1 "><p id="hss_01_0347__p438518621316">Rule</p>
+</td>
+<td class="cellrowborder" valign="top" width="50.645064506450645%" headers="mcps1.3.6.3.4.2.1.1.4.2.4.1.2 "><p id="hss_01_0347__p6385176191315">Number of latest backups to be retained.</p>
+<div class="notice" id="hss_01_0347__note9402423155019"><span class="noticetitle"> NOTICE: </span><div class="noticebody"><p id="hss_01_0347__p5402132305019">This setting takes effect no matter how you configure advanced options.</p>
+<p id="hss_01_0347__p827941825115">For example, if the rule is configured to keep the most recent 30 backups, and <strong id="hss_01_0347__b913819511162">Advanced Options</strong> are configured to keep the latest backup in the last 3 months (90 days), the latest 30 backups will be retained.</p>
+</div></div>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.6.3.4.2.1.1.4.2.4.1.3 "><p id="hss_01_0347__p193851462139">30</p>
+</td>
+</tr>
+<tr id="hss_01_0347__row133857617138"><td class="cellrowborder" valign="top" width="16.021602160216023%" headers="mcps1.3.6.3.4.2.1.1.4.2.4.1.1 "><p id="hss_01_0347__p17385267137">(Optional) Advanced Options</p>
+</td>
+<td class="cellrowborder" valign="top" width="50.645064506450645%" headers="mcps1.3.6.3.4.2.1.1.4.2.4.1.2 "><p id="hss_01_0347__p3296317125917">Daily backup: The latest backup on each of the specified days is retained.</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.6.3.4.2.1.1.4.2.4.1.3 "><p id="hss_01_0347__p238516661318">Keep the most recent backup from each of the last three months</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</li><li id="hss_01_0347__li06931301889"><span class="parmname" id="hss_01_0347__parmname2160174213300"><b>Type</b></span>: <span class="parmvalue" id="hss_01_0347__parmvalue111611242113010"><b>Time period</b></span><p id="hss_01_0347__p63526402615">Configure the backup policy. For more information, see <a href="#hss_01_0347__table057910431715">Table 6</a>.</p>
+
+<div class="tablenoborder"><a name="hss_01_0347__table057910431715"></a><a name="table057910431715"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0347__table057910431715" frame="border" border="1" rules="all"><caption><b>Table 6 </b>Parameters for data retention by time period</caption><thead align="left"><tr id="hss_01_0347__row85802042178"><th align="left" class="cellrowborder" valign="top" width="18.21182118211821%" id="mcps1.3.6.3.4.2.1.2.4.2.4.1.1"><p id="hss_01_0347__p11580184141717">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="48.45484548454845%" id="mcps1.3.6.3.4.2.1.2.4.2.4.1.2"><p id="hss_01_0347__p10580134151711">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="33.33333333333333%" id="mcps1.3.6.3.4.2.1.2.4.2.4.1.3"><p id="hss_01_0347__p125801949175">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0347__row18580245171"><td class="cellrowborder" valign="top" width="18.21182118211821%" headers="mcps1.3.6.3.4.2.1.2.4.2.4.1.1 "><p id="hss_01_0347__p4580843172">Rule</p>
+</td>
+<td class="cellrowborder" valign="top" width="48.45484548454845%" headers="mcps1.3.6.3.4.2.1.2.4.2.4.1.2 "><p id="hss_01_0347__p258012410178">Select or customize a backup retention period. The system will automatically retain backups and delete old ones based on your settings. The retention period can be:</p>
+<ul id="hss_01_0347__ul19651024228"><li id="hss_01_0347__li965132102217">Days</li><li id="hss_01_0347__li128638392216">1 month</li><li id="hss_01_0347__li839218715228">3 months</li><li id="hss_01_0347__li1086041520223">6 months</li><li id="hss_01_0347__li784012196222">1 year</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.6.3.4.2.1.2.4.2.4.1.3 "><p id="hss_01_0347__p12581104111710">3 months</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</li><li id="hss_01_0347__li18848532810"><strong id="hss_01_0347__b689674911376">Type</strong>: <strong id="hss_01_0347__b312817511375">Permanent</strong><div class="p" id="hss_01_0347__p550883834512">Backup data will be permanently stored.<div class="note" id="hss_01_0347__note1888116113456"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0347__p5881711144513">If the <strong id="hss_01_0347__b15350193384018">Retention Type</strong> of a rule is changed from <strong id="hss_01_0347__b1555172920414">Time period</strong> to Permanent, historical backups will still be deleted by following based on the <strong id="hss_01_0347__b7529185620418">Time period</strong> settings. </p>
+</div></div>
+</div>
+</li></ul>
+</p></li><li id="hss_01_0347__li2845455165915"><span>Click <strong id="hss_01_0347__b7459165616399">OK</strong>.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0346.html">Ransomware Prevention</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0348.html b/docs/hss/umn/hss_01_0348.html
new file mode 100644
index 00000000..2bea7008
--- /dev/null
+++ b/docs/hss/umn/hss_01_0348.html
@@ -0,0 +1,172 @@
+<a name="hss_01_0348"></a><a name="hss_01_0348"></a>
+
+<h1 class="topictitle1">Enabling Ransomware Prevention</h1>
+<div id="body0000001178396812"><div class="section" id="hss_01_0348__section5921181764214"><h4 class="sectiontitle">Prerequisites</h4><ul id="hss_01_0348__ul1415315448217"><li id="hss_01_0348__li5153164412214">You have enabled <span id="hss_01_0348__text02201719134517">HSS</span> premium, WTP, or container edition.</li></ul>
+</div>
+<div class="section" id="hss_01_0348__section268216245291"><h4 class="sectiontitle">Constraints</h4><ul id="hss_01_0348__en-us_topic_0000001223596615_ul6928190153712"><li id="hss_01_0348__en-us_topic_0000001223596615_li16969159191315">Only premium, WTP, and container editions support ransomware protection.</li></ul>
+</div>
+<div class="section" id="hss_01_0348__section266228165012"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0348__ol18487114965011"><li id="hss_01_0348__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0348__li830314169200"><span>Click <span><img id="hss_01_0348__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0348__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0348__hss_01_0571_b14857117404"><span id="hss_01_0348__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0348__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0348__li417472413510"><span>In the navigation pane, choose <strong id="hss_01_0348__b1594251874714">Prevention</strong> &gt; <strong id="hss_01_0348__b12735122010473">Ransomware Prevention</strong>. Click the <strong id="hss_01_0348__b31961049174810">Protected Servers</strong> tab. Click <strong id="hss_01_0348__b1172181115499">Add Server</strong>.</span><p><div class="note" id="hss_01_0348__note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0348__hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<p id="hss_01_0348__p49311242901"></p>
+</p></li><li id="hss_01_0348__li12763138175820"><span>In the dialog box that is displayed, select the target system to be protected and configure a protection policy.</span><p><ul id="hss_01_0348__ul436822103112"><li id="hss_01_0348__li19361122103115"><strong id="hss_01_0348__b39003516597">OS</strong>: Select the server system to be protected.</li><li id="hss_01_0348__li7596153873120"><strong id="hss_01_0348__b899116711596">Ransomware Prevention</strong>: Enable or disable ransomware prevention.<ul id="hss_01_0348__ul12232172513339"><li id="hss_01_0348__li1023510267232">Enable: <span><img id="hss_01_0348__image10675912122418" src="en-us_image_0000001752813641.png"></span></li><li id="hss_01_0348__li223514269238">Disable: <span><img id="hss_01_0348__image15235122617238" src="en-us_image_0000001752813769.png"></span></li></ul>
+</li><li id="hss_01_0348__li258823115333"><strong id="hss_01_0348__b1134813174598">Policy</strong>: Select an existing policy or create a protection policy.<ul id="hss_01_0348__ul1180145213374"><li id="hss_01_0348__li018018527374"><strong id="hss_01_0348__b17023635914">Use policy</strong>: Select an existing protection policy. For details, see <a href="#hss_01_0348__table1625953194217">Parameters for selecting an existing policy</a>.
+<div class="tablenoborder"><a name="hss_01_0348__table1625953194217"></a><a name="table1625953194217"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0348__table1625953194217" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameters for selecting an existing policy</caption><thead align="left"><tr id="hss_01_0348__row2026125318426"><th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.3.2.4.2.1.3.2.1.3.2.3.1.1"><p id="hss_01_0348__p132675314429">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.3.2.4.2.1.3.2.1.3.2.3.1.2"><p id="hss_01_0348__p1226185315420">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0348__row1526195334215"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.2.4.2.1.3.2.1.3.2.3.1.1 "><p id="hss_01_0348__p122655314421">Policy</p>
+</td>
+<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.2.4.2.1.3.2.1.3.2.3.1.2 "><p id="hss_01_0348__p2026205394218">Select an existing policy.</p>
+</td>
+</tr>
+<tr id="hss_01_0348__row162614530425"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.2.4.2.1.3.2.1.3.2.3.1.1 "><p id="hss_01_0348__p82605374219">Action</p>
+</td>
+<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.2.4.2.1.3.2.1.3.2.3.1.2 "><p id="hss_01_0348__p152635320429">Select a ransomware event processing mode supported by the selected protection policy.</p>
+<ul id="hss_01_0348__ul113378244467"><li id="hss_01_0348__li0337224174619"><strong id="hss_01_0348__b567882644411">Report alarm and isolate</strong></li><li id="hss_01_0348__li1033714241463"><strong id="hss_01_0348__b11527122831519">Report alarm</strong></li></ul>
+</td>
+</tr>
+<tr id="hss_01_0348__row7261253174210"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.2.4.2.1.3.2.1.3.2.3.1.1 "><p id="hss_01_0348__p1119171214712">Bait File</p>
+</td>
+<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.2.4.2.1.3.2.1.3.2.3.1.2 "><p id="hss_01_0348__p51916129471">After bait protection is enabled, the system deploys bait files in protected directories and key directories (unless otherwise specified by users). A bait file occupies only a few resources and does not affect your server performance.</p>
+<p id="hss_01_0348__p4195124474">If ransomware prevention is enabled, this function is enabled by default.</p>
+<div class="note" id="hss_01_0348__note1519171244719"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="hss_01_0348__p21951274710">Currently, Linux servers support dynamic generation and deployment of bait files. Windows servers support only static deployment of bait files.</p>
+</div></div>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</li><li id="hss_01_0348__li5181115233717">Create new: Create a protection policy on the current page. For details about the parameters, see <a href="#hss_01_0348__table1358122914521">Parameters for creating a protection policy</a>.
+<div class="tablenoborder"><a name="hss_01_0348__table1358122914521"></a><a name="table1358122914521"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0348__table1358122914521" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Protection policy parameters</caption><thead align="left"><tr id="hss_01_0348__row85811429155213"><th align="left" class="cellrowborder" valign="top" width="16.2016201620162%" id="mcps1.3.3.2.4.2.1.3.2.2.2.2.4.1.1"><p id="hss_01_0348__p4581102914528">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="46.98469846984699%" id="mcps1.3.3.2.4.2.1.3.2.2.2.2.4.1.2"><p id="hss_01_0348__p858162911520">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="36.81368136813681%" id="mcps1.3.3.2.4.2.1.3.2.2.2.2.4.1.3"><p id="hss_01_0348__p158216294527">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0348__row169717121165"><td class="cellrowborder" valign="top" width="16.2016201620162%" headers="mcps1.3.3.2.4.2.1.3.2.2.2.2.4.1.1 "><p id="hss_01_0348__p969711271615">Policy</p>
+</td>
+<td class="cellrowborder" valign="top" width="46.98469846984699%" headers="mcps1.3.3.2.4.2.1.3.2.2.2.2.4.1.2 "><p id="hss_01_0348__p0697181213163">Policy name</p>
+</td>
+<td class="cellrowborder" valign="top" width="36.81368136813681%" headers="mcps1.3.3.2.4.2.1.3.2.2.2.2.4.1.3 "><p id="hss_01_0348__p569731218168">test</p>
+</td>
+</tr>
+<tr id="hss_01_0348__row552355220615"><td class="cellrowborder" valign="top" width="16.2016201620162%" headers="mcps1.3.3.2.4.2.1.3.2.2.2.2.4.1.1 "><p id="hss_01_0348__p049818215349">Action</p>
+</td>
+<td class="cellrowborder" valign="top" width="46.98469846984699%" headers="mcps1.3.3.2.4.2.1.3.2.2.2.2.4.1.2 "><p id="hss_01_0348__p1249815273414">Indicates how an event is handled.</p>
+<ul id="hss_01_0348__ul13498125347"><li id="hss_01_0348__li249810223410"><strong id="hss_01_0348__b72241336466">Report alarm and isolate</strong></li><li id="hss_01_0348__li1849882133416"><strong id="hss_01_0348__b128004361595">Report alarm</strong></li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="36.81368136813681%" headers="mcps1.3.3.2.4.2.1.3.2.2.2.2.4.1.3 "><p id="hss_01_0348__p9499102183412"><strong id="hss_01_0348__b37415516467">Report alarm and isolate</strong></p>
+</td>
+</tr>
+<tr id="hss_01_0348__row4236290138"><td class="cellrowborder" valign="top" width="16.2016201620162%" headers="mcps1.3.3.2.4.2.1.3.2.2.2.2.4.1.1 "><p id="hss_01_0348__p1649914213347">Bait File</p>
+</td>
+<td class="cellrowborder" valign="top" width="46.98469846984699%" headers="mcps1.3.3.2.4.2.1.3.2.2.2.2.4.1.2 "><p id="hss_01_0348__p1449952163418">After bait protection is enabled, the system deploys bait files in protected directories and key directories (unless otherwise specified by users). A bait file occupies only a few resources and does not affect your server performance.</p>
+<p id="hss_01_0348__p54991213418">If ransomware prevention is enabled, this function is enabled by default.</p>
+<div class="note" id="hss_01_0348__note44995219342"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="hss_01_0348__p7499828342">Currently, Linux servers support dynamic generation and deployment of bait files. Windows servers support only static deployment of bait files.</p>
+</div></div>
+</td>
+<td class="cellrowborder" valign="top" width="36.81368136813681%" headers="mcps1.3.3.2.4.2.1.3.2.2.2.2.4.1.3 "><p id="hss_01_0348__p14990215342">Enabled</p>
+</td>
+</tr>
+<tr id="hss_01_0348__row596031111145"><td class="cellrowborder" valign="top" width="16.2016201620162%" headers="mcps1.3.3.2.4.2.1.3.2.2.2.2.4.1.1 "><p id="hss_01_0348__p17499172173417">Bait File Directories</p>
+</td>
+<td class="cellrowborder" valign="top" width="46.98469846984699%" headers="mcps1.3.3.2.4.2.1.3.2.2.2.2.4.1.2 "><p id="hss_01_0348__p10501152133416">Protected directories (excluding subdirectories).</p>
+<p id="hss_01_0348__p15011253419">Separate multiple directories with semicolons (;). You can configure up to 20 directories.</p>
+<p id="hss_01_0348__p185914570517">This parameter is mandatory for Linux servers and optional for Windows servers.</p>
+</td>
+<td class="cellrowborder" valign="top" width="36.81368136813681%" headers="mcps1.3.3.2.4.2.1.3.2.2.2.2.4.1.3 "><p id="hss_01_0348__p139625111453">Linux: /etc/lesuo</p>
+<p id="hss_01_0348__p8861906459">Windows: C:\Test</p>
+</td>
+</tr>
+<tr id="hss_01_0348__row83172218147"><td class="cellrowborder" valign="top" width="16.2016201620162%" headers="mcps1.3.3.2.4.2.1.3.2.2.2.2.4.1.1 "><p id="hss_01_0348__p1250113243415">Excluded Directory (Optional)</p>
+</td>
+<td class="cellrowborder" valign="top" width="46.98469846984699%" headers="mcps1.3.3.2.4.2.1.3.2.2.2.2.4.1.2 "><p id="hss_01_0348__p450192113419">Directories where bait files are not deployed.</p>
+<p id="hss_01_0348__p0501927346">Separate multiple directories with semicolons (;). You can configure up to 20 excluded directories.</p>
+</td>
+<td class="cellrowborder" valign="top" width="36.81368136813681%" headers="mcps1.3.3.2.4.2.1.3.2.2.2.2.4.1.3 "><p id="hss_01_0348__p8600122874415">Linux: /test</p>
+<p id="hss_01_0348__p185017233419">Windows: C:\ProData</p>
+</td>
+</tr>
+<tr id="hss_01_0348__row5275193521413"><td class="cellrowborder" valign="top" width="16.2016201620162%" headers="mcps1.3.3.2.4.2.1.3.2.2.2.2.4.1.1 "><p id="hss_01_0348__p20501629346">Protected File Type</p>
+</td>
+<td class="cellrowborder" valign="top" width="46.98469846984699%" headers="mcps1.3.3.2.4.2.1.3.2.2.2.2.4.1.2 "><p id="hss_01_0348__p155017210344">Types of files to be protected.</p>
+<p id="hss_01_0348__p1250119217341">More than 70 file formats can be protected, including databases, containers, code, certificate keys, and backups.</p>
+<p id="hss_01_0348__p3836832192613">This parameter is mandatory for Linux servers only.</p>
+</td>
+<td class="cellrowborder" valign="top" width="36.81368136813681%" headers="mcps1.3.3.2.4.2.1.3.2.2.2.2.4.1.3 "><p id="hss_01_0348__p125021021341">Select all</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</li></ul>
+</li></ul>
+</p></li><li id="hss_01_0348__li10629162042717"><span>After the configuration is complete, click <strong id="hss_01_0348__b1833215541547">Next</strong> to configure the vault.</span><p><div class="note" id="hss_01_0348__note3372134783319"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0348__p8405649133820">Server backup must be enabled.</p>
+</div></div>
+<p id="hss_01_0348__p1395194519523">Select the target vault. For details about the vault list, see <a href="#hss_01_0348__table207291713131211">Table 3</a>.</p>
+<div class="note" id="hss_01_0348__note10314913145319"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0348__p231551316539">When selecting a vault, you are advised to determine the required capacity based on the backup rules, retention period, and server asset size. Select a vault with enough available capacity. Otherwise, the backup may fail.</p>
+</div></div>
+
+<div class="tablenoborder"><a name="hss_01_0348__table207291713131211"></a><a name="table207291713131211"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0348__table207291713131211" frame="border" border="1" rules="all"><caption><b>Table 3 </b>Vault list parameters</caption><thead align="left"><tr id="hss_01_0348__row87306131123"><th align="left" class="cellrowborder" valign="top" width="38.92%" id="mcps1.3.3.2.5.2.4.2.3.1.1"><p id="hss_01_0348__p6730181361213">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="61.08%" id="mcps1.3.3.2.5.2.4.2.3.1.2"><p id="hss_01_0348__p27301413161215">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0348__row1173081313123"><td class="cellrowborder" valign="top" width="38.92%" headers="mcps1.3.3.2.5.2.4.2.3.1.1 "><p id="hss_01_0348__p1573011361217">Vault Name</p>
+</td>
+<td class="cellrowborder" valign="top" width="61.08%" headers="mcps1.3.3.2.5.2.4.2.3.1.2 "><p id="hss_01_0348__p473041317124">Name of the target vault</p>
+</td>
+</tr>
+<tr id="hss_01_0348__row4730171351216"><td class="cellrowborder" valign="top" width="38.92%" headers="mcps1.3.3.2.5.2.4.2.3.1.1 "><p id="hss_01_0348__p4730201318125">Vault ID</p>
+</td>
+<td class="cellrowborder" valign="top" width="61.08%" headers="mcps1.3.3.2.5.2.4.2.3.1.2 "><p id="hss_01_0348__p9730161319123">ID of the target vault</p>
+</td>
+</tr>
+<tr id="hss_01_0348__row8730181371215"><td class="cellrowborder" valign="top" width="38.92%" headers="mcps1.3.3.2.5.2.4.2.3.1.1 "><p id="hss_01_0348__p187301213131213">Vault Status</p>
+</td>
+<td class="cellrowborder" valign="top" width="61.08%" headers="mcps1.3.3.2.5.2.4.2.3.1.2 "><p id="hss_01_0348__p16730141318129">Status of the target vault.</p>
+<ul id="hss_01_0348__ul7155315181512"><li id="hss_01_0348__li161551415101519"><strong id="hss_01_0348__b155463631411433">Available</strong></li><li id="hss_01_0348__li16767171621511"><strong id="hss_01_0348__b6590123814530">Frozen</strong></li></ul>
+</td>
+</tr>
+<tr id="hss_01_0348__row57305133128"><td class="cellrowborder" valign="top" width="38.92%" headers="mcps1.3.3.2.5.2.4.2.3.1.1 "><p id="hss_01_0348__p17319132128">Used/Total Vault Capacity (GB)</p>
+</td>
+<td class="cellrowborder" valign="top" width="61.08%" headers="mcps1.3.3.2.5.2.4.2.3.1.2 "><p id="hss_01_0348__p873151311124">Current usage and total capacity of the target vault</p>
+</td>
+</tr>
+<tr id="hss_01_0348__row187311113101218"><td class="cellrowborder" valign="top" width="38.92%" headers="mcps1.3.3.2.5.2.4.2.3.1.1 "><p id="hss_01_0348__p10731131319126">Used Capacity (GB)</p>
+</td>
+<td class="cellrowborder" valign="top" width="61.08%" headers="mcps1.3.3.2.5.2.4.2.3.1.2 "><p id="hss_01_0348__p673141351211">Total capacity of the server bound to the target vault.</p>
+<p id="hss_01_0348__p568185174411"><strong id="hss_01_0348__b204829195324">For example</strong>:</p>
+<p id="hss_01_0348__p89401814162618">Three servers with 60 GB hard disks are bound to vault A with 200 GB capacity.</p>
+<ul id="hss_01_0348__ul6843202119263"><li id="hss_01_0348__li1690415216273">The used capacity is the total storage capacity of the servers bound to vault A (3 x 60 GB = 180 GB).</li><li id="hss_01_0348__li19843102142615">The used capacity does not occupy the capacity of vault A.</li><li id="hss_01_0348__li181301731102610">The used capacity indicates the maximum capacity required for backing up servers bound to vault A. The used capacity cannot be greater than the capacity of vault A. Otherwise, the backup may fail.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0348__row473131317122"><td class="cellrowborder" valign="top" width="38.92%" headers="mcps1.3.3.2.5.2.4.2.3.1.1 "><p id="hss_01_0348__p3731121318128">Number of bound servers</p>
+</td>
+<td class="cellrowborder" valign="top" width="61.08%" headers="mcps1.3.3.2.5.2.4.2.3.1.2 "><p id="hss_01_0348__p1373113134122">Number of servers associated with the target vault</p>
+</td>
+</tr>
+<tr id="hss_01_0348__row5731181341210"><td class="cellrowborder" valign="top" width="38.92%" headers="mcps1.3.3.2.5.2.4.2.3.1.1 "><p id="hss_01_0348__p4731151391213">Backup Policy Status</p>
+</td>
+<td class="cellrowborder" valign="top" width="61.08%" headers="mcps1.3.3.2.5.2.4.2.3.1.2 "><p id="hss_01_0348__p37311813121215">Status of the rule for automatically backing up server data in the target vault</p>
+<ul id="hss_01_0348__ul153219583520"><li id="hss_01_0348__li10321658165215"><strong id="hss_01_0348__b1393428173612">Enabled</strong>: The vault automatically backs up servers based on the selected backup policy.</li><li id="hss_01_0348__li1532216585520"><strong id="hss_01_0348__b7819104012912">Disabled</strong>: The backup policy is not enabled and the vault cannot be used to back up data.</li></ul>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0348__li11531630124318"><span>Click <strong id="hss_01_0348__b17715363717">Next</strong> and select servers. You can search for a server by its name or by filtering.</span><p><div class="fignone" id="hss_01_0348__fig1948815121612"><span class="figcap"><b>Figure 1 </b>Selecting servers</span><br><span><img id="hss_01_0348__image20339153243715" src="en-us_image_0000001621219284.png"></span></div>
+</p></li><li id="hss_01_0348__li133324913385"><span>Click <strong id="hss_01_0348__b1941415238817">OK</strong>.</span></li><li id="hss_01_0348__li20296141817575"><span>In the navigation pane, choose <strong id="hss_01_0348__b13320124212815">Prevention</strong> &gt; <strong id="hss_01_0348__b152721445781">Ransomware Prevention</strong>. Click the <strong id="hss_01_0348__b1593616473819">Protected Servers</strong> tab and check protected servers.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0346.html">Ransomware Prevention</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0349.html b/docs/hss/umn/hss_01_0349.html
new file mode 100644
index 00000000..5da0436a
--- /dev/null
+++ b/docs/hss/umn/hss_01_0349.html
@@ -0,0 +1,159 @@
+<a name="hss_01_0349"></a><a name="hss_01_0349"></a>
+
+<h1 class="topictitle1">Managing Ransomware Prevention Policies</h1>
+<div id="body0000001178421138"><div class="notice" id="hss_01_0349__note683514371034"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="hss_01_0349__p83751415629">Currently, you can create a ransomware prevention policy only when enabling ransomware prevention.</p>
+</div></div>
+<div class="section" id="hss_01_0349__section268216245291"><h4 class="sectiontitle">Constraints</h4><p id="hss_01_0349__p1966621141317">Only premium, WTP, and container editions support ransomware protection.</p>
+</div>
+<div class="section" id="hss_01_0349__section227063155218"><h4 class="sectiontitle">Creating a Policy</h4><ol id="hss_01_0349__ol126822135418"><li id="hss_01_0349__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0349__li830314169200"><span>Click <span><img id="hss_01_0349__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0349__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0349__hss_01_0571_b14857117404"><span id="hss_01_0349__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0349__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0349__li1182114130588"><span>In the navigation pane, choose <strong id="hss_01_0349__hss_01_0348_b1594251874714">Prevention</strong> &gt; <strong id="hss_01_0349__hss_01_0348_b12735122010473">Ransomware Prevention</strong>. Click the <strong id="hss_01_0349__hss_01_0348_b31961049174810">Protected Servers</strong> tab. Click <strong id="hss_01_0349__hss_01_0348_b1172181115499">Add Server</strong>.</span><p><div class="note" id="hss_01_0349__hss_01_0348_note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0349__hss_01_0348_hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<p id="hss_01_0349__hss_01_0348_p49311242901"></p>
+</p></li><li id="hss_01_0349__li16451111755813"><span>In the slide pane that is displayed, select <strong id="hss_01_0349__b3703174117149">Linux</strong> or <strong id="hss_01_0349__b119500204129">Windows</strong>, enable protection, and select <strong id="hss_01_0349__b12874519143">Create new</strong>. For more information, see <a href="#hss_01_0349__table4502192113419">Table 1</a>.</span><p><div class="p" id="hss_01_0349__p11522517341">The following uses a Linux server as an example.<div class="fignone" id="hss_01_0349__fig16834113251919"><span class="figcap"><b>Figure 1 </b>Creating a policy</span><br><span><img id="hss_01_0349__image19936171283317" src="en-us_image_0000001621339160.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0349__table4502192113419"></a><a name="table4502192113419"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0349__table4502192113419" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Protection policy parameters</caption><thead align="left"><tr id="hss_01_0349__hss_01_0348_row85811429155213"><th align="left" class="cellrowborder" valign="top" width="16.2016201620162%" id="mcps1.3.3.2.4.2.1.2.2.4.1.1"><p id="hss_01_0349__hss_01_0348_p4581102914528">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="46.98469846984699%" id="mcps1.3.3.2.4.2.1.2.2.4.1.2"><p id="hss_01_0349__hss_01_0348_p858162911520">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="36.81368136813681%" id="mcps1.3.3.2.4.2.1.2.2.4.1.3"><p id="hss_01_0349__hss_01_0348_p158216294527">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0349__hss_01_0348_row169717121165"><td class="cellrowborder" valign="top" width="16.2016201620162%" headers="mcps1.3.3.2.4.2.1.2.2.4.1.1 "><p id="hss_01_0349__hss_01_0348_p969711271615">Policy</p>
+</td>
+<td class="cellrowborder" valign="top" width="46.98469846984699%" headers="mcps1.3.3.2.4.2.1.2.2.4.1.2 "><p id="hss_01_0349__hss_01_0348_p0697181213163">Policy name</p>
+</td>
+<td class="cellrowborder" valign="top" width="36.81368136813681%" headers="mcps1.3.3.2.4.2.1.2.2.4.1.3 "><p id="hss_01_0349__hss_01_0348_p569731218168">test</p>
+</td>
+</tr>
+<tr id="hss_01_0349__hss_01_0348_row552355220615"><td class="cellrowborder" valign="top" width="16.2016201620162%" headers="mcps1.3.3.2.4.2.1.2.2.4.1.1 "><p id="hss_01_0349__hss_01_0348_p049818215349">Action</p>
+</td>
+<td class="cellrowborder" valign="top" width="46.98469846984699%" headers="mcps1.3.3.2.4.2.1.2.2.4.1.2 "><p id="hss_01_0349__hss_01_0348_p1249815273414">Indicates how an event is handled.</p>
+<ul id="hss_01_0349__hss_01_0348_ul13498125347"><li id="hss_01_0349__hss_01_0348_li249810223410"><strong id="hss_01_0349__hss_01_0348_b72241336466">Report alarm and isolate</strong></li><li id="hss_01_0349__hss_01_0348_li1849882133416"><strong id="hss_01_0349__hss_01_0348_b128004361595">Report alarm</strong></li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="36.81368136813681%" headers="mcps1.3.3.2.4.2.1.2.2.4.1.3 "><p id="hss_01_0349__hss_01_0348_p9499102183412"><strong id="hss_01_0349__hss_01_0348_b37415516467">Report alarm and isolate</strong></p>
+</td>
+</tr>
+<tr id="hss_01_0349__hss_01_0348_row4236290138"><td class="cellrowborder" valign="top" width="16.2016201620162%" headers="mcps1.3.3.2.4.2.1.2.2.4.1.1 "><p id="hss_01_0349__hss_01_0348_p1649914213347">Bait File</p>
+</td>
+<td class="cellrowborder" valign="top" width="46.98469846984699%" headers="mcps1.3.3.2.4.2.1.2.2.4.1.2 "><p id="hss_01_0349__hss_01_0348_p1449952163418">After bait protection is enabled, the system deploys bait files in protected directories and key directories (unless otherwise specified by users). A bait file occupies only a few resources and does not affect your server performance.</p>
+<p id="hss_01_0349__hss_01_0348_p54991213418">If ransomware prevention is enabled, this function is enabled by default.</p>
+<div class="note" id="hss_01_0349__hss_01_0348_note44995219342"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="hss_01_0349__hss_01_0348_p7499828342">Currently, Linux servers support dynamic generation and deployment of bait files. Windows servers support only static deployment of bait files.</p>
+</div></div>
+</td>
+<td class="cellrowborder" valign="top" width="36.81368136813681%" headers="mcps1.3.3.2.4.2.1.2.2.4.1.3 "><p id="hss_01_0349__hss_01_0348_p14990215342">Enabled</p>
+</td>
+</tr>
+<tr id="hss_01_0349__hss_01_0348_row596031111145"><td class="cellrowborder" valign="top" width="16.2016201620162%" headers="mcps1.3.3.2.4.2.1.2.2.4.1.1 "><p id="hss_01_0349__hss_01_0348_p17499172173417">Bait File Directories</p>
+</td>
+<td class="cellrowborder" valign="top" width="46.98469846984699%" headers="mcps1.3.3.2.4.2.1.2.2.4.1.2 "><p id="hss_01_0349__hss_01_0348_p10501152133416">Protected directories (excluding subdirectories).</p>
+<p id="hss_01_0349__hss_01_0348_p15011253419">Separate multiple directories with semicolons (;). You can configure up to 20 directories.</p>
+<p id="hss_01_0349__hss_01_0348_p185914570517">This parameter is mandatory for Linux servers and optional for Windows servers.</p>
+</td>
+<td class="cellrowborder" valign="top" width="36.81368136813681%" headers="mcps1.3.3.2.4.2.1.2.2.4.1.3 "><p id="hss_01_0349__hss_01_0348_p139625111453">Linux: /etc/lesuo</p>
+<p id="hss_01_0349__hss_01_0348_p8861906459">Windows: C:\Test</p>
+</td>
+</tr>
+<tr id="hss_01_0349__hss_01_0348_row83172218147"><td class="cellrowborder" valign="top" width="16.2016201620162%" headers="mcps1.3.3.2.4.2.1.2.2.4.1.1 "><p id="hss_01_0349__hss_01_0348_p1250113243415">Excluded Directory (Optional)</p>
+</td>
+<td class="cellrowborder" valign="top" width="46.98469846984699%" headers="mcps1.3.3.2.4.2.1.2.2.4.1.2 "><p id="hss_01_0349__hss_01_0348_p450192113419">Directories where bait files are not deployed.</p>
+<p id="hss_01_0349__hss_01_0348_p0501927346">Separate multiple directories with semicolons (;). You can configure up to 20 excluded directories.</p>
+</td>
+<td class="cellrowborder" valign="top" width="36.81368136813681%" headers="mcps1.3.3.2.4.2.1.2.2.4.1.3 "><p id="hss_01_0349__hss_01_0348_p8600122874415">Linux: /test</p>
+<p id="hss_01_0349__hss_01_0348_p185017233419">Windows: C:\ProData</p>
+</td>
+</tr>
+<tr id="hss_01_0349__hss_01_0348_row5275193521413"><td class="cellrowborder" valign="top" width="16.2016201620162%" headers="mcps1.3.3.2.4.2.1.2.2.4.1.1 "><p id="hss_01_0349__hss_01_0348_p20501629346">Protected File Type</p>
+</td>
+<td class="cellrowborder" valign="top" width="46.98469846984699%" headers="mcps1.3.3.2.4.2.1.2.2.4.1.2 "><p id="hss_01_0349__hss_01_0348_p155017210344">Types of files to be protected.</p>
+<p id="hss_01_0349__hss_01_0348_p1250119217341">More than 70 file formats can be protected, including databases, containers, code, certificate keys, and backups.</p>
+<p id="hss_01_0349__hss_01_0348_p3836832192613">This parameter is mandatory for Linux servers only.</p>
+</td>
+<td class="cellrowborder" valign="top" width="36.81368136813681%" headers="mcps1.3.3.2.4.2.1.2.2.4.1.3 "><p id="hss_01_0349__hss_01_0348_p125021021341">Select all</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</p></li><li id="hss_01_0349__li389417422528"><span>Click <strong id="hss_01_0349__hss_01_0348_b17715363717">Next</strong> and select servers. You can search for a server by its name or by filtering.</span><p><div class="fignone" id="hss_01_0349__hss_01_0348_fig1948815121612"><span class="figcap"><b>Figure 2 </b>Selecting servers</span><br><span><img id="hss_01_0349__hss_01_0348_image20339153243715" src="en-us_image_0000001621219284.png"></span></div>
+</p></li><li id="hss_01_0349__li119116325318"><span>Click <strong id="hss_01_0349__b1370832119343">OK</strong> to enable ransomware protection and create the policy.</span></li><li id="hss_01_0349__li1681652775515"><span>In the navigation pane, choose <strong id="hss_01_0349__b1767035163419">Prevention</strong> &gt; <strong id="hss_01_0349__b13767335103416">Ransomware Prevention</strong>. Click the <strong id="hss_01_0349__b157681535123414">Policies</strong> tab and check the new policy.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0349__section1453183620529"><h4 class="sectiontitle">Modifying a Policy</h4><ol id="hss_01_0349__ol191331414625"><li id="hss_01_0349__li79003342712"><span>Log in to the management console and go to the <span id="hss_01_0349__text798861125519">HSS</span> page.</span></li><li id="hss_01_0349__li118653561923"><span>In the navigation pane, choose <strong id="hss_01_0349__b49301104379">Prevention</strong> &gt; <strong id="hss_01_0349__b149307016377">Ransomware Prevention</strong>. Click the <strong id="hss_01_0349__b39301406376">Policies</strong> tab.</span></li><li id="hss_01_0349__li10310123045615"><span>Click <strong id="hss_01_0349__b15677182413010">Edit</strong> in the <strong id="hss_01_0349__b1967713241708">Operation</strong> column of a policy. Edit the policy configurations and associated servers. For more information, see <a href="#hss_01_0349__table076204617243">Table 2</a>.</span><p><div class="p" id="hss_01_0349__p72761931195619">The following uses a Linux server as an example. On the <strong id="hss_01_0349__b37910400120">Protected Servers</strong> tab, you can also click the name of the policy associated with the server to edit the policy.
+<div class="tablenoborder"><a name="hss_01_0349__table076204617243"></a><a name="table076204617243"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0349__table076204617243" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Protection policy parameters</caption><thead align="left"><tr id="hss_01_0349__hss_01_0348_row85811429155213_1"><th align="left" class="cellrowborder" valign="top" width="16.2016201620162%" id="mcps1.3.4.2.3.2.1.2.2.4.1.1"><p id="hss_01_0349__hss_01_0348_p4581102914528_1">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="46.98469846984699%" id="mcps1.3.4.2.3.2.1.2.2.4.1.2"><p id="hss_01_0349__hss_01_0348_p858162911520_1">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="36.81368136813681%" id="mcps1.3.4.2.3.2.1.2.2.4.1.3"><p id="hss_01_0349__hss_01_0348_p158216294527_1">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0349__hss_01_0348_row169717121165_1"><td class="cellrowborder" valign="top" width="16.2016201620162%" headers="mcps1.3.4.2.3.2.1.2.2.4.1.1 "><p id="hss_01_0349__hss_01_0348_p969711271615_1">Policy</p>
+</td>
+<td class="cellrowborder" valign="top" width="46.98469846984699%" headers="mcps1.3.4.2.3.2.1.2.2.4.1.2 "><p id="hss_01_0349__hss_01_0348_p0697181213163_1">Policy name</p>
+</td>
+<td class="cellrowborder" valign="top" width="36.81368136813681%" headers="mcps1.3.4.2.3.2.1.2.2.4.1.3 "><p id="hss_01_0349__hss_01_0348_p569731218168_1">test</p>
+</td>
+</tr>
+<tr id="hss_01_0349__hss_01_0348_row552355220615_1"><td class="cellrowborder" valign="top" width="16.2016201620162%" headers="mcps1.3.4.2.3.2.1.2.2.4.1.1 "><p id="hss_01_0349__hss_01_0348_p049818215349_1">Action</p>
+</td>
+<td class="cellrowborder" valign="top" width="46.98469846984699%" headers="mcps1.3.4.2.3.2.1.2.2.4.1.2 "><p id="hss_01_0349__hss_01_0348_p1249815273414_1">Indicates how an event is handled.</p>
+<ul id="hss_01_0349__hss_01_0348_ul13498125347_1"><li id="hss_01_0349__hss_01_0348_li249810223410_1"><strong id="hss_01_0349__hss_01_0348_b72241336466_1">Report alarm and isolate</strong></li><li id="hss_01_0349__hss_01_0348_li1849882133416_1"><strong id="hss_01_0349__hss_01_0348_b128004361595_1">Report alarm</strong></li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="36.81368136813681%" headers="mcps1.3.4.2.3.2.1.2.2.4.1.3 "><p id="hss_01_0349__hss_01_0348_p9499102183412_1"><strong id="hss_01_0349__hss_01_0348_b37415516467_1">Report alarm and isolate</strong></p>
+</td>
+</tr>
+<tr id="hss_01_0349__hss_01_0348_row4236290138_1"><td class="cellrowborder" valign="top" width="16.2016201620162%" headers="mcps1.3.4.2.3.2.1.2.2.4.1.1 "><p id="hss_01_0349__hss_01_0348_p1649914213347_1">Bait File</p>
+</td>
+<td class="cellrowborder" valign="top" width="46.98469846984699%" headers="mcps1.3.4.2.3.2.1.2.2.4.1.2 "><p id="hss_01_0349__hss_01_0348_p1449952163418_1">After bait protection is enabled, the system deploys bait files in protected directories and key directories (unless otherwise specified by users). A bait file occupies only a few resources and does not affect your server performance.</p>
+<p id="hss_01_0349__hss_01_0348_p54991213418_1">If ransomware prevention is enabled, this function is enabled by default.</p>
+<div class="note" id="hss_01_0349__hss_01_0348_note44995219342_1"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="hss_01_0349__hss_01_0348_p7499828342_1">Currently, Linux servers support dynamic generation and deployment of bait files. Windows servers support only static deployment of bait files.</p>
+</div></div>
+</td>
+<td class="cellrowborder" valign="top" width="36.81368136813681%" headers="mcps1.3.4.2.3.2.1.2.2.4.1.3 "><p id="hss_01_0349__hss_01_0348_p14990215342_1">Enabled</p>
+</td>
+</tr>
+<tr id="hss_01_0349__hss_01_0348_row596031111145_1"><td class="cellrowborder" valign="top" width="16.2016201620162%" headers="mcps1.3.4.2.3.2.1.2.2.4.1.1 "><p id="hss_01_0349__hss_01_0348_p17499172173417_1">Bait File Directories</p>
+</td>
+<td class="cellrowborder" valign="top" width="46.98469846984699%" headers="mcps1.3.4.2.3.2.1.2.2.4.1.2 "><p id="hss_01_0349__hss_01_0348_p10501152133416_1">Protected directories (excluding subdirectories).</p>
+<p id="hss_01_0349__hss_01_0348_p15011253419_1">Separate multiple directories with semicolons (;). You can configure up to 20 directories.</p>
+<p id="hss_01_0349__hss_01_0348_p185914570517_1">This parameter is mandatory for Linux servers and optional for Windows servers.</p>
+</td>
+<td class="cellrowborder" valign="top" width="36.81368136813681%" headers="mcps1.3.4.2.3.2.1.2.2.4.1.3 "><p id="hss_01_0349__hss_01_0348_p139625111453_1">Linux: /etc/lesuo</p>
+<p id="hss_01_0349__hss_01_0348_p8861906459_1">Windows: C:\Test</p>
+</td>
+</tr>
+<tr id="hss_01_0349__hss_01_0348_row83172218147_1"><td class="cellrowborder" valign="top" width="16.2016201620162%" headers="mcps1.3.4.2.3.2.1.2.2.4.1.1 "><p id="hss_01_0349__hss_01_0348_p1250113243415_1">Excluded Directory (Optional)</p>
+</td>
+<td class="cellrowborder" valign="top" width="46.98469846984699%" headers="mcps1.3.4.2.3.2.1.2.2.4.1.2 "><p id="hss_01_0349__hss_01_0348_p450192113419_1">Directories where bait files are not deployed.</p>
+<p id="hss_01_0349__hss_01_0348_p0501927346_1">Separate multiple directories with semicolons (;). You can configure up to 20 excluded directories.</p>
+</td>
+<td class="cellrowborder" valign="top" width="36.81368136813681%" headers="mcps1.3.4.2.3.2.1.2.2.4.1.3 "><p id="hss_01_0349__hss_01_0348_p8600122874415_1">Linux: /test</p>
+<p id="hss_01_0349__hss_01_0348_p185017233419_1">Windows: C:\ProData</p>
+</td>
+</tr>
+<tr id="hss_01_0349__hss_01_0348_row5275193521413_1"><td class="cellrowborder" valign="top" width="16.2016201620162%" headers="mcps1.3.4.2.3.2.1.2.2.4.1.1 "><p id="hss_01_0349__hss_01_0348_p20501629346_1">Protected File Type</p>
+</td>
+<td class="cellrowborder" valign="top" width="46.98469846984699%" headers="mcps1.3.4.2.3.2.1.2.2.4.1.2 "><p id="hss_01_0349__hss_01_0348_p155017210344_1">Types of files to be protected.</p>
+<p id="hss_01_0349__hss_01_0348_p1250119217341_1">More than 70 file formats can be protected, including databases, containers, code, certificate keys, and backups.</p>
+<p id="hss_01_0349__hss_01_0348_p3836832192613_1">This parameter is mandatory for Linux servers only.</p>
+</td>
+<td class="cellrowborder" valign="top" width="36.81368136813681%" headers="mcps1.3.4.2.3.2.1.2.2.4.1.3 "><p id="hss_01_0349__hss_01_0348_p125021021341_1">Select all</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</p></li><li id="hss_01_0349__li101279581822"><span>Confirm the policy information and click <strong id="hss_01_0349__b68811538408">OK</strong>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0349__section616644219528"><h4 class="sectiontitle">Deleting a Policy</h4><ol id="hss_01_0349__ol1396351516234"><li id="hss_01_0349__li692731592416"><span>Log in to the management console and go to the <span id="hss_01_0349__hss_01_0349_text798861125519">HSS</span> page.</span></li><li id="hss_01_0349__li1728152017249"><span>In the navigation pane, choose <strong id="hss_01_0349__b177111791011">Prevention</strong> &gt; <strong id="hss_01_0349__b7772111711013">Ransomware Prevention</strong>. Click the <strong id="hss_01_0349__b13773201721016">Policies</strong> tab.</span></li><li id="hss_01_0349__li11738172012410"><span>Click <strong id="hss_01_0349__b14829125834013">Delete</strong> in the <strong id="hss_01_0349__b161121124115">Operation</strong> column of the target policy.</span><p><div class="note" id="hss_01_0349__note471215018306"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0349__p971210143018">After a policy is deleted, the associated servers are no longer protected. Before deleting a policy, you are advised to bind its associated servers to other policies.</p>
+</div></div>
+</p></li><li id="hss_01_0349__li6393138122316"><span>Confirm the policy information and click <strong id="hss_01_0349__b597318417434">OK</strong>.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0346.html">Ransomware Prevention</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0350.html b/docs/hss/umn/hss_01_0350.html
new file mode 100644
index 00000000..c2ebda4f
--- /dev/null
+++ b/docs/hss/umn/hss_01_0350.html
@@ -0,0 +1,14 @@
+<a name="hss_01_0350"></a><a name="hss_01_0350"></a>
+
+<h1 class="topictitle1">Disabling Ransomware Prevention</h1>
+<div id="body0000001224806289"><div class="section" id="hss_01_0350__section1154965120313"><h4 class="sectiontitle">Scenario</h4><p id="hss_01_0350__p2180128114519">You can disable ransomware protection as needed. After protection is disabled, your server may be intruded by ransomware. Exercise caution when performing this operation.</p>
+</div>
+<div class="section" id="hss_01_0350__section185841510520"><h4 class="sectiontitle">Disabling Ransomware Prevention</h4><ol id="hss_01_0350__ol163354216445"><li id="hss_01_0350__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0350__li830314169200"><span>Click <span><img id="hss_01_0350__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0350__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0350__hss_01_0571_b14857117404"><span id="hss_01_0350__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0350__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0350__li1575543720457"><span>In the navigation pane, choose <strong id="hss_01_0350__b623819191128">Prevention</strong> &gt; <strong id="hss_01_0350__b1023821913120">Ransomware Prevention</strong>. Click the <strong id="hss_01_0350__b152381719171212">Protected Servers</strong> tab.</span></li><li id="hss_01_0350__li65371838154516"><span>Click <span class="menucascade" id="hss_01_0350__menucascade194221096542"><b><span class="uicontrol" id="hss_01_0350__uicontrol6422169125411">More</span></b> &gt; <b><span class="uicontrol" id="hss_01_0350__uicontrol342218955410">Disable Protection</span></b></span> in the <strong id="hss_01_0350__b7422895543">Operation</strong> column of the target server.</span></li><li id="hss_01_0350__li034523615518"><span>Confirm the information and click <span class="uicontrol" id="hss_01_0350__uicontrol16818184313520"><b>OK</b></span>.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0346.html">Ransomware Prevention</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0359.html b/docs/hss/umn/hss_01_0359.html
new file mode 100644
index 00000000..54049f1c
--- /dev/null
+++ b/docs/hss/umn/hss_01_0359.html
@@ -0,0 +1,16 @@
+<a name="hss_01_0359"></a><a name="hss_01_0359"></a>
+
+<h1 class="topictitle1">Viewing File Integrity Management</h1>
+<div id="body0000001227289677"><p id="hss_01_0359__p128101511171514">Check the files in the Linux OS, applications, and other components to detect tampering.</p>
+<div class="section" id="hss_01_0359__section268216245291"><h4 class="sectiontitle">Constraints</h4><p id="hss_01_0359__p1437225517163">Only premium, WTP, and container editions support file integrity-related operations.</p>
+</div>
+<div class="section" id="hss_01_0359__section10386750121511"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0359__ol19379059133512"><li id="hss_01_0359__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0359__li830314169200"><span>Click <span><img id="hss_01_0359__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0359__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0359__hss_01_0571_b14857117404"><span id="hss_01_0359__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0359__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0359__li62309243619"><span>Choose <strong id="hss_01_0359__b18188642151618">Prevention</strong> &gt; <strong id="hss_01_0359__b118819425169">File Integrity Monitoring</strong>. On the displayed file management page, select an enterprise project and check its servers and modified files.</span><p><div class="fignone" id="hss_01_0359__fig19482177162915"><span class="figcap"><b>Figure 1 </b>Checking file integrity</span><br><span><img id="hss_01_0359__image182326593462" src="en-us_image_0000001807932576.png"></span></div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0360.html">File Integrity Monitoring</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0360.html b/docs/hss/umn/hss_01_0360.html
new file mode 100644
index 00000000..641a5f04
--- /dev/null
+++ b/docs/hss/umn/hss_01_0360.html
@@ -0,0 +1,20 @@
+<a name="hss_01_0360"></a><a name="hss_01_0360"></a>
+
+<h1 class="topictitle1">File Integrity Monitoring</h1>
+<div id="body0000001178392520"><p id="hss_01_0360__p12922538163011">You can check the statistics and details about file changes on your servers, including affected servers, file types, paths, and content.</p>
+</div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0359.html">Viewing File Integrity Management</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0361.html">Checking Change Details</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0362.html">Checking Modified Files</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0142.html">Prevention</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0361.html b/docs/hss/umn/hss_01_0361.html
new file mode 100644
index 00000000..7a177570
--- /dev/null
+++ b/docs/hss/umn/hss_01_0361.html
@@ -0,0 +1,71 @@
+<a name="hss_01_0361"></a><a name="hss_01_0361"></a>
+
+<h1 class="topictitle1">Checking Change Details</h1>
+<div id="body0000001227491175"><div class="section" id="hss_01_0361__section268216245291"><h4 class="sectiontitle">Constraints</h4><p id="hss_01_0361__hss_01_0359_p1437225517163">Only premium, WTP, and container editions support file integrity-related operations.</p>
+</div>
+<div class="section" id="hss_01_0361__section18834104771710"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0361__ol98013172117"><li id="hss_01_0361__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0361__li830314169200"><span>Click <span><img id="hss_01_0361__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0361__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0361__hss_01_0571_b14857117404"><span id="hss_01_0361__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0361__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0361__li5240105431518"><span>Choose <strong id="hss_01_0361__b99726501081">Prevention</strong> &gt; <strong id="hss_01_0361__b138871355481">File Integrity Monitoring</strong>. The <strong id="hss_01_0361__b1281717171199">Server</strong> tab will be displayed.</span></li><li id="hss_01_0361__li17569202131218"><span>Click the server name to go to the server change details page.</span><p>
+<div class="tablenoborder"><a name="hss_01_0361__table979905102414"></a><a name="table979905102414"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0361__table979905102414" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameters about file changes</caption><thead align="left"><tr id="hss_01_0361__row17800185182410"><th align="left" class="cellrowborder" valign="top" width="16.811681168116813%" id="mcps1.3.2.2.4.2.1.2.4.1.1"><p id="hss_01_0361__p78002512248">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="49.85498549854985%" id="mcps1.3.2.2.4.2.1.2.4.1.2"><p id="hss_01_0361__p128004572417">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="33.33333333333333%" id="mcps1.3.2.2.4.2.1.2.4.1.3"><p id="hss_01_0361__p108007552419">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0361__row1980020517240"><td class="cellrowborder" valign="top" width="16.811681168116813%" headers="mcps1.3.2.2.4.2.1.2.4.1.1 "><p id="hss_01_0361__p188001513246">File Name</p>
+</td>
+<td class="cellrowborder" valign="top" width="49.85498549854985%" headers="mcps1.3.2.2.4.2.1.2.4.1.2 "><p id="hss_01_0361__p68973032613">Name of a modified file.</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.2.2.4.2.1.2.4.1.3 "><p id="hss_01_0361__p18008519241">du</p>
+</td>
+</tr>
+<tr id="hss_01_0361__row780018592411"><td class="cellrowborder" valign="top" width="16.811681168116813%" headers="mcps1.3.2.2.4.2.1.2.4.1.1 "><p id="hss_01_0361__p1880018513245">Path</p>
+</td>
+<td class="cellrowborder" valign="top" width="49.85498549854985%" headers="mcps1.3.2.2.4.2.1.2.4.1.2 "><p id="hss_01_0361__p480020516244">Path of a modified file.</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.2.2.4.2.1.2.4.1.3 "><p id="hss_01_0361__p13800195182416">-</p>
+</td>
+</tr>
+<tr id="hss_01_0361__row128001518243"><td class="cellrowborder" valign="top" width="16.811681168116813%" headers="mcps1.3.2.2.4.2.1.2.4.1.1 "><p id="hss_01_0361__p2800558244">Change Description</p>
+</td>
+<td class="cellrowborder" valign="top" width="49.85498549854985%" headers="mcps1.3.2.2.4.2.1.2.4.1.2 "><p id="hss_01_0361__p880019517243">Description of the change.</p>
+<p id="hss_01_0361__p8785143018273">To view the change details, hover the cursor over the change content.</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.2.2.4.2.1.2.4.1.3 "><p id="hss_01_0361__p084519144314"><strong id="hss_01_0361__b1955611542418">SHA2560ba0c4b5e48e55a6</strong> is changed to <strong id="hss_01_0361__b690152313247">4f6079f5b37d1513</strong>.</p>
+</td>
+</tr>
+<tr id="hss_01_0361__row28007516245"><td class="cellrowborder" valign="top" width="16.811681168116813%" headers="mcps1.3.2.2.4.2.1.2.4.1.1 "><p id="hss_01_0361__p158003542417">Type</p>
+</td>
+<td class="cellrowborder" valign="top" width="49.85498549854985%" headers="mcps1.3.2.2.4.2.1.2.4.1.2 "><p id="hss_01_0361__p680015582413">Type of a modified file. Its value can be:</p>
+<ul id="hss_01_0361__ul1930717579576"><li id="hss_01_0361__li173076574573"><strong id="hss_01_0361__b5792102172618">File</strong></li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.2.2.4.2.1.2.4.1.3 "><p id="hss_01_0361__p158004512414">File</p>
+</td>
+</tr>
+<tr id="hss_01_0361__row3800105172417"><td class="cellrowborder" valign="top" width="16.811681168116813%" headers="mcps1.3.2.2.4.2.1.2.4.1.1 "><p id="hss_01_0361__p280012522416">Action</p>
+</td>
+<td class="cellrowborder" valign="top" width="49.85498549854985%" headers="mcps1.3.2.2.4.2.1.2.4.1.2 "><p id="hss_01_0361__p8801258249">How a file was modified.</p>
+<ul id="hss_01_0361__ul59241153298"><li id="hss_01_0361__li1692481519293">Create</li><li id="hss_01_0361__li1692471552919">Modify</li><li id="hss_01_0361__li526816775813">Delete</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.2.2.4.2.1.2.4.1.3 "><p id="hss_01_0361__p19801185112410">Modify</p>
+</td>
+</tr>
+<tr id="hss_01_0361__row1780175192414"><td class="cellrowborder" valign="top" width="16.811681168116813%" headers="mcps1.3.2.2.4.2.1.2.4.1.1 "><p id="hss_01_0361__p780115132414">Last Modified</p>
+</td>
+<td class="cellrowborder" valign="top" width="49.85498549854985%" headers="mcps1.3.2.2.4.2.1.2.4.1.2 "><p id="hss_01_0361__p28019513243">The last time when a file was modified.</p>
+</td>
+<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.2.2.4.2.1.2.4.1.3 "><p id="hss_01_0361__p138019572420">-</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0360.html">File Integrity Monitoring</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0362.html b/docs/hss/umn/hss_01_0362.html
new file mode 100644
index 00000000..a897b220
--- /dev/null
+++ b/docs/hss/umn/hss_01_0362.html
@@ -0,0 +1,14 @@
+<a name="hss_01_0362"></a><a name="hss_01_0362"></a>
+
+<h1 class="topictitle1">Checking Modified Files</h1>
+<div id="body0000001181771524"><div class="section" id="hss_01_0362__section268216245291"><h4 class="sectiontitle">Constraints</h4><p id="hss_01_0362__hss_01_0359_p1437225517163">Only premium, WTP, and container editions support file integrity-related operations.</p>
+</div>
+<div class="section" id="hss_01_0362__section1170725101820"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0362__ol151373325342"><li id="hss_01_0362__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0362__li830314169200"><span>Click <span><img id="hss_01_0362__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0362__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0362__hss_01_0571_b14857117404"><span id="hss_01_0362__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0362__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0362__li1583033181813"><span>In the navigation pane, choose <strong id="hss_01_0362__b13645134413482">Prevention</strong> &gt; <strong id="hss_01_0362__b13646174417486">File Integrity Monitoring</strong>. Click the <strong id="hss_01_0362__b18646844154818">Monitored Files</strong> tab. For details about parameters, see <a href="hss_01_0361.html#hss_01_0361__table979905102414">Table 1</a> in <a href="hss_01_0361.html">Checking Change Details</a>.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0360.html">File Integrity Monitoring</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0367.html b/docs/hss/umn/hss_01_0367.html
new file mode 100644
index 00000000..091a33ef
--- /dev/null
+++ b/docs/hss/umn/hss_01_0367.html
@@ -0,0 +1,19 @@
+<a name="hss_01_0367"></a><a name="hss_01_0367"></a>
+
+<h1 class="topictitle1">Whitelist Management</h1>
+<div id="body0000001231790615"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0029.html">Managing Login Whitelist</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0028.html">Managing the Alarm Whitelist</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0496.html">Managing the System User Whitelist</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0030.html">Intrusion Detection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0368.html b/docs/hss/umn/hss_01_0368.html
new file mode 100644
index 00000000..5e0310fa
--- /dev/null
+++ b/docs/hss/umn/hss_01_0368.html
@@ -0,0 +1,57 @@
+<a name="hss_01_0368"></a><a name="hss_01_0368"></a>
+
+<h1 class="topictitle1">Creating a Policy Group</h1>
+<div id="body0000001232932611"><p id="hss_01_0368__p4427738185014">For premium and container editions, you can copy a policy group and customize it as required to meet server security requirements in different application scenarios.</p>
+<div class="section" id="hss_01_0368__section12467105615511"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0368__en-us_topic_0000001124838005_ol56694914306"><li id="hss_01_0368__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0368__li830314169200"><span>Click <span><img id="hss_01_0368__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0368__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0368__hss_01_0571_b14857117404"><span id="hss_01_0368__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0368__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0368__en-us_topic_0000001124838005_li1395512382228"><span>In the navigation tree on the left, choose <strong id="hss_01_0368__b8417352173319">Security Operation</strong> &gt; <strong id="hss_01_0368__b9339141119349">Policies</strong>. On the displayed page, <a href="#hss_01_0368__hss_01_0045_t801bc5e996a743dd8e2bfeb480ff1ca8">Policy group parameters</a> describes the fields.</span><p><div class="note" id="hss_01_0368__note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0368__hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+
+<div class="tablenoborder"><a name="hss_01_0368__hss_01_0045_t801bc5e996a743dd8e2bfeb480ff1ca8"></a><a name="hss_01_0045_t801bc5e996a743dd8e2bfeb480ff1ca8"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0368__hss_01_0045_t801bc5e996a743dd8e2bfeb480ff1ca8" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Policy group parameters</caption><thead align="left"><tr id="hss_01_0368__hss_01_0045_r31c93826ed3e4bd59b563dbc8df14166"><th align="left" class="cellrowborder" valign="top" width="25.55%" id="mcps1.3.2.2.3.2.2.2.3.1.1"><p id="hss_01_0368__hss_01_0045_aed898cdf4901445f8f0e6d21c87fde48">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="74.45%" id="mcps1.3.2.2.3.2.2.2.3.1.2"><p id="hss_01_0368__hss_01_0045_a19e3b563f5a44b7db1d7a497ba290943">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0368__hss_01_0045_r488e363dd1d646998c450b4980a148a8"><td class="cellrowborder" valign="top" width="25.55%" headers="mcps1.3.2.2.3.2.2.2.3.1.1 "><p id="hss_01_0368__hss_01_0045_aeb9cd59319084c87b05c34c33e17209f">Policy Group</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.45%" headers="mcps1.3.2.2.3.2.2.2.3.1.2 "><p id="hss_01_0368__hss_01_0045_a1629b279eb4d4b4ca551f39969ce5246">Name of a policy group The preset policy group names are as follows:</p>
+<ul id="hss_01_0368__ul11249204134220"><li id="hss_01_0368__li12862112220466"><strong id="hss_01_0368__b132131639673733">tenant_linux_container_default_policy_group</strong>: preset Linux policy of the container edition. You can copy this policy group and create a new one based on it.</li><li id="hss_01_0368__li1057417431422"><strong id="hss_01_0368__b82333350673733">tenant_linux_enterprise_default_policy_group</strong> is the default Linux policy of the enterprise edition. This policy group can only be viewed, and cannot be copied or deleted.</li><li id="hss_01_0368__li9574114354211"><strong id="hss_01_0368__b204221408273733">tenant_windows_enterprise_default_policy_group</strong>: preset Windows policy of the enterprise edition. This policy group can only be viewed, and cannot be copied or deleted.</li><li id="hss_01_0368__li957417439421"><strong id="hss_01_0368__b100939184073733">tenant_linux_premium_default_policy_group</strong>: preset Linux policy of the premium edition. You can create a policy group by copying this default group and modify the copy.</li><li id="hss_01_0368__li157414312427"><strong id="hss_01_0368__b183131740473733">tenant_windows_premium_default_policy_group</strong>: preset Windows policy of the premium edition. You can create a policy group by copying this default group and modify the copy.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0368__hss_01_0045_row190113370416"><td class="cellrowborder" valign="top" width="25.55%" headers="mcps1.3.2.2.3.2.2.2.3.1.1 "><p id="hss_01_0368__hss_01_0045_p1990113377414">ID</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.45%" headers="mcps1.3.2.2.3.2.2.2.3.1.2 "><p id="hss_01_0368__hss_01_0045_p79014375412">Unique ID of a policy group</p>
+</td>
+</tr>
+<tr id="hss_01_0368__hss_01_0045_r43f1c22e0b5a4a22b201b6ab5806378b"><td class="cellrowborder" valign="top" width="25.55%" headers="mcps1.3.2.2.3.2.2.2.3.1.1 "><p id="hss_01_0368__hss_01_0045_a5e79838371f64e47bffa20d0daee2da4">Description</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.45%" headers="mcps1.3.2.2.3.2.2.2.3.1.2 "><p id="hss_01_0368__hss_01_0045_aa0cb14aedfe744e688a4457a197ab0a8">Description of a policy group</p>
+</td>
+</tr>
+<tr id="hss_01_0368__hss_01_0045_row55761411057"><td class="cellrowborder" valign="top" width="25.55%" headers="mcps1.3.2.2.3.2.2.2.3.1.1 "><p id="hss_01_0368__hss_01_0045_p1457712111513">Supported Version</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.45%" headers="mcps1.3.2.2.3.2.2.2.3.1.2 "><p id="hss_01_0368__hss_01_0045_p1577316512"><span id="hss_01_0368__hss_01_0045_text15282256155410">HSS</span> edition supported by a policy group.</p>
+</td>
+</tr>
+<tr id="hss_01_0368__hss_01_0045_row1880233816911"><td class="cellrowborder" valign="top" width="25.55%" headers="mcps1.3.2.2.3.2.2.2.3.1.1 "><p id="hss_01_0368__hss_01_0045_p1980218381991">Associated Servers</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.45%" headers="mcps1.3.2.2.3.2.2.2.3.1.2 "><p id="hss_01_0368__hss_01_0045_p3802238498">To view details about the servers associated with a policy group, click the number in the <strong id="hss_01_0368__b1252310554456">Servers</strong> column of the group.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0368__li8638421192811"><span>Select a premium or container edition policy group and click <strong id="hss_01_0368__b943834201512">Copy</strong> in the <strong id="hss_01_0368__b243134161516">Operation</strong> column of the policy group.</span><p><div class="fignone" id="hss_01_0368__fig243214568278"><span class="figcap"><b>Figure 1 </b>Copying a policy group</span><br><span><img id="hss_01_0368__image1136417243210" src="en-us_image_0000001816051597.png"></span></div>
+</p></li><li id="hss_01_0368__en-us_topic_0000001124838005_li27937753223758"><span>In the dialog box displayed, enter a policy group name and description, and click <strong id="hss_01_0368__b085613531919">OK</strong>.</span><p><div class="note" id="hss_01_0368__en-us_topic_0000001124838005_nac4b772385ac4a7e8508303ab621ed97"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0368__en-us_topic_0000001124838005_uf2c1d5b991e541efbf4dcf7f597de403"><li id="hss_01_0368__en-us_topic_0000001124838005_lb0e69742a5c44c04b6c0713151a389b8">The name of a policy group must be unique, or the group will fail to be created.</li><li id="hss_01_0368__en-us_topic_0000001124838005_lbe4f038c70ae4b40aeacaa1b1e85a527">The policy group name and its description can contain only letters, digits, underscores (_), hyphens (-), and spaces, and cannot start or end with a space.</li></ul>
+</div></div>
+</p></li><li id="hss_01_0368__en-us_topic_0000001124838005_li201251724802"><span>Click <strong id="hss_01_0368__b1856401219209">OK</strong>.</span><p><p id="hss_01_0368__p14695939145118">After a policy group is created, you can configure rules for each policy in the policy group. For details, see <a href="hss_01_0044.html">Configuring Policies</a>.</p>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0368__section886282251220"><h4 class="sectiontitle">Follow-up Procedure</h4><p id="hss_01_0368__p15485102915104">After creating a policy group and configuring policies, you can apply the new policy group to servers. For details, see <a href="hss_01_0024.html">Deploying a Policy</a>.</p>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0314.html">Policy Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0373.html b/docs/hss/umn/hss_01_0373.html
new file mode 100644
index 00000000..3847abb7
--- /dev/null
+++ b/docs/hss/umn/hss_01_0373.html
@@ -0,0 +1,13 @@
+<a name="hss_01_0373"></a><a name="hss_01_0373"></a>
+
+<h1 class="topictitle1">Installation &amp; Configuration</h1>
+<div id="body0000001186589502"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0317.html">Agent Management</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0385.html">Security Configurations</a></strong><br>
+</li>
+</ul>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0374.html b/docs/hss/umn/hss_01_0374.html
new file mode 100644
index 00000000..dbc7caf6
--- /dev/null
+++ b/docs/hss/umn/hss_01_0374.html
@@ -0,0 +1,16 @@
+<a name="hss_01_0374"></a><a name="hss_01_0374"></a>
+
+<h1 class="topictitle1">Viewing Agent Status</h1>
+<div id="body0000001214024492"><p id="hss_01_0374__p161352311519">You can sort servers, check whether the agent is installed on them, and can install or uninstall the agent. On the console, you can find the agent installation instructions and the link to the agent package. </p>
+<div class="section" id="hss_01_0374__section1832353335117"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0374__ol77955112819"><li id="hss_01_0374__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0374__li830314169200"><span>Click <span><img id="hss_01_0374__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0374__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0374__hss_01_0571_b14857117404"><span id="hss_01_0374__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0374__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0374__li11225184418269"><span>In the navigation pane, choose <strong id="hss_01_0374__b12151710164">Installation &amp; Configuration</strong>. Click the <strong id="hss_01_0374__b1022171718162">Agents</strong> tab.</span><p><div class="note" id="hss_01_0374__note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0374__hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0374__fig10324524113711"><span class="figcap"><b>Figure 1 </b>Viewing agent management</span><br><span><img id="hss_01_0374__image338913414108" src="en-us_image_0000001670681801.png"></span></div>
+</p></li><li id="hss_01_0374__li194932045132617"><span>Click <strong id="hss_01_0374__b196574083119">Offline</strong> to check the servers where the agent is not installed or is offline. Click <strong id="hss_01_0374__b11011857143113">Online</strong> to check the servers where the agent is online.</span></li><li id="hss_01_0374__li1699019453263"><span>Click <strong id="hss_01_0374__b435485817466">Installation Guide</strong> to check the guide for installing the agent.</span></li><li id="hss_01_0374__li12513142325011"><span>Click <strong id="hss_01_0374__b968995265210">Agent Version Information</strong> to view the latest version, earlier versions, and changes of the agent.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0317.html">Agent Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0376.html b/docs/hss/umn/hss_01_0376.html
new file mode 100644
index 00000000..2e9c1ffe
--- /dev/null
+++ b/docs/hss/umn/hss_01_0376.html
@@ -0,0 +1,99 @@
+<a name="hss_01_0376"></a><a name="hss_01_0376"></a>
+
+<h1 class="topictitle1">Uninstalling an Agent</h1>
+<div id="body0000001258704369"><p id="hss_01_0376__p151314514216">If you no longer need to use HSS, uninstall the agent by following the instructions provided in this section. If the agent is uninstalled, HSS will stop protecting your servers and detecting risks.</p>
+<div class="section" id="hss_01_0376__section15330601515"><h4 class="sectiontitle">Uninstalling the Agent from a Single Server in One-Click</h4><ol id="hss_01_0376__ol77955112819"><li id="hss_01_0376__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0376__li830314169200"><span>Click <span><img id="hss_01_0376__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0376__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0376__hss_01_0571_b14857117404"><span id="hss_01_0376__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0376__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0376__li11225184418269"><span>In the navigation pane, choose <strong id="hss_01_0376__hss_01_0374_b12151710164">Installation &amp; Configuration</strong>. Click the <strong id="hss_01_0376__hss_01_0374_b1022171718162">Agents</strong> tab.</span><p><div class="note" id="hss_01_0376__hss_01_0374_note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0376__hss_01_0374_hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0376__hss_01_0374_fig10324524113711"><span class="figcap"><b>Figure 1 </b>Viewing agent management</span><br><span><img id="hss_01_0376__hss_01_0374_image338913414108" src="en-us_image_0000001670681801.png"></span></div>
+</p></li><li id="hss_01_0376__li194932045132617"><span>Click <strong id="hss_01_0376__b28574221275">Online</strong> to view the list of servers where the agent has been installed. For details, see <a href="#hss_01_0376__table1926618704616">Table 1</a>.</span><p>
+<div class="tablenoborder"><a name="hss_01_0376__table1926618704616"></a><a name="table1926618704616"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0376__table1926618704616" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Online agent parameters</caption><thead align="left"><tr id="hss_01_0376__row16266127154611"><th align="left" class="cellrowborder" valign="top" width="14.66%" id="mcps1.3.2.2.4.2.1.2.3.1.1"><p id="hss_01_0376__p9266375468">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="85.34%" id="mcps1.3.2.2.4.2.1.2.3.1.2"><p id="hss_01_0376__p22662074462">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0376__row1226617104612"><td class="cellrowborder" valign="top" width="14.66%" headers="mcps1.3.2.2.4.2.1.2.3.1.1 "><p id="hss_01_0376__p15266147134619">Server Name/ID</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.34%" headers="mcps1.3.2.2.4.2.1.2.3.1.2 "><p id="hss_01_0376__p6266167144612">Server name and ID</p>
+</td>
+</tr>
+<tr id="hss_01_0376__row12661472469"><td class="cellrowborder" valign="top" width="14.66%" headers="mcps1.3.2.2.4.2.1.2.3.1.1 "><p id="hss_01_0376__p92662074464">IP Address</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.34%" headers="mcps1.3.2.2.4.2.1.2.3.1.2 "><p id="hss_01_0376__p67691716205414">EIP or private IP address of a server</p>
+</td>
+</tr>
+<tr id="hss_01_0376__row112663754616"><td class="cellrowborder" valign="top" width="14.66%" headers="mcps1.3.2.2.4.2.1.2.3.1.1 "><p id="hss_01_0376__p326612711468">OS</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.34%" headers="mcps1.3.2.2.4.2.1.2.3.1.2 "><p id="hss_01_0376__p1266137164620">Server OS. Its value can be:</p>
+<ul id="hss_01_0376__ul7230182265511"><li id="hss_01_0376__li18230112225510"><strong id="hss_01_0376__b280671514">Linux</strong></li><li id="hss_01_0376__li1823032215514"><strong id="hss_01_0376__b996565054">Windows</strong></li></ul>
+</td>
+</tr>
+<tr id="hss_01_0376__row5266673467"><td class="cellrowborder" valign="top" width="14.66%" headers="mcps1.3.2.2.4.2.1.2.3.1.1 "><p id="hss_01_0376__p32666794619">Agent Status</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.34%" headers="mcps1.3.2.2.4.2.1.2.3.1.2 "><p id="hss_01_0376__p426667194615">Agent status of a server. Its value can be:</p>
+<ul id="hss_01_0376__ul6395135214554"><li id="hss_01_0376__li127213541555"><strong id="hss_01_0376__b63376823">Online</strong></li></ul>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0376__li1367818136619"><span>Click <strong id="hss_01_0376__b7752213134110">Uninstall Agent</strong> in the <strong id="hss_01_0376__b16304816204116">Operation</strong> column of a server. In the dialog box that is displayed, confirm the uninstallation information and click <strong id="hss_01_0376__b17124102314116">OK</strong>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0376__section20800551175514"><h4 class="sectiontitle">Uninstalling the Agent from Multiple Servers in One-Click</h4><ol id="hss_01_0376__ol129909045712"><li id="hss_01_0376__li181311713154316"><span>Log in to the management console.</span></li><li id="hss_01_0376__li12133191312436"><span>In the navigation pane, choose <strong id="hss_01_0376__hss_01_0374_b12151710164_1">Installation &amp; Configuration</strong>. Click the <strong id="hss_01_0376__hss_01_0374_b1022171718162_1">Agents</strong> tab.</span><p><div class="note" id="hss_01_0376__hss_01_0374_note1169413414298_1"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0376__hss_01_0374_hss_01_0546_p158536161110_1">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0376__hss_01_0374_fig10324524113711_1"><span class="figcap"><b>Figure 2 </b>Viewing agent management</span><br><span><img id="hss_01_0376__hss_01_0374_image338913414108_1" src="en-us_image_0000001670681801.png"></span></div>
+</p></li><li id="hss_01_0376__li1799350125717"><span>Click <strong id="hss_01_0376__hss_01_0376_b28574221275">Online</strong> to view the list of servers where the agent has been installed. For details, see <a href="#hss_01_0376__hss_01_0376_table1926618704616">Table 2</a>.</span><p>
+<div class="tablenoborder"><a name="hss_01_0376__hss_01_0376_table1926618704616"></a><a name="hss_01_0376_table1926618704616"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0376__hss_01_0376_table1926618704616" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Online agent parameters</caption><thead align="left"><tr id="hss_01_0376__hss_01_0376_row16266127154611"><th align="left" class="cellrowborder" valign="top" width="14.66%" id="mcps1.3.3.2.3.2.1.2.3.1.1"><p id="hss_01_0376__hss_01_0376_p9266375468">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="85.34%" id="mcps1.3.3.2.3.2.1.2.3.1.2"><p id="hss_01_0376__hss_01_0376_p22662074462">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0376__hss_01_0376_row1226617104612"><td class="cellrowborder" valign="top" width="14.66%" headers="mcps1.3.3.2.3.2.1.2.3.1.1 "><p id="hss_01_0376__hss_01_0376_p15266147134619">Server Name/ID</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.34%" headers="mcps1.3.3.2.3.2.1.2.3.1.2 "><p id="hss_01_0376__hss_01_0376_p6266167144612">Server name and ID</p>
+</td>
+</tr>
+<tr id="hss_01_0376__hss_01_0376_row12661472469"><td class="cellrowborder" valign="top" width="14.66%" headers="mcps1.3.3.2.3.2.1.2.3.1.1 "><p id="hss_01_0376__hss_01_0376_p92662074464">IP Address</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.34%" headers="mcps1.3.3.2.3.2.1.2.3.1.2 "><p id="hss_01_0376__hss_01_0376_p67691716205414">EIP or private IP address of a server</p>
+</td>
+</tr>
+<tr id="hss_01_0376__hss_01_0376_row112663754616"><td class="cellrowborder" valign="top" width="14.66%" headers="mcps1.3.3.2.3.2.1.2.3.1.1 "><p id="hss_01_0376__hss_01_0376_p326612711468">OS</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.34%" headers="mcps1.3.3.2.3.2.1.2.3.1.2 "><p id="hss_01_0376__hss_01_0376_p1266137164620">Server OS. Its value can be:</p>
+<ul id="hss_01_0376__hss_01_0376_ul7230182265511"><li id="hss_01_0376__hss_01_0376_li18230112225510"><strong id="hss_01_0376__hss_01_0376_b280671514">Linux</strong></li><li id="hss_01_0376__hss_01_0376_li1823032215514"><strong id="hss_01_0376__hss_01_0376_b996565054">Windows</strong></li></ul>
+</td>
+</tr>
+<tr id="hss_01_0376__hss_01_0376_row5266673467"><td class="cellrowborder" valign="top" width="14.66%" headers="mcps1.3.3.2.3.2.1.2.3.1.1 "><p id="hss_01_0376__hss_01_0376_p32666794619">Agent Status</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.34%" headers="mcps1.3.3.2.3.2.1.2.3.1.2 "><p id="hss_01_0376__hss_01_0376_p426667194615">Agent status of a server. Its value can be:</p>
+<ul id="hss_01_0376__hss_01_0376_ul6395135214554"><li id="hss_01_0376__hss_01_0376_li127213541555"><strong id="hss_01_0376__hss_01_0376_b63376823">Online</strong></li></ul>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0376__li6208714133"><span>Select the target servers whose agent you want to uninstall.</span><p><div class="note" id="hss_01_0376__note6815151710410"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0376__p881518171541">If you check the box before <strong id="hss_01_0376__b153453573547">Server Name/ID</strong>, all servers on the page will be selected.</p>
+</div></div>
+<div class="fignone" id="hss_01_0376__fig1726910874413"><span class="figcap"><b>Figure 3 </b>Selecting all servers whose agent needs to be uninstalled.</span><br><span><img id="hss_01_0376__image205001335161916" src="en-us_image_0000001622044122.png"></span></div>
+</p></li><li id="hss_01_0376__li29531623034"><span>Click <strong id="hss_01_0376__b921612582">Uninstall Agent</strong> above the server list. In the dialog box displayed, confirm the servers from which you want to uninstall the agent and click <strong id="hss_01_0376__b542945755918">OK</strong>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0376__section06321616153418"><h4 class="sectiontitle">Manually Uninstalling the Agent from a Linux Server</h4><ol id="hss_01_0376__ol3333112382219"><li id="hss_01_0376__li5832327132216"><span>Remotely log in to the Linux server where the agent is to be uninstalled.</span><p><ul id="hss_01_0376__ul583222762215"><li id="hss_01_0376__li983215271223">You can log in to the ECS management console and click <strong id="hss_01_0376__b21891125193918">Remote Login</strong> in the ECS list.</li><li id="hss_01_0376__li198321273225">If your server has an EIP bound, you can also use a remote management tool, such as Xftp, SecureFX, WinSCP, PuTTY, or Xshell, to log in to the server and install the agent on the server as user <strong id="hss_01_0376__b12572141220522">root</strong>.</li></ul>
+</p></li><li id="hss_01_0376__li19127163917246"><span>If the agent has been installed, run the following command to uninstall it:</span><p><div class="note" id="hss_01_0376__note13369192610316"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0376__p536913265313">Do not run the uninstallation command in the <strong id="hss_01_0376__b650213572399">/usr/local/hostguard/</strong> directory. You can run the uninstallation command in any other directory.</p>
+</div></div>
+<ul id="hss_01_0376__ul886416982714"><li id="hss_01_0376__li208648915271">For EulerOS, CentOS, and Red Hat, or other OSs that support RPM installation, run the <strong id="hss_01_0376__b1730714387316">rpm -e hostguard;</strong> command.</li><li id="hss_01_0376__li2477920172812">For Ubuntu, Debian, and other OSs that support DEB installation, run the <strong id="hss_01_0376__b6779845134718">dpkg -P hostguard;</strong> command.</li></ul>
+</p></li><li id="hss_01_0376__li1843711234370"><span>Verify the uninstallation. If the <strong id="hss_01_0376__b549475012478">/usr/local/hostguard/</strong> directory is not found on the Linux server, the agent has been uninstalled.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0376__section63925445341"><h4 class="sectiontitle">Manually Uninstalling the Agent from a Windows Server</h4><ol id="hss_01_0376__ol946010145322"><li id="hss_01_0376__li150194712310"><span>Remotely log in to the Windows server where the agent is to be uninstalled.</span><p><ul id="hss_01_0376__ul113521610161414"><li id="hss_01_0376__li1135213103142">You can log in to the ECS management console and click <strong id="hss_01_0376__b579719589116">Remote Login</strong> in the ECS list.</li><li id="hss_01_0376__li8992127149">If an EIP has been bound to the server, you can use Windows Remote Desktop Connection or a third-party remote management tool, such as mstsc or RDP, to log in to the server and install the agent on the server as an administrator.</li></ul>
+</p></li><li id="hss_01_0376__li11800191111446"><span>Go to <strong id="hss_01_0376__b740211261519">C:\Program File\HostGuard</strong> on the Windows server.</span></li></ol><ol start="3" id="hss_01_0376__ol229194719402"><li id="hss_01_0376__li730547124016"><span>Double-click the <strong id="hss_01_0376__b166931127135118">unins000.exe</strong> file to uninstall the agent.</span></li><li id="hss_01_0376__li11381743114310"><span>In the <strong id="hss_01_0376__b1784293811518">HostGuard Uninstall</strong> dialog box, click <strong id="hss_01_0376__b2842123812515">Yes</strong> to delete HostGuard and all its components.</span></li><li id="hss_01_0376__li03910804918"><span>(Optional) Restart the server.</span><p><ul id="hss_01_0376__ul20327205074918"><li id="hss_01_0376__li153287500492">If you have enabled WTP, you need to restart the server after uninstalling the agent. In the <strong id="hss_01_0376__b1281644975120">HostGuard Uninstall</strong> dialog box, click <strong id="hss_01_0376__b48161949185117">Yes</strong> to restart the server.</li><li id="hss_01_0376__li1632805018498">If you have not enabled WTP, you do not need to restart the server. In the <strong id="hss_01_0376__b3658105316518">HostGuard Uninstall</strong> dialog box, click <strong id="hss_01_0376__b11658195313517">No</strong> to skip server restart.</li></ul>
+</p></li><li id="hss_01_0376__li138255713613"><span>If the <strong id="hss_01_0376__b291515920515">C:\Program Files\HostGuard</strong> directory does not exist on the Windows server, the agent has been uninstalled.</span></li></ol>
+<p id="hss_01_0376__p12332252181212"></p>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0317.html">Agent Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0377.html b/docs/hss/umn/hss_01_0377.html
new file mode 100644
index 00000000..3522914a
--- /dev/null
+++ b/docs/hss/umn/hss_01_0377.html
@@ -0,0 +1,17 @@
+<a name="hss_01_0377"></a><a name="hss_01_0377"></a>
+
+<h1 class="topictitle1">Enabling Protection</h1>
+<div id="body0000001345442661"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0396.html">Enterprise/Premium Edition</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0021.html">WTP Edition</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0397.html">Server Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0381.html b/docs/hss/umn/hss_01_0381.html
new file mode 100644
index 00000000..ad982d5f
--- /dev/null
+++ b/docs/hss/umn/hss_01_0381.html
@@ -0,0 +1,32 @@
+<a name="hss_01_0381"></a><a name="hss_01_0381"></a>
+
+<h1 class="topictitle1">Servers Importance Management</h1>
+<div id="body0000001345762385"><p id="hss_01_0381__p13662110103615">By default, HSS considers all servers as general assets. You can configure the asset importance levels of servers and manage servers accordingly.</p>
+<div class="p" id="hss_01_0381__p25539398321">Assets are classified into the following types:<ul id="hss_01_0381__ul81569266352"><li id="hss_01_0381__li915613268350"><strong id="hss_01_0381__b101719673911">Important</strong>. Specify this level for servers that run important services or store important data.</li><li id="hss_01_0381__li1115612673520"><strong id="hss_01_0381__b4357714218">General</strong>. Specify this level for servers that run general services or store general data.</li><li id="hss_01_0381__li9156102613518"><strong id="hss_01_0381__b12439388396">Test</strong>. Specify this level for servers that run test services or store test data.</li></ul>
+</div>
+<div class="section" id="hss_01_0381__section5760123391412"><h4 class="sectiontitle">Checking Asset Importance</h4><ol id="hss_01_0381__ol17428183502714"><li id="hss_01_0381__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0381__li830314169200"><span>Click <span><img id="hss_01_0381__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0381__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0381__hss_01_0571_b14857117404"><span id="hss_01_0381__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0381__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li></ol><ol start="3" id="hss_01_0381__ol1681012216450"><li id="hss_01_0381__li681018264513"><span>In the navigation pane, choose <strong id="hss_01_0381__b7216717135215">Asset Management</strong> &gt; <strong id="hss_01_0381__b161615244529">Servers &amp; Quota</strong>. Click the <strong id="hss_01_0381__b1069014795210">Servers</strong> tab.</span><p><div class="note" id="hss_01_0381__note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0381__hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0381__fig8957325116"><span class="figcap"><b>Figure 1 </b>Server list</span><br><span><img id="hss_01_0381__image775717641213" src="en-us_image_0000001759449225.png"></span></div>
+</p></li><li id="hss_01_0381__li283314303207"><span>In the lower part of the tab page, check the asset importance. You can click <strong id="hss_01_0381__b19515152545610">Important</strong>, <strong id="hss_01_0381__b2983435135612">General</strong>, or <strong id="hss_01_0381__b19544349155615">Test</strong> to view servers by importance level.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0381__section6100133671415"><h4 class="sectiontitle">Specifying Asset Importance</h4><ol id="hss_01_0381__ol663712499291"><li id="hss_01_0381__li539203110616"><span>Log in to the management console and go to the <span id="hss_01_0381__text183524516304">HSS</span> page.</span></li></ol><ol start="2" id="hss_01_0381__ol1068711411364"><li id="hss_01_0381__li19690241113616"><span>In the navigation pane, choose <strong id="hss_01_0381__hss_01_0381_b7216717135215">Asset Management</strong> &gt; <strong id="hss_01_0381__hss_01_0381_b161615244529">Servers &amp; Quota</strong>. Click the <strong id="hss_01_0381__hss_01_0381_b1069014795210">Servers</strong> tab.</span><p><div class="note" id="hss_01_0381__hss_01_0381_note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0381__hss_01_0381_hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0381__hss_01_0381_fig8957325116"><span class="figcap"><b>Figure 2 </b>Server list</span><br><span><img id="hss_01_0381__hss_01_0381_image775717641213" src="en-us_image_0000001759449225.png"></span></div>
+</p></li><li id="hss_01_0381__li137063513361"><span>Configure asset importance.</span><p><ul id="hss_01_0381__ul1893175113810"><li id="hss_01_0381__li793654384">Configuring a server<ul id="hss_01_0381__ul16280192212392"><li id="hss_01_0381__li162461714387">Method 1: Select a server and configure its asset importance.<ol type="a" id="hss_01_0381__ol191563144714"><li id="hss_01_0381__li31643114716">Select a server and click <strong id="hss_01_0381__b105461561593">Configure Asset Importance</strong>.<div class="fignone" id="hss_01_0381__fig556910418371"><span class="figcap"><b>Figure 3 </b>Selecting a single server</span><br><span><img id="hss_01_0381__en-us_topic_0000001517481926_image117461714456" src="en-us_image_0000001735592936.png"></span></div>
+<p id="hss_01_0381__p56786517367"></p>
+</li><li id="hss_01_0381__li1180611350489">In the dialog box that is displayed, select an asset importance level.</li><li id="hss_01_0381__li16305133815493">Confirm the information and click <span class="uicontrol" id="hss_01_0381__uicontrol12964142141614"><b>OK</b></span>.</li></ol>
+</li><li id="hss_01_0381__li1768161384612">Method 2: Click the configuration button in the <strong id="hss_01_0381__b66961816191916">Operation</strong> column.<ol type="a" id="hss_01_0381__ol04121312549"><li id="hss_01_0381__li641219319544">In the <strong id="hss_01_0381__b15880639131619">Operation</strong> column of a server, choose <strong id="hss_01_0381__b6951129121613">More</strong> &gt; <strong id="hss_01_0381__b8200162811612">Configure Asset Importance</strong>.<div class="fignone" id="hss_01_0381__fig8707142543818"><span class="figcap"><b>Figure 4 </b>Selecting a single server</span><br><span><img id="hss_01_0381__en-us_topic_0000001517481926_image1591726125214" src="en-us_image_0000001735433768.png"></span></div>
+</li><li id="hss_01_0381__li16721913125516">In the dialog box that is displayed, select an asset importance level.</li><li id="hss_01_0381__li97221413185516">Confirm the information and click <span class="uicontrol" id="hss_01_0381__uicontrol285040201920"><b>OK</b></span>.</li></ol>
+</li></ul>
+</li><li id="hss_01_0381__li793750387">Configuring servers in batches<ol type="a" id="hss_01_0381__ol108228342561"><li id="hss_01_0381__li16822534135618">Select multiple servers and click <strong id="hss_01_0381__b2659018172019">Configure Asset Importance</strong>.<div class="fignone" id="hss_01_0381__fig0275173423915"><span class="figcap"><b>Figure 5 </b>Selecting servers</span><br><span><img id="hss_01_0381__en-us_topic_0000001517481926_image465689195510" src="en-us_image_0000001735592956.png"></span></div>
+</li><li id="hss_01_0381__li220932115814">In the dialog box that is displayed, select an asset importance level.</li><li id="hss_01_0381__li131471135135818">Confirm the information and click <span class="uicontrol" id="hss_01_0381__uicontrol121973423217"><b>OK</b></span>.</li></ol>
+</li></ul>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0397.html">Server Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0383.html b/docs/hss/umn/hss_01_0383.html
new file mode 100644
index 00000000..5bfccbb8
--- /dev/null
+++ b/docs/hss/umn/hss_01_0383.html
@@ -0,0 +1,157 @@
+<a name="hss_01_0383"></a><a name="hss_01_0383"></a>
+
+<h1 class="topictitle1">Viewing Server Asset Fingerprints</h1>
+<div id="body0000001316628108"><p id="hss_01_0383__p11531140783">HSS can collect server asset fingerprints, including information about ports, processes, web applications, web services, web frameworks, and auto-started items. You can centrally check server asset information and detect risky assets in a timely manner based on the server fingerprints.  This section describes how to view collected server asset fingerprints on the console.</p>
+<div class="section" id="hss_01_0383__section17313525133919"><h4 class="sectiontitle">Prerequisite</h4><p id="hss_01_0383__hss_01_0477_p38271677401">HSS enterprise edition, premium edition, WTP edition, or container edition has been enabled for the server.</p>
+</div>
+<div class="section" id="hss_01_0383__section163371064235"><h4 class="sectiontitle">Viewing Asset Information of All Servers</h4><ol id="hss_01_0383__ol675711194218"><li id="hss_01_0383__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0383__li830314169200"><span>Click <span><img id="hss_01_0383__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0383__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0383__hss_01_0571_b14857117404"><span id="hss_01_0383__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0383__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0383__li1175731115421"><span>Choose <span class="menucascade" id="hss_01_0383__menucascade87051726571"><b><span class="uicontrol" id="hss_01_0383__uicontrol1070418269716">Asset Management</span></b> &gt; <b><span class="uicontrol" id="hss_01_0383__uicontrol1470442613712">Server Fingerprints</span></b></span> to view all server assets.</span><p><p id="hss_01_0383__p1385423413548">Delete risky assets in a timely manner.  You are advised to handle the ports as follows:</p>
+<ul id="hss_01_0383__ul86171347185410"><li id="hss_01_0383__li64124105512">If HSS detects open high-risk ports or unused ports, check whether they are really used by your services.</li><li id="hss_01_0383__li1061794785419">If a detected high-risk port is actually a normal port used for services, you can ignore it. The port will no longer be regarded risky or generate alarms.</li></ul>
+<div class="note" id="hss_01_0383__note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0383__p1035845834919">If your servers are managed by enterprise projects, you can select the target enterprise project to view or operate the asset and detection information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0383__en-us_topic_0000001517322398_fig06833531713"><span class="figcap"><b>Figure 1 </b>Viewing server asset information</span><br><span><img id="hss_01_0383__en-us_topic_0000001517322398_image5646151052819" src="en-us_image_0000001853711513.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0383__table7132214184518"></a><a name="table7132214184518"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0383__table7132214184518" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Asset fingerprints</caption><thead align="left"><tr id="hss_01_0383__hss_01_0477_row1413312147458"><th align="left" class="cellrowborder" valign="top" width="13.18%" id="mcps1.3.3.2.3.2.5.2.5.1.1"><p id="hss_01_0383__hss_01_0477_p151331214164514">Item</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="58.3%" id="mcps1.3.3.2.3.2.5.2.5.1.2"><p id="hss_01_0383__hss_01_0477_p813319142452">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="15.5%" id="mcps1.3.3.2.3.2.5.2.5.1.3"><p id="hss_01_0383__hss_01_0477_p132091338615">Supported OS</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="13.020000000000001%" id="mcps1.3.3.2.3.2.5.2.5.1.4"><p id="hss_01_0383__hss_01_0477_p189187121331">Automatic Detection Period</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0383__hss_01_0477_row1813318144450"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.2.3.2.5.2.5.1.1 "><p id="hss_01_0383__hss_01_0477_p71336147458">Account Information</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.2.3.2.5.2.5.1.2 "><p id="hss_01_0383__hss_01_0477_p13904155117158">Check and manage all accounts on your servers to keep them secure.</p>
+<p id="hss_01_0383__hss_01_0477_p20634204172113">You can check real-time and historical account information to find suspicious accounts.</p>
+<ul id="hss_01_0383__hss_01_0477_ul4396333172113"><li id="hss_01_0383__hss_01_0477_li15175144011016">Real-time account information includes the account name, number of servers, server name/IP address, login permission, root permission, user group, user directory, shell started by the user, and the last scan time.</li><li id="hss_01_0383__hss_01_0477_li10591134912017">Historical account change records include the server name/IP address, change status, login permission, root permission, user group, user directory, shell started by the user, and the last scan time.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.2.3.2.5.2.5.1.3 "><p id="hss_01_0383__hss_01_0477_p42091633863">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.2.3.2.5.2.5.1.4 "><p id="hss_01_0383__hss_01_0477_p1491811121232">Automatic check every hour</p>
+</td>
+</tr>
+<tr id="hss_01_0383__hss_01_0477_row20133101454517"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.2.3.2.5.2.5.1.1 "><p id="hss_01_0383__hss_01_0477_p14133161412452">Open Ports</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.2.3.2.5.2.5.1.2 "><p id="hss_01_0383__hss_01_0477_p103961731131615">Check open ports on your servers, including risky and unknown ports.</p>
+<p id="hss_01_0383__hss_01_0477_p413321464511">You can easily identify high-risk ports by checking local ports, protocol types, server names, IP addresses, statuses, PIDs, and program files.</p>
+<ul id="hss_01_0383__hss_01_0477_ul9550151815325"><li id="hss_01_0383__hss_01_0477_li16433194820">Manually disabling high-risk ports<p id="hss_01_0383__hss_01_0477_p4915744183214"><a name="hss_01_0383__hss_01_0477_li16433194820"></a><a name="hss_01_0477_li16433194820"></a>If dangerous or unnecessary ports are found enabled, check whether they are mandatory for services, and disable them if they are not. For dangerous ports, you are advised to further check their program files, and delete or isolate their source files if necessary.</p>
+<p id="hss_01_0383__hss_01_0477_p417844312326">It is recommended that you handle the ports at the <strong id="hss_01_0383__hss_01_0477_b1931918716113226">Dangerous</strong> risk level promptly and handle the ports at the <strong id="hss_01_0383__hss_01_0477_b1133394007113226">Unknown</strong> risk level based on the actual service conditions.</p>
+</li><li id="hss_01_0383__hss_01_0477_li11551818113219">Ignore risks: If a detected high-risk port is actually a normal port used for services, you can ignore it. The port will no longer be regarded risky or generate alarms.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.2.3.2.5.2.5.1.3 "><p id="hss_01_0383__hss_01_0477_p785823115253">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.2.3.2.5.2.5.1.4 "><p id="hss_01_0383__hss_01_0477_p6853151318363">Automated check every 30 seconds</p>
+</td>
+</tr>
+<tr id="hss_01_0383__hss_01_0477_row15133161416457"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.2.3.2.5.2.5.1.1 "><p id="hss_01_0383__hss_01_0477_p17133214164516">Processes</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.2.3.2.5.2.5.1.2 "><p id="hss_01_0383__hss_01_0477_p6725127131720">Check processes on your servers and find abnormal processes.</p>
+<p id="hss_01_0383__hss_01_0477_p535813084619">You can easily identify abnormal processes based process paths, server names, IP addresses, startup parameters, startup time, users who run the processes, file permissions, PIDs, and file hashes.</p>
+<p id="hss_01_0383__hss_01_0477_p20769122511338">If a suspicious process has not been detected in the last 30 days, its information will be automatically deleted from the process list.</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.2.3.2.5.2.5.1.3 "><p id="hss_01_0383__hss_01_0477_p1085863115255">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.2.3.2.5.2.5.1.4 "><p id="hss_01_0383__hss_01_0477_p1918191216312">Automatic check every hour</p>
+</td>
+</tr>
+<tr id="hss_01_0383__hss_01_0477_row1913316148456"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.2.3.2.5.2.5.1.1 "><p id="hss_01_0383__hss_01_0477_p9133131418453">Installed Software</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.2.3.2.5.2.5.1.2 "><p id="hss_01_0383__hss_01_0477_p11980173341412">Check and manage all software installed on your containers, and identify insecure versions.</p>
+<p id="hss_01_0383__hss_01_0477_p18141403483">You can check real-time and historical software information to determine whether the software is risky.</p>
+<ul id="hss_01_0383__hss_01_0477_ul79732312491"><li id="hss_01_0383__hss_01_0477_li86231677499">Real-time software information includes the software name, number of servers, server names, IP addresses, software versions, software update time, and the last scan time.</li><li id="hss_01_0383__hss_01_0477_li19513125084817">Historical software change records include the server names, IP addresses, change statuses, software versions, software update time, and the last scan time.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.2.3.2.5.2.5.1.3 "><p id="hss_01_0383__hss_01_0477_p16209183317614">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.2.3.2.5.2.5.1.4 "><p id="hss_01_0383__hss_01_0477_p9263121819216">Automatic check every day</p>
+</td>
+</tr>
+<tr id="hss_01_0383__hss_01_0477_row6408131345612"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.2.3.2.5.2.5.1.1 "><p id="hss_01_0383__hss_01_0477_p11411151355615">Auto-startup</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.2.3.2.5.2.5.1.2 "><p id="hss_01_0383__hss_01_0477_p17353144415227">Check for auto-startup items and quickly locate Trojans.</p>
+<ul id="hss_01_0383__hss_01_0477_ul1913173662319"><li id="hss_01_0383__hss_01_0477_li71318361235">Real-time information about auto-started items includes their names, types (auto-started service, startup folder, pre-loaded dynamic library, Run registry key, or scheduled task), number of servers, server names, IP addresses, paths, file hashes, users, and the last scan time.</li><li id="hss_01_0383__hss_01_0477_li18225819182812">The historical change records of auto-started items include server names, IP addresses, change statuses, paths, file hashes, users, and the last scan time.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.2.3.2.5.2.5.1.3 "><p id="hss_01_0383__hss_01_0477_p158581131182511">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.2.3.2.5.2.5.1.4 "><p id="hss_01_0383__hss_01_0477_p188541588487">Automatic check every hour</p>
+</td>
+</tr>
+<tr id="hss_01_0383__hss_01_0477_row9626133513430"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.2.3.2.5.2.5.1.1 "><p id="hss_01_0383__hss_01_0477_p2081123134913">Websites</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.2.3.2.5.2.5.1.2 "><p id="hss_01_0383__hss_01_0477_p848116594301">You can check statistics about web directories and sites that can be accessed from the Internet. You can view the directories and permissions, access paths, external ports, certificate information (to be provided later), and key processes of websites.</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.2.3.2.5.2.5.1.3 "><p id="hss_01_0383__hss_01_0477_p116921618113211">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.2.3.2.5.2.5.1.4 "><p id="hss_01_0383__hss_01_0477_p2048212427299">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0383__hss_01_0477_row5692448144313"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.2.3.2.5.2.5.1.1 "><p id="hss_01_0383__hss_01_0477_p15621203410495">Web Frameworks</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.2.3.2.5.2.5.1.2 "><p id="hss_01_0383__hss_01_0477_p54815599304">You can check statistics about frameworks used for web content presentation, including their versions, paths, and associated processes.</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.2.3.2.5.2.5.1.3 "><p id="hss_01_0383__hss_01_0477_p0693101810326">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.2.3.2.5.2.5.1.4 "><p id="hss_01_0383__hss_01_0477_p15899175772913">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0383__hss_01_0477_row1183544384312"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.2.3.2.5.2.5.1.1 "><p id="hss_01_0383__hss_01_0477_p24774574911">Middleware</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.2.3.2.5.2.5.1.2 "><p id="hss_01_0383__hss_01_0477_p64811059193019">You can check information about servers, versions, paths, and processes associated with middleware.</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.2.3.2.5.2.5.1.3 "><p id="hss_01_0383__hss_01_0477_p134211499303">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.2.3.2.5.2.5.1.4 "><p id="hss_01_0383__hss_01_0477_p166261615305">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0383__hss_01_0477_row77154064317"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.2.3.2.5.2.5.1.1 "><p id="hss_01_0383__hss_01_0477_p9481945164912">Kernel Module</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.2.3.2.5.2.5.1.2 "><p id="hss_01_0383__hss_01_0477_p7481345174914">You can check information about all the program module files running in kernels, including associated servers, version numbers, module descriptions, driver file paths, file permissions, and file hashes.</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.2.3.2.5.2.5.1.3 "><p id="hss_01_0383__hss_01_0477_p137305417717">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.2.3.2.5.2.5.1.4 "><p id="hss_01_0383__hss_01_0477_p36265119308">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0383__hss_01_0477_row8863174243412"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.2.3.2.5.2.5.1.1 "><p id="hss_01_0383__hss_01_0477_p18633427345">Web Services</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.2.3.2.5.2.5.1.2 "><p id="hss_01_0383__hss_01_0477_p386354203417">You can check details about the software used for web content access, including versions, paths, configuration files, and associated processes of all software.</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.2.3.2.5.2.5.1.3 "><p id="hss_01_0383__hss_01_0477_p22101233264">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.2.3.2.5.2.5.1.4 "><p id="hss_01_0383__hss_01_0477_p19863942183418">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0383__hss_01_0477_row1076748113414"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.2.3.2.5.2.5.1.1 "><p id="hss_01_0383__hss_01_0477_p69428919354">Web Applications</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.2.3.2.5.2.5.1.2 "><p id="hss_01_0383__hss_01_0477_p105593318264">You can check details about software used for web content push and release, including versions, paths, configuration files, and associated processes of all software.</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.2.3.2.5.2.5.1.3 "><p id="hss_01_0383__hss_01_0477_p921016333614">Linux and Windows (only Tomcat is supported)</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.2.3.2.5.2.5.1.4 "><p id="hss_01_0383__hss_01_0477_p78421571857">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0383__hss_01_0477_row27861456143514"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.2.3.2.5.2.5.1.1 "><p id="hss_01_0383__hss_01_0477_p1178785617352">Databases</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.2.3.2.5.2.5.1.2 "><p id="hss_01_0383__hss_01_0477_p97872566358">You can check details about software that provides data storage, including versions, paths, configuration files, and associated processes of all software.</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.2.3.2.5.2.5.1.3 "><p id="hss_01_0383__hss_01_0477_p8210133461">Linux and Windows (only MySQL is supported)</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.2.3.2.5.2.5.1.4 "><p id="hss_01_0383__hss_01_0477_p67312011353">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0383__section174491217185416"><h4 class="sectiontitle">Viewing Asset Information of a Single Server</h4><ol id="hss_01_0383__ol1681012216450"><li id="hss_01_0383__li208951638165610"><span>Log in to the management console.</span></li><li id="hss_01_0383__li14432757125410"><span>Click <span><img id="hss_01_0383__hss_01_0571_image9939115511526_1" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0383__hss_01_0571_b74857118407_1">Security</strong> &gt; <strong id="hss_01_0383__hss_01_0571_b14857117404_1"><span id="hss_01_0383__hss_01_0571_text6485319406_1">HSS</span></strong>. The <span id="hss_01_0383__hss_01_0571_text11485131194016_1">HSS</span> page is displayed.</span></li><li id="hss_01_0383__li157919415119"><span>In the navigation pane, choose <strong id="hss_01_0383__b1393134214333">Asset Management</strong> &gt; <strong id="hss_01_0383__b203931142103312">Servers &amp; Quota</strong>. Click the <strong id="hss_01_0383__b173931242183318">Servers</strong> tab.</span><p><div class="note" id="hss_01_0383__note5369150102314"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0383__hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+</p></li><li id="hss_01_0383__li66861750105714"><span>Click the name of the target server. On the server details page that is displayed, choose <span class="menucascade" id="hss_01_0383__menucascade83979785817"><b><span class="uicontrol" id="hss_01_0383__uicontrol18397107105816">Asset Fingerprints</span></b> &gt; <b><span class="uicontrol" id="hss_01_0383__uicontrol95581791585">Servers</span></b></span>.</span></li><li id="hss_01_0383__li51711655143914"><span>Click a fingerprint in the fingerprint list to view its asset information. For more information, see <a href="#hss_01_0383__table7132214184518">Table 1</a>.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0463.html">Server Fingerprints</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0384.html b/docs/hss/umn/hss_01_0384.html
new file mode 100644
index 00000000..a7ca6a07
--- /dev/null
+++ b/docs/hss/umn/hss_01_0384.html
@@ -0,0 +1,26 @@
+<a name="hss_01_0384"></a><a name="hss_01_0384"></a>
+
+<h1 class="topictitle1">Viewing the Operation History of Server Assets</h1>
+<div id="body0000001316148744"><p id="hss_01_0384__p64091358114">HSS proactively records the changes on account information, software information, and auto-started items. You can check the change details according to different dimensions and time ranges.</p>
+<div class="section" id="hss_01_0384__section461916238512"><h4 class="sectiontitle">Prerequisite</h4><p id="hss_01_0384__hss_01_0383_hss_01_0477_p38271677401">HSS enterprise edition, premium edition, WTP edition, or container edition has been enabled for the server.</p>
+</div>
+<div class="section" id="hss_01_0384__section15536134014371"><h4 class="sectiontitle">Checking Change Records</h4><ol id="hss_01_0384__ol675711194218"><li id="hss_01_0384__li208951638165610"><span>Log in to the management console.</span></li><li id="hss_01_0384__li830314169200"><span>Click <span><img id="hss_01_0384__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0384__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0384__hss_01_0571_b14857117404"><span id="hss_01_0384__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0384__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0384__li1175731115421"><span>Choose <strong id="hss_01_0384__b1441193013815">Asset Management</strong> &gt; <strong id="hss_01_0384__b174126302816">Server Fingerprints</strong> and click <strong id="hss_01_0384__b14412103016813">Operation History</strong>. On the displayed <strong id="hss_01_0384__b194121130889">Operation History</strong> page, select a dimension and time period to view the change history of accounts, software, and auto-started items.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0384__section96641643103820"><h4 class="sectiontitle">Managing Account Information</h4><div class="p" id="hss_01_0384__p7493949529">Account changes are recorded.<ul id="hss_01_0384__ul13517851123913"><li id="hss_01_0384__li1451785153918"><strong id="hss_01_0384__b6579201033118">Action</strong>: The <strong id="hss_01_0384__b2036820314312">Action</strong> column records the operations. Its value can be <strong id="hss_01_0384__b19368173110310">Create</strong> (newly found in the latest check), <strong id="hss_01_0384__b43696311310">Delete</strong> (found in earlier checks but missing in the latest check), and <strong id="hss_01_0384__b153697314310">Modify</strong> (changes on account information, such as account names, administrator rights, and user groups, are detected).</li><li id="hss_01_0384__li6517145123911"><strong id="hss_01_0384__b9703837153115">Last Scan Time</strong>: The last scan time indicates the time of the latest scan performed for servers in a period.</li></ul>
+</div>
+<p id="hss_01_0384__p20949133124111">You can check the information about and changes on all accounts here. If you find unnecessary or super-privileged accounts (such as <strong id="hss_01_0384__b195561699118">root</strong>) that are not mandatory for services, delete them or modify their permissions to prevent exploits.</p>
+</div>
+<div class="section" id="hss_01_0384__section5964219203914"><h4 class="sectiontitle">Managing Software</h4><div class="p" id="hss_01_0384__p16356121319524">Operations made to accounts are recorded.<ul id="hss_01_0384__ul203562013145219"><li id="hss_01_0384__li1356213125210"><strong id="hss_01_0384__b16172212496">Action</strong>: <strong id="hss_01_0384__b13678220493">Create</strong> and <strong id="hss_01_0384__b1967152219492">Delete</strong>.</li><li id="hss_01_0384__li3356191395212"><strong id="hss_01_0384__b139285143118">Last Scan Time</strong>: The last scan time records the time when the changes were detected, not the time they were made.</li></ul>
+</div>
+<p id="hss_01_0384__p8751105519505">You can check the information about and changes on all software, upgrade software, and delete software that is unnecessary, suspicious, or in old version.</p>
+</div>
+<div class="section" id="hss_01_0384__section964916436136"><h4 class="sectiontitle">Auto-started Items</h4><p id="hss_01_0384__p43534112455">Trojans usually intrude servers by creating auto-started services, scheduled tasks, preloaded dynamic libraries, run registry keys, or startup folders. The auto-startup check function collects information about all auto-started items, including their names, types, and number of affected servers, making it easy for you to locate suspicious auto-started items.</p>
+<p id="hss_01_0384__p72561058745">You can check the servers, IP addresses, changes, paths, file hashes, users, and last scan time of auto-startup items.</p>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0463.html">Server Fingerprints</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0385.html b/docs/hss/umn/hss_01_0385.html
new file mode 100644
index 00000000..8c60f97e
--- /dev/null
+++ b/docs/hss/umn/hss_01_0385.html
@@ -0,0 +1,12 @@
+<a name="hss_01_0385"></a><a name="hss_01_0385"></a>
+
+<h1 class="topictitle1">Security Configurations</h1>
+<div id="body0000001211871316"><p id="hss_01_0385__p0995616158">You can add common login locations, common IP addresses, and whitelist IP addresses, and enable malicious program isolation and killing to enhance server security.</p>
+<p id="hss_01_0385__p8060118">For details, see <a href="hss_01_0051.html">Common Security Configuration</a>.</p>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0373.html">Installation &amp; Configuration</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0387.html b/docs/hss/umn/hss_01_0387.html
new file mode 100644
index 00000000..a5ef9583
--- /dev/null
+++ b/docs/hss/umn/hss_01_0387.html
@@ -0,0 +1,15 @@
+<a name="hss_01_0387"></a><a name="hss_01_0387"></a>
+
+<h1 class="topictitle1">Asset Management</h1>
+<div id="body0000001310077397"><p id="hss_01_0387__p8060118">You can count all your assets and check their statistics, including the agent status, protection status, quota, account, port, process, software, and auto-started items.</p>
+<div class="section" id="hss_01_0387__section1854716547329"><h4 class="sectiontitle">Constraints</h4><p id="hss_01_0387__p1197619093311">Servers that are not protected by HSS do not support the asset overview function.</p>
+</div>
+<div class="section" id="hss_01_0387__section395013391574"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0387__ol036894325816"><li id="hss_01_0387__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0387__li830314169200"><span>Click <span><img id="hss_01_0387__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0387__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0387__hss_01_0571_b14857117404"><span id="hss_01_0387__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0387__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0387__li8470920145913"><span>Choose <strong id="hss_01_0387__b1937494612215">Asset Management</strong> &gt; <strong id="hss_01_0387__b03801466216">Assets</strong>. Check your assets and their statistics.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0294.html">Asset Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0388.html b/docs/hss/umn/hss_01_0388.html
new file mode 100644
index 00000000..f8b5f79c
--- /dev/null
+++ b/docs/hss/umn/hss_01_0388.html
@@ -0,0 +1,21 @@
+<a name="hss_01_0388"></a><a name="hss_01_0388"></a>
+
+<h1 class="topictitle1">Application Protection</h1>
+<div id="body0000001308285906"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0390.html">Enabling Application Protection</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0389.html">Viewing Application Protection</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0459.html">Managing Application Protection Policies</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0392.html">Disabling Application Protection</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0142.html">Prevention</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0389.html b/docs/hss/umn/hss_01_0389.html
new file mode 100644
index 00000000..741f5d60
--- /dev/null
+++ b/docs/hss/umn/hss_01_0389.html
@@ -0,0 +1,126 @@
+<a name="hss_01_0389"></a><a name="hss_01_0389"></a>
+
+<h1 class="topictitle1">Viewing Application Protection</h1>
+<div id="body0000001360929817"><p id="hss_01_0389__p9891256112718">To protect your applications with RASP, you simply need to add probes to them, without having to modify application files.</p>
+<div class="section" id="hss_01_0389__section15178101222819"><h4 class="sectiontitle">Technical Principles</h4><p id="hss_01_0389__p832602920286">Probes (monitoring and protection code) are added to the checkpoints (key functions) of applications through dynamic code injection. The probes identify attacks based on predefined rules, data passing through the checkpoints, and contexts (application logic, configurations, data, and event flows).</p>
+</div>
+<div class="section" id="hss_01_0389__section156211515117"><h4 class="sectiontitle">Prerequisites</h4><p id="hss_01_0389__p567051351211">You have enabled <span id="hss_01_0389__text3937143711301">HSS</span> premium, WTP, or container edition.</p>
+</div>
+<div class="section" id="hss_01_0389__section20810171313111"><h4 class="sectiontitle">Constraints</h4><ul id="hss_01_0389__ul18547741696"><li id="hss_01_0389__li17547140910">Currently, only Linux servers are supported.</li><li id="hss_01_0389__li85481641298">So far, only Java applications can be protected.</li><li id="hss_01_0389__li141759531623">The premium, WTP, and container editions support operations related to application protection.</li></ul>
+</div>
+<div class="section" id="hss_01_0389__section1275255212109"><h4 class="sectiontitle">Viewing Protection Settings</h4><ol id="hss_01_0389__ol1027841961419"><li id="hss_01_0389__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0389__li830314169200"><span>Click <span><img id="hss_01_0389__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0389__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0389__hss_01_0571_b14857117404"><span id="hss_01_0389__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0389__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0389__li417472413510"><span>Choose <strong id="hss_01_0389__b3174132902116">Prevention</strong> &gt; <strong id="hss_01_0389__b4174729162115">Application Protection</strong>. Click the <strong id="hss_01_0389__b1017452911215">Protected Servers</strong> tab.</span><p><div class="note" id="hss_01_0389__note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0389__hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0389__fig113141841181214"><span class="figcap"><b>Figure 1 </b>Viewing protection settings</span><br><span><img id="hss_01_0389__image1538493318104" src="en-us_image_0000001807108040.png"></span></div>
+</p></li><li id="hss_01_0389__li1861183719164"><span>Click the <strong id="hss_01_0389__b24914242230">Protection Servers</strong> tab and check the server list. The server parameters are as follows.</span><p>
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0389__table1748482221818" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameter description</caption><thead align="left"><tr id="hss_01_0389__row448413226180"><th align="left" class="cellrowborder" valign="top" width="34.02%" id="mcps1.3.5.2.4.2.1.2.3.1.1"><p id="hss_01_0389__p448462251817">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="65.98%" id="mcps1.3.5.2.4.2.1.2.3.1.2"><p id="hss_01_0389__p5484162219185">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0389__row10484172261820"><td class="cellrowborder" valign="top" width="34.02%" headers="mcps1.3.5.2.4.2.1.2.3.1.1 "><p id="hss_01_0389__p14484922141817">Server Name/ID</p>
+</td>
+<td class="cellrowborder" valign="top" width="65.98%" headers="mcps1.3.5.2.4.2.1.2.3.1.2 "><p id="hss_01_0389__p44841222185">Server name and ID</p>
+</td>
+</tr>
+<tr id="hss_01_0389__row19484122231817"><td class="cellrowborder" valign="top" width="34.02%" headers="mcps1.3.5.2.4.2.1.2.3.1.1 "><p id="hss_01_0389__p104851522131815">IP Address</p>
+</td>
+<td class="cellrowborder" valign="top" width="65.98%" headers="mcps1.3.5.2.4.2.1.2.3.1.2 "><p id="hss_01_0389__p94851522131810">Private IP address and EIP of the server</p>
+</td>
+</tr>
+<tr id="hss_01_0389__row34859222182"><td class="cellrowborder" valign="top" width="34.02%" headers="mcps1.3.5.2.4.2.1.2.3.1.1 "><p id="hss_01_0389__p184851220185">OS</p>
+</td>
+<td class="cellrowborder" valign="top" width="65.98%" headers="mcps1.3.5.2.4.2.1.2.3.1.2 "><p id="hss_01_0389__p3485622141813">Server OS</p>
+</td>
+</tr>
+<tr id="hss_01_0389__row64851922121814"><td class="cellrowborder" valign="top" width="34.02%" headers="mcps1.3.5.2.4.2.1.2.3.1.1 "><p id="hss_01_0389__p1648572213181">Server Group</p>
+</td>
+<td class="cellrowborder" valign="top" width="65.98%" headers="mcps1.3.5.2.4.2.1.2.3.1.2 "><p id="hss_01_0389__p9485622161814">Group that the server belongs to</p>
+</td>
+</tr>
+<tr id="hss_01_0389__row2600710784"><td class="cellrowborder" valign="top" width="34.02%" headers="mcps1.3.5.2.4.2.1.2.3.1.1 "><p id="hss_01_0389__p17601310688">Policy</p>
+</td>
+<td class="cellrowborder" valign="top" width="65.98%" headers="mcps1.3.5.2.4.2.1.2.3.1.2 "><p id="hss_01_0389__p1460110101585">Detection policies bound to the target server.</p>
+</td>
+</tr>
+<tr id="hss_01_0389__row12485152211188"><td class="cellrowborder" valign="top" width="34.02%" headers="mcps1.3.5.2.4.2.1.2.3.1.1 "><p id="hss_01_0389__p9485112251812">Protection Status</p>
+</td>
+<td class="cellrowborder" valign="top" width="65.98%" headers="mcps1.3.5.2.4.2.1.2.3.1.2 "><p id="hss_01_0389__p114851822121820">Agent status of a server.</p>
+<ul id="hss_01_0389__ul562591814152"><li id="hss_01_0389__li562651820156">Protected: The agent is online.</li><li id="hss_01_0389__li207745171329">Unprotected: The agent is offline.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0389__row3485922191813"><td class="cellrowborder" valign="top" width="34.02%" headers="mcps1.3.5.2.4.2.1.2.3.1.1 "><p id="hss_01_0389__p1485192212180">Microservice Protection</p>
+</td>
+<td class="cellrowborder" valign="top" width="65.98%" headers="mcps1.3.5.2.4.2.1.2.3.1.2 "><p id="hss_01_0389__p1048519223180">Microservice protection status. Its value can be:</p>
+<ul id="hss_01_0389__ul1516683391512"><li id="hss_01_0389__li2166103315158">Effective: The microservice protection is enabled successfully.</li><li id="hss_01_0389__li46011226234">Installing: The microservice RASP protection software is being installed and protection is disabled.</li><li id="hss_01_0389__li11388143831516">Installed but not configured: The microservice RASP protection software is successfully installed, but microservice startup parameters are not configured and protection is disabled.</li><li id="hss_01_0389__li3227222181920">Installation failed: The microservice RASP protection software fails to be installed.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0389__row11485922161816"><td class="cellrowborder" valign="top" width="34.02%" headers="mcps1.3.5.2.4.2.1.2.3.1.1 "><p id="hss_01_0389__p9485132291813">RASP Protection.</p>
+</td>
+<td class="cellrowborder" valign="top" width="65.98%" headers="mcps1.3.5.2.4.2.1.2.3.1.2 "><p id="hss_01_0389__p171171607441">RASP protection status. Its value can be:</p>
+<p id="hss_01_0389__p8485172211814">If the following information is displayed next to <span><img id="hss_01_0389__image15171174720467" src="en-us_image_0000001807123476.png"></span>, protection is not enabled. Check whether there are operations that are not handled by referring to <a href="hss_01_0390.html">Enabling Application Protection</a>.</p>
+<ul id="hss_01_0389__ul174694561291"><li id="hss_01_0389__li1136594919297">Installing: The microservice RASP protection software is being installed and protection is disabled.</li><li id="hss_01_0389__li83656498295">Installed but not configured: The microservice RASP protection software is successfully installed, but microservice startup parameters are not configured and protection is disabled.</li><li id="hss_01_0389__li73651449112910">Installation failed: The microservice RASP protection software fails to be installed.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0389__row61216108203"><td class="cellrowborder" valign="top" width="34.02%" headers="mcps1.3.5.2.4.2.1.2.3.1.1 "><p id="hss_01_0389__p13121201092014">Detected Attacks</p>
+</td>
+<td class="cellrowborder" valign="top" width="65.98%" headers="mcps1.3.5.2.4.2.1.2.3.1.2 "><p id="hss_01_0389__p1812220104207">Number of attacks detected by RASP.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0389__section54117613347"><h4 class="sectiontitle">Viewing Events</h4><ol id="hss_01_0389__ol12710941172010"><li id="hss_01_0389__li1554152661520"><span>Log in to the management console and go to the <span id="hss_01_0389__text2014874619317">HSS</span> page.</span></li><li id="hss_01_0389__li14713194116200"><span>Choose <span class="menucascade" id="hss_01_0389__menucascade15765459132016"><b><span class="uicontrol" id="hss_01_0389__uicontrol147641559132020">Prevention</span></b> &gt; <b><span class="uicontrol" id="hss_01_0389__uicontrol47641359182014">Application Protection</span></b></span> and click the <strong id="hss_01_0389__b15569151315564">Events</strong> tab. For details about the parameters, see <a href="#hss_01_0389__table1953772412357">Table 2</a>.</span><p><div class="p" id="hss_01_0389__p18528125411111"><div class="fignone" id="hss_01_0389__fig1342114551512"><span class="figcap"><b>Figure 2 </b>Viewing protection events</span><br><span><img id="hss_01_0389__image1490819215018" src="en-us_image_0000001854003221.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0389__table1953772412357"></a><a name="table1953772412357"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0389__table1953772412357" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Event parameters</caption><thead align="left"><tr id="hss_01_0389__row135371924193517"><th align="left" class="cellrowborder" valign="top" width="32.06%" id="mcps1.3.6.2.2.2.1.2.2.3.1.1"><p id="hss_01_0389__p853715249359">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="67.94%" id="mcps1.3.6.2.2.2.1.2.2.3.1.2"><p id="hss_01_0389__p1253713241354">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0389__row1537724183520"><td class="cellrowborder" valign="top" width="32.06%" headers="mcps1.3.6.2.2.2.1.2.2.3.1.1 "><p id="hss_01_0389__p35371624103515">Severity</p>
+</td>
+<td class="cellrowborder" valign="top" width="67.94%" headers="mcps1.3.6.2.2.2.1.2.2.3.1.2 "><p id="hss_01_0389__p95371240356">Alarm severity. You can search for servers by alarm severities.</p>
+<ul id="hss_01_0389__ul167175974111"><li id="hss_01_0389__li1637610264219"><strong id="hss_01_0389__b46970421174">Critical</strong></li><li id="hss_01_0389__li107195915414"><strong id="hss_01_0389__b05992449718">High</strong></li><li id="hss_01_0389__li107125914419"><strong id="hss_01_0389__b199151845374">Medium</strong></li><li id="hss_01_0389__li11715918416"><strong id="hss_01_0389__b1193111465715">Low</strong></li></ul>
+</td>
+</tr>
+<tr id="hss_01_0389__row1753752483516"><td class="cellrowborder" valign="top" width="32.06%" headers="mcps1.3.6.2.2.2.1.2.2.3.1.1 "><p id="hss_01_0389__p155381824173515">Server Name</p>
+</td>
+<td class="cellrowborder" valign="top" width="67.94%" headers="mcps1.3.6.2.2.2.1.2.2.3.1.2 "><p id="hss_01_0389__p453822411353">Server that triggers an alarm</p>
+</td>
+</tr>
+<tr id="hss_01_0389__row135388248356"><td class="cellrowborder" valign="top" width="32.06%" headers="mcps1.3.6.2.2.2.1.2.2.3.1.1 "><p id="hss_01_0389__p85381249354">Alarm Name</p>
+</td>
+<td class="cellrowborder" valign="top" width="67.94%" headers="mcps1.3.6.2.2.2.1.2.2.3.1.2 "><p id="hss_01_0389__p25381124143510">Alarm name</p>
+</td>
+</tr>
+<tr id="hss_01_0389__row9538102417355"><td class="cellrowborder" valign="top" width="32.06%" headers="mcps1.3.6.2.2.2.1.2.2.3.1.1 "><p id="hss_01_0389__p1353842463517">Alarm Time</p>
+</td>
+<td class="cellrowborder" valign="top" width="67.94%" headers="mcps1.3.6.2.2.2.1.2.2.3.1.2 "><p id="hss_01_0389__p9538102414352">Time when an alarm is reported</p>
+</td>
+</tr>
+<tr id="hss_01_0389__row1253842403517"><td class="cellrowborder" valign="top" width="32.06%" headers="mcps1.3.6.2.2.2.1.2.2.3.1.1 "><p id="hss_01_0389__p175382024103511">Attack Source IP Address</p>
+</td>
+<td class="cellrowborder" valign="top" width="67.94%" headers="mcps1.3.6.2.2.2.1.2.2.3.1.2 "><p id="hss_01_0389__p25381124203510">IP address of the server that triggers the alarm</p>
+</td>
+</tr>
+<tr id="hss_01_0389__row253892414352"><td class="cellrowborder" valign="top" width="32.06%" headers="mcps1.3.6.2.2.2.1.2.2.3.1.1 "><p id="hss_01_0389__p753816244357">Attack Source URL</p>
+</td>
+<td class="cellrowborder" valign="top" width="67.94%" headers="mcps1.3.6.2.2.2.1.2.2.3.1.2 "><p id="hss_01_0389__p4539924193512">URL of the server that triggers the alarm</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</p></li><li id="hss_01_0389__li15361324203520"><span>You can click an alarm name to view the attack information (such as the request information and attack source IP address) and extended information (such as detection rule ID and description), and troubleshoot the problem accordingly.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0388.html">Application Protection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0390.html b/docs/hss/umn/hss_01_0390.html
new file mode 100644
index 00000000..68f53cb8
--- /dev/null
+++ b/docs/hss/umn/hss_01_0390.html
@@ -0,0 +1,23 @@
+<a name="hss_01_0390"></a><a name="hss_01_0390"></a>
+
+<h1 class="topictitle1">Enabling Application Protection</h1>
+<div id="body0000001308010416"><div class="section" id="hss_01_0390__section156211515117"><h4 class="sectiontitle">Prerequisites</h4><p id="hss_01_0390__hss_01_0389_p567051351211">You have enabled <span id="hss_01_0390__text1050812495620">HSS</span> premium, WTP, or container edition.</p>
+</div>
+<div class="section" id="hss_01_0390__section20810171313111"><h4 class="sectiontitle">Constraints</h4><ul id="hss_01_0390__hss_01_0389_ul18547741696"><li id="hss_01_0390__hss_01_0389_li17547140910">Currently, only Linux servers are supported.</li><li id="hss_01_0390__hss_01_0389_li85481641298">So far, only Java applications can be protected.</li><li id="hss_01_0390__hss_01_0389_li141759531623">The premium, WTP, and container editions support operations related to application protection.</li></ul>
+</div>
+<div class="section" id="hss_01_0390__section1419371615295"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0390__ol1027841961419"><li id="hss_01_0390__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0390__li830314169200"><span>Click <span><img id="hss_01_0390__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0390__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0390__hss_01_0571_b14857117404"><span id="hss_01_0390__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0390__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0390__li417472413510"><span>Choose <strong id="hss_01_0390__hss_01_0389_b3174132902116">Prevention</strong> &gt; <strong id="hss_01_0390__hss_01_0389_b4174729162115">Application Protection</strong>. Click the <strong id="hss_01_0390__hss_01_0389_b1017452911215">Protected Servers</strong> tab.</span><p><div class="note" id="hss_01_0390__hss_01_0389_note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0390__hss_01_0389_hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0390__hss_01_0389_fig113141841181214"><span class="figcap"><b>Figure 1 </b>Viewing protection settings</span><br><span><img id="hss_01_0390__hss_01_0389_image1538493318104" src="en-us_image_0000001807108040.png"></span></div>
+</p></li><li id="hss_01_0390__li6854124316295"><span>Click <strong id="hss_01_0390__b5940616195618">Add Server</strong>. Select servers in the dialog box that is displayed.</span><p><div class="note" id="hss_01_0390__note209787815216"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0390__p29791281622">You can select a default security policy or create a security policy.</p>
+</div></div>
+<p id="hss_01_0390__p118470216116"></p>
+<div class="fignone" id="hss_01_0390__fig1367144031814"><span class="figcap"><b>Figure 2 </b>Selecting the target server and policy</span><br><span><img id="hss_01_0390__image1064084174214" src="en-us_image_0000001669828885.png"></span></div>
+</p></li><li id="hss_01_0390__li15469203013352"><span>Click <strong id="hss_01_0390__b33611951195714">Add and Enable Protection</strong>.</span></li><li id="hss_01_0390__li117293448395"><span>On the <strong id="hss_01_0390__b1591814012">Protected Servers</strong> tab, click the status in the <strong id="hss_01_0390__b79831928813">RASP Protection</strong> column.</span></li><li id="hss_01_0390__li832918537529"><span>Check the RASP software installation progress. Wait until the message "Installation completed." is displayed.</span></li><li id="hss_01_0390__li18407112124812"><span>Log in to the server, go to the Spring Boot startup path, and copy the parameters from the <strong id="hss_01_0390__b84971056121015">Configure Startup Parameters</strong> step to the command box.</span></li><li id="hss_01_0390__li18309175219103"><span>Restart the microservice to apply the protection settings.</span></li><li id="hss_01_0390__li1834611557108"><span>On the <strong id="hss_01_0390__b2301183919176">Protected Servers</strong> tab, check the protection status in the <strong id="hss_01_0390__b1366493111811">Microservice Protection</strong> column. If the status is <strong id="hss_01_0390__b14543152213184">Active</strong>, the protection has been enabled.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0388.html">Application Protection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0392.html b/docs/hss/umn/hss_01_0392.html
new file mode 100644
index 00000000..50b871e2
--- /dev/null
+++ b/docs/hss/umn/hss_01_0392.html
@@ -0,0 +1,18 @@
+<a name="hss_01_0392"></a><a name="hss_01_0392"></a>
+
+<h1 class="topictitle1">Disabling Application Protection</h1>
+<div id="body0000001361720377"><p id="hss_01_0392__p17111101419143">This section describes how to disable application protection.</p>
+<div class="section" id="hss_01_0392__section1419371615295"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0392__ol1027841961419"><li id="hss_01_0392__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0392__li830314169200"><span>Click <span><img id="hss_01_0392__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0392__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0392__hss_01_0571_b14857117404"><span id="hss_01_0392__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0392__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0392__li417472413510"><span>Choose <strong id="hss_01_0392__hss_01_0389_b3174132902116">Prevention</strong> &gt; <strong id="hss_01_0392__hss_01_0389_b4174729162115">Application Protection</strong>. Click the <strong id="hss_01_0392__hss_01_0389_b1017452911215">Protected Servers</strong> tab.</span><p><div class="note" id="hss_01_0392__hss_01_0389_note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0392__hss_01_0389_hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0392__hss_01_0389_fig113141841181214"><span class="figcap"><b>Figure 1 </b>Viewing protection settings</span><br><span><img id="hss_01_0392__hss_01_0389_image1538493318104" src="en-us_image_0000001807108040.png"></span></div>
+</p></li><li id="hss_01_0392__li2457195712217"><span>Toggle off the <span><img id="hss_01_0392__image1759733412213" src="en-us_image_0000001568637701.png"></span> switch in the <span class="parmname" id="hss_01_0392__parmname1122218345013"><b>RASP Protection</b></span> column or click <span class="parmvalue" id="hss_01_0392__parmvalue422220313506"><b>Disable Protection</b></span> in the <span class="parmname" id="hss_01_0392__parmname4222839501"><b>Operation</b></span> column.</span></li><li id="hss_01_0392__li797231094018"><span>In the dialog box that is displayed, confirm the server information and click <strong id="hss_01_0392__b12168141515">OK</strong>.</span><p><div class="note" id="hss_01_0392__note7861145320403"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0392__p5861205311403">After RASP is disabled for a server, the server will be removed from the <strong id="hss_01_0392__b52121111161917">Protected Servers</strong> tab. For details about how to enable protection, see <a href="hss_01_0390.html">Enabling Application Protection</a>.</p>
+</div></div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0388.html">Application Protection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0393.html b/docs/hss/umn/hss_01_0393.html
new file mode 100644
index 00000000..48e4e98e
--- /dev/null
+++ b/docs/hss/umn/hss_01_0393.html
@@ -0,0 +1,26 @@
+<a name="hss_01_0393"></a><a name="hss_01_0393"></a>
+
+<h1 class="topictitle1">Managing Manual Baseline Check Policies</h1>
+<div id="body0000001379563093"><p id="hss_01_0393__p117026338278">This section describes how to modify a created manual baseline check policy.</p>
+<div class="section" id="hss_01_0393__section1010463219294"><h4 class="sectiontitle">Editing a Manual Baseline Check Policy</h4><ol id="hss_01_0393__ol675711194218"><li id="hss_01_0393__li8456183054117"><span>Log in to the management console.</span></li><li id="hss_01_0393__li84561430154116"><span>Click <span><img id="hss_01_0393__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0393__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0393__hss_01_0571_b14857117404"><span id="hss_01_0393__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0393__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0393__li3460183011415"><span>In the navigation pane on the left, choose <strong id="hss_01_0393__b5312145317017">Prediction</strong> &gt; <strong id="hss_01_0393__b63121353802">Baseline Checks</strong>.</span><p><div class="fignone" id="hss_01_0393__fig334401010313"><span class="figcap"><b>Figure 1 </b>Baseline check overview</span><br><span><img id="hss_01_0393__en-us_topic_0000001568317529_en-us_topic_0000001517641794_image165241420433" src="en-us_image_0000001618285045.png"></span></div>
+</p></li></ol><ol start="4" id="hss_01_0393__ol1599117183308"><li id="hss_01_0393__li159011714185419"><span>Click <span class="uicontrol" id="hss_01_0393__uicontrol185213213337"><b>Policies</b></span> in the upper right corner of the page.</span><p><div class="fignone" id="hss_01_0393__fig19692171213309"><span class="figcap"><b>Figure 2 </b>Baseline policies</span><br><span><img id="hss_01_0393__image15707182114813" src="en-us_image_0000001743828960.png"></span></div>
+</p></li><li id="hss_01_0393__li94201246125417"><span>Click <strong id="hss_01_0393__b6731113113313">Edit</strong> in the <strong id="hss_01_0393__b7128203311316">Operation</strong> column of a policy. On the policy details page that is displayed, configure the policy name and check items.</span><p><div class="note" id="hss_01_0393__note1483819508329"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0393__en-us_topic_0000001379563093_p16653814132619">If you select <strong id="hss_01_0393__b162321515171711">Linux</strong> for <strong id="hss_01_0393__b1587591912172">OS</strong>, you can select any checks included in <strong id="hss_01_0393__b8706184781715">Baseline</strong> and edit rules. This function is not supported for Windows servers.</p>
+</div></div>
+<div class="fignone" id="hss_01_0393__fig172821628331"><span class="figcap"><b>Figure 3 </b>Editing a baseline check policy</span><br><span><img id="hss_01_0393__en-us_topic_0000001517641874_image17967824172618" src="en-us_image_0000001618325933.png"></span></div>
+</p></li><li id="hss_01_0393__li36027564545"><span>Confirm the configuration, click <strong id="hss_01_0393__b992420472323">Next</strong>, and select servers.</span></li><li id="hss_01_0393__li1650928904"><span>Confirm the information and click <strong id="hss_01_0393__b5965432103317">OK</strong>. You can view the updated policy in the policy list.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0393__section158601317299"><h4 class="sectiontitle">Deleting a Manual Baseline Check Policy</h4><ol id="hss_01_0393__ol230131723015"><li id="hss_01_0393__li0305345102110"><span>Log in to the management console.</span></li><li id="hss_01_0393__li1030584519216"><span>Click <span><img id="hss_01_0393__hss_01_0571_image9939115511526_1" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0393__hss_01_0571_b74857118407_1">Security</strong> &gt; <strong id="hss_01_0393__hss_01_0571_b14857117404_1"><span id="hss_01_0393__hss_01_0571_text6485319406_1">HSS</span></strong>. The <span id="hss_01_0393__hss_01_0571_text11485131194016_1">HSS</span> page is displayed.</span></li><li id="hss_01_0393__li164585182019"><span>In the navigation pane on the left, choose <strong id="hss_01_0393__hss_01_0146_b34647996465839">Prediction</strong> &gt; <strong id="hss_01_0393__hss_01_0146_b158268183165839">Baseline Checks</strong>.</span><p><div class="note" id="hss_01_0393__hss_01_0146_note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0393__hss_01_0146_hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0393__fig334401010313_1"><span class="figcap"><b>Figure 4 </b>Baseline check overview</span><br><span><img id="hss_01_0393__hss_01_0146_en-us_topic_0000001568317529_en-us_topic_0000001517641794_image165241420433" src="en-us_image_0000001618285045.png"></span></div>
+</p></li><li id="hss_01_0393__li20237183114341"><span>Click <span class="uicontrol" id="hss_01_0393__hss_01_0393_uicontrol185213213337"><b>Policies</b></span> in the upper right corner of the page.</span><p><div class="fignone" id="hss_01_0393__hss_01_0393_fig19692171213309"><span class="figcap"><b>Figure 5 </b>Baseline policies</span><br><span><img id="hss_01_0393__hss_01_0393_image15707182114813" src="en-us_image_0000001743828960.png"></span></div>
+</p></li><li id="hss_01_0393__li3829111814416"><span>Click <strong id="hss_01_0393__b1548244273411">Delete</strong> in the <strong id="hss_01_0393__b834184411342">Operation</strong> column of a policy. In the dialog box that is displayed, confirm the information and click <strong id="hss_01_0393__b126815513344">OK</strong>.</span><p><div class="note" id="hss_01_0393__note710811017013"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0393__p118481264575">Only user-defined policies can be deleted. Default policies <strong id="hss_01_0393__b17787134522414">default_linux_security_check_policy</strong> and <strong id="hss_01_0393__b778774532410">default_windows_security_check_policy</strong> cannot be deleted.</p>
+</div></div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0145.html">Baseline Inspection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0394.html b/docs/hss/umn/hss_01_0394.html
new file mode 100644
index 00000000..1ba730c1
--- /dev/null
+++ b/docs/hss/umn/hss_01_0394.html
@@ -0,0 +1,21 @@
+<a name="hss_01_0394"></a><a name="hss_01_0394"></a>
+
+<h1 class="topictitle1">What Can I Do If the Agent Status Is Still "Not installed" After Installation?</h1>
+<div id="body0000001341497132"><div class="section" id="hss_01_0394__section024274618424"><h4 class="sectiontitle">Precautions</h4><p id="hss_01_0394__p18986212188">On a server, you only need to install the agent once.</p>
+<p id="hss_01_0394__p6949123615201">After the installation, you are advised to restart the servers before enabling HSS and binding quotas.</p>
+</div>
+<div class="section" id="hss_01_0394__section135911257426"><h4 class="sectiontitle">Possible Cause</h4><p id="hss_01_0394__p6279121693120">Now both the <span id="hss_01_0394__text2085933731117">HSS</span> (New) and <span id="hss_01_0394__text1362754124119">HSS</span> (Old) consoles are in use. The agent and protection statuses of a server can be properly displayed on only one of the consoles.</p>
+<p id="hss_01_0394__p95873485016">For example, if you have installed the agent on server A on the old console and try installing it again on the new console, a message will be displayed indicating the installation has succeeded, but the installation status on the new console will still be <strong id="hss_01_0394__b121481695193">Not installed</strong>.</p>
+</div>
+<div class="section" id="hss_01_0394__section17341806558"><h4 class="sectiontitle">Solution</h4><p id="hss_01_0394__p18401056104115">Use only one console. Do not switch between the old and new consoles.</p>
+<p id="hss_01_0394__p1840185615411">You can upgrade the agent to use <span id="hss_01_0394__text1885214191912">HSS</span> (New). The upgrade is free of charge and does not affect services.</p>
+<div class="note" id="hss_01_0394__note4840856104117"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0394__p148408560412"><span id="hss_01_0394__text18123640131518">HSS</span> (New) added application protection capabilities, which are not available in the old version. You are advised to use the new version.</p>
+</div></div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0321.html">Agent FAQs</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0395.html b/docs/hss/umn/hss_01_0395.html
new file mode 100644
index 00000000..55a81b94
--- /dev/null
+++ b/docs/hss/umn/hss_01_0395.html
@@ -0,0 +1,17 @@
+<a name="hss_01_0395"></a><a name="hss_01_0395"></a>
+
+<h1 class="topictitle1">Disabling Protection</h1>
+<div id="body0000001405801725"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0399.html">Disabling the Enterprise/Premium Edition</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0400.html">Disabling WTP</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0397.html">Server Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0396.html b/docs/hss/umn/hss_01_0396.html
new file mode 100644
index 00000000..d1832ddd
--- /dev/null
+++ b/docs/hss/umn/hss_01_0396.html
@@ -0,0 +1,48 @@
+<a name="hss_01_0396"></a><a name="hss_01_0396"></a>
+
+<h1 class="topictitle1">Enterprise/Premium Edition</h1>
+<div id="body0000001359375970"><p id="hss_01_0396__p1350617108567">The professional, enterprise, and premium editions provides different levels of protection for your servers. You can apply for and enable them as needed.</p>
+<div class="section" id="hss_01_0396__section1791462515136"><h4 class="sectiontitle">Check Frequency</h4><p id="hss_01_0396__p398615432356">HSS performs a full scan in the early morning every day.</p>
+<p id="hss_01_0396__p1250171210364">After you enable server protection, you can view scan results after the automatic scan in the next early morning, or perform a manual scan immediately.</p>
+</div>
+<div class="section" id="hss_01_0396__section118310501592"><h4 class="sectiontitle">Prerequisite</h4><p id="hss_01_0396__p184932051155913">The agent has been installed on the servers to be protected, the agent status is <strong id="hss_01_0396__b1462252964815">Online</strong>, and the protection status is <strong id="hss_01_0396__b96221029184814">Unprotected</strong>.</p>
+</div>
+<div class="section" id="hss_01_0396__section76033247421"><h4 class="sectiontitle">Constraints</h4><ul id="hss_01_0396__ul228519712710"><li id="hss_01_0396__li43091810278">Linux<p id="hss_01_0396__p19879610577"><a name="hss_01_0396__li43091810278"></a><a name="li43091810278"></a>On servers running the EulerOS with ARM, HSS does not block the IP addresses suspected of SSH brute-force attacks, but only generates alarms.</p>
+</li><li id="hss_01_0396__li862610130714">Windows<ul id="hss_01_0396__ul6287416121717"><li id="hss_01_0396__li1077713911718">Authorize the Windows firewall when you enable protection for a Windows server. Do not disable the Windows firewall during the <span id="hss_01_0396__text183524516304">HSS</span> in-service period. If the Windows firewall is disabled, HSS cannot block brute-force attack IP addresses.</li><li id="hss_01_0396__li07798915176">If the Windows firewall is manually enabled, HSS may also fail to block brute-force attack IP addresses.</li></ul>
+</li></ul>
+</div>
+<div class="section" id="hss_01_0396__section1851834313306"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0396__ol1681012216450"><li id="hss_01_0396__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0396__li830314169200"><span>Click <span><img id="hss_01_0396__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0396__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0396__hss_01_0571_b14857117404"><span id="hss_01_0396__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0396__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0396__li157919415119"><span>In the navigation pane, choose <strong id="hss_01_0396__b6000756339577">Asset Management</strong> &gt; <strong id="hss_01_0396__b13450770929577">Servers &amp; Quota</strong>. Click the <strong id="hss_01_0396__b16722840739577">Servers</strong> tab.</span></li><li id="hss_01_0396__li51711655143914"><span>Enable protection for one or multiple servers.</span><p><div class="fignone" id="hss_01_0396__fig10889104222"><span class="figcap"><b>Figure 1 </b>Enabling protection</span><br><span><img id="hss_01_0396__en-us_topic_0000001568522253_image38041733491" src="en-us_image_0000001563952546.png"></span></div>
+<ul id="hss_01_0396__ul203887164114"><li id="hss_01_0396__li2038117164114"><strong id="hss_01_0396__b941016335561">Enabling protection for a server</strong><div class="p" id="hss_01_0396__p193351312162318">Click <strong id="hss_01_0396__b1627412464434">Enable</strong> in the <strong id="hss_01_0396__b20275174644316">Operation</strong> column of a server. In the dialog box that is displayed, confirm the server information.<div class="fignone" id="hss_01_0396__fig1493211540338"><span class="figcap"><b>Figure 2 </b>Confirming the protection information about a server</span><br><span><img id="hss_01_0396__en-us_topic_0000001568522253_image19568173014119" src="en-us_image_0000001563953746.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0396__table69348542339"></a><a name="table69348542339"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0396__table69348542339" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Protection parameters</caption><thead align="left"><tr id="hss_01_0396__row1552725153617"><th align="left" class="cellrowborder" valign="top" width="9.49094909490949%" id="mcps1.3.5.2.4.2.2.1.2.4.2.4.1.1"><p id="hss_01_0396__p1752755143619">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="74.45744574457446%" id="mcps1.3.5.2.4.2.2.1.2.4.2.4.1.2"><p id="hss_01_0396__p8527185133618">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="16.051605160516054%" id="mcps1.3.5.2.4.2.2.1.2.4.2.4.1.3"><p id="hss_01_0396__p05271254362">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0396__row185380519366"><td class="cellrowborder" valign="top" width="9.49094909490949%" headers="mcps1.3.5.2.4.2.2.1.2.4.2.4.1.1 "><p id="hss_01_0396__p653765123615">Edition</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.45744574457446%" headers="mcps1.3.5.2.4.2.2.1.2.4.2.4.1.2 "><p id="hss_01_0396__p15708171792118">Select the enterprise or premium edition.</p>
+<ul id="hss_01_0396__ul11537157360"><li id="hss_01_0396__li35371053362">Enterprise edition: It provides support for the <strong id="hss_01_0396__b16970511125">DJCP MLPS certification</strong>. Main features include asset fingerprint management, vulnerability management, malicious program detection, web shell detection, and abnormal process behavior detection.</li><li id="hss_01_0396__li175375593613">Premium edition: It helps you with the <strong id="hss_01_0396__b361917260214">DJCP MLPS certification</strong> and provides advanced features, including application protection, ransomware prevention, high-risk command detection, privilege escalation detection, and abnormal shell detection.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="16.051605160516054%" headers="mcps1.3.5.2.4.2.2.1.2.4.2.4.1.3 "><p id="hss_01_0396__p65386516367">Enterprise</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</li><li id="hss_01_0396__li33812714119"><strong id="hss_01_0396__b183984985617">Enabling protection in batches</strong><div class="p" id="hss_01_0396__p786114156236">Select multiple servers and click <strong id="hss_01_0396__b281055018456">Enable</strong> above the server list. In the dialog box that is displayed, confirm the server information. <a href="#hss_01_0396__table69348542339">Table 1</a> lists the parameters.<div class="fignone" id="hss_01_0396__fig11405803719"><span class="figcap"><b>Figure 3 </b>Confirm information about multiple servers</span><br><span><img id="hss_01_0396__en-us_topic_0000001568522253_image726133115167" src="en-us_image_0000001564275346.png"></span></div>
+</div>
+</li></ul>
+</p></li><li id="hss_01_0396__li361635515222"><span>Confirm the information and click <strong id="hss_01_0396__b99811952171812">OK</strong>. If the protection status of the target servers is <strong id="hss_01_0396__b2982135241811">Protected</strong>, the protection has been enabled.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0377.html">Enabling Protection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0397.html b/docs/hss/umn/hss_01_0397.html
new file mode 100644
index 00000000..aa2105ec
--- /dev/null
+++ b/docs/hss/umn/hss_01_0397.html
@@ -0,0 +1,29 @@
+<a name="hss_01_0397"></a><a name="hss_01_0397"></a>
+
+<h1 class="topictitle1">Server Management</h1>
+<div id="body1583122436134"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0003.html">Viewing Server Protection Status</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0377.html">Enabling Protection</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0395.html">Disabling Protection</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0573.html">Exporting the Server List</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0174.html">Switching the HSS Quota Edition</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0024.html">Deploying a Policy</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0023.html">Managing Server Groups</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0381.html">Servers Importance Management</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0294.html">Asset Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0398.html b/docs/hss/umn/hss_01_0398.html
new file mode 100644
index 00000000..bc4418d8
--- /dev/null
+++ b/docs/hss/umn/hss_01_0398.html
@@ -0,0 +1,27 @@
+<a name="hss_01_0398"></a><a name="hss_01_0398"></a>
+
+<h1 class="topictitle1">Enabling Container Security Protection</h1>
+<div id="body0000001409215449"><p id="hss_01_0398__p18198175525519">You can enable the container security edition for your containers.</p>
+<p id="hss_01_0398__p06016211265">To enable protection for a container node, you need to allocate a quota to the node. If the protection is disabled or the node is deleted, the quota can be allocated to another node.</p>
+<div class="section" id="hss_01_0398__section11644953742"><h4 class="sectiontitle">Check Frequency</h4><p id="hss_01_0398__p981415359460"><span id="hss_01_0398__text183524516304">HSS</span> performs a full check in the early morning every day.</p>
+<p id="hss_01_0398__p177871819580">After you enable server protection, you can view scan results after the automatic scan at 04:10 in the next morning.</p>
+</div>
+<div class="section" id="hss_01_0398__section1071994843613"><h4 class="sectiontitle">Prerequisite</h4><ul id="hss_01_0398__ul175501015154615"><li id="hss_01_0398__li11421299164">The <span class="parmname" id="hss_01_0398__parmname115318218535"><b>Agent Status</b></span> of a server is <span class="parmvalue" id="hss_01_0398__parmvalue41534217534"><b>Online</b></span>. To check the status, choose <span class="menucascade" id="hss_01_0398__menucascade12153172155310"><b><span class="uicontrol" id="hss_01_0398__uicontrol1715316205315">Host Security Service</span></b> &gt; <b><span class="uicontrol" id="hss_01_0398__uicontrol171531521538">Asset Management</span></b> &gt; <b><span class="uicontrol" id="hss_01_0398__uicontrol1215317285310">Containers &amp; Quota</span></b></span>.</li><li id="hss_01_0398__li12417165919259">You have created a node on CCE.</li><li id="hss_01_0398__li7550101574617">The <strong id="hss_01_0398__b1465342185314">Protection Status</strong> of the node is <strong id="hss_01_0398__b1765312195314">Unprotected</strong>.</li></ul>
+</div>
+<div class="section" id="hss_01_0398__section3577173714588"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0398__ol1926811717169"><li id="hss_01_0398__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0398__li830314169200"><span>Click <span><img id="hss_01_0398__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0398__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0398__hss_01_0571_b14857117404"><span id="hss_01_0398__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0398__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0398__li13785124016491"><span>In the navigation pane, choose <strong id="hss_01_0398__b1316114011543">Asset Management</strong> &gt; <strong id="hss_01_0398__b51621706544">Containers &amp; Quota</strong>.</span><p><div class="fignone" id="hss_01_0398__fig297113015491"><span class="figcap"><b>Figure 1 </b>Accessing the container node management page</span><br><span><img id="hss_01_0398__en-us_topic_0000001517481822_image5855424162819" src="en-us_image_0000001782558509.png"></span></div>
+</p></li><li id="hss_01_0398__li1817814441415"><span>Enable protection for one or multiple servers.</span><p><ul id="hss_01_0398__ul1525610351753"><li id="hss_01_0398__li20256143513520"><strong id="hss_01_0398__b1556902210566">Enabling protection for a server</strong><ol type="a" id="hss_01_0398__ol2069313571653"><li id="hss_01_0398__li66935576511">In the <strong id="hss_01_0398__b1243714172564">Operation </strong>column of a server, click <strong id="hss_01_0398__b12438111715613">Enable Protection</strong>.</li><li id="hss_01_0398__li1746144818717">In the dialog box that is displayed, confirm the information.<div class="note" id="hss_01_0398__note217163951310"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0398__p10176759176">A container security quota protects one cluster node.</p>
+</div></div>
+</li><li id="hss_01_0398__li106881278107">Confirm the information and click <strong id="hss_01_0398__b1646611201180">OK</strong>. If the <strong id="hss_01_0398__b2213183014816">Protection Status</strong> in the container list changes to <strong id="hss_01_0398__b55153421386">Protected</strong>, it indicates the protection has been enabled.</li></ol>
+</li><li id="hss_01_0398__li22396391451"><strong id="hss_01_0398__b187282611578">Enabling protection in batches</strong><ol type="a" id="hss_01_0398__ol124362461618"><li id="hss_01_0398__li1924352491613">In the node list, select servers, and click <strong id="hss_01_0398__b588804681011">Enable Protection</strong> above the list.</li><li id="hss_01_0398__li1899057182915">In the dialog box that is displayed, confirm the information.<div class="note" id="hss_01_0398__note29913716297"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0398__hss_01_0398_p10176759176">A container security quota protects one cluster node.</p>
+</div></div>
+</li><li id="hss_01_0398__li28531168336">Confirm the information and click <strong id="hss_01_0398__b98701230161213">OK</strong>. If the <strong id="hss_01_0398__b11870163011128">Protection Status</strong> in the container list changes to <strong id="hss_01_0398__b687115306124">Protected</strong>, it indicates the protection has been enabled.</li></ol>
+</li></ul>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0295.html">Container Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0399.html b/docs/hss/umn/hss_01_0399.html
new file mode 100644
index 00000000..55487ff1
--- /dev/null
+++ b/docs/hss/umn/hss_01_0399.html
@@ -0,0 +1,26 @@
+<a name="hss_01_0399"></a><a name="hss_01_0399"></a>
+
+<h1 class="topictitle1">Disabling the Enterprise/Premium Edition</h1>
+<div id="body0000001408815833"><p id="hss_01_0399__p84710312401">You can disable protection for a server. A quota that has been unbound from a server can be bound to another one.</p>
+<div class="section" id="hss_01_0399__section1303437171317"><h4 class="sectiontitle">Precautions</h4><p id="hss_01_0399__p3861194418381">Disabling protection does not affect services, but will increase security risks. You are advised to keep your servers protected.</p>
+</div>
+<div class="section" id="hss_01_0399__section11527130114010"><h4 class="sectiontitle">Disabling Protection</h4><ol id="hss_01_0399__ol17428183502714"><li id="hss_01_0399__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0399__li830314169200"><span>Click <span><img id="hss_01_0399__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0399__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0399__hss_01_0571_b14857117404"><span id="hss_01_0399__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0399__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li></ol><ol start="3" id="hss_01_0399__ol1681012216450"><li id="hss_01_0399__li157919415119"><span>In the navigation pane, choose <strong id="hss_01_0399__b12737986589572">Asset Management</strong> &gt; <strong id="hss_01_0399__b18006924589572">Servers &amp; Quota</strong>. Click the <strong id="hss_01_0399__b2821590649572">Servers</strong> tab.</span></li><li id="hss_01_0399__li51711655143914"><span>Disable protection for one or multiple servers.</span><p><ul id="hss_01_0399__ul203887164114"><li id="hss_01_0399__li2038117164114"><strong id="hss_01_0399__b790703414252">Disabling protection for a server</strong><ol type="a" id="hss_01_0399__ol1778311324110"><li id="hss_01_0399__li35150225430">Click <strong id="hss_01_0399__b17351945102714">Disable</strong> in the <strong id="hss_01_0399__b520496278">Operation</strong> column of a server.<div class="fignone" id="hss_01_0399__fig2032612311417"><span class="figcap"><b>Figure 1 </b>Disabling protection for a server</span><br><span><img id="hss_01_0399__en-us_topic_0000001517322342_image4528145193216" src="en-us_image_0000001735576968.png"></span></div>
+</li><li id="hss_01_0399__li3178161218460">In the dialog box that is displayed, confirm the information and click <strong id="hss_01_0399__b124173692910">OK</strong>.<div class="fignone" id="hss_01_0399__fig15643133134215"><span class="figcap"><b>Figure 2 </b>Confirming information about a single server</span><br><span><img id="hss_01_0399__en-us_topic_0000001517322342_image1997495713412" src="en-us_image_0000001782537133.png"></span></div>
+</li><li id="hss_01_0399__li47836136412">Check the protection status in the server list. If it is <strong id="hss_01_0399__b7972152016335">Unprotected</strong>, the protection has been disabled.<div class="caution" id="hss_01_0399__note111313303466"><span class="cautiontitle"><img src="public_sys-resources/caution_3.0-en-us.png"> </span><div class="cautionbody"><p id="hss_01_0399__p852755064610">Disabling protection does not affect services, but will increase security risks. You are advised to keep your servers protected.</p>
+</div></div>
+</li></ol>
+</li><li id="hss_01_0399__li33812714119"><strong id="hss_01_0399__b187501656125913">Disabling protection in batches</strong><ol type="a" id="hss_01_0399__ol114013813713"><li id="hss_01_0399__li9140118103711">Select multiple servers and click <strong id="hss_01_0399__b17801845203418">Disable</strong> above the server list.<div class="fignone" id="hss_01_0399__fig116731919114316"><span class="figcap"><b>Figure 3 </b>Disabling protection in batches</span><br><span><img id="hss_01_0399__en-us_topic_0000001517322342_image133701023123713" src="en-us_image_0000001735417828.png"></span></div>
+</li><li id="hss_01_0399__li3552163569">In the dialog box that is displayed, confirm the information and click <strong id="hss_01_0399__b64191743356">OK</strong>.<div class="fignone" id="hss_01_0399__fig1233147155318"><span class="figcap"><b>Figure 4 </b>Confirming information about multiple servers</span><br><span><img id="hss_01_0399__en-us_topic_0000001517322342_image09504150390" src="en-us_image_0000001782616881.png"></span></div>
+</li><li id="hss_01_0399__li45591695619">Check the protection status in the server list. If it is <strong id="hss_01_0399__b1778263483520">Unprotected</strong>, the protection has been disabled.<div class="caution" id="hss_01_0399__note75501615561"><span class="cautiontitle"><img src="public_sys-resources/caution_3.0-en-us.png"> </span><div class="cautionbody"><p id="hss_01_0399__p455181614564">Disabling protection does not affect services, but will increase security risks. You are advised to keep your servers protected.</p>
+</div></div>
+</li></ol>
+</li></ul>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0395.html">Disabling Protection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0400.html b/docs/hss/umn/hss_01_0400.html
new file mode 100644
index 00000000..58cc4bc3
--- /dev/null
+++ b/docs/hss/umn/hss_01_0400.html
@@ -0,0 +1,22 @@
+<a name="hss_01_0400"></a><a name="hss_01_0400"></a>
+
+<h1 class="topictitle1">Disabling WTP</h1>
+<div id="body0000001359535526"><p id="hss_01_0400__p1651050123115">You can disable the WTP edition for a server. A quota that has been unbound from a server can be bound to another one.</p>
+<div class="section" id="hss_01_0400__section1303437171317"><h4 class="sectiontitle">Precautions</h4><p id="hss_01_0400__p152651415513">Disabling protection does not affect services, but will increase security risks. You are advised to keep your servers protected.</p>
+</div>
+<div class="section" id="hss_01_0400__section1895412475597"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0400__ol17428183502714"><li id="hss_01_0400__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0400__li830314169200"><span>Click <span><img id="hss_01_0400__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0400__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0400__hss_01_0571_b14857117404"><span id="hss_01_0400__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0400__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li></ol><ol start="3" id="hss_01_0400__ol1681012216450"><li id="hss_01_0400__li1169821412289"><span>In the navigation pane, choose <strong id="hss_01_0400__b146848482384">Protection</strong> &gt; <strong id="hss_01_0400__b16845487382">Web Tamper Protection</strong>. On the <strong id="hss_01_0400__b868454819382">Web Tamper Protection</strong> page, click the <strong id="hss_01_0400__b568514486383">Servers</strong> tab.</span><p><div class="fignone" id="hss_01_0400__fig134207163272"><span class="figcap"><b>Figure 1 </b>Entering the page for protected directory settings</span><br><span><img id="hss_01_0400__hss_01_0216_image1139195181013" src="en-us_image_0000001854854673.png"></span></div>
+</p></li><li id="hss_01_0400__li656516598285"><span>Click <strong id="hss_01_0400__b2297111611420">Disable</strong> in the <strong id="hss_01_0400__b130461616424">Operation</strong> column of a server.</span><p><div class="p" id="hss_01_0400__p1411652717111"><div class="note" id="hss_01_0400__note746742312528"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0400__p1046819231528">The WTP edition cannot be disabled for servers in batches.</p>
+</div></div>
+</div>
+</p></li><li id="hss_01_0400__li3178161218460"><span>In the dialog box that is displayed, confirm the information and click <strong id="hss_01_0400__b95481319458">OK</strong>.</span><p><div class="fignone" id="hss_01_0400__fig1597341813565"><span class="figcap"><b>Figure 2 </b>Confirming information about disabling WTP</span><br><span><img id="hss_01_0400__en-us_topic_0000001568641897_image12951121018533" src="en-us_image_0000001782537137.png"></span></div>
+</p></li><li id="hss_01_0400__li1960783716107"><span>Choose <span class="menucascade" id="hss_01_0400__menucascade1360653718104"><b><span class="uicontrol" id="hss_01_0400__uicontrol186061737141015">Asset Management</span></b> &gt; <b><span class="uicontrol" id="hss_01_0400__uicontrol260633771013">Servers &amp; Quota</span></b></span> and click the <strong id="hss_01_0400__b1184111523512">Servers</strong> tab. Check the protection status in the server list. If it is <strong id="hss_01_0400__b18151411175112">Unprotected</strong>, the protection has been disabled.</span><p><div class="caution" id="hss_01_0400__note111313303466"><span class="cautiontitle"><img src="public_sys-resources/caution_3.0-en-us.png"> </span><div class="cautionbody"><p id="hss_01_0400__p852755064610">Disabling protection does not affect services, but will increase security risks. You are advised to keep your servers protected.</p>
+</div></div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0395.html">Disabling Protection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0401.html b/docs/hss/umn/hss_01_0401.html
new file mode 100644
index 00000000..703e9aae
--- /dev/null
+++ b/docs/hss/umn/hss_01_0401.html
@@ -0,0 +1,25 @@
+<a name="hss_01_0401"></a><a name="hss_01_0401"></a>
+
+<h1 class="topictitle1">Disabling Protection for Container Edition</h1>
+<div id="body0000001409255761"><p id="hss_01_0401__p1651050123115">You can disable the container edition for a server. A quota that has been unbound from a server can be bound to another one.</p>
+<div class="section" id="hss_01_0401__section1303437171317"><h4 class="sectiontitle">Before You Start</h4><p id="hss_01_0401__p875614393311">Disabling protection does not affect services, but will increase security risks. You are advised to keep your servers protected.</p>
+</div>
+<div class="section" id="hss_01_0401__section1773171512147"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0401__ol1926811717169"><li id="hss_01_0401__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0401__li830314169200"><span>Click <span><img id="hss_01_0401__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0401__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0401__hss_01_0571_b14857117404"><span id="hss_01_0401__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0401__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0401__li13785124016491"><span>In the navigation pane, choose <strong id="hss_01_0401__b104381058205518">Asset Management</strong> &gt; <strong id="hss_01_0401__b9438358105513">Containers &amp; Quota</strong>.</span><p><div class="note" id="hss_01_0401__note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0401__hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0401__fig1949311875816"><span class="figcap"><b>Figure 1 </b>Accessing the container node management page</span><br><span><img id="hss_01_0401__image2448143620569" src="en-us_image_0000001806095454.png"></span></div>
+</p></li><li id="hss_01_0401__li1817814441415"><span>Disable protection for one or multiple servers.</span><p><ul id="hss_01_0401__ul1525610351753"><li id="hss_01_0401__li20256143513520"><strong id="hss_01_0401__b711915419420">Disabling protection for a server</strong><ol type="a" id="hss_01_0401__ol2069313571653"><li id="hss_01_0401__li66935576511">In the node list, click <strong id="hss_01_0401__b16259121875">Disable Protection</strong> in the <strong id="hss_01_0401__b1130412151571">Operation</strong> column of a server.</li><li id="hss_01_0401__li3178161218460">In the dialog box that is displayed, confirm the information and click <strong id="hss_01_0401__b151751317712">OK</strong>.</li><li id="hss_01_0401__li1960783716107">Choose <span class="menucascade" id="hss_01_0401__menucascade9471939971"><b><span class="uicontrol" id="hss_01_0401__uicontrol941639278">Asset Management</span></b> &gt; <b><span class="uicontrol" id="hss_01_0401__uicontrol19461539975">Containers &amp; Quota</span></b></span> and click the <strong id="hss_01_0401__b1647539271">Container Nodes</strong> tab. Check the protection status in the server list. If it is <strong id="hss_01_0401__b5474391978">Unprotected</strong>, the protection has been disabled.<div class="caution" id="hss_01_0401__note111313303466"><span class="cautiontitle"><img src="public_sys-resources/caution_3.0-en-us.png"> </span><div class="cautionbody"><p id="hss_01_0401__p852755064610">Disabling protection does not affect services, but will increase security risks. You are advised to keep your servers protected.</p>
+</div></div>
+</li></ol>
+</li><li id="hss_01_0401__li22396391451"><strong id="hss_01_0401__b1677413251682">Disabling protection in batches</strong><ol type="a" id="hss_01_0401__ol124362461618"><li id="hss_01_0401__li1924352491613">In the node list, select servers, and click <strong id="hss_01_0401__b87952618818">Disable Protection</strong> above the list.</li><li id="hss_01_0401__li199221737125410">In the dialog box that is displayed, confirm the information and click <strong id="hss_01_0401__b1240683813812">OK</strong>.</li><li id="hss_01_0401__li492283745410">Choose <span class="menucascade" id="hss_01_0401__menucascade4131194811814"><b><span class="uicontrol" id="hss_01_0401__uicontrol1213115481583">Asset Management</span></b> &gt; <b><span class="uicontrol" id="hss_01_0401__uicontrol41313487811">Containers &amp; Quota</span></b></span> and click the <strong id="hss_01_0401__b9132124814813">Container Nodes</strong> tab. Check the protection status in the server list. If it is <strong id="hss_01_0401__b1413274817819">Unprotected</strong>, the protection has been disabled.<div class="caution" id="hss_01_0401__note17923143714546"><span class="cautiontitle"><img src="public_sys-resources/caution_3.0-en-us.png"> </span><div class="cautionbody"><p id="hss_01_0401__p139237371543">Disabling protection does not affect services, but will increase security risks. You are advised to keep your servers protected.</p>
+</div></div>
+</li></ol>
+</li></ul>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0295.html">Container Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0404.html b/docs/hss/umn/hss_01_0404.html
new file mode 100644
index 00000000..3e8fd8fe
--- /dev/null
+++ b/docs/hss/umn/hss_01_0404.html
@@ -0,0 +1,15 @@
+<a name="hss_01_0404"></a><a name="hss_01_0404"></a>
+
+<h1 class="topictitle1">Ransomware Protection</h1>
+<div id="body0000001418649633"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0405.html">What Are the Differences Between Ransomware Protection Backup and Cloud Backup?</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0032.html">FAQs</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0405.html b/docs/hss/umn/hss_01_0405.html
new file mode 100644
index 00000000..c0769aa2
--- /dev/null
+++ b/docs/hss/umn/hss_01_0405.html
@@ -0,0 +1,11 @@
+<a name="hss_01_0405"></a><a name="hss_01_0405"></a>
+
+<h1 class="topictitle1">What Are the Differences Between Ransomware Protection Backup and Cloud Backup?</h1>
+<div id="body0000001367969810"><p id="hss_01_0405__p1631774704119">The backup mechanism of ransomware protection inherits that of CBR (Cloud Backup and Restoration). Backup files of ransomware protection can be centrally managed and viewed in CBR.</p>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0404.html">Ransomware Protection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0409.html b/docs/hss/umn/hss_01_0409.html
new file mode 100644
index 00000000..ebfec15b
--- /dev/null
+++ b/docs/hss/umn/hss_01_0409.html
@@ -0,0 +1,33 @@
+<a name="hss_01_0409"></a><a name="hss_01_0409"></a>
+
+<h1 class="topictitle1">What Do I Do If the <span id="hss_01_0571_text48831520173018"></span> Upgrade Fails?</h1>
+<div id="body0000001440408781"><div class="section" id="hss_01_0409__section3791021171915"><h4 class="sectiontitle">About the Upgrade</h4><ul id="hss_01_0409__ul43289141180"><li id="hss_01_0409__li12422105415159">Servers are displayed on both the old and new console of <span id="hss_01_0409__text2060193472217">HSS</span>, regardless of whether their agents have been upgraded. The server statuses are properly displayed on the console that you are using.</li><li id="hss_01_0409__li16386162217505">Agent upgrade is free of charge.</li><li id="hss_01_0409__li784115382286">The upgrade does not affect the workloads on your cloud servers.</li><li id="hss_01_0409__li544213610534">After the upgrade, the billing stops on the old console and starts on the new console.</li><li id="hss_01_0409__li173281614191814">After the upgrade, your servers will be protected by <span id="hss_01_0409__text498111517229">HSS</span> (New).</li></ul>
+</div>
+<div class="section" id="hss_01_0409__section14791102414342"><h4 class="sectiontitle">Possible Causes</h4><div class="note" id="hss_01_0409__note183992067612"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0409__p34001168612">After the automatic upgrade is complete, it takes 5 to 10 minutes for the agent status to be refreshed.</p>
+</div></div>
+<p id="hss_01_0409__p86825484326">Possible causes for abnormal agent statuses are as follows:</p>
+<ol id="hss_01_0409__ol1494810272081"><li id="hss_01_0409__li13521524141012">Access to port 10180 is restricted. The agent upgrade requires accessed to port 10180.</li><li id="hss_01_0409__li19702052151020">The available memory of the server is insufficient. The agent upgrade occupies certain memory. If the available memory is less than 300 MB, the upgrade will be affected.</li></ol>
+</div>
+<div class="section" id="hss_01_0409__section174401331446"><h4 class="sectiontitle">Locating and Fixing the Problem</h4><ul id="hss_01_0409__ul1497113411177"><li id="hss_01_0409__li1761811421188"><strong id="hss_01_0409__b258865011158">Restricted Access to Port 10180</strong><div class="p" id="hss_01_0409__p8134183192611">Ensure the server where the agent is to be installed or upgraded can communicate with the network segment. The security group of your server must allow outbound access to port 10180 on the 100.125.X.X/16 network segment.<ul id="hss_01_0409__ul2832202782618"><li id="hss_01_0409__li168324271265">Troubleshooting Procedure<ol id="hss_01_0409__ol12832172714268"><li id="hss_01_0409__li8831132772610">In the upper left corner of the page, select a region, click <span><img id="hss_01_0409__image1282922762618" src="en-us_image_0000001517637374.png"></span>, and choose <strong id="hss_01_0409__b1241416132411">Compute</strong> &gt; <strong id="hss_01_0409__b1863131892417">Elastic Cloud Server</strong>.</li><li id="hss_01_0409__li1083110272262">Click the name of the server. On the server details page that is displayed, click the <strong id="hss_01_0409__b127556592294">Security Groups</strong> tab.</li><li id="hss_01_0409__li983292792614">Click the <strong id="hss_01_0409__b057113073015">Outbound Rules</strong> tab and check whether port 10180 is specified in the deny policy.<ol type="a" id="hss_01_0409__ol3832142792617"><li id="hss_01_0409__li183222762618">If it is not specified, the problem was not caused by port access restriction.</li><li id="hss_01_0409__li4832112762616">If it is specified, the problem was caused by port access restriction.</li></ol>
+</li></ol>
+</li><li id="hss_01_0409__li15832727112612">Solution<p id="hss_01_0409__p781842211287"><a name="hss_01_0409__li15832727112612"></a><a name="li15832727112612"></a>Allow access to the port.</p>
+</li></ul>
+</div>
+</li><li id="hss_01_0409__li461834212183"><strong id="hss_01_0409__b1808155399">The available memory is insufficient.</strong><ul id="hss_01_0409__ul815681410409"><li id="hss_01_0409__li18156201494015">Troubleshooting Procedure<ul id="hss_01_0409__ul1726115993019"><li id="hss_01_0409__li783811502303">Linux<ol id="hss_01_0409__ol1561511186416"><li id="hss_01_0409__li166151318104115">Use a remote management tool, such as SecureFX or WinSCP, to log in to the server.</li><li id="hss_01_0409__li1175462823111">Run the following command to check the memory usage of the server:<p id="hss_01_0409__p6915812153512"><a name="hss_01_0409__li1175462823111"></a><a name="li1175462823111"></a>free -m</p>
+</li><li id="hss_01_0409__li1845819549389">Check the value of <strong id="hss_01_0409__b20897738244018">free</strong> in the command output, as shown in <a href="#hss_01_0409__fig172244311447">Figure 1</a>.<div class="p" id="hss_01_0409__p1653430194415">If the value of <strong id="hss_01_0409__b173215343407">available</strong> is smaller than 300, the memory is insufficient.<div class="fignone" id="hss_01_0409__fig172244311447"><a name="hss_01_0409__fig172244311447"></a><a name="fig172244311447"></a><span class="figcap"><b>Figure 1 </b>Querying the memory</span><br><span><img id="hss_01_0409__image132242311448" src="en-us_image_0000001517158254.png"></span></div>
+</div>
+</li></ol>
+</li><li id="hss_01_0409__li254731833116">Windows<ol id="hss_01_0409__ol3628104253113"><li id="hss_01_0409__li10161124711321">Use a remote management tool, such as mstsc and RDP, to log in to the server.</li><li id="hss_01_0409__li159754933215">Open the Task Manager.</li><li id="hss_01_0409__li146401537153315">Choose <strong id="hss_01_0409__b1621185481813">Performance</strong> &gt; <strong id="hss_01_0409__b49061655171810">Memory</strong>, and view the available memory on the <strong id="hss_01_0409__b86341372197">Memory</strong> page.<p id="hss_01_0409__p125505365307">If the available memory is less than 300 MB, the memory is insufficient.</p>
+</li></ol>
+</li></ul>
+</li><li id="hss_01_0409__li215761417407">Solution<ul id="hss_01_0409__ul9130114044512"><li id="hss_01_0409__li917174334516">Close the applications with high memory usage.</li></ul>
+</li></ul>
+</li></ul>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0321.html">Agent FAQs</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0410.html b/docs/hss/umn/hss_01_0410.html
new file mode 100644
index 00000000..a9ec8a3b
--- /dev/null
+++ b/docs/hss/umn/hss_01_0410.html
@@ -0,0 +1,13 @@
+<a name="hss_01_0410"></a><a name="hss_01_0410"></a>
+
+<h1 class="topictitle1">Server Security Dashboard</h1>
+<div id="body0000001124873628"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0546.html">Risk Statistics</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0558.html">Free Scan on Unprotected Servers</a></strong><br>
+</li>
+</ul>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0412.html b/docs/hss/umn/hss_01_0412.html
new file mode 100644
index 00000000..8c3f52e8
--- /dev/null
+++ b/docs/hss/umn/hss_01_0412.html
@@ -0,0 +1,71 @@
+<a name="hss_01_0412"></a><a name="hss_01_0412"></a>
+
+<h1 class="topictitle1">Vulnerability Scan</h1>
+<div id="body0000001442464145"><p id="hss_01_0412__p1838104364310">HSS can scan for Linux, Windows, Web-CMS, and application vulnerabilities. Automatic, scheduled (vulnerability policy configuration), and manual scans are supported.</p>
+<ul id="hss_01_0412__ul142588304448"><li id="hss_01_0412__li855514501677">Automatic scan<p id="hss_01_0412__p95012521678"><a name="hss_01_0412__li855514501677"></a><a name="li855514501677"></a>When collecting asset fingerprints, HSS automatically scans vulnerabilities. For Linux, Windows, and Web-CMS vulnerabilities, HSS scans them based on the software collection period. For application vulnerabilities, HSS scans them based on the middleware collection period. For details about the asset fingerprint collection period, see <a href="hss_01_0477.html">Collecting Server Asset Fingerprints</a>.</p>
+<p id="hss_01_0412__p3306154518719">If vulnerabilities have been manually scanned or a scheduled vulnerability scanning task has been triggered within the asset fingerprint collection period, HSS will automatically scan vulnerabilities when collecting asset fingerprints next time. This collection mode is affected by the other two scanning modes, and the scanning period is not fixed. You are advised to use the other two scan methods.</p>
+</li><li id="hss_01_0412__li6662581771">Scheduled scan<p id="hss_01_0412__p53225591479"><a name="hss_01_0412__li6662581771"></a><a name="li6662581771"></a>By default, HSS performs a full server vulnerability scan once a week. To ensure service security, you are advised to set a proper scan period and scan server scope to periodically scan server vulnerabilities.</p>
+</li><li id="hss_01_0412__li4669123688">Manual scan<p id="hss_01_0412__p67695397920"><a name="hss_01_0412__li4669123688"></a><a name="li4669123688"></a>If you want to view the vulnerability fixing status or real-time vulnerabilities of a server, you are advised to manually scan for vulnerabilities.</p>
+</li></ul>
+<p id="hss_01_0412__p7902732123812">This section describes how to manually scan for vulnerabilities and configure a scheduled scan policy.</p>
+<div class="section" id="hss_01_0412__section1854716547329"><h4 class="sectiontitle">Constraints</h4><ul id="hss_01_0412__hss_01_0302_ul47124472504"><li id="hss_01_0412__li29071148163413">If the agent version of the Windows OS is 4.0.18 or later, application vulnerability scan is supported.</li><li id="hss_01_0412__hss_01_0302_li5516131011101">The <strong id="hss_01_0412__b156471856133818">Server Status</strong> is <strong id="hss_01_0412__b2647135653816">Running</strong>, <strong id="hss_01_0412__b664755611383">Agent Status</strong> is <strong id="hss_01_0412__b1664712569385">Online</strong>, and <strong id="hss_01_0412__b1164715613386">Protection Status</strong> is <strong id="hss_01_0412__b364715683816">Protected</strong>. Otherwise, vulnerability scan cannot be performed.</li><li id="hss_01_0412__li1011551295411">For details about the types of vulnerabilities that can be scanned by different <span id="hss_01_0412__text2897154921710">HSS</span> editions, see <a href="hss_01_0302.html#hss_01_0302__section9935230153717">Types of Vulnerabilities That Can Be Scanned and Fixed</a>.</li><li id="hss_01_0412__hss_01_0302_li4274173053418">For details about the OSs supported, see <a href="#hss_01_0412__hss_01_0302_table1796232221619">Table 1</a>.
+<div class="tablenoborder"><a name="hss_01_0412__hss_01_0302_table1796232221619"></a><a name="hss_01_0302_table1796232221619"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0412__hss_01_0302_table1796232221619" frame="border" border="1" rules="all"><caption><b>Table 1 </b>OSs supporting vulnerability scan</caption><thead align="left"><tr id="hss_01_0412__row1744264816168"><th align="left" class="cellrowborder" valign="top" width="13.370000000000001%" id="mcps1.3.4.2.4.2.2.3.1.1"><p id="hss_01_0412__p12443144841620">OS Type</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="86.63%" id="mcps1.3.4.2.4.2.2.3.1.2"><p id="hss_01_0412__p1144310481166">Supported OS</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0412__row90192310169"><td class="cellrowborder" valign="top" width="13.370000000000001%" headers="mcps1.3.4.2.4.2.2.3.1.1 "><p id="hss_01_0412__p12172314166">Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="86.63%" headers="mcps1.3.4.2.4.2.2.3.1.2 "><ul id="hss_01_0412__ul108181728181719"><li id="hss_01_0412__li98181528161710">Windows Server 2019 Datacenter 64-bit English (40 GB)</li><li id="hss_01_0412__li08181328101712">Windows Server 2019 Datacenter 64-bit Chinese (40 GB)</li><li id="hss_01_0412__li1818528101718">Windows Server 2016 Standard 64-bit English (40 GB)</li><li id="hss_01_0412__li19818192811714">Windows Server 2016 Standard 64-bit Chinese (40 GB)</li><li id="hss_01_0412__li16819172814171">Windows Server 2016 Datacenter 64-bit English (40 GB)</li><li id="hss_01_0412__li381912861719">Windows Server 2016 Datacenter 64-bit Chinese (40 GB)</li><li id="hss_01_0412__li1881992801717">Windows Server 2012 R2 Standard 64-bit English (40 GB)</li><li id="hss_01_0412__li19819152816173">Windows Server 2012 R2 Standard 64-bit Chinese (40 GB)</li><li id="hss_01_0412__li48191828131717">Windows Server 2012 R2 Datacenter 64-bit English (40 GB)</li><li id="hss_01_0412__li181952861717">Windows Server 2012 R2 Datacenter 64-bit Chinese (40 GB)</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0412__row21192312160"><td class="cellrowborder" valign="top" width="13.370000000000001%" headers="mcps1.3.4.2.4.2.2.3.1.1 "><p id="hss_01_0412__p121923171616">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" width="86.63%" headers="mcps1.3.4.2.4.2.2.3.1.2 "><ul id="hss_01_0412__ul198116914195"><li id="hss_01_0412__li48116991913">EulerOS 2.2, 2.3, 2.5, 2.8, and 2.9 (64-bit)</li><li id="hss_01_0412__li1481129161917">CentOS 7.4, 7.5, 7.6, 7.7, 7.8 and 7.9 (64-bit)</li><li id="hss_01_0412__li19815910196">Ubuntu 16.04, 18.04, 20.04, 22.04 (64-bit)</li><li id="hss_01_0412__li68113911920">Debian 9, 10, and 11 (64-bit)</li><li id="hss_01_0412__li18110941915">Kylin V10 (64-bit)</li><li id="hss_01_0412__li4817910199">UnionTech OS V20 server E and V20 server D (64-bit)</li></ul>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</li></ul>
+</div>
+<div class="section" id="hss_01_0412__section16113255172014"><h4 class="sectiontitle">Manual Vulnerability Scan</h4><ol id="hss_01_0412__ol2052153718220"><li id="hss_01_0412__li218613417224"><span>Log in to the management console.</span></li><li id="hss_01_0412__li1418764162213"><span>In the navigation pane, choose <strong id="hss_01_0412__b15236185223811">Prediction</strong> &gt; <strong id="hss_01_0412__b623785293811">Vulnerabilities</strong>.</span></li><li id="hss_01_0412__li1658219252313"><span>Click <span class="uicontrol" id="hss_01_0412__uicontrol5373202519233"><b>Scan</b></span> in the upper right corner of the <strong id="hss_01_0412__b11892672406">Vulnerabilities</strong> page.</span></li><li id="hss_01_0412__li163011592415"><span>In the <strong id="hss_01_0412__b1886523317407">Scan for Vulnerability</strong> dialog box displayed, select the vulnerability type and scope to be scanned. For more information, see <a href="#hss_01_0412__table8653162992710">Table 2</a>.</span><p>
+<div class="tablenoborder"><a name="hss_01_0412__table8653162992710"></a><a name="table8653162992710"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0412__table8653162992710" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Parameters for manual scan vulnerabilities</caption><thead align="left"><tr id="hss_01_0412__row0653202932717"><th align="left" class="cellrowborder" valign="top" width="26.46%" id="mcps1.3.5.2.4.2.1.2.3.1.1"><p id="hss_01_0412__p1165362915276">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="73.54%" id="mcps1.3.5.2.4.2.1.2.3.1.2"><p id="hss_01_0412__p1965382915271">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0412__row3653192915277"><td class="cellrowborder" valign="top" width="26.46%" headers="mcps1.3.5.2.4.2.1.2.3.1.1 "><p id="hss_01_0412__p10654142915279">Type</p>
+</td>
+<td class="cellrowborder" valign="top" width="73.54%" headers="mcps1.3.5.2.4.2.1.2.3.1.2 "><p id="hss_01_0412__p1165418296275">Select one or more types of vulnerabilities to be scanned. Possible values are as follows:</p>
+<ul id="hss_01_0412__ul589517137343"><li id="hss_01_0412__li1896131311347"><strong id="hss_01_0412__b194615377459">Linux</strong></li><li id="hss_01_0412__li58965134343"><strong id="hss_01_0412__b160703912457">Windows</strong></li><li id="hss_01_0412__li198968136344"><strong id="hss_01_0412__b186706418455">Web-CMS</strong></li><li id="hss_01_0412__li1389610133341"><strong id="hss_01_0412__b1032184411459">Application</strong></li></ul>
+</td>
+</tr>
+<tr id="hss_01_0412__row1065452919274"><td class="cellrowborder" valign="top" width="26.46%" headers="mcps1.3.5.2.4.2.1.2.3.1.1 "><p id="hss_01_0412__p176541529132716">Scan</p>
+</td>
+<td class="cellrowborder" valign="top" width="73.54%" headers="mcps1.3.5.2.4.2.1.2.3.1.2 "><p id="hss_01_0412__p176540294270">Select the servers to be scanned. Possible values are as follows:</p>
+<ul id="hss_01_0412__ul01021640142919"><li id="hss_01_0412__li1710219409299"><strong id="hss_01_0412__b988216911479">All servers</strong></li><li id="hss_01_0412__li310214062919"><strong id="hss_01_0412__b6706181919471">Selected servers</strong><p id="hss_01_0412__p927115324332">You can select a server group or search for the target server by server name, ID, EIP, or private IP address.</p>
+</li></ul>
+<div class="note" id="hss_01_0412__note8546512103520"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="hss_01_0412__p15547131218357">The following servers cannot be selected for vulnerability scan:</p>
+<ul id="hss_01_0412__ul2965832193711"><li id="hss_01_0412__li2096563216375">Servers that are not in the <strong id="hss_01_0412__b259932335117">Running</strong> state</li><li id="hss_01_0412__li119651632103719">Servers whose agent status is <span class="parmvalue" id="hss_01_0412__parmvalue18726638203715"><b>Offline</b></span></li></ul>
+</div></div>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0412__li6711174292411"><span>Click <strong id="hss_01_0412__b8531135815116">OK</strong>.</span></li><li id="hss_01_0412__li1154675283811"><span>Click <span class="uicontrol" id="hss_01_0412__uicontrol162162584478"><b>Manage Task</b></span> in the upper right corner of the <strong id="hss_01_0412__b188702513535">Vulnerabilities</strong> page. On the <strong id="hss_01_0412__b156135112538">Manage Task</strong> slide-out panel displayed, click the <span class="parmvalue" id="hss_01_0412__parmvalue647211418486"><b>Scan Tasks</b></span> tab to view the status and scan result of the vulnerability scan task.</span><p><p id="hss_01_0412__p14272534493">Click the number next to the red figure in the <strong id="hss_01_0412__b1666221720110">Scan Result</strong> column to view information about the servers that fail to be scanned.</p>
+<div class="note" id="hss_01_0412__note688361113526"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0412__p588351105211">You can also choose <span class="menucascade" id="hss_01_0412__menucascade1883239165312"><b><span class="uicontrol" id="hss_01_0412__uicontrol2883173935311">Asset Management</span></b> &gt; <b><span class="uicontrol" id="hss_01_0412__uicontrol0226204525310">Servers &amp; Quota</span></b></span> and scan a single server for vulnerabilities on the <strong id="hss_01_0412__b9820122118177">Servers</strong> tab. The procedure is as follows:</p>
+<ol type="a" id="hss_01_0412__ol12386135112587"><li id="hss_01_0412__li1938645111588">Click a server name.</li><li id="hss_01_0412__li17807999596">Choose <span class="wintitle" id="hss_01_0412__wintitle99522317590"><b>Vulnerabilities</b></span>.</li><li id="hss_01_0412__li14433657175911">Choose the vulnerability type to be scanned and click <span class="uicontrol" id="hss_01_0412__uicontrol9452030401"><b>Scan</b></span>.</li></ol>
+</div></div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0140.html">Vulnerability Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0413.html b/docs/hss/umn/hss_01_0413.html
new file mode 100644
index 00000000..160e6f8c
--- /dev/null
+++ b/docs/hss/umn/hss_01_0413.html
@@ -0,0 +1,163 @@
+<a name="hss_01_0413"></a><a name="hss_01_0413"></a>
+
+<h1 class="topictitle1">Handling Server Alarms</h1>
+<div id="body0000001395902896"><p id="hss_01_0413__p1662417155">The <strong id="hss_01_0413__b20086895108290">Events</strong> page displays the alarms generated in the last 30 days.</p>
+<p id="hss_01_0413__p95591432204515">The status of a handled alarm changes from <strong id="hss_01_0413__b16867969558290">Unhandled</strong> to <strong id="hss_01_0413__b19694577948290">Handled</strong>.</p>
+<div class="section" id="hss_01_0413__section7221597183"><h4 class="sectiontitle">Limitations and Constraints</h4><ul id="hss_01_0413__ul571214581011"><li id="hss_01_0413__li071210458102">To skip the checks on high-risk command execution, privilege escalations, reverse shells, abnormal shells, or web shells, manually disable the corresponding policies in the policy groups on the <strong id="hss_01_0413__b155681123112011">Policies</strong> page. HSS will not check the servers associated with disabled policies.</li><li id="hss_01_0413__li4713184517109">Other detection items cannot be manually disabled.</li><li id="hss_01_0413__li34621934192116">Servers that are not protected by HSS do not support operations related to alarms and events.</li></ul>
+</div>
+<div class="section" id="hss_01_0413__section159075873211"><h4 class="sectiontitle">Procedure</h4><p id="hss_01_0413__p15817432536">This section describes how you should handle alarms to enhance server security.</p>
+<div class="note" id="hss_01_0413__note1559155845517"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0413__p12559195875519">Do not fully rely on alarm handling to defend against attacks, because not every issue can be detected in a timely manner. You are advised to take more measures to prevent threats, such as checking for and fixing vulnerabilities and unsafe settings.</p>
+</div></div>
+<ol id="hss_01_0413__ol13384192192717"><li id="hss_01_0413__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0413__li830314169200"><span>Click <span><img id="hss_01_0413__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0413__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0413__hss_01_0571_b14857117404"><span id="hss_01_0413__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0413__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0413__li16280131615521"><span>In the navigation pane on the left, choose <strong id="hss_01_0413__hss_01_0026_b18377447191219">Detection</strong> &gt; <strong id="hss_01_0413__hss_01_0026_b7811141812132">Alarms</strong> and click <strong id="hss_01_0413__hss_01_0026_b12667936171318">Server Alarms</strong>.</span><p><div class="note" id="hss_01_0413__hss_01_0026_note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0413__hss_01_0026_hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0413__hss_01_0026_fig9988155212375"><span class="figcap"><b>Figure 1 </b>Server alarms</span><br><span><img id="hss_01_0413__hss_01_0026_image83101973150" src="en-us_image_0000001621827002.png"></span></div>
+
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0413__hss_01_0026_table185876181727" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Alarm statistics</caption><thead align="left"><tr id="hss_01_0413__hss_01_0026_row1258817180217"><th align="left" class="cellrowborder" colspan="2" valign="top" id="mcps1.3.4.4.3.2.3.2.4.1.1"><p id="hss_01_0413__hss_01_0026_p94362044109">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" id="mcps1.3.4.4.3.2.3.2.4.1.2"><p id="hss_01_0413__hss_01_0026_p958861819213">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0413__hss_01_0026_row148882134232"><td class="cellrowborder" colspan="2" valign="top" headers="mcps1.3.4.4.3.2.3.2.4.1.1 "><p id="hss_01_0413__hss_01_0026_p7104173222317">Enterprise Project</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.3.2.3.2.4.1.2 "><p id="hss_01_0413__hss_01_0026_p157294282317">Select an enterprise project and view alarm details by enterprise project.</p>
+</td>
+</tr>
+<tr id="hss_01_0413__hss_01_0026_row1146916442556"><td class="cellrowborder" colspan="2" valign="top" headers="mcps1.3.4.4.3.2.3.2.4.1.1 "><p id="hss_01_0413__hss_01_0026_p2046924445514">Time range</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.3.2.3.2.4.1.2 "><p id="hss_01_0413__hss_01_0026_p154691644125510">You can select a fixed time period or customize a time period to filter alarms. Only alarms generated within 30 days can be queried.</p>
+<p id="hss_01_0413__hss_01_0026_p1082114712614">The options are as follows:</p>
+<ul id="hss_01_0413__hss_01_0026_ul142371443720"><li id="hss_01_0413__hss_01_0026_li1923717411717">Last 24 hours</li><li id="hss_01_0413__hss_01_0026_li2440551276">Last 3 days</li><li id="hss_01_0413__hss_01_0026_li65694121672">Last 7 days</li><li id="hss_01_0413__hss_01_0026_li536218181879">Last 30 days</li><li id="hss_01_0413__hss_01_0026_li727320012124">Custom</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0413__hss_01_0026_row158819182218"><td class="cellrowborder" rowspan="5" valign="top" width="9.68%" headers="mcps1.3.4.4.3.2.3.2.4.1.1 "><p id="hss_01_0413__hss_01_0026_p164377441907">Server Alarms</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.49%" headers="mcps1.3.4.4.3.2.3.2.4.1.1 "><p id="hss_01_0413__hss_01_0026_p658817181029">Affected Servers</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.83%" headers="mcps1.3.4.4.3.2.3.2.4.1.2 "><p id="hss_01_0413__hss_01_0026_p158819181929">Number of servers for which alarms are generated.</p>
+</td>
+</tr>
+<tr id="hss_01_0413__hss_01_0026_row195881118921"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.3.2.3.2.4.1.1 "><p id="hss_01_0413__hss_01_0026_p18588191819211">Alarms to be Handled</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.3.2.3.2.4.1.1 "><p id="hss_01_0413__hss_01_0026_p1058871813211">Number of alarms to be handled.</p>
+<p id="hss_01_0413__hss_01_0026_p213174416312">By default, all alarms to be handled are displayed.</p>
+</td>
+</tr>
+<tr id="hss_01_0413__hss_01_0026_row125883181627"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.3.2.3.2.4.1.1 "><p id="hss_01_0413__hss_01_0026_p05885181228">Handled Alarms</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.3.2.3.2.4.1.1 "><p id="hss_01_0413__hss_01_0026_p175880189210">Number of handled alarms.</p>
+</td>
+</tr>
+<tr id="hss_01_0413__hss_01_0026_row42871218311"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.3.2.3.2.4.1.1 "><p id="hss_01_0413__hss_01_0026_p1028862533">Blocked IP Addresses</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.3.2.3.2.4.1.1 "><p id="hss_01_0413__hss_01_0026_p89448319411">Number of blocked IP addresses. You can click the number to check blocked IP address list.</p>
+<p id="hss_01_0413__hss_01_0026_p114491243184">The blocked IP address list displays the server name, attack source IP address, login type, blocking status, number of blocks, blocking start time, and the latest blocking time.</p>
+<p id="hss_01_0413__hss_01_0026_p02881821539">If a valid IP address is blocked by mistake (for example, after O&amp;M personnel enter incorrect passwords for multiple times), you can manually unblock it. If a server is frequently attacked, you are advised to fix its vulnerabilities in a timely manner and eliminate risks.</p>
+<div class="notice" id="hss_01_0413__hss_01_0026_note106951035202915"><span class="noticetitle"> NOTICE: </span><div class="noticebody"><ul id="hss_01_0413__hss_01_0026_ul873664454119"><li id="hss_01_0413__hss_01_0026_li19736544204118">After a blocked IP address is unblocked, HSS will no longer block the operations performed by the IP address.</li><li id="hss_01_0413__hss_01_0026_li13901734194211">A maximum of 10,000 IP addresses can be blocked for each type of software.<p id="hss_01_0413__hss_01_0026_p164171344194210"><a name="hss_01_0413__hss_01_0026_li13901734194211"></a><a name="hss_01_0026_li13901734194211"></a>If your Linux server does not support ipset, a maximum of 50 IP addresses can be clocked for MySQL and vsftp.</p>
+<p id="hss_01_0413__hss_01_0026_p29243369425">If your Linux server does not support ipset or hosts.deny, a maximum of 50 IP addresses can be blocked for SSH.</p>
+</li></ul>
+</div></div>
+</td>
+</tr>
+<tr id="hss_01_0413__hss_01_0026_row36761916637"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.3.2.3.2.4.1.1 "><p id="hss_01_0413__hss_01_0026_p1067616161131">Isolated Files</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.3.2.3.2.4.1.1 "><p id="hss_01_0413__hss_01_0026_p15536140963">HSS can isolate detected threat files. Files that have been isolated are displayed on a slide-out panel on the <strong id="hss_01_0413__hss_01_0026_b1570718482015">Server Alarms</strong> page. You can click <strong id="hss_01_0413__hss_01_0026_b1636910452024">Isolated Files</strong> on the upper right corner to check them.</p>
+<p id="hss_01_0413__hss_01_0026_p36769161313">You can recover isolated files. For details, see <a href="hss_01_0331.html">Managing Isolated Files</a>.</p>
+</td>
+</tr>
+<tr id="hss_01_0413__hss_01_0026_row1570741018115"><td class="cellrowborder" rowspan="5" valign="top" width="9.68%" headers="mcps1.3.4.4.3.2.3.2.4.1.1 "><p id="hss_01_0413__hss_01_0026_p770712103113">Container Alarms</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.49%" headers="mcps1.3.4.4.3.2.3.2.4.1.1 "><p id="hss_01_0413__hss_01_0026_p1929111513812">Affected Servers</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.83%" headers="mcps1.3.4.4.3.2.3.2.4.1.2 "><p id="hss_01_0413__hss_01_0026_p49291715488">Number of servers for which alarms are generated.</p>
+</td>
+</tr>
+<tr id="hss_01_0413__hss_01_0026_row2079910122817"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.3.2.3.2.4.1.1 "><p id="hss_01_0413__hss_01_0026_p293017151281">Alarms to be Handled</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.3.2.3.2.4.1.1 "><p id="hss_01_0413__hss_01_0026_p39301515688">Number of alarms to be handled.</p>
+<p id="hss_01_0413__hss_01_0026_p2930415288">By default, all alarms to be handled are displayed.</p>
+</td>
+</tr>
+<tr id="hss_01_0413__hss_01_0026_row1591320144819"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.3.2.3.2.4.1.1 "><p id="hss_01_0413__hss_01_0026_p1393019151289">Handled Alarms</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.3.2.3.2.4.1.1 "><p id="hss_01_0413__hss_01_0026_p1893017158815">Number of handled alarms</p>
+</td>
+</tr>
+<tr id="hss_01_0413__hss_01_0026_row4468310984"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.3.2.3.2.4.1.1 "><p id="hss_01_0413__hss_01_0026_p5468610680">Threats</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.3.2.3.2.4.1.1 "><p id="hss_01_0413__hss_01_0026_p046820107812">Displays the statistics on alarms by severity.</p>
+<ul id="hss_01_0413__hss_01_0026_ul323742412914"><li id="hss_01_0413__hss_01_0026_li142379241697">Critical</li><li id="hss_01_0413__hss_01_0026_li1057952611917">High</li><li id="hss_01_0413__hss_01_0026_li1581816283910">Medium</li><li id="hss_01_0413__hss_01_0026_li1312915311195">Low</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0413__hss_01_0026_row2041964418815"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.3.2.3.2.4.1.1 "><p id="hss_01_0413__hss_01_0026_p1141911441984">Top 5 Events</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.3.2.3.2.4.1.1 "><p id="hss_01_0413__hss_01_0026_p19420644887">Displays the top 5 alarm types and their quantities.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0413__li282845082110"><span>Handle alarms.</span><p><div class="note" id="hss_01_0413__note2100842194820"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0413__p839894403310">Alarms are displayed on the <strong id="hss_01_0413__b9334087128290">Server Alarms</strong> page. Here you can check up to 30 days of historical alarms.</p>
+<p id="hss_01_0413__p1941194217481">Check and handle alarms as needed. The status of a handled alarm changes from <strong id="hss_01_0413__b16137572208290">Unhandled</strong> to <strong id="hss_01_0413__b20244966648290">Handled</strong>. HSS will no longer collect its statistics or display them on the <strong id="hss_01_0413__b9165192488290">Dashboard</strong> page.</p>
+</div></div>
+<ul id="hss_01_0413__ul5023842212"><li id="hss_01_0413__li1901385225">Handling all alarms<ol type="a" id="hss_01_0413__ol1786831515234"><li id="hss_01_0413__li1386921522311">Select all of the alarms and click <strong id="hss_01_0413__b14951710145510">Handle All</strong>.<div class="note" id="hss_01_0413__note138691549153315"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0413__p14870194923319">Ensure that you have selected the minimum alarm event type. Otherwise, the <strong id="hss_01_0413__b17930184985817">Handle All</strong> button is unavailable.</p>
+</div></div>
+</li><li id="hss_01_0413__li1054383362615">In the dialog box that is displayed, select a handling method, confirm the information, and click <strong id="hss_01_0413__b57421234103016">OK</strong>. For more information, see <a href="#hss_01_0413__table12568105515583">Table 2</a>.<div class="note" id="hss_01_0413__note31201412104011"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0413__p11771917144014">An alarm in the <strong id="hss_01_0413__b843262662019">Handled</strong> state cannot be batch handled.</p>
+</div></div>
+</li></ol>
+</li><li id="hss_01_0413__li6211545202217">Handling alarms in batches<ol type="a" id="hss_01_0413__ol126031373307"><li id="hss_01_0413__li260373716303">Select an event type, select multiple alarms, and click <strong id="hss_01_0413__b11190232133218">Batch Handle</strong>.</li><li id="hss_01_0413__li437457203112">In the dialog box that is displayed, select a handling method, confirm the information, and click <strong id="hss_01_0413__b673714013213">OK</strong>. For more information, see <a href="#hss_01_0413__table12568105515583">Table 2</a>.</li></ol>
+</li><li id="hss_01_0413__li138534578221">Handling a single alarm<ol type="a" id="hss_01_0413__ol1820133711361"><li id="hss_01_0413__li28203376366">Select an event type and click <span class="uicontrol" id="hss_01_0413__uicontrol14946110183410"><b>Handle</b></span> in the <strong id="hss_01_0413__b4879154192517">Operation</strong> column of an alarm.</li><li id="hss_01_0413__li1247113504416">In the dialog box that is displayed, select a handling method, confirm the information, and click <strong id="hss_01_0413__b61141851133419">OK</strong>. For more information, see <a href="#hss_01_0413__table12568105515583">Table 2</a>.</li></ol>
+</li></ul>
+
+<div class="tablenoborder"><a name="hss_01_0413__table12568105515583"></a><a name="table12568105515583"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0413__table12568105515583" width="90%" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Alarm handling methods</caption><thead align="left"><tr id="hss_01_0413__hss_01_0413_row1824018971112"><th align="left" class="cellrowborder" valign="top" width="14.46%" id="mcps1.3.4.4.4.2.3.2.3.1.1"><p id="hss_01_0413__hss_01_0413_p7240179191115">Action</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="85.54%" id="mcps1.3.4.4.4.2.3.2.3.1.2"><p id="hss_01_0413__hss_01_0413_p9240498110">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0413__hss_01_0413_row1824049171115"><td class="cellrowborder" valign="top" width="14.46%" headers="mcps1.3.4.4.4.2.3.2.3.1.1 "><p id="hss_01_0413__hss_01_0413_p324069121118">Ignore</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.54%" headers="mcps1.3.4.4.4.2.3.2.3.1.2 "><p id="hss_01_0413__hss_01_0413_p1724049171115">Ignore the current alarm. Any new alarms of the same type will still be reported by HSS.</p>
+</td>
+</tr>
+<tr id="hss_01_0413__hss_01_0413_row4240159141116"><td class="cellrowborder" valign="top" width="14.46%" headers="mcps1.3.4.4.4.2.3.2.3.1.1 "><p id="hss_01_0413__hss_01_0413_p724019921114">Isolate and kill</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.54%" headers="mcps1.3.4.4.4.2.3.2.3.1.2 "><p id="hss_01_0413__hss_01_0413_p17240399113">If a program is isolated and killed, it will be terminated immediately and no longer able to perform read or write operations. Isolated source files of programs or processes are displayed on the <strong id="hss_01_0413__b4840091258290">Isolated Files</strong> slide-out panel and cannot harm your servers.</p>
+<p id="hss_01_0413__hss_01_0413_p1224159121120">You can click <strong id="hss_01_0413__b15554364368290">Isolated Files</strong> on the upper right corner to check the files. For details, see <a href="hss_01_0331.html">Managing Isolated Files</a>.</p>
+<p id="hss_01_0413__hss_01_0413_p924116911112">For details about events that can be isolated and killed, see <a href="hss_01_0277.html">Server Alarms</a>.</p>
+<div class="note" id="hss_01_0413__hss_01_0413_note1124111917113"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="hss_01_0413__hss_01_0413_p62414971120">When a program is isolated and killed, the process of the program is terminated immediately. To avoid impact on services, check the detection result, and cancel the isolation of or unignore misreported malicious programs (if any).</p>
+</div></div>
+</td>
+</tr>
+<tr id="hss_01_0413__hss_01_0413_row62415919119"><td class="cellrowborder" valign="top" width="14.46%" headers="mcps1.3.4.4.4.2.3.2.3.1.1 "><p id="hss_01_0413__hss_01_0413_p162411597119">Mark as handled</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.54%" headers="mcps1.3.4.4.4.2.3.2.3.1.2 "><p id="hss_01_0413__hss_01_0413_p20241159131111">Mark the event as handled. You can add remarks for the event to record more details.</p>
+</td>
+</tr>
+<tr id="hss_01_0413__hss_01_0413_row1624113911110"><td class="cellrowborder" valign="top" width="14.46%" headers="mcps1.3.4.4.4.2.3.2.3.1.1 "><p id="hss_01_0413__hss_01_0413_p19241291119">Add to <span id="hss_01_0413__text12131071135">Login Whitelist</span></p>
+</td>
+<td class="cellrowborder" valign="top" width="85.54%" headers="mcps1.3.4.4.4.2.3.2.3.1.2 "><p id="hss_01_0413__hss_01_0413_p62413991114">Add false alarmed items of the <strong id="hss_01_0413__b1492514544812">Brute-force attack</strong> and <strong id="hss_01_0413__b1092513459485">Abnormal login</strong> types to the <span id="hss_01_0413__text2022091145615">Login Whitelist</span>.</p>
+<p id="hss_01_0413__hss_01_0413_p192424916117">HSS will no longer report alarm on the <span id="hss_01_0413__text46071937112214">Login Whitelist</span>. A whitelisted login event will not trigger alarms.</p>
+<p id="hss_01_0413__hss_01_0413_p62426918118">The following alarm events can be added to the <span id="hss_01_0413__text154796432555">Login Whitelist</span>:</p>
+<ul id="hss_01_0413__hss_01_0413_ul4242795113"><li id="hss_01_0413__hss_01_0413_li15242129111110">Brute-force attacks</li><li id="hss_01_0413__hss_01_0413_li1124213920113">Abnormal logins</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0413__hss_01_0413_row224259111116"><td class="cellrowborder" valign="top" width="14.46%" headers="mcps1.3.4.4.4.2.3.2.3.1.1 "><p id="hss_01_0413__hss_01_0413_p82423915117">Add to alarm whitelist</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.54%" headers="mcps1.3.4.4.4.2.3.2.3.1.2 "><p id="hss_01_0413__hss_01_0413_p112423951110">Add false alarmed items to the login whitelist.</p>
+<p id="hss_01_0413__hss_01_0413_p624211916116">HSS will no longer report alarm on the whitelisted items. A whitelisted alarm will not trigger alarms.</p>
+<p id="hss_01_0413__hss_01_0413_p72421193111">For details about events that can be isolated and killed, see <a href="hss_01_0277.html">Server Alarms</a>.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0030.html">Intrusion Detection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0414.html b/docs/hss/umn/hss_01_0414.html
new file mode 100644
index 00000000..37a99ab7
--- /dev/null
+++ b/docs/hss/umn/hss_01_0414.html
@@ -0,0 +1,73 @@
+<a name="hss_01_0414"></a><a name="hss_01_0414"></a>
+
+<h1 class="topictitle1">Handling Container Alarms</h1>
+<div id="body0000001447003685"><p id="hss_01_0414__p432115468560"><span id="hss_01_0414__text78027306323">HSS</span> displays alarm and event statistics and their summary all on one page. You can have a quick overview of alarms, including the numbers of containers with alarms, handled alarms, and unhandled alarms.</p>
+<p id="hss_01_0414__p1662417155">The <strong id="hss_01_0414__b65531145115311">Events</strong> page displays the alarms generated in the last 30 days.</p>
+<p id="hss_01_0414__p95591432204515">The status of a handled alarm changes from <strong id="hss_01_0414__b72151216105419">Unhandled</strong> to <strong id="hss_01_0414__b2021591685413">Handled</strong>.</p>
+<div class="section" id="hss_01_0414__section1378819553473"><h4 class="sectiontitle">Constraints</h4><p id="hss_01_0414__en-us_topic_0000001196708827_p11935163695913">Servers that are not protected by HSS do not support operations related to alarms and events.</p>
+</div>
+<div class="section" id="hss_01_0414__section17926950135610"><h4 class="sectiontitle">Procedure</h4><p id="hss_01_0414__p15817432536">This section describes how you should handle alarms to enhance server security.</p>
+<div class="note" id="hss_01_0414__note1559155845517"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0414__p12559195875519">Do not fully rely on alarm handling to defend against attacks, because not every issue can be detected in a timely manner. You are advised to take more measures to prevent threats, such as checking for and fixing vulnerabilities and unsafe settings.</p>
+</div></div>
+<ol id="hss_01_0414__ol13384192192717"><li id="hss_01_0414__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0414__li830314169200"><span>Click <span><img id="hss_01_0414__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0414__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0414__hss_01_0571_b14857117404"><span id="hss_01_0414__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0414__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0414__li1160791011276"><span>In the navigation pane on the left, choose <strong id="hss_01_0414__b3613125711717">Detection</strong> &gt; <strong id="hss_01_0414__b1361345771712">Alarms</strong>, and click <strong id="hss_01_0414__b176138573173">Container Alarms</strong>.</span><p><div class="fignone" id="hss_01_0414__fig185501215162916"><span class="figcap"><b>Figure 1 </b>Viewing container alarms</span><br><span><img id="hss_01_0414__image12936143035510" src="en-us_image_0000001670554661.png"></span></div>
+
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0414__en-us_topic_0000001150709164_table185876181727" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Alarm statistics</caption><thead align="left"><tr id="hss_01_0414__en-us_topic_0000001150709164_row1258817180217"><th align="left" class="cellrowborder" valign="top" width="19.08%" id="mcps1.3.5.4.3.2.2.2.3.1.1"><p id="hss_01_0414__en-us_topic_0000001150709164_p16588161815210">Alarm Event</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="80.92%" id="mcps1.3.5.4.3.2.2.2.3.1.2"><p id="hss_01_0414__en-us_topic_0000001150709164_p958861819213">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0414__en-us_topic_0000001150709164_row158819182218"><td class="cellrowborder" valign="top" width="19.08%" headers="mcps1.3.5.4.3.2.2.2.3.1.1 "><p id="hss_01_0414__en-us_topic_0000001150709164_p658817181029">Containers with Alarms</p>
+</td>
+<td class="cellrowborder" valign="top" width="80.92%" headers="mcps1.3.5.4.3.2.2.2.3.1.2 "><p id="hss_01_0414__en-us_topic_0000001150709164_p158819181929">Number of containers for which alarms are generated.</p>
+</td>
+</tr>
+<tr id="hss_01_0414__en-us_topic_0000001150709164_row195881118921"><td class="cellrowborder" valign="top" width="19.08%" headers="mcps1.3.5.4.3.2.2.2.3.1.1 "><p id="hss_01_0414__en-us_topic_0000001150709164_p18588191819211">Alarms to be Handled</p>
+</td>
+<td class="cellrowborder" valign="top" width="80.92%" headers="mcps1.3.5.4.3.2.2.2.3.1.2 "><p id="hss_01_0414__en-us_topic_0000001150709164_p1058871813211">Number of alarms to be handled.</p>
+<p id="hss_01_0414__en-us_topic_0000001150709164_p213174416312">By default, all unhandled alarms are displayed on the <strong id="hss_01_0414__b126853216183">Events</strong> page.</p>
+</td>
+</tr>
+<tr id="hss_01_0414__en-us_topic_0000001150709164_row125883181627"><td class="cellrowborder" valign="top" width="19.08%" headers="mcps1.3.5.4.3.2.2.2.3.1.1 "><p id="hss_01_0414__en-us_topic_0000001150709164_p05885181228">Handled Alarms</p>
+</td>
+<td class="cellrowborder" valign="top" width="80.92%" headers="mcps1.3.5.4.3.2.2.2.3.1.2 "><p id="hss_01_0414__en-us_topic_0000001150709164_p175880189210">Number of handled alarms.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0414__li282845082110"><span>Handle alarms.</span><p><div class="note" id="hss_01_0414__note2100842194820"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0414__p198163871515">Alarms are displayed on the <strong id="hss_01_0414__b4382575501">Container Alarms</strong> page. Here you can check up to 30 days of historical alarms.</p>
+<p id="hss_01_0414__p584384152">Check and handle alarms as needed. The status of a handled alarm changes from <strong id="hss_01_0414__b1871443845412">Unhandled</strong> to <strong id="hss_01_0414__b37141438115420">Handled</strong>. HSS will no longer collect its statistics.</p>
+</div></div>
+<ul id="hss_01_0414__ul5023842212"><li id="hss_01_0414__li6211545202217">Handling selected alarms in batches<ol type="a" id="hss_01_0414__ol126031373307"><li id="hss_01_0414__li260373716303">Select an event type, select multiple alarms, and click <span class="uicontrol" id="hss_01_0414__uicontrol1334105715573"><b>Batch Handle</b></span>.</li><li id="hss_01_0414__li437457203112">In the dialog box that is displayed, select a handling method, confirm the information, and click <strong id="hss_01_0414__b18742154385815">OK</strong>. For more information, see <a href="#hss_01_0414__table58569395296">Table 2</a>.</li></ol>
+</li><li id="hss_01_0414__li138534578221">Handling a single alarm<ol type="a" id="hss_01_0414__ol1820133711361"><li id="hss_01_0414__li28203376366">Select an event type, and click <strong id="hss_01_0414__b101421510593">Handle</strong> in the <strong id="hss_01_0414__b161412152599">Operation</strong> column of an alarm.</li><li id="hss_01_0414__li1247113504416">In the dialog box that is displayed, select a handling method, confirm the information, and click <strong id="hss_01_0414__b184033665912">OK</strong>. For more information, see <a href="#hss_01_0414__table58569395296">Table 2</a>.</li></ol>
+</li></ul>
+
+<div class="tablenoborder"><a name="hss_01_0414__table58569395296"></a><a name="table58569395296"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0414__table58569395296" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Handling alarm events</caption><thead align="left"><tr id="hss_01_0414__row7856103914299"><th align="left" class="cellrowborder" valign="top" width="14.46%" id="mcps1.3.5.4.4.2.3.2.3.1.1"><p id="hss_01_0414__p585714396299">Action</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="85.54%" id="mcps1.3.5.4.4.2.3.2.3.1.2"><p id="hss_01_0414__p38571339192913">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0414__row108578395299"><td class="cellrowborder" valign="top" width="14.46%" headers="mcps1.3.5.4.4.2.3.2.3.1.1 "><p id="hss_01_0414__p11857939162910">Ignore</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.54%" headers="mcps1.3.5.4.4.2.3.2.3.1.2 "><p id="hss_01_0414__p1285713396291">Ignore the current alarm. Any new alarms of the same type will still be reported by HSS.</p>
+</td>
+</tr>
+<tr id="hss_01_0414__row58571339152916"><td class="cellrowborder" valign="top" width="14.46%" headers="mcps1.3.5.4.4.2.3.2.3.1.1 "><p id="hss_01_0414__p585713394297">Mark as handled</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.54%" headers="mcps1.3.5.4.4.2.3.2.3.1.2 "><p id="hss_01_0414__p1985723916292">Mark the event as handled. You can add remarks for the event to record more details.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0030.html">Intrusion Detection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0417.html b/docs/hss/umn/hss_01_0417.html
new file mode 100644
index 00000000..a84584f0
--- /dev/null
+++ b/docs/hss/umn/hss_01_0417.html
@@ -0,0 +1,45 @@
+<a name="hss_01_0417"></a><a name="hss_01_0417"></a>
+
+<h1 class="topictitle1">Change History</h1>
+<div id="body0000001260390640">
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0417__table494110177718" frame="border" border="1" rules="all"><thead align="left"><tr id="hss_01_0417__row79418179719"><th align="left" class="cellrowborder" valign="top" width="21.48%" id="mcps1.3.1.1.3.1.1"><p id="hss_01_0417__p79413171572"><strong id="hss_01_0417__b1339911387169">Released On</strong></p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="78.52%" id="mcps1.3.1.1.3.1.2"><p id="hss_01_0417__p494161717716"><strong id="hss_01_0417__b9990193861611">Description</strong></p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0417__row133911711144313"><td class="cellrowborder" valign="top" width="21.48%" headers="mcps1.3.1.1.3.1.1 "><p id="hss_01_0417__p93911511134315">2024-05-20</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.52%" headers="mcps1.3.1.1.3.1.2 "><p id="hss_01_0417__p20391171110431">This is the fifth official release.</p>
+<p id="hss_01_0417__p19194192712433">Modified:</p>
+<ul id="hss_01_0417__ul129071507470"><li id="hss_01_0417__li5907125010473">The time range of server security alarms can be customized.</li><li id="hss_01_0417__li2740155264714">Optimized the use of "bait file" in ransomware protection.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0417__row3903111162316"><td class="cellrowborder" valign="top" width="21.48%" headers="mcps1.3.1.1.3.1.1 "><p id="hss_01_0417__p1990320172311">2024-03-25</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.52%" headers="mcps1.3.1.1.3.1.2 "><p id="hss_01_0417__p19904101172314">This is the fourth official release.</p>
+<ul id="hss_01_0417__ul1764235914119"><li id="hss_01_0417__li166001219533">Added section "System User Whitelist".</li><li id="hss_01_0417__li564212598113">Optimized section "Server Fingerprints" and "Container Fingerprints". Updated navigation and screenshots.</li><li id="hss_01_0417__li157314719152">Optimized section "Specifications of Different Editions". Updated content about asset fingerprints and container intrusion detection.</li><li id="hss_01_0417__li1561615444538">Optimized section "Vulnerability Management".</li><li id="hss_01_0417__li0221194215371">Deleted "How Does Container Security Process Logs?" FAQ</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0417__row124201128125711"><td class="cellrowborder" valign="top" width="21.48%" headers="mcps1.3.1.1.3.1.1 "><p id="hss_01_0417__p1942142855718">2023-12-20</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.52%" headers="mcps1.3.1.1.3.1.2 "><p id="hss_01_0417__p14215287570">This issue is the third official release.</p>
+<p id="hss_01_0417__p1338815518579">Deleted descriptions about the basic edition.</p>
+</td>
+</tr>
+<tr id="hss_01_0417__row13941101716714"><td class="cellrowborder" valign="top" width="21.48%" headers="mcps1.3.1.1.3.1.1 "><p id="hss_01_0417__p1694111715711">2023-12-07</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.52%" headers="mcps1.3.1.1.3.1.2 "><p id="hss_01_0417__p3941101715714">This issue is the second official release.</p>
+<ul id="hss_01_0417__ul16221652121220"><li id="hss_01_0417__li132211052121217">Added the function description of the basic edition.</li><li id="hss_01_0417__li142215527126">Added the operation of enabling the backup function with ransomware protection.</li><li id="hss_01_0417__li1222117524126">Added the description of the file integrity function.</li><li id="hss_01_0417__li1022175213126">Added the parameter description of the default baseline library.</li><li id="hss_01_0417__li1122125221217">Added operations for configuring alarm notification.</li><li id="hss_01_0417__li1922115217127">Deleted sections related to plug-in management.</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0417__row078364217111"><td class="cellrowborder" valign="top" width="21.48%" headers="mcps1.3.1.1.3.1.1 "><p id="hss_01_0417__p14590747121115">2023-09-30</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.52%" headers="mcps1.3.1.1.3.1.2 "><p id="hss_01_0417__p10590144781117">This issue is the first official release.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0418.html b/docs/hss/umn/hss_01_0418.html
new file mode 100644
index 00000000..e20cd0ad
--- /dev/null
+++ b/docs/hss/umn/hss_01_0418.html
@@ -0,0 +1,53 @@
+<a name="hss_01_0418"></a><a name="hss_01_0418"></a>
+
+<h1 class="topictitle1">What Do I Do If HSS Frequently Reports Brute-force Alarms?</h1>
+<div id="body8662426"><p id="hss_01_0418__en-us_topic_0000001167685542_p11837154752111">An alarm indicates that an attack was detected. It does not mean your cloud servers have been intruded. If you receive an alarm, handle it and take countermeasures in a timely manner.</p>
+<div class="section" id="hss_01_0418__section3721251799"><h4 class="sectiontitle">Possible Causes</h4><p id="hss_01_0418__p672557910">No access control is configured for the ports used for remotely connecting to your servers. As a result, viruses on the network frequently attacked your ports.</p>
+</div>
+<div class="section" id="hss_01_0418__section1764441719219"><h4 class="sectiontitle">Solution</h4><p id="hss_01_0418__en-us_topic_0000001167685542_p14846359220">Take any of the following measures.</p>
+<ul id="hss_01_0418__ul4272185312266"><li id="hss_01_0418__hss_01_0256_li4493711133818">Configure the SSH login whitelist.<p id="hss_01_0418__hss_01_0256_p1349341133814"><a name="hss_01_0418__hss_01_0256_li4493711133818"></a><a name="hss_01_0256_li4493711133818"></a>The SSH login whitelist allows logins from only whitelisted IP address, effectively preventing account cracking. </p>
+</li><li id="hss_01_0418__hss_01_0256_li997813815411">Enable 2FA.<p id="hss_01_0418__hss_01_0256_p14876164432415"><a name="hss_01_0418__hss_01_0256_li997813815411"></a><a name="hss_01_0256_li997813815411"></a>2FA requires users to provide verification codes before they log in. The codes will be sent to their mobile phones or email boxes.</p>
+<p id="hss_01_0418__hss_01_0256_p1683517456247">Choose <strong id="hss_01_0418__hss_01_0256_b1960805155101423">Installation &amp; Configuration</strong>. On the <strong id="hss_01_0418__hss_01_0256_b1597583421101423">Two-Factor Authentication</strong> tab, select servers and click <strong id="hss_01_0418__hss_01_0256_b2072141744101423">Enable 2FA</strong>. </p>
+</li><li id="hss_01_0418__hss_01_0256_li13738752104911">Use non-default ports.<p id="hss_01_0418__hss_01_0256_p1738155214497"><a name="hss_01_0418__hss_01_0256_li13738752104911"></a><a name="hss_01_0256_li13738752104911"></a>Change the default remote management ports 22 and 3389 to other ports.</p>
+</li><li id="hss_01_0418__hss_01_0256_li67631465619">Configure security group rules to prevent the attacking IP addresses from accessing your service ports.<div class="note" id="hss_01_0418__hss_01_0256_note1275014135615"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0418__hss_01_0256_p10720169155717">You are advised to allow only specified IP addresses to access open remote management ports (for example, for SSH and remote desktop login).</p>
+</div></div>
+<p id="hss_01_0418__hss_01_0256_p167519145565">You can configure security group rules to control access to your servers. For a port used for remote login, you can set IP addresses that are allowed to remotely log in to your ECSs.</p>
+<p id="hss_01_0418__hss_01_0256_p275101435615">To allow IP address <strong id="hss_01_0418__hss_01_0256_b669353552101423">192.168.20.2</strong> to remotely access Linux ECSs in a security group over the SSH protocol and port 22, you can configure the following security group rule.</p>
+
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0418__hss_01_0256_table1076141418569" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Setting IP addresses to remotely connect to ECSs</caption><thead align="left"><tr id="hss_01_0418__hss_01_0256_row8750140566"><th align="left" class="cellrowborder" valign="top" width="12.11%" id="mcps1.3.3.3.4.4.2.5.1.1"><p id="hss_01_0418__hss_01_0256_p675121485620">Direction</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="23.61%" id="mcps1.3.3.3.4.4.2.5.1.2"><p id="hss_01_0418__hss_01_0256_p775614145618">Protocol/Application</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="22.63%" id="mcps1.3.3.3.4.4.2.5.1.3"><p id="hss_01_0418__hss_01_0256_p5751514185610">Port</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="41.65%" id="mcps1.3.3.3.4.4.2.5.1.4"><p id="hss_01_0418__hss_01_0256_p15751114175619">Source</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0418__hss_01_0256_row97681455618"><td class="cellrowborder" valign="top" width="12.11%" headers="mcps1.3.3.3.4.4.2.5.1.1 "><p id="hss_01_0418__hss_01_0256_p1676181445615">Inbound</p>
+</td>
+<td class="cellrowborder" valign="top" width="23.61%" headers="mcps1.3.3.3.4.4.2.5.1.2 "><p id="hss_01_0418__hss_01_0256_p676141414562">SSH (22)</p>
+</td>
+<td class="cellrowborder" valign="top" width="22.63%" headers="mcps1.3.3.3.4.4.2.5.1.3 "><p id="hss_01_0418__hss_01_0256_p876191405619">22</p>
+</td>
+<td class="cellrowborder" valign="top" width="41.65%" headers="mcps1.3.3.3.4.4.2.5.1.4 "><p id="hss_01_0418__hss_01_0256_p1776714105610">For example, 192.168.20.2/32</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</li><li id="hss_01_0418__hss_01_0256_li1297853818543">Set a strong password.<p id="hss_01_0418__hss_01_0256_p19796240155619"><a name="hss_01_0418__hss_01_0256_li1297853818543"></a><a name="hss_01_0256_li1297853818543"></a>HSS baseline checks include the password policy check and weak password detection, which can find accounts that use weak passwords on your servers. You can view and handle password risks on the console.</p>
+</li></ul>
+</div>
+<div class="section" id="hss_01_0418__section1442545014817"><h4 class="sectiontitle">How Does HSS Intercept Brute Force Attacks?</h4><p id="hss_01_0418__p52061654124016">HSS can detect brute-force attacks on SSH, RDP, FTP, SQL Server, and MySQL accounts.</p>
+<p id="hss_01_0418__p195537496157">By default, HSS will block an IP address if it has five or more brute-force attack attempts detected within 30 seconds, or 15 or more brute-force attack attempts detected within 3600 seconds.</p>
+<p id="hss_01_0418__p168601028151217">If you have enabled , you can configure a login security policy to specify the brute force cracking determination mode and blocking duration.</p>
+<p id="hss_01_0418__p16895152213204">To view the IP addresses blocked by HSS, choose <span class="menucascade" id="hss_01_0418__menucascade1565824913201"><b><span class="uicontrol" id="hss_01_0418__uicontrol106589497204">Detection</span></b> &gt; <b><span class="uicontrol" id="hss_01_0418__uicontrol14484853172014">Alarms</span></b></span> and click the value above <span class="parmvalue" id="hss_01_0418__parmvalue1341383162114"><b>Blocked IP Addresses</b></span>.</p>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0038.html">Brute-force Attack Defense</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0426.html b/docs/hss/umn/hss_01_0426.html
new file mode 100644
index 00000000..4907a624
--- /dev/null
+++ b/docs/hss/umn/hss_01_0426.html
@@ -0,0 +1,25 @@
+<a name="hss_01_0426"></a><a name="hss_01_0426"></a>
+
+<h1 class="topictitle1">Security Configurations</h1>
+<div id="body0000001471222781"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0436.html">What Can I Do If I Cannot Remotely Log In to a Server via SSH?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0437.html">How Do I Use 2FA?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0439.html">Why Can't I Receive a Verification Code After 2FA Is Enabled?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0440.html">Why Does My Login Fail After I Enable 2FA?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0441.html">How Do I Add a Mobile Phone Number or Email Address for Receiving 2FA Verification Notifications?</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0472.html">How Do I Disable the SELinux Firewall?</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0032.html">FAQs</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0427.html b/docs/hss/umn/hss_01_0427.html
new file mode 100644
index 00000000..a0eb47c0
--- /dev/null
+++ b/docs/hss/umn/hss_01_0427.html
@@ -0,0 +1,16 @@
+<a name="hss_01_0427"></a><a name="hss_01_0427"></a>
+
+<h1 class="topictitle1">How Often Does HSS Detect, Isolate, and Kill Malicious Programs?</h1>
+<div id="body8662426"><p id="hss_01_0427__en-us_topic_0000001209475763_p11994820144619">Detection period: real-time detection</p>
+<p id="hss_01_0427__en-us_topic_0000001209475763_p196052444474">Isolation and killing period:</p>
+<ul id="hss_01_0427__en-us_topic_0000001209475763_ul1077917495474"><li id="hss_01_0427__en-us_topic_0000001209475763_li13779144974710">If you have enabled automatic isolation and killing, the system will scan and kill viruses in real time.</li><li id="hss_01_0427__en-us_topic_0000001209475763_li13627144824816">If you have not enabled automatic isolation and killing, you need to manually check and handle alarms.</li></ul>
+<div class="notice" id="hss_01_0427__en-us_topic_0000001209475763_note187827107500"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><ol id="hss_01_0427__en-us_topic_0000001209475763_ol643316314512"><li id="hss_01_0427__en-us_topic_0000001209475763_li11433163125117">HSS can detect, isolate and kill malicious programs (by cloud scan) and abnormal process behaviors. For more information, see Editions.</li><li id="hss_01_0427__en-us_topic_0000001209475763_li743443115116">HSS isolation and killing can be automatically or manually performed.<ul id="hss_01_0427__en-us_topic_0000001209475763_ul1529423618515"><li id="hss_01_0427__en-us_topic_0000001209475763_li142941236115113">For more information about automatic isolation and killing, see "Isolating and Killing Malicious Programs" in "Security Configuration".</li><li id="hss_01_0427__en-us_topic_0000001209475763_li924375511522">For more information about manual isolation and killing, see "Isolating and Killing Files" in "Managing Isolated Files".</li></ul>
+</li></ol>
+</div></div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0164.html">Intrusions</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0429.html b/docs/hss/umn/hss_01_0429.html
new file mode 100644
index 00000000..6649ee4b
--- /dev/null
+++ b/docs/hss/umn/hss_01_0429.html
@@ -0,0 +1,12 @@
+<a name="hss_01_0429"></a><a name="hss_01_0429"></a>
+
+<h1 class="topictitle1">What Do I Do If an IP Address Is Blocked by HSS?</h1>
+<div id="body8662426"><p id="hss_01_0429__en-us_topic_0000001238416906_p840261211533">Check whether the blocked IP address is a malicious IP address or a normal one.</p>
+<ul id="hss_01_0429__en-us_topic_0000001238416906_ul3612161675317"><li id="hss_01_0429__en-us_topic_0000001238416906_li96129168535">If it is normal, add it to the whitelist.</li><li id="hss_01_0429__en-us_topic_0000001238416906_li516410615510">If it is malicious, no further operations are required.</li></ul>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0164.html">Intrusions</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0430.html b/docs/hss/umn/hss_01_0430.html
new file mode 100644
index 00000000..7f3a29a2
--- /dev/null
+++ b/docs/hss/umn/hss_01_0430.html
@@ -0,0 +1,12 @@
+<a name="hss_01_0430"></a><a name="hss_01_0430"></a>
+
+<h1 class="topictitle1">How Do I Defend Against Ransomware Attacks?</h1>
+<div id="body8662426"><p id="hss_01_0430__en-us_topic_0000001317161137_p164012018165712">Generally, ransomware is spread through Trojan implantation, emails, files, vulnerabilities, bundles, and storage media.</p>
+<p id="hss_01_0430__en-us_topic_0000001317161137_p8060118">To defend against ransomware intrusions, <a href="hss_01_0256.html">prevent brute-force attacks</a> and handle <span id="hss_01_0430__text542143422216">HSS</span> alarms in a timely manner.</p>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0164.html">Intrusions</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0436.html b/docs/hss/umn/hss_01_0436.html
new file mode 100644
index 00000000..24e9f1b4
--- /dev/null
+++ b/docs/hss/umn/hss_01_0436.html
@@ -0,0 +1,20 @@
+<a name="hss_01_0436"></a><a name="hss_01_0436"></a>
+
+<h1 class="topictitle1">What Can I Do If I Cannot Remotely Log In to a Server via SSH? </h1>
+<div id="body8662426"><div class="section" id="hss_01_0436__en-us_topic_0243005744_section463473011147"><h4 class="sectiontitle">Symptoms</h4><p id="hss_01_0436__en-us_topic_0243005744_p8115101311155">You can log in to a server via the console but not via SSH.</p>
+</div>
+<div class="section" id="hss_01_0436__en-us_topic_0243005744_section153453397138"><h4 class="sectiontitle">Possible Causes</h4><ul id="hss_01_0436__en-us_topic_0243005744_ul5603492134"><li id="hss_01_0436__en-us_topic_0243005744_li460104913133">A server will be blocked if it is regarded as a suspicious server performing brute-force attacks (for example, the number of incorrect password attempts reaches 5 within 30 seconds).</li><li id="hss_01_0436__en-us_topic_0243005744_li4499144813254">The SSH login IP whitelist is enabled. Your login IP addresses have not been added to the login whitelist.<p id="hss_01_0436__en-us_topic_0243005744_p4962148172512"><a name="hss_01_0436__en-us_topic_0243005744_li4499144813254"></a><a name="en-us_topic_0243005744_li4499144813254"></a>If you enable the SSH login IP address whitelist, SSH logins will be allowed only from whitelisted IP addresses.</p>
+</li></ul>
+</div>
+<div class="section" id="hss_01_0436__en-us_topic_0243005744_section645295818247"><h4 class="sectiontitle">Solution</h4><ol id="hss_01_0436__en-us_topic_0243005744_ol76541191277"><li id="hss_01_0436__en-us_topic_0243005744_li106542093275"><span>Check whether your login IP address was blocked because it was regarded as a source of brute-force attacks.</span><p><ul id="hss_01_0436__en-us_topic_0243005744_ul8234861016"><li id="hss_01_0436__en-us_topic_0243005744_li11234661705">If yes, perform the following steps:<ol type="a" id="hss_01_0436__ol1387335315535"><li id="hss_01_0436__li1979318580539">Log in to the <span id="hss_01_0436__hss_01_0571_text48831520173018"></span> console.</li><li id="hss_01_0436__li62362710546">In the navigation pane, choose <span class="menucascade" id="hss_01_0436__menucascade19571749165519"><b><span class="uicontrol" id="hss_01_0436__uicontrol1571749135517">Detection</span></b> &gt; <b><span class="uicontrol" id="hss_01_0436__uicontrol1857124975516">Alarms</span></b></span>.</li><li id="hss_01_0436__li179051810567">Select the <strong id="hss_01_0436__b99075321416">Server Alarms</strong> tab. Click the View Details in the <strong id="hss_01_0436__b3907153254114">Blocked IP Addresses</strong> area. The <strong id="hss_01_0436__b2090793214120">Blocked IP Addresses</strong> page is displayed.</li><li id="hss_01_0436__li2873135318539">Select the target attack source IP address and click <span class="uicontrol" id="hss_01_0436__uicontrol943031714587"><b>Unblock</b></span> above the list to unblock the IP address.</li></ol>
+</li><li id="hss_01_0436__en-us_topic_0243005744_li42351068014">If your login IP address was not blocked for this reason, go to <a href="#hss_01_0436__en-us_topic_0243005744_li13860915135115">2</a>.</li></ul>
+</p></li><li id="hss_01_0436__en-us_topic_0243005744_li13860915135115"><a name="hss_01_0436__en-us_topic_0243005744_li13860915135115"></a><a name="en-us_topic_0243005744_li13860915135115"></a><span>Check whether your login IP address is blocked because it is not whitelisted and the SSH login IP whitelist is enabled. </span><p><ul id="hss_01_0436__en-us_topic_0243005744_ul1181413136012"><li id="hss_01_0436__en-us_topic_0243005744_li2814113706">If your login IP address was not blocked for this reason, add the IP address to the SSH login IP address whitelist.</li><li id="hss_01_0436__en-us_topic_0243005744_li1949331115116">If your login IP address was not blocked for this reason, contact technical support.</li></ul>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0426.html">Security Configurations</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0437.html b/docs/hss/umn/hss_01_0437.html
new file mode 100644
index 00000000..43360010
--- /dev/null
+++ b/docs/hss/umn/hss_01_0437.html
@@ -0,0 +1,20 @@
+<a name="hss_01_0437"></a><a name="hss_01_0437"></a>
+
+<h1 class="topictitle1">How Do I Use 2FA? </h1>
+<div id="body8662426"><p id="hss_01_0437__en-us_topic_0170954158_p1670193712818">This FAQ shows you how to use <span class="keyword" id="hss_01_0437__en-us_topic_0170954158_keyword916413302231">2FA</span>.</p>
+<div class="section" id="hss_01_0437__en-us_topic_0170954158_section1442216149543"><h4 class="sectiontitle">Logging In and Passing 2FA Authentication</h4><ul id="hss_01_0437__en-us_topic_0170954158_ul432112213168"><li id="hss_01_0437__en-us_topic_0170954158_li2321722151613">Logging in to a Linux server<ol id="hss_01_0437__en-us_topic_0170954158_ol612494901618"><li id="hss_01_0437__en-us_topic_0170954158_li4124194911616">Use PuTTY or Xshell to log in to your server.<p id="hss_01_0437__en-us_topic_0170954158_p13135817161713"><a name="hss_01_0437__en-us_topic_0170954158_li4124194911616"></a><a name="en-us_topic_0170954158_li4124194911616"></a>Select <strong id="hss_01_0437__en-us_topic_0170954158_b2912171153111">Keyboard Interactive</strong> and enter the user identity information.</p>
+<ul id="hss_01_0437__en-us_topic_0170954158_ul91351917151711"><li id="hss_01_0437__en-us_topic_0170954158_li1913551751717">PuTTY<p id="hss_01_0437__en-us_topic_0170954158_p513511720175"><a name="hss_01_0437__en-us_topic_0170954158_li1913551751717"></a><a name="en-us_topic_0170954158_li1913551751717"></a>Set the authentication mode to <strong id="hss_01_0437__b926745615718">Keyboard Interactive</strong> and click <strong id="hss_01_0437__b17481183786">OK</strong>.</p>
+</li><li id="hss_01_0437__en-us_topic_0170954158_li813571711719">Xshell<p id="hss_01_0437__en-us_topic_0170954158_p213621716173"><a name="hss_01_0437__en-us_topic_0170954158_li813571711719"></a><a name="en-us_topic_0170954158_li813571711719"></a>In the <strong id="hss_01_0437__en-us_topic_0170954158_b1655512541567">New Session Properties</strong> dialog box, choose <span class="menucascade" id="hss_01_0437__en-us_topic_0170954158_menucascade61361517181711"><b><span class="uicontrol" id="hss_01_0437__en-us_topic_0170954158_uicontrol5136121751719">Connection &gt; Authentication &gt; Method</span></b></span>, choose <strong id="hss_01_0437__en-us_topic_0170954158_b1046203413920">Keyboard Interactive</strong> from the <strong id="hss_01_0437__en-us_topic_0170954158_b65491639153920">Method</strong> drop-down list, and click <strong id="hss_01_0437__en-us_topic_0170954158_b696985293916">OK</strong>.</p>
+</li></ul>
+</li><li id="hss_01_0437__en-us_topic_0170954158_li135664621715">Enter the account and password of the server.</li><li id="hss_01_0437__en-us_topic_0170954158_li1835618466172">Enter the 2FA verification code sent to your terminal.<div class="fignone" id="hss_01_0437__en-us_topic_0170954158_fig3356134610178"><span class="figcap"><b>Figure 1 </b>Entering a verification code</span><br><span><img id="hss_01_0437__en-us_topic_0170954158_image163566467173" src="en-us_image_0000001568637409.png"></span></div>
+</li></ol>
+</li><li id="hss_01_0437__en-us_topic_0170954158_li151485332162">Logging in to a Windows server<ol id="hss_01_0437__en-us_topic_0170954158_ol132442913183"><li id="hss_01_0437__en-us_topic_0170954158_li142442914188">Click <strong id="hss_01_0437__en-us_topic_0170954158_b958919198514">Start</strong>, enter <strong id="hss_01_0437__en-us_topic_0170954158_b489012718516">Remote Desktop Connection</strong> in the search box, and press <strong id="hss_01_0437__en-us_topic_0170954158_b256818331659">Enter</strong> to open the remote desktop connection.</li><li id="hss_01_0437__en-us_topic_0170954158_li201691642311">Enter the IP address of the host in the <strong id="hss_01_0437__en-us_topic_0170954158_b570815521459">Computer</strong> text box and click <strong id="hss_01_0437__en-us_topic_0170954158_b1595210561857">Connect</strong>.</li><li id="hss_01_0437__en-us_topic_0170954158_li12394426122317">Enter the reserved mobile number or email address to receive 2FA verification code.</li><li id="hss_01_0437__en-us_topic_0170954158_li1939114512321">Enter the verification code, server account name, and password on the login page, and click <span><img id="hss_01_0437__en-us_topic_0170954158_image1784125281014" src="en-us_image_0000001517637370.png"></span> to log in to the server.</li></ol>
+</li></ul>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0426.html">Security Configurations</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0439.html b/docs/hss/umn/hss_01_0439.html
new file mode 100644
index 00000000..e386ddc2
--- /dev/null
+++ b/docs/hss/umn/hss_01_0439.html
@@ -0,0 +1,26 @@
+<a name="hss_01_0439"></a><a name="hss_01_0439"></a>
+
+<h1 class="topictitle1">Why Can't I Receive a Verification Code After 2FA Is Enabled? </h1>
+<div id="body8662426"><ul id="hss_01_0439__en-us_topic_0200184741_ul6804165424212"><li id="hss_01_0439__en-us_topic_0200184741_li164311456482">The two-factor authentication function does not take effect immediately after being enabled.<p id="hss_01_0439__en-us_topic_0200184741_p174892571484"><a name="hss_01_0439__en-us_topic_0200184741_li164311456482"></a><a name="en-us_topic_0200184741_li164311456482"></a>Wait for 5 minutes and try again.</p>
+</li><li id="hss_01_0439__en-us_topic_0200184741_li3274142317233">To enable two-factor authentication, you need to disable the SELinux firewall.<p id="hss_01_0439__en-us_topic_0200184741_p0946623172419"><a name="hss_01_0439__en-us_topic_0200184741_li3274142317233"></a><a name="en-us_topic_0200184741_li3274142317233"></a><a href="hss_01_0472.html">Disable the SELinux firewall</a> and try again.</p>
+</li><li id="hss_01_0439__en-us_topic_0200184741_li104712312015">Linux servers require user passwords for login.<p id="hss_01_0439__en-us_topic_0200184741_p1191553115011"><a name="hss_01_0439__en-us_topic_0200184741_li104712312015"></a><a name="en-us_topic_0200184741_li104712312015"></a>To switch from the key login mode to password login mode, perform the following steps:</p>
+<ol id="hss_01_0439__ol8451526122912"><li id="hss_01_0439__li745162616292">Use the key to log in to the Linux ECS and set the password of user <strong id="hss_01_0439__b723154216815">root</strong>.<p id="hss_01_0439__p1612814752919"><b><span class="cmdname" id="hss_01_0439__cmdname25831019163011">sudo passwd root</span></b></p>
+<p id="hss_01_0439__p1010283053017">If the key file is lost or damaged, reset the password of user <strong id="hss_01_0439__b163317321898">root</strong>.</p>
+</li><li id="hss_01_0439__li818112575317">Modify the SSH configuration file on the ECS as user <strong id="hss_01_0439__b155011733999">root</strong>.<p id="hss_01_0439__p6558164473117"><b><span class="cmdname" id="hss_01_0439__cmdname42361214143217">su root</span></b></p>
+<p id="hss_01_0439__p75589446316"><b><span class="cmdname" id="hss_01_0439__cmdname1234721715320">vi /etc/ssh/sshd_config</span></b></p>
+<p id="hss_01_0439__p15558144123115">Modify the following settings:</p>
+<ul id="hss_01_0439__ul167503013213"><li id="hss_01_0439__li5675113083217">Change <strong id="hss_01_0439__b2979145994010">PasswordAuthentication no</strong> to <strong id="hss_01_0439__b497985918408">PasswordAuthentication yes</strong>.<p id="hss_01_0439__p20558244163114">Alternatively, delete the comment tag (#) before <strong id="hss_01_0439__b49881814412">PasswordAuthentication yes</strong>.</p>
+</li><li id="hss_01_0439__li542713883216">Change <strong id="hss_01_0439__b12620143164115">PermitRootLogin no</strong> to <strong id="hss_01_0439__b66206319410">PermitRootLogin yes</strong>.<p id="hss_01_0439__p195581044133114">Alternatively, delete the comment tag (#) before <strong id="hss_01_0439__b12187168419">PermitRootLogin yes</strong>.</p>
+</li></ul>
+</li><li id="hss_01_0439__li13124854338">Restart sshd for the modification to take effect.<p id="hss_01_0439__p17352712334"><a name="hss_01_0439__li13124854338"></a><a name="li13124854338"></a><b><span class="cmdname" id="hss_01_0439__cmdname11549146339">service sshd restart</span></b></p>
+</li><li id="hss_01_0439__li125341333133318">Restart the ECS. Then, you can log in to the ECS as user <strong id="hss_01_0439__b557466493947">root</strong> using the password.<div class="note" id="hss_01_0439__note12125352718"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0439__p3127311274">To prevent unauthorized users from using the key file to access the Linux ECS, delete the <strong id="hss_01_0439__b61546273947">/root/.ssh/authorized_keys</strong> file or clear the <strong id="hss_01_0439__b20846975333947">authorized_keys</strong> file.</p>
+</div></div>
+</li></ol>
+</li></ul>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0426.html">Security Configurations</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0440.html b/docs/hss/umn/hss_01_0440.html
new file mode 100644
index 00000000..2f44b15a
--- /dev/null
+++ b/docs/hss/umn/hss_01_0440.html
@@ -0,0 +1,26 @@
+<a name="hss_01_0440"></a><a name="hss_01_0440"></a>
+
+<h1 class="topictitle1">Why Does My Login Fail After I Enable 2FA? </h1>
+<div id="body8662426"><p id="hss_01_0440__en-us_topic_0226948204_p161771010152419">The login failed probably because file configurations or the login mode was incorrect.</p>
+<div class="section" id="hss_01_0440__en-us_topic_0226948204_section199452227536"><h4 class="sectiontitle">Correcting File Configurations</h4><p id="hss_01_0440__en-us_topic_0226948204_p14559525145319">Check whether the configuration file is correct.</p>
+</div>
+<p id="hss_01_0440__en-us_topic_0226948204_p5603152163712">Configuration file path: <strong id="hss_01_0440__en-us_topic_0226948204_b241654051110">/etc/ssh/sshd_config</strong></p>
+<p id="hss_01_0440__en-us_topic_0226948204_p6898738153919">Configuration items:</p>
+<p id="hss_01_0440__en-us_topic_0226948204_p17583175793914">PermitEmptyPasswords no</p>
+<p id="hss_01_0440__en-us_topic_0226948204_p127090119409">UsePAM yes</p>
+<p id="hss_01_0440__en-us_topic_0226948204_p361014015374">ChallengeResponseAuthentication yes</p>
+<div class="notice" id="hss_01_0440__en-us_topic_0226948204_note748444105714"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="hss_01_0440__en-us_topic_0226948204_p74810448575">If you use the <strong id="hss_01_0440__en-us_topic_0226948204_b54677951215">root</strong> account for login,the following configuration item is required:</p>
+<p id="hss_01_0440__en-us_topic_0226948204_p9441174855815">PermitRootLogin yes</p>
+</div></div>
+<div class="section" id="hss_01_0440__en-us_topic_0226948204_section75981782534"><h4 class="sectiontitle">Correcting the Login Mode</h4><p id="hss_01_0440__en-us_topic_0226948204_p118961310195312">If you attempted to log in in either of the following ways, your login would fail.</p>
+</div>
+<ul id="hss_01_0440__en-us_topic_0226948204_ul02493451606"><li id="hss_01_0440__en-us_topic_0226948204_li112494451009">Used CloudShell to log in to an ECS.</li><li id="hss_01_0440__en-us_topic_0226948204_li1627015243511">Attempted to log in to a Linux server through a CBH instance.</li></ul>
+<p id="hss_01_0440__en-us_topic_0226948204_p1362293017012">Failure cause: 2FA is implemented through a built-in module, which cannot be displayed if you log in in the preceding ways. As a result, the login authentication fails.</p>
+<p id="hss_01_0440__en-us_topic_0226948204_p131591923111412">Solution: Perform login authentication by referring to <a href="hss_01_0437.html">How Do I Use 2FA?</a></p>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0426.html">Security Configurations</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0441.html b/docs/hss/umn/hss_01_0441.html
new file mode 100644
index 00000000..434cde20
--- /dev/null
+++ b/docs/hss/umn/hss_01_0441.html
@@ -0,0 +1,16 @@
+<a name="hss_01_0441"></a><a name="hss_01_0441"></a>
+
+<h1 class="topictitle1">How Do I Add a Mobile Phone Number or Email Address for Receiving 2FA Verification Notifications? </h1>
+<div id="body8662426"><p id="hss_01_0441__en-us_topic_0226948205_p184093597287">You can set your mobile phone number only if you have selected <strong id="hss_01_0441__en-us_topic_0226948205_b1828314345817">SMS/Email</strong> for <strong id="hss_01_0441__en-us_topic_0226948205_b2078618193814">Method</strong>. Set your mobile phone number in the SMN topic you choose.</p>
+<p id="hss_01_0441__en-us_topic_0226948205_p7788111310502">In the <strong id="hss_01_0441__en-us_topic_0226948205_b11922023111012">SMN Topic</strong> drop-down list, only the SMN topics with confirmed subscriptions are displayed.</p>
+<ul id="hss_01_0441__en-us_topic_0226948205_ul1445916235375"><li id="hss_01_0441__li17732131710563">You can click <strong id="hss_01_0441__b1748919219222">View</strong> to go to the SMN console and create a topic. Click <strong id="hss_01_0441__b1092401964616">Add Subscription</strong> and enter a mobile phone number or email address.</li><li id="hss_01_0441__li1210713395820">You can also add or modify the mobile phone number or email address under an existing topic.<ul id="hss_01_0441__ul58392070583"><li id="hss_01_0441__li252611585581">Adding a mobile phone number or email address<p id="hss_01_0441__p938983010592"><a name="hss_01_0441__li252611585581"></a><a name="li252611585581"></a>Click <strong id="hss_01_0441__b179621849105115">View Topics</strong>. Click <strong id="hss_01_0441__b1735182145218">Add Subscription</strong> and enter a mobile phone number or email address.</p>
+</li><li id="hss_01_0441__en-us_topic_0226948205_li17459523143711">Deleting a mobile phone number or email address<p id="hss_01_0441__p24612316218"><a name="hss_01_0441__en-us_topic_0226948205_li17459523143711"></a><a name="en-us_topic_0226948205_li17459523143711"></a>Click <strong id="hss_01_0441__b1265021335217">View Topics</strong>. Click a topic name to go to the details page. Click the <strong id="hss_01_0441__b1574725054010">Subscriptions</strong> tab and delete one or more target endpoints.</p>
+</li></ul>
+</li></ul>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0426.html">Security Configurations</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0459.html b/docs/hss/umn/hss_01_0459.html
new file mode 100644
index 00000000..c13af3e5
--- /dev/null
+++ b/docs/hss/umn/hss_01_0459.html
@@ -0,0 +1,222 @@
+<a name="hss_01_0459"></a><a name="hss_01_0459"></a>
+
+<h1 class="topictitle1">Managing Application Protection Policies</h1>
+<div id="body0000001485420949"><p id="hss_01_0459__p0487657174216">You can add, edit, and delete application protection policies, and select and configure detection rules for the policies.</p>
+<div class="section" id="hss_01_0459__section20810171313111"><h4 class="sectiontitle">Constraints</h4><ul id="hss_01_0459__hss_01_0389_ul18547741696"><li id="hss_01_0459__hss_01_0389_li17547140910">Currently, only Linux servers are supported.</li><li id="hss_01_0459__hss_01_0389_li85481641298">So far, only Java applications can be protected.</li><li id="hss_01_0459__hss_01_0389_li141759531623">The premium, WTP, and container editions support operations related to application protection.</li></ul>
+</div>
+<div class="section" id="hss_01_0459__section523412138464"><h4 class="sectiontitle">Adding a Protection Policy</h4><ol id="hss_01_0459__ol12710941172010"><li id="hss_01_0459__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0459__li830314169200"><span>Click <span><img id="hss_01_0459__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0459__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0459__hss_01_0571_b14857117404"><span id="hss_01_0459__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0459__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0459__li14713194116200"><span>Choose <span class="menucascade" id="hss_01_0459__menucascade15765459132016"><b><span class="uicontrol" id="hss_01_0459__uicontrol147641559132020">Prevention</span></b> &gt; <b><span class="uicontrol" id="hss_01_0459__uicontrol47641359182014">Application Protection</span></b></span> and click <span class="uicontrol" id="hss_01_0459__uicontrol2765125911206"><b>Protection Policies</b></span>. For details about the parameters, see <a href="#hss_01_0459__table18733134319493">Table 1</a>.</span><p><div class="note" id="hss_01_0459__note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0459__hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0459__fig675676104918"><span class="figcap"><b>Figure 1 </b>Viewing the protection policies</span><br><span><img id="hss_01_0459__image410905395619" src="en-us_image_0000001854004617.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0459__table18733134319493"></a><a name="table18733134319493"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0459__table18733134319493" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Protection policy parameters</caption><thead align="left"><tr id="hss_01_0459__row19734104312499"><th align="left" class="cellrowborder" valign="top" width="25.69%" id="mcps1.3.3.2.3.2.3.2.3.1.1"><p id="hss_01_0459__p373434320491">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="74.31%" id="mcps1.3.3.2.3.2.3.2.3.1.2"><p id="hss_01_0459__p373414311495">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0459__row373404317498"><td class="cellrowborder" valign="top" width="25.69%" headers="mcps1.3.3.2.3.2.3.2.3.1.1 "><p id="hss_01_0459__p47341043184920">Policy Name</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.31%" headers="mcps1.3.3.2.3.2.3.2.3.1.2 "><p id="hss_01_0459__p573464334911">Protection policy name</p>
+</td>
+</tr>
+<tr id="hss_01_0459__row18734943124917"><td class="cellrowborder" valign="top" width="25.69%" headers="mcps1.3.3.2.3.2.3.2.3.1.1 "><p id="hss_01_0459__p37341443174913">Detection Rule</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.31%" headers="mcps1.3.3.2.3.2.3.2.3.1.2 "><p id="hss_01_0459__p973434316497">Detection rules supported by a policy.</p>
+</td>
+</tr>
+<tr id="hss_01_0459__row5734194354915"><td class="cellrowborder" valign="top" width="25.69%" headers="mcps1.3.3.2.3.2.3.2.3.1.1 "><p id="hss_01_0459__p473434364914">Associated Servers</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.31%" headers="mcps1.3.3.2.3.2.3.2.3.1.2 "><p id="hss_01_0459__p173420430499">Number of servers bound to a policy.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0459__li14595419104710"><span>Click <span class="uicontrol" id="hss_01_0459__uicontrol17682655132017"><b>Add Policy</b></span>. In the dialog box that is displayed, enter the policy name, select the rules to be detected, and configure details about some detection rules. For details about the parameters, see <a href="#hss_01_0459__table926712416599">Table 2</a>.</span><p><div class="fignone" id="hss_01_0459__fig791284312255"><span class="figcap"><b>Figure 2 </b>Adding a protection policy</span><br><span><img id="hss_01_0459__image104102617589" src="en-us_image_0000001621154510.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0459__table926712416599"></a><a name="table926712416599"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0459__table926712416599" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Application protection policy parameters</caption><thead align="left"><tr id="hss_01_0459__row1826794105914"><th align="left" class="cellrowborder" valign="top" width="26.97%" id="mcps1.3.3.2.4.2.2.2.3.1.1"><p id="hss_01_0459__p1526774120596">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="73.03%" id="mcps1.3.3.2.4.2.2.2.3.1.2"><p id="hss_01_0459__p132681141195918">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0459__row868117224359"><td class="cellrowborder" valign="top" width="26.97%" headers="mcps1.3.3.2.4.2.2.2.3.1.1 "><p id="hss_01_0459__p568219226350">Policy Name</p>
+</td>
+<td class="cellrowborder" valign="top" width="73.03%" headers="mcps1.3.3.2.4.2.2.2.3.1.2 "><p id="hss_01_0459__p568212215350">User-defined policy name</p>
+</td>
+</tr>
+<tr id="hss_01_0459__row72681841115919"><td class="cellrowborder" valign="top" width="26.97%" headers="mcps1.3.3.2.4.2.2.2.3.1.1 "><p id="hss_01_0459__p15268194155911">Enabled</p>
+</td>
+<td class="cellrowborder" valign="top" width="73.03%" headers="mcps1.3.3.2.4.2.2.2.3.1.2 "><p id="hss_01_0459__p726894135913">Whether to enable a detection rule for the current policy. You can select detection rules to enable them as required.</p>
+</td>
+</tr>
+<tr id="hss_01_0459__row1726804111593"><td class="cellrowborder" valign="top" width="26.97%" headers="mcps1.3.3.2.4.2.2.2.3.1.1 "><p id="hss_01_0459__p5268741135919">Detection Rule ID</p>
+</td>
+<td class="cellrowborder" valign="top" width="73.03%" headers="mcps1.3.3.2.4.2.2.2.3.1.2 "><p id="hss_01_0459__p162681841135915">ID of a detection rule</p>
+</td>
+</tr>
+<tr id="hss_01_0459__row16268164112599"><td class="cellrowborder" valign="top" width="26.97%" headers="mcps1.3.3.2.4.2.2.2.3.1.1 "><p id="hss_01_0459__p14268104115596">Action</p>
+</td>
+<td class="cellrowborder" valign="top" width="73.03%" headers="mcps1.3.3.2.4.2.2.2.3.1.2 "><p id="hss_01_0459__p6268741195916">Protection action of a detection rule.</p>
+<ul id="hss_01_0459__ul1462018852912"><li id="hss_01_0459__li1762019812912"><strong id="hss_01_0459__b1810723163013">Detect</strong>: Detects objects based on the target rule and reports alarms for detected risk events.</li><li id="hss_01_0459__li994017763112"><strong id="hss_01_0459__b999610816318">Detect and block</strong>: Detects objects based on the target rule, reports alarms for detected risk events, and directly blocks or intercepts detected risk items.<div class="notice" id="hss_01_0459__note3558192883211"><span class="noticetitle"> NOTICE: </span><div class="noticebody"><p id="hss_01_0459__p25591728153216">Blocking or interception may interrupt services. Exercise caution when enabling this function</p>
+</div></div>
+</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0459__row10268241175919"><td class="cellrowborder" valign="top" width="26.97%" headers="mcps1.3.3.2.4.2.2.2.3.1.1 "><p id="hss_01_0459__p152682041105920">Description</p>
+</td>
+<td class="cellrowborder" valign="top" width="73.03%" headers="mcps1.3.3.2.4.2.2.2.3.1.2 "><p id="hss_01_0459__p142689416593">Description about the detected object and behavior of the target protection policy.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0459__li11581621164712"><span>Click <strong id="hss_01_0459__b814155517347">Configure</strong> in the <strong id="hss_01_0459__b0411013113417">Operation</strong> column of a detection rule to modify the rule content. <a href="#hss_01_0459__table33641230134112">Table 3</a> describes the supported detection rules.</span><p>
+<div class="tablenoborder"><a name="hss_01_0459__table33641230134112"></a><a name="table33641230134112"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0459__table33641230134112" frame="border" border="1" rules="all"><caption><b>Table 3 </b>Detection rules that can be configured only</caption><thead align="left"><tr id="hss_01_0459__row1936453064114"><th align="left" class="cellrowborder" valign="top" width="19.221922192219225%" id="mcps1.3.3.2.5.2.1.2.4.1.1"><p id="hss_01_0459__p20498183414216">Rule</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="37.973797379737974%" id="mcps1.3.3.2.5.2.1.2.4.1.2"><p id="hss_01_0459__p6365183014418">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="42.8042804280428%" id="mcps1.3.3.2.5.2.1.2.4.1.3"><p id="hss_01_0459__p3365123034117">Example</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0459__row1736516309416"><td class="cellrowborder" valign="top" width="19.221922192219225%" headers="mcps1.3.3.2.5.2.1.2.4.1.1 "><p id="hss_01_0459__p336520306419">XXE</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.973797379737974%" headers="mcps1.3.3.2.5.2.1.2.4.1.2 "><p id="hss_01_0459__p0365930154112">User-defined XXE blacklist protocol</p>
+</td>
+<td class="cellrowborder" valign="top" width="42.8042804280428%" headers="mcps1.3.3.2.5.2.1.2.4.1.3 "><p id="hss_01_0459__p2036583011419">.xml;.dtd;</p>
+</td>
+</tr>
+<tr id="hss_01_0459__row836553017417"><td class="cellrowborder" valign="top" width="19.221922192219225%" headers="mcps1.3.3.2.5.2.1.2.4.1.1 "><p id="hss_01_0459__p43653300414">XSS</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.973797379737974%" headers="mcps1.3.3.2.5.2.1.2.4.1.2 "><p id="hss_01_0459__p12365143024110">User-defined XSS shielding rules</p>
+</td>
+<td class="cellrowborder" valign="top" width="42.8042804280428%" headers="mcps1.3.3.2.5.2.1.2.4.1.3 "><p id="hss_01_0459__p036513017416">xml;doctype;xmlns;import;entity</p>
+</td>
+</tr>
+<tr id="hss_01_0459__row1236593014114"><td class="cellrowborder" valign="top" width="19.221922192219225%" headers="mcps1.3.3.2.5.2.1.2.4.1.1 "><p id="hss_01_0459__p536514309413">WebShellUpload</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.973797379737974%" headers="mcps1.3.3.2.5.2.1.2.4.1.2 "><p id="hss_01_0459__p1136533004113">User-defined suffix of files in the blacklist.</p>
+</td>
+<td class="cellrowborder" valign="top" width="42.8042804280428%" headers="mcps1.3.3.2.5.2.1.2.4.1.3 "><p id="hss_01_0459__p123665304414">.jspx;.jsp;.jar;.phtml;.asp;.php;.ascx;.ashx;.cer</p>
+</td>
+</tr>
+<tr id="hss_01_0459__row736643019413"><td class="cellrowborder" valign="top" width="19.221922192219225%" headers="mcps1.3.3.2.5.2.1.2.4.1.1 "><p id="hss_01_0459__p936619304417">FileDirAccess</p>
+</td>
+<td class="cellrowborder" valign="top" width="37.973797379737974%" headers="mcps1.3.3.2.5.2.1.2.4.1.2 "><p id="hss_01_0459__p11366133018419">User-defined path of files in the blacklist.</p>
+</td>
+<td class="cellrowborder" valign="top" width="42.8042804280428%" headers="mcps1.3.3.2.5.2.1.2.4.1.3 "><p id="hss_01_0459__p11366930134116">/etc/passwd;/etc/shadow;/etc/gshadow;</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0459__li201981022194719"><span>Confirm the configured policy and selected detection rules, and click <strong id="hss_01_0459__b152511052102214">OK</strong>. You can check whether the rule is added on the <strong id="hss_01_0459__b460611282317">Protection Policy</strong> tab page.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0459__section944811584615"><h4 class="sectiontitle">Editing a Protection Policy</h4><ol id="hss_01_0459__ol1160128155318"><li id="hss_01_0459__li1554152661520"><span>Log in to the management console and go to the <span id="hss_01_0459__text10817798486196">HSS</span> page.</span></li><li id="hss_01_0459__li129066144531"><span>Choose <span class="menucascade" id="hss_01_0459__hss_01_0459_menucascade15765459132016"><b><span class="uicontrol" id="hss_01_0459__hss_01_0459_uicontrol147641559132020">Prevention</span></b> &gt; <b><span class="uicontrol" id="hss_01_0459__hss_01_0459_uicontrol47641359182014">Application Protection</span></b></span> and click <span class="uicontrol" id="hss_01_0459__hss_01_0459_uicontrol2765125911206"><b>Protection Policies</b></span>. For details about the parameters, see <a href="#hss_01_0459__hss_01_0459_table18733134319493">Table 4</a>.</span><p><div class="note" id="hss_01_0459__hss_01_0459_note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0459__hss_01_0459_hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0459__hss_01_0459_fig675676104918"><span class="figcap"><b>Figure 3 </b>Viewing the protection policies</span><br><span><img id="hss_01_0459__hss_01_0459_image410905395619" src="en-us_image_0000001854004617.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0459__hss_01_0459_table18733134319493"></a><a name="hss_01_0459_table18733134319493"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0459__hss_01_0459_table18733134319493" frame="border" border="1" rules="all"><caption><b>Table 4 </b>Protection policy parameters</caption><thead align="left"><tr id="hss_01_0459__hss_01_0459_row19734104312499"><th align="left" class="cellrowborder" valign="top" width="25.69%" id="mcps1.3.4.2.2.2.3.2.3.1.1"><p id="hss_01_0459__hss_01_0459_p373434320491">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="74.31%" id="mcps1.3.4.2.2.2.3.2.3.1.2"><p id="hss_01_0459__hss_01_0459_p373414311495">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0459__hss_01_0459_row373404317498"><td class="cellrowborder" valign="top" width="25.69%" headers="mcps1.3.4.2.2.2.3.2.3.1.1 "><p id="hss_01_0459__hss_01_0459_p47341043184920">Policy Name</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.31%" headers="mcps1.3.4.2.2.2.3.2.3.1.2 "><p id="hss_01_0459__hss_01_0459_p573464334911">Protection policy name</p>
+</td>
+</tr>
+<tr id="hss_01_0459__hss_01_0459_row18734943124917"><td class="cellrowborder" valign="top" width="25.69%" headers="mcps1.3.4.2.2.2.3.2.3.1.1 "><p id="hss_01_0459__hss_01_0459_p37341443174913">Detection Rule</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.31%" headers="mcps1.3.4.2.2.2.3.2.3.1.2 "><p id="hss_01_0459__hss_01_0459_p973434316497">Detection rules supported by a policy.</p>
+</td>
+</tr>
+<tr id="hss_01_0459__hss_01_0459_row5734194354915"><td class="cellrowborder" valign="top" width="25.69%" headers="mcps1.3.4.2.2.2.3.2.3.1.1 "><p id="hss_01_0459__hss_01_0459_p473434364914">Associated Servers</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.31%" headers="mcps1.3.4.2.2.2.3.2.3.1.2 "><p id="hss_01_0459__hss_01_0459_p173420430499">Number of servers bound to a policy.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0459__li1355441817533"><span>Click <strong id="hss_01_0459__b216422417913">Edit</strong> in the <strong id="hss_01_0459__b481191121119">Operation</strong> column of a policy to configure the policy name, supported detection rules, and rule content.</span><p>
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0459__table63759350596" frame="border" border="1" rules="all"><caption><b>Table 5 </b>Application protection policy parameters</caption><thead align="left"><tr id="hss_01_0459__en-us_topic_0000001485420949_row1826794105914"><th align="left" class="cellrowborder" valign="top" width="26.97%" id="mcps1.3.4.2.3.2.1.2.3.1.1"><p id="hss_01_0459__en-us_topic_0000001485420949_p1526774120596">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="73.03%" id="mcps1.3.4.2.3.2.1.2.3.1.2"><p id="hss_01_0459__en-us_topic_0000001485420949_p132681141195918">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0459__en-us_topic_0000001485420949_row868117224359"><td class="cellrowborder" valign="top" width="26.97%" headers="mcps1.3.4.2.3.2.1.2.3.1.1 "><p id="hss_01_0459__en-us_topic_0000001485420949_p568219226350">Policy Name</p>
+</td>
+<td class="cellrowborder" valign="top" width="73.03%" headers="mcps1.3.4.2.3.2.1.2.3.1.2 "><p id="hss_01_0459__en-us_topic_0000001485420949_p568212215350">User-defined policy name</p>
+</td>
+</tr>
+<tr id="hss_01_0459__en-us_topic_0000001485420949_row72681841115919"><td class="cellrowborder" valign="top" width="26.97%" headers="mcps1.3.4.2.3.2.1.2.3.1.1 "><p id="hss_01_0459__en-us_topic_0000001485420949_p15268194155911">Enabled</p>
+</td>
+<td class="cellrowborder" valign="top" width="73.03%" headers="mcps1.3.4.2.3.2.1.2.3.1.2 "><p id="hss_01_0459__en-us_topic_0000001485420949_p726894135913">Whether to enable a detection rule for the current policy. You can select detection rules to enable them as required.</p>
+</td>
+</tr>
+<tr id="hss_01_0459__en-us_topic_0000001485420949_row1726804111593"><td class="cellrowborder" valign="top" width="26.97%" headers="mcps1.3.4.2.3.2.1.2.3.1.1 "><p id="hss_01_0459__en-us_topic_0000001485420949_p5268741135919">Detection Rule ID</p>
+</td>
+<td class="cellrowborder" valign="top" width="73.03%" headers="mcps1.3.4.2.3.2.1.2.3.1.2 "><p id="hss_01_0459__en-us_topic_0000001485420949_p162681841135915">ID of a detection rule</p>
+</td>
+</tr>
+<tr id="hss_01_0459__en-us_topic_0000001485420949_row16268164112599"><td class="cellrowborder" valign="top" width="26.97%" headers="mcps1.3.4.2.3.2.1.2.3.1.1 "><p id="hss_01_0459__en-us_topic_0000001485420949_p14268104115596">Action</p>
+</td>
+<td class="cellrowborder" valign="top" width="73.03%" headers="mcps1.3.4.2.3.2.1.2.3.1.2 "><p id="hss_01_0459__en-us_topic_0000001485420949_p6268741195916">Protection action of a detection rule.</p>
+<ul id="hss_01_0459__en-us_topic_0000001485420949_ul1462018852912"><li id="hss_01_0459__en-us_topic_0000001485420949_li1762019812912"><strong id="hss_01_0459__b1489687655">Detect</strong>: Detects objects based on the target rule and reports alarms for detected risk events.</li><li id="hss_01_0459__en-us_topic_0000001485420949_li994017763112"><strong id="hss_01_0459__b1258335783">Detect and block</strong>: Detects objects based on the target rule, reports alarms for detected risk events, and directly blocks or intercepts detected risk items.<div class="notice" id="hss_01_0459__en-us_topic_0000001485420949_note3558192883211"><span class="noticetitle"> NOTICE: </span><div class="noticebody"><p id="hss_01_0459__en-us_topic_0000001485420949_p25591728153216">Blocking or interception may interrupt services. Exercise caution when enabling this function</p>
+</div></div>
+</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0459__en-us_topic_0000001485420949_row10268241175919"><td class="cellrowborder" valign="top" width="26.97%" headers="mcps1.3.4.2.3.2.1.2.3.1.1 "><p id="hss_01_0459__en-us_topic_0000001485420949_p152682041105920">Description</p>
+</td>
+<td class="cellrowborder" valign="top" width="73.03%" headers="mcps1.3.4.2.3.2.1.2.3.1.2 "><p id="hss_01_0459__en-us_topic_0000001485420949_p142689416593">Description about the detected object and behavior of the target protection policy.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0459__li131273197015"><span>Confirm the configured rule and selected detection items and click <span class="uicontrol" id="hss_01_0459__uicontrol2127719303"><b>OK</b></span>. You can check whether the target policy is modified on the <strong id="hss_01_0459__b1133151411155">Protection Policy</strong> tab page.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0459__section76211432164518"><h4 class="sectiontitle">Deleting a Policy</h4><ol id="hss_01_0459__ol15795152014118"><li id="hss_01_0459__li179713420418"><span>Log in to the management console and go to the <span id="hss_01_0459__text17943819816196">HSS</span> page.</span></li><li id="hss_01_0459__li116635852914"><span>Choose <span class="menucascade" id="hss_01_0459__hss_01_0459_menucascade15765459132016_1"><b><span class="uicontrol" id="hss_01_0459__hss_01_0459_uicontrol147641559132020_1">Prevention</span></b> &gt; <b><span class="uicontrol" id="hss_01_0459__hss_01_0459_uicontrol47641359182014_1">Application Protection</span></b></span> and click <span class="uicontrol" id="hss_01_0459__hss_01_0459_uicontrol2765125911206_1"><b>Protection Policies</b></span>. For details about the parameters, see <a href="#hss_01_0459__hss_01_0459_table18733134319493_1">Table 6</a>.</span><p><div class="note" id="hss_01_0459__hss_01_0459_note1169413414298_1"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0459__hss_01_0459_hss_01_0546_p158536161110_1">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0459__hss_01_0459_fig675676104918_1"><span class="figcap"><b>Figure 4 </b>Viewing the protection policies</span><br><span><img id="hss_01_0459__hss_01_0459_image410905395619_1" src="en-us_image_0000001854004617.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0459__hss_01_0459_table18733134319493_1"></a><a name="hss_01_0459_table18733134319493_1"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0459__hss_01_0459_table18733134319493_1" frame="border" border="1" rules="all"><caption><b>Table 6 </b>Protection policy parameters</caption><thead align="left"><tr id="hss_01_0459__hss_01_0459_row19734104312499_1"><th align="left" class="cellrowborder" valign="top" width="25.69%" id="mcps1.3.5.2.2.2.3.2.3.1.1"><p id="hss_01_0459__hss_01_0459_p373434320491_1">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="74.31%" id="mcps1.3.5.2.2.2.3.2.3.1.2"><p id="hss_01_0459__hss_01_0459_p373414311495_1">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0459__hss_01_0459_row373404317498_1"><td class="cellrowborder" valign="top" width="25.69%" headers="mcps1.3.5.2.2.2.3.2.3.1.1 "><p id="hss_01_0459__hss_01_0459_p47341043184920_1">Policy Name</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.31%" headers="mcps1.3.5.2.2.2.3.2.3.1.2 "><p id="hss_01_0459__hss_01_0459_p573464334911_1">Protection policy name</p>
+</td>
+</tr>
+<tr id="hss_01_0459__hss_01_0459_row18734943124917_1"><td class="cellrowborder" valign="top" width="25.69%" headers="mcps1.3.5.2.2.2.3.2.3.1.1 "><p id="hss_01_0459__hss_01_0459_p37341443174913_1">Detection Rule</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.31%" headers="mcps1.3.5.2.2.2.3.2.3.1.2 "><p id="hss_01_0459__hss_01_0459_p973434316497_1">Detection rules supported by a policy.</p>
+</td>
+</tr>
+<tr id="hss_01_0459__hss_01_0459_row5734194354915_1"><td class="cellrowborder" valign="top" width="25.69%" headers="mcps1.3.5.2.2.2.3.2.3.1.1 "><p id="hss_01_0459__hss_01_0459_p473434364914_1">Associated Servers</p>
+</td>
+<td class="cellrowborder" valign="top" width="74.31%" headers="mcps1.3.5.2.2.2.3.2.3.1.2 "><p id="hss_01_0459__hss_01_0459_p173420430499_1">Number of servers bound to a policy.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0459__li98001420616"><span>Click <strong id="hss_01_0459__b121631593714">Delete</strong> in the <strong id="hss_01_0459__b202001183378">Operation</strong> column of the target policy. In the dialog box that is displayed, confirm the policy information and click <strong id="hss_01_0459__b1838614033713">OK</strong>.</span><p><div class="notice" id="hss_01_0459__note98428416420"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="hss_01_0459__p11843542415">If the policy to be deleted is associated with a server, bind the server to another protection policy first. Otherwise, the <strong id="hss_01_0459__b13611517181916">Delete</strong> button of the target policy is hidden.</p>
+</div></div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0388.html">Application Protection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0462.html b/docs/hss/umn/hss_01_0462.html
new file mode 100644
index 00000000..4a188045
--- /dev/null
+++ b/docs/hss/umn/hss_01_0462.html
@@ -0,0 +1,88 @@
+<a name="hss_01_0462"></a><a name="hss_01_0462"></a>
+
+<h1 class="topictitle1">Upgrading the Agent</h1>
+<div id="body0000001438295436"><p id="hss_01_0462__p14347956161314"><span id="hss_01_0462__text2897154921710">HSS</span> keeps improving its service capabilities, including but not limited to new features and defect fixes. Please upgrade your agent to the latest version in a timely manner to enjoy better service.</p>
+<div class="section" id="hss_01_0462__section13862546171319"><h4 class="sectiontitle">Upgrading the Agent on a Single Server</h4><ol id="hss_01_0462__ol77955112819"><li id="hss_01_0462__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0462__li830314169200"><span>Click <span><img id="hss_01_0462__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0462__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0462__hss_01_0571_b14857117404"><span id="hss_01_0462__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0462__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0462__li11225184418269"><span>In the navigation pane, choose <strong id="hss_01_0462__hss_01_0374_b12151710164">Installation &amp; Configuration</strong>. Click the <strong id="hss_01_0462__hss_01_0374_b1022171718162">Agents</strong> tab.</span><p><div class="note" id="hss_01_0462__hss_01_0374_note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0462__hss_01_0374_hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0462__hss_01_0374_fig10324524113711"><span class="figcap"><b>Figure 1 </b>Viewing agent management</span><br><span><img id="hss_01_0462__hss_01_0374_image338913414108" src="en-us_image_0000001670681801.png"></span></div>
+</p></li><li id="hss_01_0462__li1995092691910"><span>Click <strong id="hss_01_0462__b1114443615515">Online</strong> to view the list of servers where the agent has been installed. For details, see <a href="#hss_01_0462__table1470654415335">Table 1</a>.</span><p>
+<div class="tablenoborder"><a name="hss_01_0462__table1470654415335"></a><a name="table1470654415335"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0462__table1470654415335" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Online agent parameters</caption><thead align="left"><tr id="hss_01_0462__row1270544410339"><th align="left" class="cellrowborder" valign="top" width="14.66%" id="mcps1.3.2.2.4.2.1.2.3.1.1"><p id="hss_01_0462__p1270513442334">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="85.34%" id="mcps1.3.2.2.4.2.1.2.3.1.2"><p id="hss_01_0462__p1170564473310">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0462__row18705124419330"><td class="cellrowborder" valign="top" width="14.66%" headers="mcps1.3.2.2.4.2.1.2.3.1.1 "><p id="hss_01_0462__p1870514483318">Server Name/ID</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.34%" headers="mcps1.3.2.2.4.2.1.2.3.1.2 "><p id="hss_01_0462__p1070511440330">Server name and ID</p>
+</td>
+</tr>
+<tr id="hss_01_0462__row170511449339"><td class="cellrowborder" valign="top" width="14.66%" headers="mcps1.3.2.2.4.2.1.2.3.1.1 "><p id="hss_01_0462__p18705124415337">IP Address</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.34%" headers="mcps1.3.2.2.4.2.1.2.3.1.2 "><p id="hss_01_0462__p18705104412333">EIP or private IP address of a server</p>
+</td>
+</tr>
+<tr id="hss_01_0462__row270674413318"><td class="cellrowborder" valign="top" width="14.66%" headers="mcps1.3.2.2.4.2.1.2.3.1.1 "><p id="hss_01_0462__p187051744123315">OS</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.34%" headers="mcps1.3.2.2.4.2.1.2.3.1.2 "><p id="hss_01_0462__p2705114443315">Server OS. Its value can be:</p>
+<ul id="hss_01_0462__ul14705114453316"><li id="hss_01_0462__li12705544123316">Linux</li><li id="hss_01_0462__li13705944123315">Windows</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0462__row6706944153318"><td class="cellrowborder" valign="top" width="14.66%" headers="mcps1.3.2.2.4.2.1.2.3.1.1 "><p id="hss_01_0462__p107061644133311">Agent status</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.34%" headers="mcps1.3.2.2.4.2.1.2.3.1.2 "><p id="hss_01_0462__p17706944193318">Agent status of a server. Its value can be:</p>
+<ul id="hss_01_0462__ul570618447334"><li id="hss_01_0462__li370614463315"><strong id="hss_01_0462__b3273152485714">Online</strong></li></ul>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0462__li1367818136619"><span>Click <strong id="hss_01_0462__b115578222131">Upgrade</strong> in the <strong id="hss_01_0462__b158871265138">Operation</strong> column of the target server. In the dialog box displayed, confirm the upgrade details and click <strong id="hss_01_0462__b363219170137">OK</strong>.</span></li><li id="hss_01_0462__li188611582169"><span>After the upgrade completes, check the agent version. If the latest version agent is used, the upgrade is successful.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0462__section14902141418184"><h4 class="sectiontitle">Upgrading the Agent on Multiple Servers</h4><ol id="hss_01_0462__ol129909045712"><li id="hss_01_0462__li1456175184620"><span>Log in to the management console.</span></li><li id="hss_01_0462__li851315169202"><span>In the navigation pane, choose <strong id="hss_01_0462__hss_01_0374_b12151710164_1">Installation &amp; Configuration</strong>. Click the <strong id="hss_01_0462__hss_01_0374_b1022171718162_1">Agents</strong> tab.</span><p><div class="note" id="hss_01_0462__hss_01_0374_note1169413414298_1"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0462__hss_01_0374_hss_01_0546_p158536161110_1">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0462__hss_01_0374_fig10324524113711_1"><span class="figcap"><b>Figure 2 </b>Viewing agent management</span><br><span><img id="hss_01_0462__hss_01_0374_image338913414108_1" src="en-us_image_0000001670681801.png"></span></div>
+</p></li><li id="hss_01_0462__li2298162772015"><span>Click <strong id="hss_01_0462__hss_01_0462_b1114443615515">Online</strong> to view the list of servers where the agent has been installed. For details, see <a href="#hss_01_0462__hss_01_0462_table1470654415335">Table 2</a>.</span><p>
+<div class="tablenoborder"><a name="hss_01_0462__hss_01_0462_table1470654415335"></a><a name="hss_01_0462_table1470654415335"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0462__hss_01_0462_table1470654415335" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Online agent parameters</caption><thead align="left"><tr id="hss_01_0462__hss_01_0462_row1270544410339"><th align="left" class="cellrowborder" valign="top" width="14.66%" id="mcps1.3.3.2.3.2.1.2.3.1.1"><p id="hss_01_0462__hss_01_0462_p1270513442334">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="85.34%" id="mcps1.3.3.2.3.2.1.2.3.1.2"><p id="hss_01_0462__hss_01_0462_p1170564473310">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0462__hss_01_0462_row18705124419330"><td class="cellrowborder" valign="top" width="14.66%" headers="mcps1.3.3.2.3.2.1.2.3.1.1 "><p id="hss_01_0462__hss_01_0462_p1870514483318">Server Name/ID</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.34%" headers="mcps1.3.3.2.3.2.1.2.3.1.2 "><p id="hss_01_0462__hss_01_0462_p1070511440330">Server name and ID</p>
+</td>
+</tr>
+<tr id="hss_01_0462__hss_01_0462_row170511449339"><td class="cellrowborder" valign="top" width="14.66%" headers="mcps1.3.3.2.3.2.1.2.3.1.1 "><p id="hss_01_0462__hss_01_0462_p18705124415337">IP Address</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.34%" headers="mcps1.3.3.2.3.2.1.2.3.1.2 "><p id="hss_01_0462__hss_01_0462_p18705104412333">EIP or private IP address of a server</p>
+</td>
+</tr>
+<tr id="hss_01_0462__hss_01_0462_row270674413318"><td class="cellrowborder" valign="top" width="14.66%" headers="mcps1.3.3.2.3.2.1.2.3.1.1 "><p id="hss_01_0462__hss_01_0462_p187051744123315">OS</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.34%" headers="mcps1.3.3.2.3.2.1.2.3.1.2 "><p id="hss_01_0462__hss_01_0462_p2705114443315">Server OS. Its value can be:</p>
+<ul id="hss_01_0462__hss_01_0462_ul14705114453316"><li id="hss_01_0462__hss_01_0462_li12705544123316">Linux</li><li id="hss_01_0462__hss_01_0462_li13705944123315">Windows</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0462__hss_01_0462_row6706944153318"><td class="cellrowborder" valign="top" width="14.66%" headers="mcps1.3.3.2.3.2.1.2.3.1.1 "><p id="hss_01_0462__hss_01_0462_p107061644133311">Agent status</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.34%" headers="mcps1.3.3.2.3.2.1.2.3.1.2 "><p id="hss_01_0462__hss_01_0462_p17706944193318">Agent status of a server. Its value can be:</p>
+<ul id="hss_01_0462__hss_01_0462_ul570618447334"><li id="hss_01_0462__hss_01_0462_li370614463315"><strong id="hss_01_0462__hss_01_0462_b3273152485714">Online</strong></li></ul>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0462__li6208714133"><span>Select the target servers whose agent you want to upgrade.</span><p><div class="note" id="hss_01_0462__note6815151710410"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0462__ul12678112015197"><li id="hss_01_0462__li867922061914">If you check the box before <strong id="hss_01_0462__b7414144091815">Server Name/ID</strong>, all servers on the page will be selected.</li><li id="hss_01_0462__li142245245191">If you check the box before <strong id="hss_01_0462__b755144601920">Select all</strong>, all servers you have will be selected.</li></ul>
+</div></div>
+<div class="fignone" id="hss_01_0462__fig12421230174618"><span class="figcap"><b>Figure 3 </b>Selecting all servers whose agent needs to be upgraded</span><br><span><img id="hss_01_0462__image19682515244" src="en-us_image_0000001622204562.png"></span></div>
+</p></li><li id="hss_01_0462__li29531623034"><span>Click <strong id="hss_01_0462__b1885315911105">Upgrade Agent</strong> above the server list. In the dialog box displayed, confirm server information and click <strong id="hss_01_0462__b14421639814">OK</strong>.</span></li><li id="hss_01_0462__li16182032102515"><span>After the upgrade completes, check the agent version. If the latest version agent is used, the upgrade is successful.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0317.html">Agent Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0463.html b/docs/hss/umn/hss_01_0463.html
new file mode 100644
index 00000000..2050b83e
--- /dev/null
+++ b/docs/hss/umn/hss_01_0463.html
@@ -0,0 +1,19 @@
+<a name="hss_01_0463"></a><a name="hss_01_0463"></a>
+
+<h1 class="topictitle1">Server Fingerprints</h1>
+<div id="body0000001488259697"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0477.html">Collecting Server Asset Fingerprints</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0383.html">Viewing Server Asset Fingerprints</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0384.html">Viewing the Operation History of Server Assets</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0294.html">Asset Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0464.html b/docs/hss/umn/hss_01_0464.html
new file mode 100644
index 00000000..3ff3b692
--- /dev/null
+++ b/docs/hss/umn/hss_01_0464.html
@@ -0,0 +1,17 @@
+<a name="hss_01_0464"></a><a name="hss_01_0464"></a>
+
+<h1 class="topictitle1">Container Fingerprints</h1>
+<div id="body0000001438140636"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0478.html">Collecting Container Asset Fingerprints</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0465.html">Viewing Container Asset Fingerprints</a></strong><br>
+</li>
+</ul>
+
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0294.html">Asset Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0465.html b/docs/hss/umn/hss_01_0465.html
new file mode 100644
index 00000000..303bd3eb
--- /dev/null
+++ b/docs/hss/umn/hss_01_0465.html
@@ -0,0 +1,123 @@
+<a name="hss_01_0465"></a><a name="hss_01_0465"></a>
+
+<h1 class="topictitle1">Viewing Container Asset Fingerprints</h1>
+<div id="body0000001488539153"><p id="hss_01_0465__p358612095218">HSS can collect container asset fingerprints, including container accounts, ports, and processes. You can centrally check container asset information and detect risky assets in a timely manner based on the container fingerprints. This section describes how to view collected container asset information.</p>
+<div class="section" id="hss_01_0465__section1854716547329"><h4 class="sectiontitle">Constraints</h4><ul id="hss_01_0465__ul9313141641320"><li id="hss_01_0465__li153131016131319">Only the HSS container edition supports the container fingerprint function.</li><li id="hss_01_0465__li1531315168132">Only Linux is supported.</li></ul>
+</div>
+<div class="section" id="hss_01_0465__section163371064235"><h4 class="sectiontitle">Viewing Asset Fingerprints Data of All Containers</h4><ol id="hss_01_0465__ol675711194218"><li id="hss_01_0465__li208951638165610"><span>Log in to the management console.</span></li><li id="hss_01_0465__li830314169200"><span>Click <span><img id="hss_01_0465__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0465__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0465__hss_01_0571_b14857117404"><span id="hss_01_0465__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0465__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0465__li1175731115421"><span>Choose <strong id="hss_01_0465__b6168944395">Asset Management</strong> &gt; <strong id="hss_01_0465__b1429214475916">Container Fingerprints</strong> &gt; <strong id="hss_01_0465__b57492481292">Asset Fingerprints</strong>. On the <strong id="hss_01_0465__b12245205315914">Asset Fingerprints</strong> page that is displayed, view the fingerprint data of all containers.</span><p><p id="hss_01_0465__p1385423413548">If you find risky assets after counting, remove them in a timely manner.  You are advised to handle the ports as follows:</p>
+<ul id="hss_01_0465__ul86171347185410"><li id="hss_01_0465__li64124105512">If HSS detects open high-risk ports or unused ports, check whether they are really used by your services. If they are not, disable them. For dangerous ports, you are advised to further check their program files, and delete or isolate their source files if necessary.</li><li id="hss_01_0465__li1061794785419">If a detected high-risk port is actually a normal port used for services, you can ignore it. Ignored alarms will neither be recorded as unsafe items and nor trigger alarms.</li></ul>
+<div class="note" id="hss_01_0465__note14798156731"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0465__p1035845834919">If your servers are managed by enterprise projects, you can select the target enterprise project to view or operate the asset and detection information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0465__en-us_topic_0000001517162882_fig06833531713"><span class="figcap"><b>Figure 1 </b>Viewing container assets</span><br><span><img id="hss_01_0465__en-us_topic_0000001517162882_image1796794193515" src="en-us_image_0000001853723125.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0465__table7132214184518"></a><a name="table7132214184518"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0465__table7132214184518" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Container asset fingerprints</caption><thead align="left"><tr id="hss_01_0465__hss_01_0478_row1413312147458"><th align="left" class="cellrowborder" valign="top" width="14.250000000000002%" id="mcps1.3.3.2.3.2.5.2.4.1.1"><p id="hss_01_0465__hss_01_0478_p151331214164514">Item</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="63.040000000000006%" id="mcps1.3.3.2.3.2.5.2.4.1.2"><p id="hss_01_0465__hss_01_0478_p813319142452">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="22.71%" id="mcps1.3.3.2.3.2.5.2.4.1.3"><p id="hss_01_0465__hss_01_0478_p189187121331">Automatic Detection Period</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0465__hss_01_0478_row17567102311510"><td class="cellrowborder" valign="top" width="14.250000000000002%" headers="mcps1.3.3.2.3.2.5.2.4.1.1 "><p id="hss_01_0465__hss_01_0478_p75687235520">Account Information</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.040000000000006%" headers="mcps1.3.3.2.3.2.5.2.4.1.2 "><p id="hss_01_0465__hss_01_0478_p13904155117158">Check and manage all accounts on your containers to keep them secure.</p>
+<p id="hss_01_0465__hss_01_0478_p20634204172113">Real-time account information includes the account name, number of servers, server name, IP address, login permission, root permission, user group, user directory, shell started by the user, container name, container ID, and the last scan time.</p>
+</td>
+<td class="cellrowborder" valign="top" width="22.71%" headers="mcps1.3.3.2.3.2.5.2.4.1.3 "><p id="hss_01_0465__hss_01_0478_p35687238516">Automatic check every hour</p>
+</td>
+</tr>
+<tr id="hss_01_0465__hss_01_0478_row20133101454517"><td class="cellrowborder" valign="top" width="14.250000000000002%" headers="mcps1.3.3.2.3.2.5.2.4.1.1 "><p id="hss_01_0465__hss_01_0478_p14133161412452">Open Ports</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.040000000000006%" headers="mcps1.3.3.2.3.2.5.2.4.1.2 "><p id="hss_01_0465__hss_01_0478_p103961731131615">Check open ports on your containers, including risky and unknown ports.</p>
+<p id="hss_01_0465__hss_01_0478_p413321464511">You can easily find high-risk ports on containers by checking local ports, protocol types, server names, IP addresses, statuses, PIDs, and program files.</p>
+<ul id="hss_01_0465__hss_01_0478_ul9550151815325"><li id="hss_01_0465__hss_01_0478_li16433194820">Manually disabling high-risk ports<p id="hss_01_0465__hss_01_0478_p4915744183214"><a name="hss_01_0465__hss_01_0478_li16433194820"></a><a name="hss_01_0478_li16433194820"></a>If dangerous or unnecessary ports are found enabled, check whether they are mandatory for services, and disable them if they are not. For dangerous ports, you are advised to further check their program files, and delete or isolate their source files if necessary.</p>
+<p id="hss_01_0465__hss_01_0478_p417844312326">It is recommended that you handle the ports with the <strong id="hss_01_0465__hss_01_0478_b811733139114047">Dangerous</strong> risk level promptly and handle the ports with the <strong id="hss_01_0465__hss_01_0478_b863126642114047">Unknown</strong> risk level based on the actual service conditions.</p>
+</li><li id="hss_01_0465__hss_01_0478_li11551818113219">Ignore risks: If a detected high-risk port is actually a normal port used for services, you can ignore it. The port will no longer be regarded risky or generate alarms.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="22.71%" headers="mcps1.3.3.2.3.2.5.2.4.1.3 "><p id="hss_01_0465__hss_01_0478_p1333294134111">Automated check every 30 seconds</p>
+</td>
+</tr>
+<tr id="hss_01_0465__hss_01_0478_row15133161416457"><td class="cellrowborder" valign="top" width="14.250000000000002%" headers="mcps1.3.3.2.3.2.5.2.4.1.1 "><p id="hss_01_0465__hss_01_0478_p17133214164516">Processes</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.040000000000006%" headers="mcps1.3.3.2.3.2.5.2.4.1.2 "><p id="hss_01_0465__hss_01_0478_p6725127131720">Check processes on your containers and find abnormal processes.</p>
+<p id="hss_01_0465__hss_01_0478_p535813084619">You can easily identify abnormal processes on your containers based process paths, server names, IP addresses, startup parameters, startup time, users who run the processes, file permissions, PIDs, and file hashes.</p>
+<p id="hss_01_0465__hss_01_0478_p20769122511338">If a suspicious process has not been detected in the last 30 days, its information will be automatically deleted from the process list.</p>
+</td>
+<td class="cellrowborder" valign="top" width="22.71%" headers="mcps1.3.3.2.3.2.5.2.4.1.3 "><p id="hss_01_0465__hss_01_0478_p5439101711414">Automatic check every hour</p>
+</td>
+</tr>
+<tr id="hss_01_0465__hss_01_0478_row1913316148456"><td class="cellrowborder" valign="top" width="14.250000000000002%" headers="mcps1.3.3.2.3.2.5.2.4.1.1 "><p id="hss_01_0465__hss_01_0478_p9133131418453">Installed Software</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.040000000000006%" headers="mcps1.3.3.2.3.2.5.2.4.1.2 "><p id="hss_01_0465__hss_01_0478_p11980173341412">Check and manage all software installed on your containers, and identify insecure versions.</p>
+<p id="hss_01_0465__hss_01_0478_p18141403483">You can check real-time and historical software information to determine whether the software is risky.</p>
+<ul id="hss_01_0465__hss_01_0478_ul79732312491"><li id="hss_01_0465__hss_01_0478_li86231677499">Real-time software information includes the software name, number of servers, server names, IP addresses, software versions, software update time, and the last scan time.</li><li id="hss_01_0465__hss_01_0478_li19513125084817">Historical software change records include the server names, IP addresses, change statuses, software versions, software update time, and the last scan time.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="22.71%" headers="mcps1.3.3.2.3.2.5.2.4.1.3 "><p id="hss_01_0465__hss_01_0478_p2035312561352">Automatic check every day</p>
+</td>
+</tr>
+<tr id="hss_01_0465__hss_01_0478_row1862919475519"><td class="cellrowborder" valign="top" width="14.250000000000002%" headers="mcps1.3.3.2.3.2.5.2.4.1.1 "><p id="hss_01_0465__hss_01_0478_p11411151355615">Auto-startup</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.040000000000006%" headers="mcps1.3.3.2.3.2.5.2.4.1.2 "><p id="hss_01_0465__hss_01_0478_p17353144415227">Check for auto-started items and quickly locate Trojans.</p>
+<p id="hss_01_0465__hss_01_0478_p21972241496">Real-time information about auto-started items includes their names, types (auto-started service, startup folder, pre-loaded dynamic library, Run registry key, or scheduled task), number of servers, server names, IP addresses, paths, file hashes, users, container name, container ID, and the last scan time.</p>
+</td>
+<td class="cellrowborder" valign="top" width="22.71%" headers="mcps1.3.3.2.3.2.5.2.4.1.3 "><p id="hss_01_0465__hss_01_0478_p743512299414">Automatic check every hour</p>
+</td>
+</tr>
+<tr id="hss_01_0465__hss_01_0478_row9626133513430"><td class="cellrowborder" valign="top" width="14.250000000000002%" headers="mcps1.3.3.2.3.2.5.2.4.1.1 "><p id="hss_01_0465__hss_01_0478_p2081123134913">Websites</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.040000000000006%" headers="mcps1.3.3.2.3.2.5.2.4.1.2 "><p id="hss_01_0465__hss_01_0478_p848116594301">You can check statistics about web directories and sites that can be accessed from the Internet. You can view the directories and permissions, access paths, external ports, certificate information (to be provided later), and key processes of websites.</p>
+</td>
+<td class="cellrowborder" valign="top" width="22.71%" headers="mcps1.3.3.2.3.2.5.2.4.1.3 "><p id="hss_01_0465__hss_01_0478_p111830285617">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0465__hss_01_0478_row5692448144313"><td class="cellrowborder" valign="top" width="14.250000000000002%" headers="mcps1.3.3.2.3.2.5.2.4.1.1 "><p id="hss_01_0465__hss_01_0478_p15621203410495">Web Framework</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.040000000000006%" headers="mcps1.3.3.2.3.2.5.2.4.1.2 "><p id="hss_01_0465__hss_01_0478_p54815599304">You can check statistics about frameworks used for web content presentation, including their versions, paths, and associated processes.</p>
+</td>
+<td class="cellrowborder" valign="top" width="22.71%" headers="mcps1.3.3.2.3.2.5.2.4.1.3 "><p id="hss_01_0465__hss_01_0478_p418316280615">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0465__hss_01_0478_row1183544384312"><td class="cellrowborder" valign="top" width="14.250000000000002%" headers="mcps1.3.3.2.3.2.5.2.4.1.1 "><p id="hss_01_0465__hss_01_0478_p24774574911">Middleware</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.040000000000006%" headers="mcps1.3.3.2.3.2.5.2.4.1.2 "><p id="hss_01_0465__hss_01_0478_p64811059193019">You can also check information about servers, versions, paths, and processes associated with middleware.</p>
+</td>
+<td class="cellrowborder" valign="top" width="22.71%" headers="mcps1.3.3.2.3.2.5.2.4.1.3 "><p id="hss_01_0465__hss_01_0478_p2183228667">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0465__hss_01_0478_row8863174243412"><td class="cellrowborder" valign="top" width="14.250000000000002%" headers="mcps1.3.3.2.3.2.5.2.4.1.1 "><p id="hss_01_0465__hss_01_0478_p18633427345">Web Services</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.040000000000006%" headers="mcps1.3.3.2.3.2.5.2.4.1.2 "><p id="hss_01_0465__hss_01_0478_p386354203417">You can check details about the software used for web content access, including versions, paths, configuration files, and associated processes of all software.</p>
+</td>
+<td class="cellrowborder" valign="top" width="22.71%" headers="mcps1.3.3.2.3.2.5.2.4.1.3 "><p id="hss_01_0465__hss_01_0478_p2048212427299">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0465__hss_01_0478_row1076748113414"><td class="cellrowborder" valign="top" width="14.250000000000002%" headers="mcps1.3.3.2.3.2.5.2.4.1.1 "><p id="hss_01_0465__hss_01_0478_p69428919354">Web Applications</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.040000000000006%" headers="mcps1.3.3.2.3.2.5.2.4.1.2 "><p id="hss_01_0465__hss_01_0478_p105593318264">You can check details about software used for web content push and release, including versions, paths, configuration files, and associated processes of all software.</p>
+</td>
+<td class="cellrowborder" valign="top" width="22.71%" headers="mcps1.3.3.2.3.2.5.2.4.1.3 "><p id="hss_01_0465__hss_01_0478_p15899175772913">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0465__hss_01_0478_row27861456143514"><td class="cellrowborder" valign="top" width="14.250000000000002%" headers="mcps1.3.3.2.3.2.5.2.4.1.1 "><p id="hss_01_0465__hss_01_0478_p1178785617352">Databases</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.040000000000006%" headers="mcps1.3.3.2.3.2.5.2.4.1.2 "><p id="hss_01_0465__hss_01_0478_p97872566358">You can check details about software that provides data storage, including versions, paths, configuration files, and associated processes of all software.</p>
+</td>
+<td class="cellrowborder" valign="top" width="22.71%" headers="mcps1.3.3.2.3.2.5.2.4.1.3 "><p id="hss_01_0465__hss_01_0478_p36265119308">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0465__section1964418154207"><h4 class="sectiontitle">Viewing Asset Fingerprint Data of a Single Container</h4><ol id="hss_01_0465__ol1681012216450"><li id="hss_01_0465__li145491912193120"><span>Log in to the management console.</span></li><li id="hss_01_0465__li17930125171720"><span>Click <span><img id="hss_01_0465__hss_01_0571_image9939115511526_1" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0465__hss_01_0571_b74857118407_1">Security</strong> &gt; <strong id="hss_01_0465__hss_01_0571_b14857117404_1"><span id="hss_01_0465__hss_01_0571_text6485319406_1">HSS</span></strong>. The <span id="hss_01_0465__hss_01_0571_text11485131194016_1">HSS</span> page is displayed.</span></li><li id="hss_01_0465__li157919415119"><span>In the navigation pane, choose <strong id="hss_01_0465__hss_01_0383_b1393134214333">Asset Management</strong> &gt; <strong id="hss_01_0465__hss_01_0383_b203931142103312">Servers &amp; Quota</strong>. Click the <strong id="hss_01_0465__hss_01_0383_b173931242183318">Servers</strong> tab.</span><p><div class="note" id="hss_01_0465__hss_01_0383_note5369150102314"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0465__hss_01_0383_hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+</p></li><li id="hss_01_0465__li774454632819"><span>Click the name of the target server. On the server details page that is displayed, click the <span class="menucascade" id="hss_01_0465__menucascade1925118526534"><b><span class="uicontrol" id="hss_01_0465__uicontrol172511952105320">Asset Fingerprints</span></b> &gt; <b><span class="uicontrol" id="hss_01_0465__uicontrol1225155210530">Containers</span></b></span> tab.</span></li><li id="hss_01_0465__li66861750105714"><span>Click a fingerprint in the fingerprint list to view its asset information. For more information, see <a href="#hss_01_0465__table7132214184518">Table 1</a>.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0464.html">Container Fingerprints</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0466.html b/docs/hss/umn/hss_01_0466.html
new file mode 100644
index 00000000..37390243
--- /dev/null
+++ b/docs/hss/umn/hss_01_0466.html
@@ -0,0 +1,30 @@
+<a name="hss_01_0466"></a><a name="hss_01_0466"></a>
+
+<h1 class="topictitle1">Adding a Privileged Process</h1>
+<div id="body0000001488891385"><p id="hss_01_0466__p5134203416102">If WTP is enabled, the content in the protected directories is read-only. To allow certain processes to modify files in the directories, add them to the privileged process list.</p>
+<p id="hss_01_0466__p179055311244">Only the modification made by privileged processes can take effect. Modifications made by other processes will be automatically rolled back.</p>
+<p id="hss_01_0466__p660218536619">Exercise caution when adding privileged processes. Do not let untrustworthy processes access your protected directories.</p>
+<div class="section" id="hss_01_0466__section112495541074"><h4 class="sectiontitle">Constraints</h4><ul id="hss_01_0466__ul11477131982810"><li id="hss_01_0466__li347781913287">Only the servers that are protected by the HSS WTP edition support the operations described in this section.</li><li id="hss_01_0466__li69071220132815">For Linux OSs, only x86 OSs with kernel 4.18 support this function.</li><li id="hss_01_0466__li1211718611394">The privileged process takes effect only for Agent 3.2.4 or later.</li><li id="hss_01_0466__li4399102995917">A maximum of 10 privileged processes can be added to each server.</li></ul>
+</div>
+<div class="section" id="hss_01_0466__section2256777914731"><h4 class="sectiontitle">Prerequisites</h4><p id="hss_01_0466__p5325138111210">The <strong id="hss_01_0466__b14431195183112">Protection Status</strong> of the server must be <strong id="hss_01_0466__b943219519317">Protected</strong>. To view the status, choose <span class="menucascade" id="hss_01_0466__menucascade19429205110317"><b><span class="uicontrol" id="hss_01_0466__uicontrol242705116315">Prevention</span></b> &gt; <b><span class="uicontrol" id="hss_01_0466__uicontrol1842819517315">Web Tamper Protection</span></b></span>. Click the <span class="uicontrol" id="hss_01_0466__uicontrol1843014511315"><b>Servers</b></span> tab.</p>
+</div>
+<div class="section" id="hss_01_0466__section156858415552"><h4 class="sectiontitle">Adding a Privileged Process</h4><ol id="hss_01_0466__ol182261714201"><li id="hss_01_0466__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0466__li830314169200"><span>Click <span><img id="hss_01_0466__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0466__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0466__hss_01_0571_b14857117404"><span id="hss_01_0466__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0466__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0466__li18357954454"><span>Choose <strong id="hss_01_0466__hss_01_0216_b114194892410">Prevention</strong> &gt; <strong id="hss_01_0466__hss_01_0216_b15114817245">Web Tamper Protection</strong>, click <strong id="hss_01_0466__hss_01_0216_b65124819244">Configure Protection</strong>.</span><p><div class="note" id="hss_01_0466__hss_01_0216_note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0466__hss_01_0216_hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0466__hss_01_0216_fig85317912311"><span class="figcap"><b>Figure 1 </b>Entering the page for protected directory settings</span><br><span><img id="hss_01_0466__hss_01_0216_image1139195181013" src="en-us_image_0000001854854673.png"></span></div>
+</p></li><li id="hss_01_0466__li162141510204"><span>Click <strong id="hss_01_0466__b65294364391">Privileged Process Settings</strong> and then <strong id="hss_01_0466__b1980315014405">Settings</strong>.</span><p><div class="fignone" id="hss_01_0466__fig18672164065819"><span class="figcap"><b>Figure 2 </b>Setting a privileged process</span><br><span><img id="hss_01_0466__image3871651913" src="en-us_image_0000001620847478.png"></span></div>
+</p></li><li id="hss_01_0466__li131416349436"><span>On the <strong id="hss_01_0466__b14421152333620">Privileged Process Settings</strong> page, click <strong id="hss_01_0466__b11422122314364">Add Privileged Process</strong>.</span><p><div class="fignone" id="hss_01_0466__fig3541347165811"><span class="figcap"><b>Figure 3 </b>Adding a Privileged Process</span><br><span><img id="hss_01_0466__image1035801110214" src="en-us_image_0000001621167210.png"></span></div>
+</p></li><li id="hss_01_0466__li5125457195615"><span>In the <strong id="hss_01_0466__b1731993034018">Add Privileged Process</strong> dialog box, enter the path of the privileged process.</span><p><p id="hss_01_0466__p1286573053217">The process file path must contain the process name and extension, for example, <strong id="hss_01_0466__b186828293173">C:/Path/Software.type</strong>. If the process has no extension, ensure the process name is unique.</p>
+</p></li><li id="hss_01_0466__li14591852201615"><span>Click <strong id="hss_01_0466__b8428194118403">OK</strong>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0466__section14102713161317"><h4 class="sectiontitle">Related Operations</h4><p id="hss_01_0466__p1771925317104"><strong id="hss_01_0466__b51634971115">Modifying or deleting existing privileged processes</strong></p>
+<p id="hss_01_0466__p6815152619104">In the <strong id="hss_01_0466__b544951591018">Operation</strong> column of a process file path, click <strong id="hss_01_0466__b204491315151020">Edit</strong> to modify the privileged processes or click <strong id="hss_01_0466__b14493158105">Delete</strong> to delete it if it is unnecessary.</p>
+<div class="note" id="hss_01_0466__note1293465221512"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0466__ul15967182832910"><li id="hss_01_0466__li16967328112919">After you edit or delete the process file path, the privileged process cannot modify the files in the protected directory. To avoid impact on services, exercise caution when performing these operations.</li><li id="hss_01_0466__li1496713285295">Unnecessary privileged processes should be deleted in a timely manner as they may be exploited by attackers.</li></ul>
+</div></div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0153.html">WTP</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0472.html b/docs/hss/umn/hss_01_0472.html
new file mode 100644
index 00000000..f3cf5d57
--- /dev/null
+++ b/docs/hss/umn/hss_01_0472.html
@@ -0,0 +1,34 @@
+<a name="hss_01_0472"></a><a name="hss_01_0472"></a>
+
+<h1 class="topictitle1">How Do I Disable the SELinux Firewall?</h1>
+<div id="body0000001538694045"><p id="hss_01_0472__p714417478588">Security-Enhanced Linux (SELinux) is a kernel module and security subsystem of Linux.</p>
+<p id="hss_01_0472__p33241603594">SELinux minimizes the resources that can be accessed by service processes in the system (the principle of least privilege).</p>
+<div class="section" id="hss_01_0472__section979217324109"><h4 class="sectiontitle">Closure Description</h4><ul id="hss_01_0472__ul825119621110"><li id="hss_01_0472__li16251763114">After the SELinux is disabled, services are not affected.</li><li id="hss_01_0472__li485212716112">SELinux can be disabled temporarily or permanently as required.</li></ul>
+</div>
+<div class="section" id="hss_01_0472__section172605512016"><h4 class="sectiontitle">Scenario</h4><p id="hss_01_0472__p511815581200">To use the two-factor authentication function of HSS, you need to permanently disable the SELinux firewall.</p>
+</div>
+<div class="section" id="hss_01_0472__section62081313902"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0472__ol138191637992"><li id="hss_01_0472__li481917371297"><span>Remotely log in to the destination server.</span><p><p id="hss_01_0472__p174817301698">You can log in to the ECS management console and click <strong id="hss_01_0472__b93341792446">Remote Login</strong> in the ECS list.</p>
+<p id="hss_01_0472__p152575351391">If your server has an EIP bound, you can also use a remote management tool, such as PuTTY or Xshell, to log in to the server and install the agent on the server as user <strong id="hss_01_0472__b76173717405">root</strong>.</p>
+
+</p></li><li id="hss_01_0472__li426518119148"><span>Run the shutdown command in the command window.</span><p><ul id="hss_01_0472__ul2014892610151"><li id="hss_01_0472__li6148152691515"><strong id="hss_01_0472__b1323221124419">Temporarily disable SELinux</strong><div class="p" id="hss_01_0472__p7161161818260">Run the following command in the CLI to temporarily disable SELinux:<pre class="screen" id="hss_01_0472__screen1596997202410">setenforce 0</pre>
+<div class="note" id="hss_01_0472__note2013342492616"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0472__p613317246264">After the system is restarted, the SELinux will be enabled again.</p>
+</div></div>
+</div>
+</li><li id="hss_01_0472__li1116052871511"><strong id="hss_01_0472__b24641759134310">Permanently disable SELinux</strong><ol type="a" id="hss_01_0472__ol14956656182720"><li id="hss_01_0472__li15956155613272">Run the following command in the directory window to edit the <strong id="hss_01_0472__b15830121274416">config</strong> file of SELinux:<pre class="screen" id="hss_01_0472__screen139409162918">vi /etc/selinux/config</pre>
+</li><li id="hss_01_0472__li1043374092811">Locate <strong id="hss_01_0472__b252334411440">SELINUX=enforcing</strong>, press <strong id="hss_01_0472__b125785194415">i</strong> to enter the editing mode, and change the parameter to <strong id="hss_01_0472__b97411355174415">SELINUX=disabled</strong>.<div class="fignone" id="hss_01_0472__fig15598158317"><span class="figcap"><b>Figure 1 </b>Editing the SELinux status</span><br><span><img id="hss_01_0472__image555921518315" src="en-us_image_0000001568637593.png"></span></div>
+</li><li id="hss_01_0472__li1192825917311">After the modification, press <strong id="hss_01_0472__b1511403644420">Esc</strong> and run the following command to save the file and exit:<pre class="screen" id="hss_01_0472__screen1129816424329">:wq</pre>
+</li></ol>
+</li></ul>
+</p></li><li id="hss_01_0472__li919210122142"><span>Run the permanent shutdown command, save the settings, and exit. Run the following command to restart the server immediately:</span><p><pre class="screen" id="hss_01_0472__screen659235720358">shutdown -r now</pre>
+<div class="note" id="hss_01_0472__note46351358560"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0472__p26351158660">The permanent shutdown command takes effect only after the server is restarted.</p>
+</div></div>
+</p></li><li id="hss_01_0472__li759710193511"><span>After the restart, run the following command to verify that SELinux is disabled:</span><p><pre class="screen" id="hss_01_0472__screen13433914153710">getenforce</pre>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0426.html">Security Configurations</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0477.html b/docs/hss/umn/hss_01_0477.html
new file mode 100644
index 00000000..f0676326
--- /dev/null
+++ b/docs/hss/umn/hss_01_0477.html
@@ -0,0 +1,155 @@
+<a name="hss_01_0477"></a><a name="hss_01_0477"></a>
+
+<h1 class="topictitle1">Collecting Server Asset Fingerprints</h1>
+<div id="body0000001709417004"><p id="hss_01_0477__p11531140783">HSS can collect server asset fingerprints, including information about ports, processes, web applications, web services, web frameworks, and auto-started items. You can centrally check server asset information and detect risky assets in a timely manner based on the server fingerprints. This section describes server asset fingerprints and their collection method.</p>
+<div class="section" id="hss_01_0477__section17313525133919"><h4 class="sectiontitle">Prerequisite</h4><p id="hss_01_0477__p38271677401">HSS enterprise edition, premium edition, WTP edition, or container edition has been enabled for the server.</p>
+</div>
+<div class="section" id="hss_01_0477__section43671767170"><h4 class="sectiontitle">Server Asset Fingerprint Collection Items</h4><p id="hss_01_0477__p1461431313222"><a href="#hss_01_0477__table7132214184518">Table 1</a> lists the collection items of server asset fingerprints. Each asset fingerprint is automatically collected periodically. If you are using HSS premium edition or later, you can customize the asset fingerprint collection period. For details, see <a href="hss_01_0044.html#hss_01_0044__section1219861342">Asset Discovery</a>.</p>
+
+<div class="tablenoborder"><a name="hss_01_0477__table7132214184518"></a><a name="table7132214184518"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0477__table7132214184518" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Asset fingerprints</caption><thead align="left"><tr id="hss_01_0477__row1413312147458"><th align="left" class="cellrowborder" valign="top" width="13.18%" id="mcps1.3.3.3.2.5.1.1"><p id="hss_01_0477__p151331214164514">Item</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="58.3%" id="mcps1.3.3.3.2.5.1.2"><p id="hss_01_0477__p813319142452">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="15.5%" id="mcps1.3.3.3.2.5.1.3"><p id="hss_01_0477__p132091338615">Supported OS</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="13.020000000000001%" id="mcps1.3.3.3.2.5.1.4"><p id="hss_01_0477__p189187121331">Automatic Detection Period</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0477__row1813318144450"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.3.2.5.1.1 "><p id="hss_01_0477__p71336147458">Account Information</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.3.2.5.1.2 "><p id="hss_01_0477__p13904155117158">Check and manage all accounts on your servers to keep them secure.</p>
+<p id="hss_01_0477__p20634204172113">You can check real-time and historical account information to find suspicious accounts.</p>
+<ul id="hss_01_0477__ul4396333172113"><li id="hss_01_0477__li15175144011016">Real-time account information includes the account name, number of servers, server name/IP address, login permission, root permission, user group, user directory, shell started by the user, and the last scan time.</li><li id="hss_01_0477__li10591134912017">Historical account change records include the server name/IP address, change status, login permission, root permission, user group, user directory, shell started by the user, and the last scan time.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.3.2.5.1.3 "><p id="hss_01_0477__p42091633863">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.3.2.5.1.4 "><p id="hss_01_0477__p1491811121232">Automatic check every hour</p>
+</td>
+</tr>
+<tr id="hss_01_0477__row20133101454517"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.3.2.5.1.1 "><p id="hss_01_0477__p14133161412452">Open Ports</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.3.2.5.1.2 "><p id="hss_01_0477__p103961731131615">Check open ports on your servers, including risky and unknown ports.</p>
+<p id="hss_01_0477__p413321464511">You can easily identify high-risk ports by checking local ports, protocol types, server names, IP addresses, statuses, PIDs, and program files.</p>
+<ul id="hss_01_0477__ul9550151815325"><li id="hss_01_0477__li16433194820">Manually disabling high-risk ports<p id="hss_01_0477__p4915744183214"><a name="hss_01_0477__li16433194820"></a><a name="li16433194820"></a>If dangerous or unnecessary ports are found enabled, check whether they are mandatory for services, and disable them if they are not. For dangerous ports, you are advised to further check their program files, and delete or isolate their source files if necessary.</p>
+<p id="hss_01_0477__p417844312326">It is recommended that you handle the ports at the <strong id="hss_01_0477__b1931918716113226">Dangerous</strong> risk level promptly and handle the ports at the <strong id="hss_01_0477__b1133394007113226">Unknown</strong> risk level based on the actual service conditions.</p>
+</li><li id="hss_01_0477__li11551818113219">Ignore risks: If a detected high-risk port is actually a normal port used for services, you can ignore it. The port will no longer be regarded risky or generate alarms.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.3.2.5.1.3 "><p id="hss_01_0477__p785823115253">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.3.2.5.1.4 "><p id="hss_01_0477__p6853151318363">Automated check every 30 seconds</p>
+</td>
+</tr>
+<tr id="hss_01_0477__row15133161416457"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.3.2.5.1.1 "><p id="hss_01_0477__p17133214164516">Processes</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.3.2.5.1.2 "><p id="hss_01_0477__p6725127131720">Check processes on your servers and find abnormal processes.</p>
+<p id="hss_01_0477__p535813084619">You can easily identify abnormal processes based process paths, server names, IP addresses, startup parameters, startup time, users who run the processes, file permissions, PIDs, and file hashes.</p>
+<p id="hss_01_0477__p20769122511338">If a suspicious process has not been detected in the last 30 days, its information will be automatically deleted from the process list.</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.3.2.5.1.3 "><p id="hss_01_0477__p1085863115255">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.3.2.5.1.4 "><p id="hss_01_0477__p1918191216312">Automatic check every hour</p>
+</td>
+</tr>
+<tr id="hss_01_0477__row1913316148456"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.3.2.5.1.1 "><p id="hss_01_0477__p9133131418453">Installed Software</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.3.2.5.1.2 "><p id="hss_01_0477__p11980173341412">Check and manage all software installed on your containers, and identify insecure versions.</p>
+<p id="hss_01_0477__p18141403483">You can check real-time and historical software information to determine whether the software is risky.</p>
+<ul id="hss_01_0477__ul79732312491"><li id="hss_01_0477__li86231677499">Real-time software information includes the software name, number of servers, server names, IP addresses, software versions, software update time, and the last scan time.</li><li id="hss_01_0477__li19513125084817">Historical software change records include the server names, IP addresses, change statuses, software versions, software update time, and the last scan time.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.3.2.5.1.3 "><p id="hss_01_0477__p16209183317614">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.3.2.5.1.4 "><p id="hss_01_0477__p9263121819216">Automatic check every day</p>
+</td>
+</tr>
+<tr id="hss_01_0477__row6408131345612"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.3.2.5.1.1 "><p id="hss_01_0477__p11411151355615">Auto-startup</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.3.2.5.1.2 "><p id="hss_01_0477__p17353144415227">Check for auto-startup items and quickly locate Trojans.</p>
+<ul id="hss_01_0477__ul1913173662319"><li id="hss_01_0477__li71318361235">Real-time information about auto-started items includes their names, types (auto-started service, startup folder, pre-loaded dynamic library, Run registry key, or scheduled task), number of servers, server names, IP addresses, paths, file hashes, users, and the last scan time.</li><li id="hss_01_0477__li18225819182812">The historical change records of auto-started items include server names, IP addresses, change statuses, paths, file hashes, users, and the last scan time.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.3.2.5.1.3 "><p id="hss_01_0477__p158581131182511">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.3.2.5.1.4 "><p id="hss_01_0477__p188541588487">Automatic check every hour</p>
+</td>
+</tr>
+<tr id="hss_01_0477__row9626133513430"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.3.2.5.1.1 "><p id="hss_01_0477__p2081123134913">Websites</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.3.2.5.1.2 "><p id="hss_01_0477__p848116594301">You can check statistics about web directories and sites that can be accessed from the Internet. You can view the directories and permissions, access paths, external ports, certificate information (to be provided later), and key processes of websites.</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.3.2.5.1.3 "><p id="hss_01_0477__p116921618113211">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.3.2.5.1.4 "><p id="hss_01_0477__p2048212427299">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0477__row5692448144313"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.3.2.5.1.1 "><p id="hss_01_0477__p15621203410495">Web Frameworks</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.3.2.5.1.2 "><p id="hss_01_0477__p54815599304">You can check statistics about frameworks used for web content presentation, including their versions, paths, and associated processes.</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.3.2.5.1.3 "><p id="hss_01_0477__p0693101810326">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.3.2.5.1.4 "><p id="hss_01_0477__p15899175772913">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0477__row1183544384312"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.3.2.5.1.1 "><p id="hss_01_0477__p24774574911">Middleware</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.3.2.5.1.2 "><p id="hss_01_0477__p64811059193019">You can check information about servers, versions, paths, and processes associated with middleware.</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.3.2.5.1.3 "><p id="hss_01_0477__p134211499303">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.3.2.5.1.4 "><p id="hss_01_0477__p166261615305">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0477__row77154064317"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.3.2.5.1.1 "><p id="hss_01_0477__p9481945164912">Kernel Module</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.3.2.5.1.2 "><p id="hss_01_0477__p7481345174914">You can check information about all the program module files running in kernels, including associated servers, version numbers, module descriptions, driver file paths, file permissions, and file hashes.</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.3.2.5.1.3 "><p id="hss_01_0477__p137305417717">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.3.2.5.1.4 "><p id="hss_01_0477__p36265119308">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0477__row8863174243412"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.3.2.5.1.1 "><p id="hss_01_0477__p18633427345">Web Services</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.3.2.5.1.2 "><p id="hss_01_0477__p386354203417">You can check details about the software used for web content access, including versions, paths, configuration files, and associated processes of all software.</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.3.2.5.1.3 "><p id="hss_01_0477__p22101233264">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.3.2.5.1.4 "><p id="hss_01_0477__p19863942183418">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0477__row1076748113414"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.3.2.5.1.1 "><p id="hss_01_0477__p69428919354">Web Applications</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.3.2.5.1.2 "><p id="hss_01_0477__p105593318264">You can check details about software used for web content push and release, including versions, paths, configuration files, and associated processes of all software.</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.3.2.5.1.3 "><p id="hss_01_0477__p921016333614">Linux and Windows (only Tomcat is supported)</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.3.2.5.1.4 "><p id="hss_01_0477__p78421571857">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0477__row27861456143514"><td class="cellrowborder" valign="top" width="13.18%" headers="mcps1.3.3.3.2.5.1.1 "><p id="hss_01_0477__p1178785617352">Databases</p>
+</td>
+<td class="cellrowborder" valign="top" width="58.3%" headers="mcps1.3.3.3.2.5.1.2 "><p id="hss_01_0477__p97872566358">You can check details about software that provides data storage, including versions, paths, configuration files, and associated processes of all software.</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.5%" headers="mcps1.3.3.3.2.5.1.3 "><p id="hss_01_0477__p8210133461">Linux and Windows (only MySQL is supported)</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.020000000000001%" headers="mcps1.3.3.3.2.5.1.4 "><p id="hss_01_0477__p67312011353">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+<div class="section" id="hss_01_0477__section2048820136143"><h4 class="sectiontitle">Collecting the Latest Asset Fingerprints of a Single Server</h4><p id="hss_01_0477__p15371331114917">If you want to obtain the latest data of assets such as web applications, web services, web frameworks, websites, middleware, kernel modules, and databases, in real time, you can manually collect fingerprint information.</p>
+<ol id="hss_01_0477__ol1681012216450"><li id="hss_01_0477__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0477__li830314169200"><span>Click <span><img id="hss_01_0477__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0477__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0477__hss_01_0571_b14857117404"><span id="hss_01_0477__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0477__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0477__li157919415119"><span>In the navigation pane, choose <strong id="hss_01_0477__hss_01_0383_b1393134214333">Asset Management</strong> &gt; <strong id="hss_01_0477__hss_01_0383_b203931142103312">Servers &amp; Quota</strong>. Click the <strong id="hss_01_0477__hss_01_0383_b173931242183318">Servers</strong> tab.</span><p><div class="note" id="hss_01_0477__hss_01_0383_note5369150102314"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0477__hss_01_0383_hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+</p></li><li id="hss_01_0477__li66861750105714"><span>Click the name of the target server. On the server details page that is displayed, choose <span class="menucascade" id="hss_01_0477__menucascade1988020909113226"><b><span class="uicontrol" id="hss_01_0477__uicontrol731283140113226">Asset Fingerprints</span></b> &gt; <b><span class="uicontrol" id="hss_01_0477__uicontrol1480974688113226">Servers</span></b></span>.</span></li><li id="hss_01_0477__li17997171718143"><span>Click a fingerprint in the fingerprint list, and click <strong id="hss_01_0477__b843723422113226">Discover Assets</strong> on the upper area of the list on the right.</span><p><div class="note" id="hss_01_0477__note45381688172"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0477__p3539482176">Currently, only the information about web applications, web services, web frameworks, websites, middleware, kernel modules, and databases can be manually collected and updated in real time. Information about other types is automatically collected and updated every day.</p>
+</div></div>
+</p></li><li id="hss_01_0477__li1304837178"><span>After the automatic execution is complete, the last scan time is updated and the latest server asset information is displayed.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0463.html">Server Fingerprints</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0478.html b/docs/hss/umn/hss_01_0478.html
new file mode 100644
index 00000000..e05986f6
--- /dev/null
+++ b/docs/hss/umn/hss_01_0478.html
@@ -0,0 +1,119 @@
+<a name="hss_01_0478"></a><a name="hss_01_0478"></a>
+
+<h1 class="topictitle1">Collecting Container Asset Fingerprints</h1>
+<div id="body0000001757256145"><p id="hss_01_0478__p358612095218">HSS can collect container asset fingerprints, including container accounts, ports, and processes. You can centrally check container asset information and detect risky assets in a timely manner based on the container fingerprints. This section describes how to collect container asset fingerprints.</p>
+<div class="section" id="hss_01_0478__section17313525133919"><h4 class="sectiontitle">Prerequisite</h4><p id="hss_01_0478__p38271677401">HSS container edition has been enabled for the server.</p>
+</div>
+<div class="section" id="hss_01_0478__section43671767170"><h4 class="sectiontitle">Container Asset Fingerprint Collection Items</h4><p id="hss_01_0478__p1461431313222"><a href="#hss_01_0478__table7132214184518">Table 1</a> lists the collection items of container asset fingerprints. The fingerprint items are automatically collected periodically. You can customize the asset fingerprint collection period. For details, see <a href="hss_01_0044.html#hss_01_0044__section1219861342">Asset Discovery</a>.</p>
+
+<div class="tablenoborder"><a name="hss_01_0478__table7132214184518"></a><a name="table7132214184518"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0478__table7132214184518" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Container asset fingerprints</caption><thead align="left"><tr id="hss_01_0478__row1413312147458"><th align="left" class="cellrowborder" valign="top" width="14.250000000000002%" id="mcps1.3.3.3.2.4.1.1"><p id="hss_01_0478__p151331214164514">Item</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="63.040000000000006%" id="mcps1.3.3.3.2.4.1.2"><p id="hss_01_0478__p813319142452">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="22.71%" id="mcps1.3.3.3.2.4.1.3"><p id="hss_01_0478__p189187121331">Automatic Detection Period</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0478__row17567102311510"><td class="cellrowborder" valign="top" width="14.250000000000002%" headers="mcps1.3.3.3.2.4.1.1 "><p id="hss_01_0478__p75687235520">Account Information</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.040000000000006%" headers="mcps1.3.3.3.2.4.1.2 "><p id="hss_01_0478__p13904155117158">Check and manage all accounts on your containers to keep them secure.</p>
+<p id="hss_01_0478__p20634204172113">Real-time account information includes the account name, number of servers, server name, IP address, login permission, root permission, user group, user directory, shell started by the user, container name, container ID, and the last scan time.</p>
+</td>
+<td class="cellrowborder" valign="top" width="22.71%" headers="mcps1.3.3.3.2.4.1.3 "><p id="hss_01_0478__p35687238516">Automatic check every hour</p>
+</td>
+</tr>
+<tr id="hss_01_0478__row20133101454517"><td class="cellrowborder" valign="top" width="14.250000000000002%" headers="mcps1.3.3.3.2.4.1.1 "><p id="hss_01_0478__p14133161412452">Open Ports</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.040000000000006%" headers="mcps1.3.3.3.2.4.1.2 "><p id="hss_01_0478__p103961731131615">Check open ports on your containers, including risky and unknown ports.</p>
+<p id="hss_01_0478__p413321464511">You can easily find high-risk ports on containers by checking local ports, protocol types, server names, IP addresses, statuses, PIDs, and program files.</p>
+<ul id="hss_01_0478__ul9550151815325"><li id="hss_01_0478__li16433194820">Manually disabling high-risk ports<p id="hss_01_0478__p4915744183214"><a name="hss_01_0478__li16433194820"></a><a name="li16433194820"></a>If dangerous or unnecessary ports are found enabled, check whether they are mandatory for services, and disable them if they are not. For dangerous ports, you are advised to further check their program files, and delete or isolate their source files if necessary.</p>
+<p id="hss_01_0478__p417844312326">It is recommended that you handle the ports with the <strong id="hss_01_0478__b811733139114047">Dangerous</strong> risk level promptly and handle the ports with the <strong id="hss_01_0478__b863126642114047">Unknown</strong> risk level based on the actual service conditions.</p>
+</li><li id="hss_01_0478__li11551818113219">Ignore risks: If a detected high-risk port is actually a normal port used for services, you can ignore it. The port will no longer be regarded risky or generate alarms.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="22.71%" headers="mcps1.3.3.3.2.4.1.3 "><p id="hss_01_0478__p1333294134111">Automated check every 30 seconds</p>
+</td>
+</tr>
+<tr id="hss_01_0478__row15133161416457"><td class="cellrowborder" valign="top" width="14.250000000000002%" headers="mcps1.3.3.3.2.4.1.1 "><p id="hss_01_0478__p17133214164516">Processes</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.040000000000006%" headers="mcps1.3.3.3.2.4.1.2 "><p id="hss_01_0478__p6725127131720">Check processes on your containers and find abnormal processes.</p>
+<p id="hss_01_0478__p535813084619">You can easily identify abnormal processes on your containers based process paths, server names, IP addresses, startup parameters, startup time, users who run the processes, file permissions, PIDs, and file hashes.</p>
+<p id="hss_01_0478__p20769122511338">If a suspicious process has not been detected in the last 30 days, its information will be automatically deleted from the process list.</p>
+</td>
+<td class="cellrowborder" valign="top" width="22.71%" headers="mcps1.3.3.3.2.4.1.3 "><p id="hss_01_0478__p5439101711414">Automatic check every hour</p>
+</td>
+</tr>
+<tr id="hss_01_0478__row1913316148456"><td class="cellrowborder" valign="top" width="14.250000000000002%" headers="mcps1.3.3.3.2.4.1.1 "><p id="hss_01_0478__p9133131418453">Installed Software</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.040000000000006%" headers="mcps1.3.3.3.2.4.1.2 "><p id="hss_01_0478__p11980173341412">Check and manage all software installed on your containers, and identify insecure versions.</p>
+<p id="hss_01_0478__p18141403483">You can check real-time and historical software information to determine whether the software is risky.</p>
+<ul id="hss_01_0478__ul79732312491"><li id="hss_01_0478__li86231677499">Real-time software information includes the software name, number of servers, server names, IP addresses, software versions, software update time, and the last scan time.</li><li id="hss_01_0478__li19513125084817">Historical software change records include the server names, IP addresses, change statuses, software versions, software update time, and the last scan time.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="22.71%" headers="mcps1.3.3.3.2.4.1.3 "><p id="hss_01_0478__p2035312561352">Automatic check every day</p>
+</td>
+</tr>
+<tr id="hss_01_0478__row1862919475519"><td class="cellrowborder" valign="top" width="14.250000000000002%" headers="mcps1.3.3.3.2.4.1.1 "><p id="hss_01_0478__p11411151355615">Auto-startup</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.040000000000006%" headers="mcps1.3.3.3.2.4.1.2 "><p id="hss_01_0478__p17353144415227">Check for auto-started items and quickly locate Trojans.</p>
+<p id="hss_01_0478__p21972241496">Real-time information about auto-started items includes their names, types (auto-started service, startup folder, pre-loaded dynamic library, Run registry key, or scheduled task), number of servers, server names, IP addresses, paths, file hashes, users, container name, container ID, and the last scan time.</p>
+</td>
+<td class="cellrowborder" valign="top" width="22.71%" headers="mcps1.3.3.3.2.4.1.3 "><p id="hss_01_0478__p743512299414">Automatic check every hour</p>
+</td>
+</tr>
+<tr id="hss_01_0478__row9626133513430"><td class="cellrowborder" valign="top" width="14.250000000000002%" headers="mcps1.3.3.3.2.4.1.1 "><p id="hss_01_0478__p2081123134913">Websites</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.040000000000006%" headers="mcps1.3.3.3.2.4.1.2 "><p id="hss_01_0478__p848116594301">You can check statistics about web directories and sites that can be accessed from the Internet. You can view the directories and permissions, access paths, external ports, certificate information (to be provided later), and key processes of websites.</p>
+</td>
+<td class="cellrowborder" valign="top" width="22.71%" headers="mcps1.3.3.3.2.4.1.3 "><p id="hss_01_0478__p111830285617">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0478__row5692448144313"><td class="cellrowborder" valign="top" width="14.250000000000002%" headers="mcps1.3.3.3.2.4.1.1 "><p id="hss_01_0478__p15621203410495">Web Framework</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.040000000000006%" headers="mcps1.3.3.3.2.4.1.2 "><p id="hss_01_0478__p54815599304">You can check statistics about frameworks used for web content presentation, including their versions, paths, and associated processes.</p>
+</td>
+<td class="cellrowborder" valign="top" width="22.71%" headers="mcps1.3.3.3.2.4.1.3 "><p id="hss_01_0478__p418316280615">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0478__row1183544384312"><td class="cellrowborder" valign="top" width="14.250000000000002%" headers="mcps1.3.3.3.2.4.1.1 "><p id="hss_01_0478__p24774574911">Middleware</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.040000000000006%" headers="mcps1.3.3.3.2.4.1.2 "><p id="hss_01_0478__p64811059193019">You can also check information about servers, versions, paths, and processes associated with middleware.</p>
+</td>
+<td class="cellrowborder" valign="top" width="22.71%" headers="mcps1.3.3.3.2.4.1.3 "><p id="hss_01_0478__p2183228667">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0478__row8863174243412"><td class="cellrowborder" valign="top" width="14.250000000000002%" headers="mcps1.3.3.3.2.4.1.1 "><p id="hss_01_0478__p18633427345">Web Services</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.040000000000006%" headers="mcps1.3.3.3.2.4.1.2 "><p id="hss_01_0478__p386354203417">You can check details about the software used for web content access, including versions, paths, configuration files, and associated processes of all software.</p>
+</td>
+<td class="cellrowborder" valign="top" width="22.71%" headers="mcps1.3.3.3.2.4.1.3 "><p id="hss_01_0478__p2048212427299">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0478__row1076748113414"><td class="cellrowborder" valign="top" width="14.250000000000002%" headers="mcps1.3.3.3.2.4.1.1 "><p id="hss_01_0478__p69428919354">Web Applications</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.040000000000006%" headers="mcps1.3.3.3.2.4.1.2 "><p id="hss_01_0478__p105593318264">You can check details about software used for web content push and release, including versions, paths, configuration files, and associated processes of all software.</p>
+</td>
+<td class="cellrowborder" valign="top" width="22.71%" headers="mcps1.3.3.3.2.4.1.3 "><p id="hss_01_0478__p15899175772913">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0478__row27861456143514"><td class="cellrowborder" valign="top" width="14.250000000000002%" headers="mcps1.3.3.3.2.4.1.1 "><p id="hss_01_0478__p1178785617352">Databases</p>
+</td>
+<td class="cellrowborder" valign="top" width="63.040000000000006%" headers="mcps1.3.3.3.2.4.1.2 "><p id="hss_01_0478__p97872566358">You can check details about software that provides data storage, including versions, paths, configuration files, and associated processes of all software.</p>
+</td>
+<td class="cellrowborder" valign="top" width="22.71%" headers="mcps1.3.3.3.2.4.1.3 "><p id="hss_01_0478__p36265119308">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+<div class="section" id="hss_01_0478__section7857162116138"><h4 class="sectiontitle">Collecting the Latest Asset Fingerprints of a Single Container</h4><p id="hss_01_0478__p099730201414">If you want to view the latest data of assets such as web applications, web services, web frameworks, websites, middleware, and databases in real time, you can manually collect the fingerprint information.</p>
+<ol id="hss_01_0478__ol1066853014133"><li id="hss_01_0478__li166681130111317"><span>Log in to the management console.</span></li><li id="hss_01_0478__li1566883031314"><span>Click <span><img id="hss_01_0478__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0478__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0478__hss_01_0571_b14857117404"><span id="hss_01_0478__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0478__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0478__li1367015309134"><span>In the navigation pane, choose <strong id="hss_01_0478__b533059084114047">Asset Management</strong> &gt; <strong id="hss_01_0478__b195335547114047">Servers &amp; Quota</strong>. Click the <strong id="hss_01_0478__b674856978114047">Servers</strong> tab.</span></li><li id="hss_01_0478__li86704304130"><span>Click the name of the target server. On the server details page that is displayed, choose <span class="menucascade" id="hss_01_0478__menucascade12677133511361"><b><span class="uicontrol" id="hss_01_0478__uicontrol1867773514365">Asset Fingerprints</span></b> &gt; <b><span class="uicontrol" id="hss_01_0478__uicontrol86771435163611">Containers</span></b></span>.</span></li><li id="hss_01_0478__li12670113015138"><span>Click a fingerprint in the fingerprint list, and click <strong id="hss_01_0478__b14500142914419">Discover Assets</strong> on the upper area of the list on the right.</span><p><div class="note" id="hss_01_0478__note45381688172"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0478__p3539482176">Currently, only <strong id="hss_01_0478__b915420974114047">Web Applications</strong>, <strong id="hss_01_0478__b852496440114047">Web Services</strong>, <strong id="hss_01_0478__b245347989114047">Web Frameworks</strong>, <strong id="hss_01_0478__b1305395578114047">Websites</strong>, <strong id="hss_01_0478__b2052109994114047">Middleware</strong>, and <strong id="hss_01_0478__b1219704840114047">Databases</strong> support real-time manual collection and update. Information about other types is automatically collected and updated every day.</p>
+</div></div>
+</p></li><li id="hss_01_0478__li96709308130"><span>After the automatic execution is complete, the last scan time is updated and the latest container asset information is displayed.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0464.html">Container Fingerprints</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0496.html b/docs/hss/umn/hss_01_0496.html
new file mode 100644
index 00000000..c8e0757f
--- /dev/null
+++ b/docs/hss/umn/hss_01_0496.html
@@ -0,0 +1,23 @@
+<a name="hss_01_0496"></a><a name="hss_01_0496"></a>
+
+<h1 class="topictitle1">Managing the System User Whitelist</h1>
+<div id="body0000001626993541"><p id="hss_01_0496__p5128155911915">HSS generates risky account alarms when non-root users are added to the root user group. You can add the trusted non-root users to the system user whitelist. HSS does not generate risky account alarms for users in the system user whitelist.</p>
+<div class="section" id="hss_01_0496__section867164615318"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0496__ol181252055195315"><li id="hss_01_0496__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0496__li830314169200"><span>Click <span><img id="hss_01_0496__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0496__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0496__hss_01_0571_b14857117404"><span id="hss_01_0496__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0496__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0496__li1386641195411"><span>In the navigation pane on the left, choose <span class="menucascade" id="hss_01_0496__menucascade7488426162812"><b><span class="uicontrol" id="hss_01_0496__uicontrol104881326152816">Detection</span></b> &gt; <b><span class="uicontrol" id="hss_01_0496__uicontrol9182829112812">Whitelists</span></b></span>. The <span class="wintitle" id="hss_01_0496__wintitle2440578213"><b>Whitelists</b></span> page is displayed.</span></li><li id="hss_01_0496__li964247113417"><span>(Optional) In the upper left corner of the <strong id="hss_01_0496__b123175266519">Whitelists</strong> page, select the enterprise project to which the server belongs or <strong id="hss_01_0496__b2481186834">All projects</strong> for <span class="parmname" id="hss_01_0496__parmname13947185114379"><b>Enterprise Project</b></span>.</span><p><p id="hss_01_0496__p19158133243814">If you have not enabled the enterprise project function, skip this step.</p>
+</p></li><li id="hss_01_0496__li174552553417"><span>Click the <span class="parmvalue" id="hss_01_0496__parmvalue16456654341"><b>System User Whitelist</b></span> tab and click <span class="uicontrol" id="hss_01_0496__uicontrol14153194819561"><b>Add</b></span>.</span><p><div class="fignone" id="hss_01_0496__fig127791961660"><span class="figcap"><b>Figure 1 </b>Configuring the system user whitelist</span><br><span><img id="hss_01_0496__image2487122202316" src="en-us_image_0000001853795117.png"></span></div>
+<p id="hss_01_0496__p17671161132310"></p>
+</p></li><li id="hss_01_0496__li532216519574"><span>In the <span class="wintitle" id="hss_01_0496__wintitle71945368574"><b>Add to System User Whitelist</b></span> dialog box, enter the server ID, system username, and remarks.</span></li><li id="hss_01_0496__li8851853597"><span>Click <span class="uicontrol" id="hss_01_0496__uicontrol68293845918"><b>OK</b></span>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0496__section073213181111"><h4 class="sectiontitle">Related Operations</h4><p id="hss_01_0496__p948413914244"><strong id="hss_01_0496__b685935715818">Modifying a System User Whitelist</strong></p>
+<ol id="hss_01_0496__ol17517161522716"><li id="hss_01_0496__li19507951113812"><span>(Optional) In the upper left corner of the <strong id="hss_01_0496__b1091612517312">Whitelists</strong> page, select the enterprise project to which the server belongs or <strong id="hss_01_0496__b1391662518318">All projects</strong> for <span class="parmname" id="hss_01_0496__parmname09171425036"><b>Enterprise Project</b></span>.</span><p><p id="hss_01_0496__p2507115113812">If you have not enabled the enterprise project function, skip this step.</p>
+</p></li><li id="hss_01_0496__li35172159273"><span>In the row of the target system user whitelist, click <span class="uicontrol" id="hss_01_0496__uicontrol10664021112612"><b>Modify</b></span> in the <strong id="hss_01_0496__b19777541145617">Operation</strong> column.</span></li><li id="hss_01_0496__li75175155273"><span>In the <span class="wintitle" id="hss_01_0496__wintitle1725644242920"><b>Modify System User Whitelist</b></span> dialog box, modify the information and click <span class="parmvalue" id="hss_01_0496__parmvalue179221855142920"><b>OK</b></span>.</span></li></ol>
+<p id="hss_01_0496__p17118256162415"><strong id="hss_01_0496__b5796163410259">Deleting a System User Whitelist</strong></p>
+<ol id="hss_01_0496__ol999662962712"><li id="hss_01_0496__li139961929142714"><span>In the row of the target system user whitelist, click <span class="uicontrol" id="hss_01_0496__uicontrol1699742912270"><b>Delete</b></span> in the <strong id="hss_01_0496__b10380203018595">Operation</strong> column.</span><p><p id="hss_01_0496__p4331523123016">You can also select multiple system user whitelists and click <span class="uicontrol" id="hss_01_0496__uicontrol20959162083011"><b>Delete</b></span> in the upper left corner of the system user whitelist list.</p>
+</p></li><li id="hss_01_0496__li599713293275"><span>In the dialog box displayed, click <strong id="hss_01_0496__b166534301800">OK</strong>.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0367.html">Whitelist Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0503.html b/docs/hss/umn/hss_01_0503.html
new file mode 100644
index 00000000..328113e3
--- /dev/null
+++ b/docs/hss/umn/hss_01_0503.html
@@ -0,0 +1,15 @@
+<a name="hss_01_0503"></a><a name="hss_01_0503"></a>
+
+<h1 class="topictitle1">Viewing Vulnerability Handling History</h1>
+<div id="body0000001630655845"><p id="hss_01_0503__p410270204213">For vulnerabilities that have been handled, you can refer to this section to view the vulnerability handling history (handler and handling time).</p>
+<div class="section" id="hss_01_0503__section3567201810498"><h4 class="sectiontitle">Viewing the Handling History of a Vulnerability</h4><ol id="hss_01_0503__ol1486113114499"><li id="hss_01_0503__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0503__li763119331164"><span>In the navigation pane, choose <strong id="hss_01_0503__b169277547593">Prediction</strong> &gt; <strong id="hss_01_0503__b1492810546599">Vulnerabilities</strong>.</span></li><li id="hss_01_0503__li1245611635019"><span>In the list of handled vulnerabilities, click a vulnerability name. The vulnerability details slide-out panel is displayed.</span><p><div class="fignone" id="hss_01_0503__fig7546132111598"><span class="figcap"><b>Figure 1 </b>Selecting Handled from the drop-down list</span><br><span><img id="hss_01_0503__image2083215574" src="en-us_image_0000001853899257.png"></span></div>
+</p></li><li id="hss_01_0503__li493334345216"><span>Click the <span class="wintitle" id="hss_01_0503__wintitle1196014155317"><b>Handling History</b></span> tab to view the handling history of the vulnerability.</span><p><div class="fignone" id="hss_01_0503__fig87752459619"><span class="figcap"><b>Figure 2 </b>Handling history</span><br><span><img id="hss_01_0503__image38341424125818" src="en-us_image_0000001807101012.png"></span></div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0140.html">Vulnerability Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0509.html b/docs/hss/umn/hss_01_0509.html
new file mode 100644
index 00000000..1ed98a86
--- /dev/null
+++ b/docs/hss/umn/hss_01_0509.html
@@ -0,0 +1,64 @@
+<a name="hss_01_0509"></a><a name="hss_01_0509"></a>
+
+<h1 class="topictitle1">Managing the Vulnerability Whitelist</h1>
+<div id="body0000001643643869"><p id="hss_01_0509__p15502174675115">If you evaluate that some vulnerabilities do not affect your services and do not want to view the vulnerabilities in the vulnerability list, you can whitelist the vulnerabilities. After they are whitelisted, the vulnerabilities will be ignored in the vulnerability list and no alarms will be reported. The vulnerabilities will not be scanned and the vulnerability information will not be displayed when the next vulnerability scan task is executed.</p>
+<p id="hss_01_0509__p6312131814532">This section describes how to whitelist a vulnerability, modify a vulnerability whitelist rule, and remove a vulnerability whitelist rule from the vulnerability whitelist.</p>
+<div class="section" id="hss_01_0509__section501514125717"><h4 class="sectiontitle">Whitelisting Vulnerabilities</h4><ol id="hss_01_0509__ol1594731910581"><li id="hss_01_0509__hss_01_0141_li3232183355914"><span>Log in to the management console.</span></li><li id="hss_01_0509__hss_01_0141_li18233123395914"><span>In the navigation pane, choose <strong id="hss_01_0509__hss_01_0141_b24641411184212">Prediction</strong> &gt; <strong id="hss_01_0509__hss_01_0141_b6465911124218">Vulnerabilities</strong>.</span><p><ul id="hss_01_0509__hss_01_0141_ul1515321719815"><li id="hss_01_0509__hss_01_0141_li91531117588">Whitelisting all servers that are affected by a vulnerability<p id="hss_01_0509__hss_01_0141_p17300919187"><a name="hss_01_0509__hss_01_0141_li91531117588"></a><a name="hss_01_0141_li91531117588"></a>HSS will ignore the vulnerability when scanning for vulnerabilities on all servers.</p>
+<ol type="a" id="hss_01_0509__hss_01_0141_ol6608171910911"><li id="hss_01_0509__hss_01_0141_li32771750791">In the <strong id="hss_01_0509__hss_01_0141_b3497144116018">Operation</strong> column of the row containing the target vulnerability, click <strong id="hss_01_0509__hss_01_0141_b24978418015">More</strong> and select <strong id="hss_01_0509__hss_01_0141_b64974411301">Add to Whitelist</strong>.<p id="hss_01_0509__hss_01_0141_p4526252592">You can also select multiple vulnerabilities and click <span class="uicontrol" id="hss_01_0509__hss_01_0141_uicontrol125332714113"><b>Add to Whitelist</b></span> above the vulnerability list.</p>
+<div class="fignone" id="hss_01_0509__hss_01_0141_fig20521185816496"><span class="figcap"><b>Figure 1 </b>Whitelisting all servers that are affected by a vulnerability</span><br><span><img id="hss_01_0509__hss_01_0141_image134611551124913" src="en-us_image_0000001853976253.png"></span></div>
+</li><li id="hss_01_0509__hss_01_0141_li69931231993">In the dialog box displayed, click <span class="uicontrol" id="hss_01_0509__hss_01_0141_uicontrol58111348255"><b>OK</b></span>.</li></ol>
+</li><li id="hss_01_0509__hss_01_0141_li16316016597">Whitelisting one or more servers that are affected by a vulnerability<p id="hss_01_0509__hss_01_0141_p266053651016"><a name="hss_01_0509__hss_01_0141_li16316016597"></a><a name="hss_01_0141_li16316016597"></a>HSS will ignore the vulnerability when scanning for vulnerabilities on these servers.</p>
+<ol type="a" id="hss_01_0509__hss_01_0141_ol44111251266"><li id="hss_01_0509__hss_01_0141_li12891355866">Click a target vulnerability name.</li><li id="hss_01_0509__hss_01_0141_li104128511464">On the slide-out panel displayed, click the <span class="parmvalue" id="hss_01_0509__hss_01_0141_parmvalue1858161619714"><b>Affected</b></span> tab.</li><li id="hss_01_0509__hss_01_0141_li1685416214717">In the <strong id="hss_01_0509__hss_01_0141_b13760104616014">Operation</strong> column of the row containing the target server, click <strong id="hss_01_0509__hss_01_0141_b276014611017">More</strong> and select <strong id="hss_01_0509__hss_01_0141_b27611246206">Add to Whitelist</strong>.<p id="hss_01_0509__hss_01_0141_p5734541191">You can also select multiple servers and click <span class="uicontrol" id="hss_01_0509__hss_01_0141_uicontrol166222304284"><b>Add to Whitelist</b></span> above the server list.</p>
+<div class="fignone" id="hss_01_0509__hss_01_0141_fig16825161204914"><span class="figcap"><b>Figure 2 </b>Whitelisting a single server that is affected by a vulnerability</span><br><span><img id="hss_01_0509__hss_01_0141_image474419556508" src="en-us_image_0000001853897085.png"></span></div>
+</li><li id="hss_01_0509__hss_01_0141_li169311445817">In the dialog box displayed, click <span class="uicontrol" id="hss_01_0509__hss_01_0141_uicontrol1383145812286"><b>OK</b></span>.</li></ol>
+</li><li id="hss_01_0509__hss_01_0141_li3854817102710">Whitelisting vulnerabilities using whitelist rules<ol type="a" id="hss_01_0509__hss_01_0141_ol43512195283"><li id="hss_01_0509__hss_01_0141_li113671919282">In the upper right corner of the <strong id="hss_01_0509__hss_01_0141_b16466951192911">Vulnerabilities</strong> page, click <span class="uicontrol" id="hss_01_0509__hss_01_0141_uicontrol18834145717173"><b>Configure Policy</b></span>. The <span class="uicontrol" id="hss_01_0509__hss_01_0141_uicontrol156153244325"><b>Configure Policy</b></span> slide-out panel is displayed.</li><li id="hss_01_0509__hss_01_0141_li236419122815">In the <strong id="hss_01_0509__hss_01_0141_b181091354338">Vulnerability Whitelist</strong> area, click <span class="uicontrol" id="hss_01_0509__hss_01_0141_uicontrol2515951181817"><b>Add Rule</b></span>.</li><li id="hss_01_0509__hss_01_0141_li636519122811">Configure a whitelist rule according to <a href="#hss_01_0509__hss_01_0141_table15714142382020">Table 1</a>.<div class="fignone" id="hss_01_0509__hss_01_0141_fig1673802719417"><span class="figcap"><b>Figure 3 </b>Configuring a whitelist rule</span><br><span><img id="hss_01_0509__hss_01_0141_image198851720185220" src="en-us_image_0000001807098924.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0509__hss_01_0141_table15714142382020"></a><a name="hss_01_0141_table15714142382020"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0509__hss_01_0141_table15714142382020" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Vulnerability whitelist rule parameters</caption><thead align="left"><tr id="hss_01_0509__hss_01_0141_row11715172362011"><th align="left" class="cellrowborder" valign="top" width="22.3%" id="mcps1.3.3.2.2.2.1.3.1.3.3.2.3.1.1"><p id="hss_01_0509__hss_01_0141_p2715112312016">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="77.7%" id="mcps1.3.3.2.2.2.1.3.1.3.3.2.3.1.2"><p id="hss_01_0509__hss_01_0141_p1671515232207">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0509__hss_01_0141_row107152234209"><td class="cellrowborder" valign="top" width="22.3%" headers="mcps1.3.3.2.2.2.1.3.1.3.3.2.3.1.1 "><p id="hss_01_0509__hss_01_0141_p1471552316207">Type</p>
+</td>
+<td class="cellrowborder" valign="top" width="77.7%" headers="mcps1.3.3.2.2.2.1.3.1.3.3.2.3.1.2 "><p id="hss_01_0509__hss_01_0141_p1165418296275">Select the type of vulnerabilities to be whitelisted. Possible values are as follows:</p>
+<ul id="hss_01_0509__hss_01_0141_ul589517137343"><li id="hss_01_0509__hss_01_0141_li1896131311347"><strong id="hss_01_0509__hss_01_0141_b166860820366">Linux Vulnerabilities</strong></li><li id="hss_01_0509__hss_01_0141_li58965134343"><strong id="hss_01_0509__hss_01_0141_b1774091883611">Windows Vulnerabilities</strong></li><li id="hss_01_0509__hss_01_0141_li198968136344"><strong id="hss_01_0509__hss_01_0141_b51531633113612">Web-CMS Vulnerabilities</strong></li><li id="hss_01_0509__hss_01_0141_li1389610133341"><strong id="hss_01_0509__hss_01_0141_b33151635133617">Application Vulnerabilities</strong></li></ul>
+</td>
+</tr>
+<tr id="hss_01_0509__hss_01_0141_row197151923102015"><td class="cellrowborder" valign="top" width="22.3%" headers="mcps1.3.3.2.2.2.1.3.1.3.3.2.3.1.1 "><p id="hss_01_0509__hss_01_0141_p1271519235206">Vulnerability</p>
+</td>
+<td class="cellrowborder" valign="top" width="77.7%" headers="mcps1.3.3.2.2.2.1.3.1.3.3.2.3.1.2 "><p id="hss_01_0509__hss_01_0141_p15715162332018">Select one or more vulnerabilities to be whitelisted.</p>
+</td>
+</tr>
+<tr id="hss_01_0509__hss_01_0141_row57158232208"><td class="cellrowborder" valign="top" width="22.3%" headers="mcps1.3.3.2.2.2.1.3.1.3.3.2.3.1.1 "><p id="hss_01_0509__hss_01_0141_p14716202382017">Rule Scope</p>
+</td>
+<td class="cellrowborder" valign="top" width="77.7%" headers="mcps1.3.3.2.2.2.1.3.1.3.3.2.3.1.2 "><p id="hss_01_0509__hss_01_0141_p176540294270">Select the servers affected by the vulnerabilities. Possible values are as follows:</p>
+<ul id="hss_01_0509__hss_01_0141_ul01021640142919"><li id="hss_01_0509__hss_01_0141_li1710219409299"><strong id="hss_01_0509__hss_01_0141_b1764674953911">All servers</strong><p id="hss_01_0509__hss_01_0141_p17222101910010">HSS will ignore the vulnerability when scanning for vulnerabilities on all servers.</p>
+</li><li id="hss_01_0509__hss_01_0141_li310214062919"><strong id="hss_01_0509__hss_01_0141_b15654108154018">Selected servers</strong><p id="hss_01_0509__hss_01_0141_p946371410234">Select one or more target servers. HSS will ignore the vulnerabilities when scanning for vulnerabilities on these servers.</p>
+<p id="hss_01_0509__hss_01_0141_p927115324332">You can search for a target server by server name, ID, EIP, or private IP address.</p>
+</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0509__hss_01_0141_row145219292369"><td class="cellrowborder" valign="top" width="22.3%" headers="mcps1.3.3.2.2.2.1.3.1.3.3.2.3.1.1 "><p id="hss_01_0509__hss_01_0141_p752219295368">Remarks (Optional)</p>
+</td>
+<td class="cellrowborder" valign="top" width="77.7%" headers="mcps1.3.3.2.2.2.1.3.1.3.3.2.3.1.2 "><p id="hss_01_0509__hss_01_0141_p3522142919367">Enter the remarks.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</li><li id="hss_01_0509__hss_01_0141_li14828131555110">Click <span class="uicontrol" id="hss_01_0509__hss_01_0141_uicontrol14839143411519"><b>OK</b></span>.</li></ol>
+</li></ul>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0509__section599810911219"><h4 class="sectiontitle">Editing a Vulnerability Whitelist</h4><ol id="hss_01_0509__ol192411180311"><li id="hss_01_0509__li526135512916"><span>Log in to the management console.</span></li></ol><ol start="2" id="hss_01_0509__ol1972210181133"><li id="hss_01_0509__li47222181311"><span>In the navigation pane, choose <strong id="hss_01_0509__b12209431174917">Prediction</strong> &gt; <strong id="hss_01_0509__b3210193117492">Vulnerabilities</strong>.</span></li><li id="hss_01_0509__li12956153714317"><span>In the upper right corner of the <strong id="hss_01_0509__b155053444918">Vulnerabilities</strong> page, click <span class="uicontrol" id="hss_01_0509__uicontrol145193414491"><b>Configure Policy</b></span>. The <span class="uicontrol" id="hss_01_0509__uicontrol20511234164911"><b>Configure Policy</b></span> slide-out panel is displayed.</span></li><li id="hss_01_0509__li485816431747"><span>In the row containing the desired vulnerability whitelist rule, click <strong id="hss_01_0509__b427554645118">Edit</strong> in the <strong id="hss_01_0509__b345211483516">Operation</strong> column.</span></li><li id="hss_01_0509__li1114245413618"><span>On the editing page, modify the information and click <span class="uicontrol" id="hss_01_0509__uicontrol1228417211678"><b>OK</b></span>.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0509__section2091116424715"><h4 class="sectiontitle">Removing a Vulnerability Whitelist Rule from the Vulnerability Whitelist</h4><ol id="hss_01_0509__ol167727521178"><li id="hss_01_0509__li1977235216712"><span>Log in to the management console.</span></li><li id="hss_01_0509__li10337131514813"><span>In the navigation pane, choose <strong id="hss_01_0509__hss_01_0509_b12209431174917">Prediction</strong> &gt; <strong id="hss_01_0509__hss_01_0509_b3210193117492">Vulnerabilities</strong>.</span></li><li id="hss_01_0509__li73376151982"><span>In the upper right corner of the <strong id="hss_01_0509__hss_01_0509_b155053444918">Vulnerabilities</strong> page, click <span class="uicontrol" id="hss_01_0509__hss_01_0509_uicontrol145193414491"><b>Configure Policy</b></span>. The <span class="uicontrol" id="hss_01_0509__hss_01_0509_uicontrol20511234164911"><b>Configure Policy</b></span> slide-out panel is displayed.</span></li><li id="hss_01_0509__li113374156811"><span>In the row containing the desired vulnerability whitelist rule, click <strong id="hss_01_0509__b10649134715314">Delete</strong> in the <strong id="hss_01_0509__b764912474531">Operation</strong> column.</span></li><li id="hss_01_0509__li8337111513816"><span>In the dialog box displayed, confirm the information and click <span class="uicontrol" id="hss_01_0509__uicontrol11337171512815"><b>OK</b></span>.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0140.html">Vulnerability Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0512.html b/docs/hss/umn/hss_01_0512.html
new file mode 100644
index 00000000..65467617
--- /dev/null
+++ b/docs/hss/umn/hss_01_0512.html
@@ -0,0 +1,15 @@
+<a name="hss_01_0512"></a><a name="hss_01_0512"></a>
+
+<h1 class="topictitle1">What Do I Do If My Remote Server Port Is Not Updated in Brute-force Attack Records?</h1>
+<div id="body0000001657890141"><div class="section" id="hss_01_0512__section24541240101811"><h4 class="sectiontitle">Symptom</h4><p id="hss_01_0512__p06463394169">The remote port of a server has been changed, but the brute-force attack records still displays the old port.</p>
+</div>
+<div class="section" id="hss_01_0512__section17928114520182"><h4 class="sectiontitle">Solution</h4><p id="hss_01_0512__p3246102011171">The remote port configuration is synchronized to <span id="hss_01_0512__text2060193472217">HSS</span> through the agent. If the remote port is changed, perform the following operations to restart the agent:</p>
+<ul id="hss_01_0512__ul1359211579289"><li id="hss_01_0512__li15592125710284">Windows: Log in to the server as an administrator. Open Task Manager, right-click <strong id="hss_01_0512__b17109132295719">HostGuard</strong> and choose <strong id="hss_01_0512__b59701677582">Restart</strong> from the shortcut menu.</li><li id="hss_01_0512__li1848143618309">Linux: Run the <strong id="hss_01_0512__b8371114016565">service hostguard restart</strong> command as user <strong id="hss_01_0512__b1541844313565">root</strong>.</li></ul>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0038.html">Brute-force Attack Defense</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0546.html b/docs/hss/umn/hss_01_0546.html
new file mode 100644
index 00000000..41906c02
--- /dev/null
+++ b/docs/hss/umn/hss_01_0546.html
@@ -0,0 +1,74 @@
+<a name="hss_01_0546"></a><a name="hss_01_0546"></a>
+
+<h1 class="topictitle1">Risk Statistics</h1>
+<div id="body0000001441419021"><p id="hss_01_0546__p1359213406573">On the dashboard page of the <span id="hss_01_0546__text183524516304">HSS</span> console, you can learn the security status and risks of all your servers and containers in real time, including the risk index, risk trend, top 5 event types, and service quota.</p>
+<div class="note" id="hss_01_0546__note14121015103916"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0546__p13139157391">If you have enabled the enterprise project function, you can select your enterprise project from the <strong id="hss_01_0546__b110131303032611">Enterprise project</strong> drop-down list to check server risk overview of the project. If you select <strong id="hss_01_0546__b146282098232611">All projects</strong>, the risk overview of servers in all the projects in this region is displayed.</p>
+</div></div>
+<ol id="hss_01_0546__ol7976683220"><li id="hss_01_0546__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0546__li830314169200"><span>Click <span><img id="hss_01_0546__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0546__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0546__hss_01_0571_b14857117404"><span id="hss_01_0546__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0546__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0546__li67927862710"><span>In the navigation pane, choose <strong id="hss_01_0546__b198623896032611">Dashboard</strong>.</span><p><div class="note" id="hss_01_0546__note14853916121120"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0546__p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+</p></li></ol>
+<div class="section" id="hss_01_0546__section16331151653114"><h4 class="sectiontitle">Asset Risk Index (Last 24 Hours)</h4><div class="fignone" id="hss_01_0546__fig44971195407"><span class="figcap"><b>Figure 1 </b>Asset risk index (last 24 hours)</span><br><span><img id="hss_01_0546__en-us_topic_0000001517162738_image3662822184414" src="en-us_image_0000001782400597.png"></span></div>
+<p id="hss_01_0546__p1471416133210">You can check the risks in protected servers and containers in the last 24 Hours.</p>
+<p id="hss_01_0546__p230410475304">To handle the risks, click <strong id="hss_01_0546__b208008290732611">Handle Now</strong>. The <strong id="hss_01_0546__b44945454332611">Risks</strong> pane will be displayed on the right. You can handle risks by referring to the corresponding guidance. You can handle the following types of risks:</p>
+<ul id="hss_01_0546__ul1211917155335"><li id="hss_01_0546__li10119111573318">Intrusions</li><li id="hss_01_0546__li235612260339">Vulnerabilities</li><li id="hss_01_0546__li1704123013313">Unsafe Settings</li></ul>
+<p id="hss_01_0546__p11201421346">To check your asset security, click <strong id="hss_01_0546__b81611893932611">Scan</strong>.</p>
+</div>
+<div class="section" id="hss_01_0546__section399119612310"><h4 class="sectiontitle">Protection Status (Last 24 Hours)</h4><div class="fignone" id="hss_01_0546__fig31371825164113"><span class="figcap"><b>Figure 2 </b>Protection Status</span><br><span><img id="hss_01_0546__en-us_topic_0000001517162738_image2031316312455" src="en-us_image_0000001614183089.png"></span></div>
+<p id="hss_01_0546__p125283043116">You can check the numbers of protected and unprotected servers and nodes.</p>
+<p id="hss_01_0546__p12333745143319">To enable protection for a server, click <strong id="hss_01_0546__b145444291932611">Enable Protection</strong>.</p>
+</div>
+<div class="section" id="hss_01_0546__section3199201855111"><h4 class="sectiontitle">Risks (Latest 24 Hours)</h4><div class="fignone" id="hss_01_0546__fig8316118144319"><span class="figcap"><b>Figure 3 </b>Risks</span><br><span><img id="hss_01_0546__en-us_topic_0000001517162738_image835118498462" src="en-us_image_0000001614383481.png"></span></div>
+<p id="hss_01_0546__p1347971441313">You can check the number of server asset risks, server vulnerabilities, server baselines, and container risks, and their comparison with the previous day.</p>
+</div>
+<div class="section" id="hss_01_0546__section13575181911319"><h4 class="sectiontitle"><span class="keyword" id="hss_01_0546__keyword1957513195313">Risk Statistics</span></h4><div class="fignone" id="hss_01_0546__fig27304117431"><span class="figcap"><b>Figure 4 </b>Risk trend</span><br><span><img id="hss_01_0546__en-us_topic_0000001517162738_image6460110114812" src="en-us_image_0000001564103542.png"></span></div>
+<p id="hss_01_0546__p0131142917578">You can check the risk trend in the last 24 hours, last 3 days, last 7 days, and last 30 days.</p>
+
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0546__table88691587216" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Risk statistics</caption><thead align="left"><tr id="hss_01_0546__row1786913581726"><th align="left" class="cellrowborder" valign="top" width="21.27%" id="mcps1.3.7.4.2.3.1.1"><p id="hss_01_0546__p18869858429">Category</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="78.73%" id="mcps1.3.7.4.2.3.1.2"><p id="hss_01_0546__p8869155812210">Event</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0546__row108696581228"><td class="cellrowborder" valign="top" width="21.27%" headers="mcps1.3.7.4.2.3.1.1 "><p id="hss_01_0546__p8869155811217">Asset risks</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.73%" headers="mcps1.3.7.4.2.3.1.2 "><ul id="hss_01_0546__ul145214101249"><li id="hss_01_0546__li114526105410">Accounts</li><li id="hss_01_0546__li34521610649">Open ports</li><li id="hss_01_0546__li11452111011414">Processes</li><li id="hss_01_0546__li545231015413">Installed software</li><li id="hss_01_0546__li545216102045">Auto-started items</li><li id="hss_01_0546__li372020206363">Web applications</li><li id="hss_01_0546__li150712373812">Web services</li><li id="hss_01_0546__li663111315414">Web frameworks</li><li id="hss_01_0546__li35311711184111">Websites</li><li id="hss_01_0546__li43111818144113">Middleware</li><li id="hss_01_0546__li17748131316386">Databases</li><li id="hss_01_0546__li10966102210428">Kernel modules</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0546__row158697585216"><td class="cellrowborder" valign="top" width="21.27%" headers="mcps1.3.7.4.2.3.1.1 "><p id="hss_01_0546__p78693583218">Server vulnerabilities</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.73%" headers="mcps1.3.7.4.2.3.1.2 "><ul id="hss_01_0546__ul1065710255415"><li id="hss_01_0546__li61857463011">Linux vulnerabilities</li><li id="hss_01_0546__li633145220016">Windows vulnerabilities</li><li id="hss_01_0546__li1165717252415">Web-CMS vulnerabilities</li><li id="hss_01_0546__li8446154172813">Application vulnerabilities</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0546__row9869058123"><td class="cellrowborder" valign="top" width="21.27%" headers="mcps1.3.7.4.2.3.1.1 "><p id="hss_01_0546__p198701581727">Server baseline risks</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.73%" headers="mcps1.3.7.4.2.3.1.2 "><ul id="hss_01_0546__ul1277515303412"><li id="hss_01_0546__li9775193017418">Password complexity policy check</li><li id="hss_01_0546__li167761930944">Common weak password check</li><li id="hss_01_0546__li277617301347">Unsafe configuration check</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0546__row5203291439"><td class="cellrowborder" valign="top" width="21.27%" headers="mcps1.3.7.4.2.3.1.1 "><p id="hss_01_0546__p5216291737">Container risks</p>
+</td>
+<td class="cellrowborder" valign="top" width="78.73%" headers="mcps1.3.7.4.2.3.1.2 "><ul id="hss_01_0546__ul1751013235815"><li id="hss_01_0546__li2510112312817">Local image vulnerabilities</li><li id="hss_01_0546__li56151859485">Private image vulnerabilities</li><li id="hss_01_0546__li164025615912">Malicious files in images</li><li id="hss_01_0546__li8451191120916">Image baseline</li></ul>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+<div class="section" id="hss_01_0546__section113691761998"><h4 class="sectiontitle">Intrusions (Last 24 Hours)</h4><div class="fignone" id="hss_01_0546__fig14446141617431"><span class="figcap"><b>Figure 5 </b>Intrusions (last 24 hours)</span><br><span><img id="hss_01_0546__en-us_topic_0000001517162738_image202972213522" src="en-us_image_0000001614384633.png"></span></div>
+<p id="hss_01_0546__p84356351911">You can check the total number of intrusions detected on servers and containers, and the severities of the intrusions.</p>
+<p id="hss_01_0546__p1165721210617">These intrusion statistics are updated at 00:00 every day.</p>
+</div>
+<div class="section" id="hss_01_0546__s672c78eefc9e4dcf81cba3bb8624aa41"><h4 class="sectiontitle">Top 5 Events</h4><div class="fignone" id="hss_01_0546__fig2048651919439"><span class="figcap"><b>Figure 6 </b>Top 5 events</span><br><span><img id="hss_01_0546__en-us_topic_0000001517162738_image1130841205213" src="en-us_image_0000001564104674.png"></span></div>
+<p id="hss_01_0546__p1293682163617">For servers protected by the enterprise, premium, or container security edition, you can check the top five types of intrusion events detected in the last 24 hours, last 3 days, last 7 days, or last 30 days; and the number of each type of events.</p>
+<p id="hss_01_0546__p919825225818">If no data is displayed due to connection problems, fix your network and click <span><img id="hss_01_0546__image1413545310592" src="en-us_image_0000001568637417.png"></span> to retrieve data again.</p>
+</div>
+<div class="section" id="hss_01_0546__section142247408125"><h4 class="sectiontitle">Real-time Alarms</h4><p id="hss_01_0546__p717014491428">You can check real-time alarms.</p>
+<p id="hss_01_0546__p1085069132114">Check the latest five unhandled intrusion events in the last 24 hours, including their severities, alarm names, occurrence time, and statuses.</p>
+<ul id="hss_01_0546__ul05921196330"><li id="hss_01_0546__li15592161920335">To check alarm details, click an alarm name.</li><li id="hss_01_0546__li18593519113312">To handle an alarm, click <strong id="hss_01_0546__b116528511832611">Handle</strong> in its <strong id="hss_01_0546__b116786660932611">Operation</strong> column. After the alarm is handled, it will be removed from the list. The list refreshes and displays the latest five intrusion events that have not been handled in the last 24 hours.</li><li id="hss_01_0546__li259313195335">To check more alarm events, click <strong id="hss_01_0546__b108157724032611">View More</strong>.</li></ul>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0410.html">Server Security Dashboard</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0553.html b/docs/hss/umn/hss_01_0553.html
new file mode 100644
index 00000000..cc5cd12c
--- /dev/null
+++ b/docs/hss/umn/hss_01_0553.html
@@ -0,0 +1,17 @@
+<a name="hss_01_0553"></a><a name="hss_01_0553"></a>
+
+<h1 class="topictitle1">Security Report</h1>
+<div id="body1576571260524"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="hss_01_0554.html">Checking a Security Report</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0555.html">Subscribing to a Security Report</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0556.html">Creating a Security Report</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="hss_01_0557.html">Managing Security Reports</a></strong><br>
+</li>
+</ul>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0554.html b/docs/hss/umn/hss_01_0554.html
new file mode 100644
index 00000000..38625c34
--- /dev/null
+++ b/docs/hss/umn/hss_01_0554.html
@@ -0,0 +1,56 @@
+<a name="hss_01_0554"></a><a name="hss_01_0554"></a>
+
+<h1 class="topictitle1">Checking a Security Report</h1>
+<div id="body0000001236989219"><p id="hss_01_0554__p1884073534620">You can subscribe to <a href="hss_01_0556.html#hss_01_0556__li77667419127">daily</a>, weekly, monthly, and <a href="hss_01_0556.html#hss_01_0556__li77667419127">custom</a> reports. The reports show your server security trends and key security events and risks.</p>
+<div class="note" id="hss_01_0554__note17780135615820"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="hss_01_0554__ul346702312426"><li id="hss_01_0554__li790163384216">If you have enabled the enterprise project function, you can select your enterprise project from the <strong id="hss_01_0554__b46435342121543">Enterprise project</strong> drop-down list and subscribe to the security report of the project. You can also select <strong id="hss_01_0554__b207082337821543">All projects</strong> and subscribe to the security report of servers in all the projects in this region.</li><li id="hss_01_0554__li18467152314217">After you subscribe to a report, it will be available for review and download the next day.</li></ul>
+</div></div>
+<div class="section" id="hss_01_0554__section1274593521"><h4 class="sectiontitle">Constraints</h4><p id="hss_01_0554__en-us_topic_0000001196788769_en-us_topic_0000001196708827_p11935163695913">The enterprise, premium, WTP, or container edition is enabled.</p>
+</div>
+<div class="section" id="hss_01_0554__section1459295117392"><h4 class="sectiontitle">Security Report Overview</h4><ol id="hss_01_0554__ol146941212408"><li id="hss_01_0554__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0554__li830314169200"><span>Click <span><img id="hss_01_0554__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0554__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0554__hss_01_0571_b14857117404"><span id="hss_01_0554__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0554__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0554__li9280201744017"><span>In the navigation pane on the left, choose <span class="parmname" id="hss_01_0554__parmname171071436174715"><b>Reports</b></span>. The security report overview page is displayed.</span><p><div class="p" id="hss_01_0554__p1657161419454">You can use default security report templates directly, which are <strong id="hss_01_0554__b3936141716815">default monthly security report</strong> and <strong id="hss_01_0554__b293611171683">default weekly security report</strong>.<div class="note" id="hss_01_0554__note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0554__hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+</div>
+<div class="fignone" id="hss_01_0554__fig1368502310010"><span class="figcap"><b>Figure 1 </b>Checking a security report</span><br><span><img id="hss_01_0554__image1741411355588" src="en-us_image_0000001670240689.png"></span></div>
+</p></li><li id="hss_01_0554__li1513132310360"><span>Click <strong id="hss_01_0554__b925519151716">Download</strong> to go to the preview page. You can check the information of the target report and download or send it.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0554__section5276186185614"><h4 class="sectiontitle">Checking Report History</h4><p id="hss_01_0554__p1039508155612">The report history stores the report sending details.</p>
+<ol id="hss_01_0554__ol043116105910"><li id="hss_01_0554__li194316685917"><span>In the upper right corner of the security report overview page, click <strong id="hss_01_0554__b177201054104011">Report History</strong> to check the report sending records.</span></li><li id="hss_01_0554__li18727311319"><span>Check the report history on the displayed page, as shown in the following picture. For more information, see <a href="#hss_01_0554__table610843618296">Table 1</a>.</span><p><div class="fignone" id="hss_01_0554__fig1995318416118"><span class="figcap"><b>Figure 2 </b>Report sending details</span><br><span><img id="hss_01_0554__image198191593593" src="en-us_image_0000001621481094.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0554__table610843618296"></a><a name="table610843618296"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0554__table610843618296" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameter description</caption><thead align="left"><tr id="hss_01_0554__row131081836142910"><th align="left" class="cellrowborder" valign="top" width="16.939999999999998%" id="mcps1.3.5.3.2.2.2.2.3.1.1"><p id="hss_01_0554__p1108173615298">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="83.06%" id="mcps1.3.5.3.2.2.2.2.3.1.2"><p id="hss_01_0554__p141088369292">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0554__row1108536202912"><td class="cellrowborder" valign="top" width="16.939999999999998%" headers="mcps1.3.5.3.2.2.2.2.3.1.1 "><p id="hss_01_0554__p11108183617293">Report Name</p>
+</td>
+<td class="cellrowborder" valign="top" width="83.06%" headers="mcps1.3.5.3.2.2.2.2.3.1.2 "><p id="hss_01_0554__p81081366291">Name of a sent report.</p>
+</td>
+</tr>
+<tr id="hss_01_0554__row610823610294"><td class="cellrowborder" valign="top" width="16.939999999999998%" headers="mcps1.3.5.3.2.2.2.2.3.1.1 "><p id="hss_01_0554__p8108336182916">Statistical Period</p>
+</td>
+<td class="cellrowborder" valign="top" width="83.06%" headers="mcps1.3.5.3.2.2.2.2.3.1.2 "><p id="hss_01_0554__p12108236142920">Statistical period of a sent report.</p>
+</td>
+</tr>
+<tr id="hss_01_0554__row12108103614291"><td class="cellrowborder" valign="top" width="16.939999999999998%" headers="mcps1.3.5.3.2.2.2.2.3.1.1 "><p id="hss_01_0554__p1210813672915">Report Type</p>
+</td>
+<td class="cellrowborder" valign="top" width="83.06%" headers="mcps1.3.5.3.2.2.2.2.3.1.2 "><p id="hss_01_0554__p6108203611294">Statistical period type of a sent report.</p>
+<ul id="hss_01_0554__ul9108183615290"><li id="hss_01_0554__li10108836142919">Weekly Reports</li><li id="hss_01_0554__li19108143618297">Monthly Reports</li><li id="hss_01_0554__li631519501713">Daily Reports</li><li id="hss_01_0554__li114293861713">Custom Reports</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0554__row110863614290"><td class="cellrowborder" valign="top" width="16.939999999999998%" headers="mcps1.3.5.3.2.2.2.2.3.1.1 "><p id="hss_01_0554__p151081236152912">Sent</p>
+</td>
+<td class="cellrowborder" valign="top" width="83.06%" headers="mcps1.3.5.3.2.2.2.2.3.1.2 "><p id="hss_01_0554__p2108173620293">Time when the report is sent.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0554__li1110963618294"><span>Click <strong id="hss_01_0554__b820017125274">Download</strong> in the <strong id="hss_01_0554__b1869716152279">Operation</strong> column to check historical reports. You can also preview and download the reports.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0553.html">Security Report</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0555.html b/docs/hss/umn/hss_01_0555.html
new file mode 100644
index 00000000..ec2fcf26
--- /dev/null
+++ b/docs/hss/umn/hss_01_0555.html
@@ -0,0 +1,22 @@
+<a name="hss_01_0555"></a><a name="hss_01_0555"></a>
+
+<h1 class="topictitle1">Subscribing to a Security Report</h1>
+<div id="body0000001192349240"><p id="hss_01_0555__p2099655681413">This section provides guidance for you to quickly subscribe to weekly or monthly security reports using preset templates on the console. For details about how to customize a security report, see <a href="hss_01_0556.html">Creating a Security Report</a>.</p>
+<div class="section" id="hss_01_0555__section11403192420538"><h4 class="sectiontitle">Constraints</h4><p id="hss_01_0555__hss_01_0554_en-us_topic_0000001196788769_en-us_topic_0000001196708827_p11935163695913">The enterprise, premium, WTP, or container edition is enabled.</p>
+</div>
+<div class="section" id="hss_01_0555__section1697894017136"><h4 class="sectiontitle">Precaution</h4><ul id="hss_01_0555__ul131774317371"><li id="hss_01_0555__li41771131113712">A security report is generated for all protected servers. You cannot specify a server and generate a security report for it.</li><li id="hss_01_0555__li1817714312377">Subscription to security reports is free of charge, but the report content varies depending on the quota edition you use.</li></ul>
+</div>
+<div class="section" id="hss_01_0555__section174791340193712"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0555__ol222311194211"><li id="hss_01_0555__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0555__li830314169200"><span>Click <span><img id="hss_01_0555__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0555__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0555__hss_01_0571_b14857117404"><span id="hss_01_0555__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0555__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0555__li536591619511"><span>In the navigation pane on the left, choose <span class="parmname" id="hss_01_0555__hss_01_0554_parmname171071436174715"><b>Reports</b></span>. The security report overview page is displayed.</span><p><div class="p" id="hss_01_0555__hss_01_0554_p1657161419454">You can use default security report templates directly, which are <strong id="hss_01_0555__hss_01_0554_b3936141716815">default monthly security report</strong> and <strong id="hss_01_0555__hss_01_0554_b293611171683">default weekly security report</strong>.<div class="note" id="hss_01_0555__hss_01_0554_note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0555__hss_01_0554_hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+</div>
+<div class="fignone" id="hss_01_0555__hss_01_0554_fig1368502310010"><span class="figcap"><b>Figure 1 </b>Checking a security report</span><br><span><img id="hss_01_0555__hss_01_0554_image1741411355588" src="en-us_image_0000001670240689.png"></span></div>
+</p></li><li id="hss_01_0555__li463718456132"><span>You can subscribe to monthly or weekly security reports. For details about how to edit a report, see <a href="hss_01_0557.html#hss_01_0557__section341765792112">Editing a Report</a>.</span><p><div class="fignone" id="hss_01_0555__fig1671519596217"><span class="figcap"><b>Figure 2 </b>Enabling security reports</span><br><span><img id="hss_01_0555__image226143813111" src="en-us_image_0000001621640914.png"></span></div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0553.html">Security Report</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0556.html b/docs/hss/umn/hss_01_0556.html
new file mode 100644
index 00000000..a5a1e5c1
--- /dev/null
+++ b/docs/hss/umn/hss_01_0556.html
@@ -0,0 +1,67 @@
+<a name="hss_01_0556"></a><a name="hss_01_0556"></a>
+
+<h1 class="topictitle1">Creating a Security Report</h1>
+<div id="body0000001192509224"><p id="hss_01_0556__p1393414181917">If the type and content of the existing report template cannot meet your requirements, you can customize a report.</p>
+<div class="section" id="hss_01_0556__section11403192420538"><h4 class="sectiontitle">Constraints</h4><p id="hss_01_0556__hss_01_0554_en-us_topic_0000001196788769_en-us_topic_0000001196708827_p11935163695913">The enterprise, premium, WTP, or container edition is enabled.</p>
+</div>
+<div class="section" id="hss_01_0556__section14211592618"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0556__ol13461162941010"><li id="hss_01_0556__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0556__li830314169200"><span>Click <span><img id="hss_01_0556__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0556__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0556__hss_01_0571_b14857117404"><span id="hss_01_0556__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0556__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0556__li536591619511"><span>In the navigation pane on the left, choose <span class="parmname" id="hss_01_0556__hss_01_0554_parmname171071436174715"><b>Reports</b></span>. The security report overview page is displayed.</span><p><div class="p" id="hss_01_0556__hss_01_0554_p1657161419454">You can use default security report templates directly, which are <strong id="hss_01_0556__hss_01_0554_b3936141716815">default monthly security report</strong> and <strong id="hss_01_0556__hss_01_0554_b293611171683">default weekly security report</strong>.<div class="note" id="hss_01_0556__hss_01_0554_note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0556__hss_01_0554_hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+</div>
+<div class="fignone" id="hss_01_0556__hss_01_0554_fig1368502310010"><span class="figcap"><b>Figure 1 </b>Checking a security report</span><br><span><img id="hss_01_0556__hss_01_0554_image1741411355588" src="en-us_image_0000001670240689.png"></span></div>
+</p></li><li id="hss_01_0556__li746322101116"><span>Create a report.</span><p><ul id="hss_01_0556__ul1479523931217"><li id="hss_01_0556__li77951439121219">Create a monthly or weekly security report based on templates.<ul id="hss_01_0556__ul14494171219284"><li id="hss_01_0556__li5494191262811">Click <strong id="hss_01_0556__b14276054104811">Copy</strong> in the weekly or monthly report card to access the basic information configuration page.<div class="fignone" id="hss_01_0556__fig20461143519169"><span class="figcap"><b>Figure 2 </b>Creating a report based on a template</span><br><span><img id="hss_01_0556__image85881155522" src="en-us_image_0000001670375709.png"></span></div>
+</li></ul>
+</li><li id="hss_01_0556__li77667419127"><a name="hss_01_0556__li77667419127"></a><a name="li77667419127"></a>You can also customize the report period.<ul id="hss_01_0556__ul1135263262817"><li id="hss_01_0556__li18701032172813">Click <span class="uicontrol" id="hss_01_0556__uicontrol1295424514292"><b>Create Report</b></span> to access the basic information configuration page.<div class="fignone" id="hss_01_0556__fig2469952153111"><span class="figcap"><b>Figure 3 </b>Customizing a report</span><br><span><img id="hss_01_0556__image79012111412" src="en-us_image_0000001622521482.png"></span></div>
+</li></ul>
+</li></ul>
+</p></li><li id="hss_01_0556__li86867422270"><span>Edit basic information of a report. For more information, see <a href="#hss_01_0556__table164462775520">Table 1</a>.</span><p><div class="fignone" id="hss_01_0556__fig73322933210"><span class="figcap"><b>Figure 4 </b>Editing basic information of a report</span><br><span><img id="hss_01_0556__image16235715756" src="en-us_image_0000001670681377.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0556__table164462775520"></a><a name="table164462775520"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0556__table164462775520" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameter description</caption><thead align="left"><tr id="hss_01_0556__row17441927125515"><th align="left" class="cellrowborder" valign="top" width="15.46154615461546%" id="mcps1.3.3.2.5.2.2.2.4.1.1"><p id="hss_01_0556__p1044162712554">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="55.975597559755975%" id="mcps1.3.3.2.5.2.2.2.4.1.2"><p id="hss_01_0556__p644102765518">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="28.562856285628563%" id="mcps1.3.3.2.5.2.2.2.4.1.3"><p id="hss_01_0556__p1844227105518">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0556__row1245152745510"><td class="cellrowborder" valign="top" width="15.46154615461546%" headers="mcps1.3.3.2.5.2.2.2.4.1.1 "><p id="hss_01_0556__p84532717557">Report Name</p>
+</td>
+<td class="cellrowborder" valign="top" width="55.975597559755975%" headers="mcps1.3.3.2.5.2.2.2.4.1.2 "><p id="hss_01_0556__p12451827195517">Default report name</p>
+</td>
+<td class="cellrowborder" valign="top" width="28.562856285628563%" headers="mcps1.3.3.2.5.2.2.2.4.1.3 "><p id="hss_01_0556__p1137493317406">ecs security report</p>
+</td>
+</tr>
+<tr id="hss_01_0556__row1145112705510"><td class="cellrowborder" valign="top" width="15.46154615461546%" headers="mcps1.3.3.2.5.2.2.2.4.1.1 "><p id="hss_01_0556__p1745192795515">Report Type</p>
+</td>
+<td class="cellrowborder" valign="top" width="55.975597559755975%" headers="mcps1.3.3.2.5.2.2.2.4.1.2 "><p id="hss_01_0556__p14562775518">Statistical period type of a report:</p>
+<ul id="hss_01_0556__ul143101424134211"><li id="hss_01_0556__li1031092412426"><strong id="hss_01_0556__b6208736481">Daily</strong>: 00:00 to 24:00 every day</li><li id="hss_01_0556__li12896134810449"><strong id="hss_01_0556__b6426173781017">Weekly Reports</strong>: 00:00 on Monday to 24:00 on Sunday</li><li id="hss_01_0556__li10674841124411"><strong id="hss_01_0556__b174769502911">Monthly Reports</strong>: 00:00 on the first day to 24:00 on the last day of each month</li><li id="hss_01_0556__li10526203224218"><strong id="hss_01_0556__b15590112013533">Custom</strong>: custom statistical period, which ranges from one day to three months</li><li id="hss_01_0556__li094713216196">All types of reports will be sent to the recipients the day after it is generated.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="28.562856285628563%" headers="mcps1.3.3.2.5.2.2.2.4.1.3 "><p id="hss_01_0556__p14502735518">Monthly Reports</p>
+</td>
+</tr>
+<tr id="hss_01_0556__row184532720552"><td class="cellrowborder" valign="top" width="15.46154615461546%" headers="mcps1.3.3.2.5.2.2.2.4.1.1 "><p id="hss_01_0556__p154517273558">Schedule Delivery</p>
+</td>
+<td class="cellrowborder" valign="top" width="55.975597559755975%" headers="mcps1.3.3.2.5.2.2.2.4.1.2 "><p id="hss_01_0556__p9451275556">Time when a report is automatically sent</p>
+</td>
+<td class="cellrowborder" valign="top" width="28.562856285628563%" headers="mcps1.3.3.2.5.2.2.2.4.1.3 "><p id="hss_01_0556__p745827145519">-</p>
+</td>
+</tr>
+<tr id="hss_01_0556__row845627165517"><td class="cellrowborder" valign="top" width="15.46154615461546%" headers="mcps1.3.3.2.5.2.2.2.4.1.1 "><p id="hss_01_0556__p3451227185510">Send Report To</p>
+</td>
+<td class="cellrowborder" valign="top" width="55.975597559755975%" headers="mcps1.3.3.2.5.2.2.2.4.1.2 "><p id="hss_01_0556__p5451227185510">Security report recipients.</p>
+<ul id="hss_01_0556__ul945275455714"><li id="hss_01_0556__li18452454105718"><strong id="hss_01_0556__b13629395277">Recipients specified in SMN topic</strong>: If you use SMN topic settings, you can create a topic and specify recipients for HSS.</li><li id="hss_01_0556__li13102113210495"><strong id="hss_01_0556__b10307836697">No need to send to email</strong>: The report is not sent to the specified email address.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="28.562856285628563%" headers="mcps1.3.3.2.5.2.2.2.4.1.3 "><p id="hss_01_0556__p1345727195512">Recipients specified in SMN topic</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0556__li156454589336"><span>After confirming that the information is correct, click <strong id="hss_01_0556__b1267011614712">Next</strong> in the lower right corner of the page to configure the report.</span></li><li id="hss_01_0556__li1465255993315"><span>Select the report items to be generated in the left pane. You can preview the report items in the right pane. After confirming the report items, click <strong id="hss_01_0556__b159471138495">Save</strong>, and enable security report subscription.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0553.html">Security Report</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0557.html b/docs/hss/umn/hss_01_0557.html
new file mode 100644
index 00000000..eff8cc4b
--- /dev/null
+++ b/docs/hss/umn/hss_01_0557.html
@@ -0,0 +1,76 @@
+<a name="hss_01_0557"></a><a name="hss_01_0557"></a>
+
+<h1 class="topictitle1">Managing Security Reports</h1>
+<div id="body0000001237269199"><p id="hss_01_0557__p1940911613406">This section describes how to modify, cancel, or disable a subscribed report.</p>
+<div class="section" id="hss_01_0557__section11403192420538"><h4 class="sectiontitle">Constraints</h4><p id="hss_01_0557__hss_01_0554_en-us_topic_0000001196788769_en-us_topic_0000001196708827_p11935163695913">The enterprise, premium, WTP, or container edition is enabled.</p>
+</div>
+<div class="section" id="hss_01_0557__section341765792112"><a name="hss_01_0557__section341765792112"></a><a name="section341765792112"></a><h4 class="sectiontitle">Editing a Report</h4><ol id="hss_01_0557__ol222311194211"><li id="hss_01_0557__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0557__li830314169200"><span>Click <span><img id="hss_01_0557__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0557__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0557__hss_01_0571_b14857117404"><span id="hss_01_0557__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0557__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0557__li536591619511"><span>In the navigation pane on the left, choose <span class="parmname" id="hss_01_0557__hss_01_0554_parmname171071436174715"><b>Reports</b></span>. The security report overview page is displayed.</span><p><div class="p" id="hss_01_0557__hss_01_0554_p1657161419454">You can use default security report templates directly, which are <strong id="hss_01_0557__hss_01_0554_b3936141716815">default monthly security report</strong> and <strong id="hss_01_0557__hss_01_0554_b293611171683">default weekly security report</strong>.<div class="note" id="hss_01_0557__hss_01_0554_note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0557__hss_01_0554_hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+</div>
+<div class="fignone" id="hss_01_0557__hss_01_0554_fig1368502310010"><span class="figcap"><b>Figure 1 </b>Checking a security report</span><br><span><img id="hss_01_0557__hss_01_0554_image1741411355588" src="en-us_image_0000001670240689.png"></span></div>
+</p></li><li id="hss_01_0557__li03193805010"><span>Click <strong id="hss_01_0557__b19980101297">Edit</strong> in the lower right corner of the target report.</span><p><div class="fignone" id="hss_01_0557__fig1891192143313"><span class="figcap"><b>Figure 2 </b>Editing a report</span><br><span><img id="hss_01_0557__image089318422619" src="en-us_image_0000001622361502.png"></span></div>
+</p></li><li id="hss_01_0557__li3491102565310"><span>Edit basic information of a report. For more information, see <a href="#hss_01_0557__table164462775520">Table 1</a>.</span><p><div class="fignone" id="hss_01_0557__fig443514383330"><span class="figcap"><b>Figure 3 </b>Editing basic information of a report</span><br><span><img id="hss_01_0557__image439134810720" src="en-us_image_0000001670401553.png"></span></div>
+
+<div class="tablenoborder"><a name="hss_01_0557__table164462775520"></a><a name="table164462775520"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0557__table164462775520" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameter description</caption><thead align="left"><tr id="hss_01_0557__row17441927125515"><th align="left" class="cellrowborder" valign="top" width="15.46154615461546%" id="mcps1.3.3.2.5.2.2.2.4.1.1"><p id="hss_01_0557__p1044162712554">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="55.975597559755975%" id="mcps1.3.3.2.5.2.2.2.4.1.2"><p id="hss_01_0557__p644102765518">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="28.562856285628563%" id="mcps1.3.3.2.5.2.2.2.4.1.3"><p id="hss_01_0557__p1844227105518">Example Value</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0557__row1245152745510"><td class="cellrowborder" valign="top" width="15.46154615461546%" headers="mcps1.3.3.2.5.2.2.2.4.1.1 "><p id="hss_01_0557__p84532717557">Report Name</p>
+</td>
+<td class="cellrowborder" valign="top" width="55.975597559755975%" headers="mcps1.3.3.2.5.2.2.2.4.1.2 "><p id="hss_01_0557__p12451827195517">Default report name.</p>
+</td>
+<td class="cellrowborder" valign="top" width="28.562856285628563%" headers="mcps1.3.3.2.5.2.2.2.4.1.3 "><p id="hss_01_0557__p134572705517"><strong id="hss_01_0557__b1793402322716">default monthly security report</strong></p>
+</td>
+</tr>
+<tr id="hss_01_0557__row1145112705510"><td class="cellrowborder" valign="top" width="15.46154615461546%" headers="mcps1.3.3.2.5.2.2.2.4.1.1 "><p id="hss_01_0557__p1745192795515">Report Type</p>
+</td>
+<td class="cellrowborder" valign="top" width="55.975597559755975%" headers="mcps1.3.3.2.5.2.2.2.4.1.2 "><p id="hss_01_0557__p14562775518">Name of the statistical period type of a report, which cannot be edited.</p>
+</td>
+<td class="cellrowborder" valign="top" width="28.562856285628563%" headers="mcps1.3.3.2.5.2.2.2.4.1.3 "><p id="hss_01_0557__p14502735518"><strong id="hss_01_0557__b184591538162720">Monthly Reports</strong></p>
+</td>
+</tr>
+<tr id="hss_01_0557__row184532720552"><td class="cellrowborder" valign="top" width="15.46154615461546%" headers="mcps1.3.3.2.5.2.2.2.4.1.1 "><p id="hss_01_0557__p154517273558">Schedule Delivery</p>
+</td>
+<td class="cellrowborder" valign="top" width="55.975597559755975%" headers="mcps1.3.3.2.5.2.2.2.4.1.2 "><p id="hss_01_0557__p9451275556">Time when a report is automatically sent.</p>
+</td>
+<td class="cellrowborder" valign="top" width="28.562856285628563%" headers="mcps1.3.3.2.5.2.2.2.4.1.3 "><p id="hss_01_0557__p745827145519">-</p>
+</td>
+</tr>
+<tr id="hss_01_0557__row845627165517"><td class="cellrowborder" valign="top" width="15.46154615461546%" headers="mcps1.3.3.2.5.2.2.2.4.1.1 "><p id="hss_01_0557__p3451227185510">Send Report To</p>
+</td>
+<td class="cellrowborder" valign="top" width="55.975597559755975%" headers="mcps1.3.3.2.5.2.2.2.4.1.2 "><p id="hss_01_0557__p5451227185510">Mode to send the generated security reports:</p>
+<ul id="hss_01_0557__ul945275455714"><li id="hss_01_0557__hss_01_0556_li18452454105718"><strong id="hss_01_0557__hss_01_0556_b13629395277">Recipients specified in SMN topic</strong>: If you use SMN topic settings, you can create a topic and specify recipients for HSS.</li><li id="hss_01_0557__hss_01_0556_li13102113210495"><strong id="hss_01_0557__hss_01_0556_b10307836697">No need to send to email</strong>: The report is not sent to the specified email address.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="28.562856285628563%" headers="mcps1.3.3.2.5.2.2.2.4.1.3 "><p id="hss_01_0557__p1345727195512">Recipients specified in SMN topic</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0557__li531541214714"><span>Confirm the information and click <strong id="hss_01_0557__b472725713542">Next</strong> in the lower right corner of the page to configure the report.</span></li><li id="hss_01_0557__li65081739141115"><span>Select or deselect the report items in the pane on the left. You can preview the report items on the right. After confirming the report items, click <strong id="hss_01_0557__b697918594461">Save</strong>. The report is changed successfully.</span></li></ol>
+</div>
+<div class="section" id="hss_01_0557__section1399813392320"><h4 class="sectiontitle">Unsubscribing from a Report</h4><ol id="hss_01_0557__ol77955112819"><li id="hss_01_0557__li1580115232340"><span>Log in to the management console and go to the <span id="hss_01_0557__text2897154921710">HSS</span> page.</span></li><li id="hss_01_0557__li680322316346"><span>In the navigation pane on the left, choose <span class="parmname" id="hss_01_0557__hss_01_0554_parmname171071436174715_1"><b>Reports</b></span>. The security report overview page is displayed.</span><p><div class="p" id="hss_01_0557__hss_01_0554_p1657161419454_1">You can use default security report templates directly, which are <strong id="hss_01_0557__hss_01_0554_b3936141716815_1">default monthly security report</strong> and <strong id="hss_01_0557__hss_01_0554_b293611171683_1">default weekly security report</strong>.<div class="note" id="hss_01_0557__hss_01_0554_note1169413414298_1"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0557__hss_01_0554_hss_01_0546_p158536161110_1">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+</div>
+<div class="fignone" id="hss_01_0557__hss_01_0554_fig1368502310010_1"><span class="figcap"><b>Figure 4 </b>Checking a security report</span><br><span><img id="hss_01_0557__hss_01_0554_image1741411355588_1" src="en-us_image_0000001670240689.png"></span></div>
+</p></li><li id="hss_01_0557__li14261058133011"><span>Toggle off the target report (<span><img id="hss_01_0557__image331182473310" src="en-us_image_0000001568637685.png"></span>).</span></li></ol>
+</div>
+<div class="section" id="hss_01_0557__section1938023112113"><h4 class="sectiontitle">Deleting a Report</h4><div class="note" id="hss_01_0557__note1832619473344"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0557__p1032684773410">Default security report templates <strong id="hss_01_0557__b41831246154412">default monthly security report</strong> and <strong id="hss_01_0557__b15264296456">default weekly security report</strong> cannot be deleted.</p>
+</div></div>
+<ol id="hss_01_0557__ol176921551183516"><li id="hss_01_0557__li153811339265"><span>Log in to the management console and go to the <span id="hss_01_0557__text2831154222">HSS</span> page.</span></li><li id="hss_01_0557__li149261492347"><span>In the navigation pane on the left, choose <span class="parmname" id="hss_01_0557__hss_01_0554_parmname171071436174715_2"><b>Reports</b></span>. The security report overview page is displayed.</span><p><div class="p" id="hss_01_0557__hss_01_0554_p1657161419454_2">You can use default security report templates directly, which are <strong id="hss_01_0557__hss_01_0554_b3936141716815_2">default monthly security report</strong> and <strong id="hss_01_0557__hss_01_0554_b293611171683_2">default weekly security report</strong>.<div class="note" id="hss_01_0557__hss_01_0554_note1169413414298_2"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0557__hss_01_0554_hss_01_0546_p158536161110_2">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+</div>
+<div class="fignone" id="hss_01_0557__hss_01_0554_fig1368502310010_2"><span class="figcap"><b>Figure 5 </b>Checking a security report</span><br><span><img id="hss_01_0557__hss_01_0554_image1741411355588_2" src="en-us_image_0000001670240689.png"></span></div>
+</p></li><li id="hss_01_0557__li540416286384"><span>Click <strong id="hss_01_0557__b125541918453">Delete</strong> in the lower right corner of the target report.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0553.html">Security Report</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0558.html b/docs/hss/umn/hss_01_0558.html
new file mode 100644
index 00000000..7a00ed12
--- /dev/null
+++ b/docs/hss/umn/hss_01_0558.html
@@ -0,0 +1,18 @@
+<a name="hss_01_0558"></a><a name="hss_01_0558"></a>
+
+<h1 class="topictitle1">Free Scan on Unprotected Servers</h1>
+<div id="body0000001441698621"><p id="hss_01_0558__p648510271308">Servers that are not protected by HSS are scanned for free. A security report on their vulnerabilities, unsafe passwords, and asset risks will be generated.</p>
+<p id="hss_01_0558__p9344733141115">If you need to perform baseline check, application protection, web tamper protection, ransomware protection, intrusion detection, policy management, file integrity detection, and isolation and killing, you can <a href="hss_01_0260.html">enable HSS</a>.</p>
+<div class="section" id="hss_01_0558__section202277458357"><h4 class="sectiontitle">Free Scan</h4><ul id="hss_01_0558__ul1733612141442"><li id="hss_01_0558__li13336151411446">Servers that are not protected by HSS are scanned for free in the early morning on each Monday.</li><li id="hss_01_0558__li1433617149441">A free health check report is generated on the first day of each month. You can only view the report online but cannot download it.</li><li id="hss_01_0558__li113361314124416">In the report, up to five results can be displayed for each check item. If a check item has fewer than five results, only half of them will be displayed.</li><li id="hss_01_0558__li144401756103118">You can purchase <span id="hss_01_0558__text380312255102">HSS</span> to enjoy advanced functions, such as real-time protection, report download, online vulnerability fix, and compliance assistance.</li></ul>
+</div>
+<div class="section" id="hss_01_0558__section211191043520"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0558__ol9173155261910"><li id="hss_01_0558__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0558__li830314169200"><span>Click <span><img id="hss_01_0558__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0558__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0558__hss_01_0571_b14857117404"><span id="hss_01_0558__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0558__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0558__li217805813198"><span>Choose <strong id="hss_01_0558__b7566172515515">Dashboard</strong> and click the <strong id="hss_01_0558__b1254134616516">Free Health Check</strong> tab. Check the statistics of assets that are not protected.</span><p><div class="note" id="hss_01_0558__note198841721583"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0558__p388413211683">Only unprotected servers are displayed on this page.</p>
+</div></div>
+</p></li><li id="hss_01_0558__li768118587191"><span>In the <strong id="hss_01_0558__b1592155419533">Operation</strong> column of a server, click <strong id="hss_01_0558__b392115543536">View Report</strong> to view the health check report online.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0410.html">Server Security Dashboard</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0570.html b/docs/hss/umn/hss_01_0570.html
new file mode 100644
index 00000000..43c0dcc2
--- /dev/null
+++ b/docs/hss/umn/hss_01_0570.html
@@ -0,0 +1,48 @@
+<a name="hss_01_0570"></a><a name="hss_01_0570"></a>
+
+<h1 class="topictitle1">Installing an Agent</h1>
+<div id="body0000001214184444"><p id="hss_01_0570__p19413132415315">Install the agent on a server. Only then can the server be protected by HSS.</p>
+<div class="section" id="hss_01_0570__section15535315577"><h4 class="sectiontitle">Installing an Agent on a Server</h4><ol id="hss_01_0570__ol77955112819"><li id="hss_01_0570__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0570__li830314169200"><span>Click <span><img id="hss_01_0570__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0570__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0570__hss_01_0571_b14857117404"><span id="hss_01_0570__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0570__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0570__li11225184418269"><span>In the navigation pane, choose <strong id="hss_01_0570__hss_01_0374_b12151710164">Installation &amp; Configuration</strong>. Click the <strong id="hss_01_0570__hss_01_0374_b1022171718162">Agents</strong> tab.</span><p><div class="note" id="hss_01_0570__hss_01_0374_note1169413414298"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0570__hss_01_0374_hss_01_0546_p158536161110">If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.</p>
+</div></div>
+<div class="fignone" id="hss_01_0570__hss_01_0374_fig10324524113711"><span class="figcap"><b>Figure 1 </b>Viewing agent management</span><br><span><img id="hss_01_0570__hss_01_0374_image338913414108" src="en-us_image_0000001670681801.png"></span></div>
+</p></li><li id="hss_01_0570__li194932045132617"><span>Click <strong id="hss_01_0570__b662561719347">Offline</strong> to check the servers where the agent is not installed or is offline. <a href="#hss_01_0570__table1926618704616">Table 1</a> describes the parameters.</span><p>
+<div class="tablenoborder"><a name="hss_01_0570__table1926618704616"></a><a name="table1926618704616"></a><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0570__table1926618704616" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Offline agent parameters</caption><thead align="left"><tr id="hss_01_0570__row16266127154611"><th align="left" class="cellrowborder" valign="top" width="14.66%" id="mcps1.3.2.2.4.2.1.2.3.1.1"><p id="hss_01_0570__p9266375468">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="85.34%" id="mcps1.3.2.2.4.2.1.2.3.1.2"><p id="hss_01_0570__p22662074462">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0570__row1226617104612"><td class="cellrowborder" valign="top" width="14.66%" headers="mcps1.3.2.2.4.2.1.2.3.1.1 "><p id="hss_01_0570__p15266147134619">Server Name/ID</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.34%" headers="mcps1.3.2.2.4.2.1.2.3.1.2 "><p id="hss_01_0570__p6266167144612">Server name and ID</p>
+</td>
+</tr>
+<tr id="hss_01_0570__row12661472469"><td class="cellrowborder" valign="top" width="14.66%" headers="mcps1.3.2.2.4.2.1.2.3.1.1 "><p id="hss_01_0570__p92662074464">IP Address</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.34%" headers="mcps1.3.2.2.4.2.1.2.3.1.2 "><p id="hss_01_0570__p67691716205414">EIP or private IP address of a server</p>
+</td>
+</tr>
+<tr id="hss_01_0570__row112663754616"><td class="cellrowborder" valign="top" width="14.66%" headers="mcps1.3.2.2.4.2.1.2.3.1.1 "><p id="hss_01_0570__p326612711468">OS</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.34%" headers="mcps1.3.2.2.4.2.1.2.3.1.2 "><p id="hss_01_0570__p1266137164620">Server OS. Its value can be:</p>
+<ul id="hss_01_0570__ul7230182265511"><li id="hss_01_0570__li18230112225510"><strong id="hss_01_0570__b1615554934015">Linux</strong></li><li id="hss_01_0570__li1823032215514"><strong id="hss_01_0570__b46281954184019">Windows</strong></li></ul>
+</td>
+</tr>
+<tr id="hss_01_0570__row5266673467"><td class="cellrowborder" valign="top" width="14.66%" headers="mcps1.3.2.2.4.2.1.2.3.1.1 "><p id="hss_01_0570__p32666794619">Agent Status</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.34%" headers="mcps1.3.2.2.4.2.1.2.3.1.2 "><p id="hss_01_0570__p426667194615">Agent status of a server. Its value can be:</p>
+<ul id="hss_01_0570__ul6395135214554"><li id="hss_01_0570__li43959529559"><strong id="hss_01_0570__b592373114356">Offline</strong></li><li id="hss_01_0570__li127213541555"><strong id="hss_01_0570__b6673532183511">Not installed</strong></li><li id="hss_01_0570__li13260141142619"><strong id="hss_01_0570__b1999233521313">Installation failed</strong></li></ul>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</p></li><li id="hss_01_0570__li12658144934512"><span>Click <strong id="hss_01_0570__b040383114369">View Cause</strong> in the <strong id="hss_01_0570__b14191251113612">Operation</strong> column of a server to check why an agent is offline.</span></li><li id="hss_01_0570__li1792131234515"><span>Click <strong id="hss_01_0570__b184320287197">Install Agent</strong> in the <strong id="hss_01_0570__b13844182820194">Operation</strong> column. Download the agent package suitable for your server architecture and OS. For details about how to install the agent on a Linux server, see <a href="hss_01_0571.html">Installing an Agent on Linux</a>. For details about how to install the agent on a Windows server, see <a href="hss_01_0236.html">Installing the Agent for Windows</a>.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0317.html">Agent Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0571.html b/docs/hss/umn/hss_01_0571.html
new file mode 100644
index 00000000..4bb8d7c6
--- /dev/null
+++ b/docs/hss/umn/hss_01_0571.html
@@ -0,0 +1,34 @@
+<a name="hss_01_0571"></a><a name="hss_01_0571"></a>
+
+<h1 class="topictitle1">Installing an Agent on Linux</h1>
+<div id="body1571904120046"><p id="hss_01_0571__p7621496348">To enable workload protection for cloud servers, install the agent first.</p>
+<p id="hss_01_0571__p19404123933114">This topic describes how to install the agent on a server running Linux. </p>
+<div class="note" id="hss_01_0571__note2981125188"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0571__p14903122710529">CentOS 6.x is no longer updated or maintained on the Linux official website, and <span id="hss_01_0571__text3223847172113">HSS</span> no longer supports CentOS 6.x or earlier.</p>
+</div></div>
+<div class="section" id="hss_01_0571__section7764112663213"><h4 class="sectiontitle">Default Installation Path</h4><p id="hss_01_0571__p1956895711613">The agent installation path on servers running the Linux OS cannot be customized. The default path is:</p>
+<p id="hss_01_0571__p3813183513212"><span class="filepath" id="hss_01_0571__filepath174491267334"><b>/usr/local/hostguard/</b></span></p>
+</div>
+<div class="section" id="hss_01_0571__section145381446145316"><h4 class="sectiontitle">Prerequisites</h4><ul id="hss_01_0571__ul14164452932"><li id="hss_01_0571__li7291028193511">To install the agent on a server on another cloud, ensure the server runs Linux and can access the Internet.</li><li id="hss_01_0571__li187417148408">The Security-Enhanced Linux (SELinux) firewall has been disabled. The firewall affects agent installation and should remain disabled until the agent is installed.</li></ul>
+</div>
+<div class="section" id="hss_01_0571__section6318334193816"><h4 class="sectiontitle">Installation Precautions</h4><ul id="hss_01_0571__ul1418915315152"><li id="hss_01_0571__li152251144101011">For details about the OSs supported by the agent, see <a href="hss_01_0137.html#hss_01_0137__section3897426874">Supported OSs</a>.</li></ul>
+<ul id="hss_01_0571__ul13954121173916"><li id="hss_01_0571__li129547114393">Ensure the outbound rule of your security group allows access to the port 10180 on the 100.125.0.0/16 network segment. (This is the default setting.)</li><li id="hss_01_0571__li111221153114415">If any third-party security software has been installed on your server, the <span id="hss_01_0571__text9178151313292">HSS</span> agent may fail to be installed. In this case, disable or uninstall the software before installing the agent.</li><li id="hss_01_0571__li87621317131815">The available capacity of the disk where the agent is installed must be greater than 300 MB. Otherwise, the agent installation may fail.</li><li id="hss_01_0571__li10141438397">After the installation, it takes 5 to 10 minutes to update the agent status. You can check it on the "Servers" tab of the "Asset Management &gt; Servers &amp; Quota" page.</li></ul>
+</div>
+<div class="section" id="hss_01_0571__section1831315205214"><h4 class="sectiontitle">Installing an Agent Using Commands</h4><p id="hss_01_0571__p1057415562038">This procedure involves logging in to the server and running commands. It takes 3 to 5 minutes for the console to update the agent status after agent installation.</p>
+<ol id="hss_01_0571__ol15176145281320"><li id="hss_01_0571__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0571__li5393826124914"><span>Click <span><img id="hss_01_0571__image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0571__b74857118407">Security</strong> &gt; <strong id="hss_01_0571__b14857117404"><span id="hss_01_0571__text6485319406">HSS</span></strong>. The <span id="hss_01_0571__text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0571__li1355331813171"><span>In the navigation pane, choose <strong id="hss_01_0571__b750495927101425">Installation &amp; Configuration</strong>.</span></li><li id="hss_01_0571__li1593414415411"><span>Click the <strong id="hss_01_0571__b10254208111015">Agents</strong> tab. Click <strong id="hss_01_0571__b625458171015">Offline</strong>. In the <strong id="hss_01_0571__b12541386109">Operation</strong> column of a server, click <strong id="hss_01_0571__b2254989105">Install Agent</strong>.</span><p><div class="fignone" id="hss_01_0571__fig136171165917"><span class="figcap"><b>Figure 1 </b>Installing an Agent</span><br><span><img id="hss_01_0571__en-us_topic_0000001568522093_image374118511187" src="en-us_image_0000001563116264.png"></span></div>
+</p></li><li id="hss_01_0571__li94731335151714"><span>In the displayed dialog box, copy the command suitable for your system architecture and OS.</span></li><li id="hss_01_0571__li150194712310"><span>Remotely log in to the server where the agent is to be installed.</span><p><ul id="hss_01_0571__ul1269816162345"><li id="hss_01_0571__li348435333517">You can log in to the ECS management console and click <strong id="hss_01_0571__b3677050184215">Remote Login</strong> in the ECS list.</li><li id="hss_01_0571__li155531922183110">If your server has an EIP bound, you can also use a remote management tool, such as Xftp, SecureFX, WinSCP, PuTTY, or Xshell, to log in to the server and install the agent on the server as user <strong id="hss_01_0571__b12671131121915">root</strong>.</li></ul>
+</p></li><li id="hss_01_0571__li64993845212"><span>Paste the copied installation command and run it as user <strong id="hss_01_0571__b38765499249">root</strong> to install the agent on the server.</span><p><p id="hss_01_0571__p384331312323">If information similar to the following is displayed, the agent is successfully installed:</p>
+<pre class="screen" id="hss_01_0571__screen333210352532">Preparing...                  ########################## [100%]
+1:hostguard                   ########################## [100%]
+Hostguard is running.
+Hostguard installed.</pre>
+</p></li><li id="hss_01_0571__li2432249566"><span>Run the <strong id="hss_01_0571__b51171017410">service hostguard status</strong> command to check the running status of the agent.</span><p><p id="hss_01_0571__p1833933565313">If the following information is displayed, the agent is running properly:</p>
+<pre class="screen" id="hss_01_0571__screen133401435115312">Hostguard is running</pre>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0233.html">Installing an Agent</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0573.html b/docs/hss/umn/hss_01_0573.html
new file mode 100644
index 00000000..4fbf01bd
--- /dev/null
+++ b/docs/hss/umn/hss_01_0573.html
@@ -0,0 +1,16 @@
+<a name="hss_01_0573"></a><a name="hss_01_0573"></a>
+
+<h1 class="topictitle1">Exporting the Server List</h1>
+<div id="body0000001709902784"><p id="hss_01_0573__p37259510106">This section describes how to export the server protection list to your local PC.</p>
+<div class="section" id="hss_01_0573__section325715435916"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0573__ol141891818113517"><li id="hss_01_0573__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0573__li830314169200"><span>Click <span><img id="hss_01_0573__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0573__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0573__hss_01_0571_b14857117404"><span id="hss_01_0573__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0573__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0573__li1519121833514"><span>In the navigation pane on the left, choose <span class="menucascade" id="hss_01_0573__menucascade960820356613"><b><span class="uicontrol" id="hss_01_0573__uicontrol2608113519617">Asset Management</span></b> &gt; <b><span class="uicontrol" id="hss_01_0573__uicontrol16081335662">Servers &amp; Quota</span></b></span>.</span></li><li id="hss_01_0573__li172019317367"><span>In the upper right corner of the server list, click <strong id="hss_01_0573__b1265025417613">Export</strong> to export the server list details.</span><p><div class="note" id="hss_01_0573__note1678919147399"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="hss_01_0573__p127901914113913">The details of up to 1,000 servers can be exported at a time.</p>
+</div></div>
+<div class="fignone" id="hss_01_0573__fig15808142617810"><span class="figcap"><b>Figure 1 </b>Exporting the server list</span><br><span><img id="hss_01_0573__en-us_topic_0000001517162750_image943915455317" src="en-us_image_0000001563791430.png"></span></div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0397.html">Server Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0574.html b/docs/hss/umn/hss_01_0574.html
new file mode 100644
index 00000000..9baaa6ec
--- /dev/null
+++ b/docs/hss/umn/hss_01_0574.html
@@ -0,0 +1,23 @@
+<a name="hss_01_0574"></a><a name="hss_01_0574"></a>
+
+<h1 class="topictitle1">Exporting the vulnerability list</h1>
+<div id="body0000001757709141"><p id="hss_01_0574__p37259510106">You can refer to this section to export the vulnerability list.</p>
+<div class="section" id="hss_01_0574__section397683274214"><h4 class="sectiontitle">Prerequisite</h4><ul id="hss_01_0574__ul125501425142218"><li id="hss_01_0574__li13708121062517">HSS enterprise or later edition has been enabled for the server.</li><li id="hss_01_0574__li555182532219">The <strong id="hss_01_0574__b49461753121019">Server Status</strong> is <strong id="hss_01_0574__b1694685361016">Running</strong>, <strong id="hss_01_0574__b149461953201017">Agent Status</strong> is <strong id="hss_01_0574__b79461253151018">Online</strong>, and <strong id="hss_01_0574__b1946185351018">Protection Status</strong> is <strong id="hss_01_0574__b19946453161011">Protected</strong>.</li></ul>
+</div>
+<div class="section" id="hss_01_0574__section75981910554"><h4 class="sectiontitle">Exporting the Vulnerability List (Vulnerability View)</h4><ol id="hss_01_0574__ol10103172595512"><li id="hss_01_0574__li4103625145512"><span>Log in to the management console.</span></li><li id="hss_01_0574__li51046253555"><span>In the navigation pane, choose <strong id="hss_01_0574__b14891054935">Prediction</strong> &gt; <strong id="hss_01_0574__b1949013540318">Vulnerabilities</strong>.</span></li><li id="hss_01_0574__li1010418256554"><span>Click <strong id="hss_01_0574__b5669103047">Export</strong> above the vulnerability list to export the vulnerability list.</span><p><p id="hss_01_0574__p199844584412">Up to 30,000 vulnerability records can be exported at a time.</p>
+</p></li><li id="hss_01_0574__li104026114315"><span>View the export status in the upper part of the <strong id="hss_01_0574__b17547131291219">Vulnerabilities</strong> page. After the export is successful, obtain the exported information from the default file download address on the local host.</span><p><div class="notice" id="hss_01_0574__note2041626204314"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="hss_01_0574__p5420266433">Do not close the browser page during the export. Otherwise, the export task will be interrupted.</p>
+</div></div>
+</p></li></ol>
+</div>
+<div class="section" id="hss_01_0574__section1490203214123"><h4 class="sectiontitle">Exporting the Vulnerability List (Server View)</h4><ol id="hss_01_0574__ol1733551419165"><li id="hss_01_0574__li14335161419165"><span>Log in to the management console.</span></li><li id="hss_01_0574__li6339131431613"><span>In the navigation pane, choose <strong id="hss_01_0574__b1280020396121">Prediction</strong> &gt; <strong id="hss_01_0574__b1780013910124">Vulnerabilities</strong>.</span></li><li id="hss_01_0574__li834091481619"><span>In the upper right corner of the <strong id="hss_01_0574__b792475951">Vulnerabilities</strong> page, click the <span class="wintitle" id="hss_01_0574__wintitle179251354510"><b>Server view</b></span> tab.</span></li><li id="hss_01_0574__li6296125403214"><span>Click <strong id="hss_01_0574__b167721098267">Export</strong> above the vulnerability list to export the vulnerability list.</span><p><p id="hss_01_0574__p185222558323">Up to 30,000 vulnerability records can be exported at a time.</p>
+</p></li><li id="hss_01_0574__li1159933513389"><span>View the export status in the upper part of the <strong id="hss_01_0574__b91058111155">Vulnerabilities</strong> page. After the export is successful, obtain the exported information from the default file download address on the local host.</span><p><div class="notice" id="hss_01_0574__note1450316327415"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="hss_01_0574__p57839369384">Do not close the browser page during the export. Otherwise, the export task will be interrupted.</p>
+</div></div>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0140.html">Vulnerability Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0576.html b/docs/hss/umn/hss_01_0576.html
new file mode 100644
index 00000000..ba058a77
--- /dev/null
+++ b/docs/hss/umn/hss_01_0576.html
@@ -0,0 +1,18 @@
+<a name="hss_01_0576"></a><a name="hss_01_0576"></a>
+
+<h1 class="topictitle1">Viewing WTP Reports</h1>
+<div id="body1575271954398"><p id="hss_01_0576__p1441112119916">Once WTP is enabled, <span id="hss_01_0576__text2897154921710">HSS</span> will comprehensively check protected directories you specified. You can check records about detected tampering attacks.</p>
+<div class="section" id="hss_01_0576__section112495541074"><h4 class="sectiontitle">Constraints</h4><p id="hss_01_0576__hss_01_0106_p15131401586">Only the servers that are protected by the HSS WTP edition support the operations described in this section.</p>
+</div>
+<div class="section" id="hss_01_0576__section2256777914731"><h4 class="sectiontitle">Prerequisites</h4><p id="hss_01_0576__p227549105812"><span class="parmname" id="hss_01_0576__parmname5535426155916"><b>Agent Status</b></span> of the server is <span class="parmvalue" id="hss_01_0576__parmvalue17535132615599"><b>Online</b></span>, and its <span class="parmname" id="hss_01_0576__parmname353572616593"><b>WTP Status</b></span> is <span class="parmvalue" id="hss_01_0576__parmvalue11535426105915"><b>Enabled</b></span>.</p>
+</div>
+<div class="section" id="hss_01_0576__section91502117917"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0576__ol511145011130"><li id="hss_01_0576__li526135512916"><span>Log in to the management console.</span></li><li id="hss_01_0576__li830314169200"><span>Click <span><img id="hss_01_0576__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0576__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0576__hss_01_0571_b14857117404"><span id="hss_01_0576__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0576__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0576__li36576201238"><span>Choose <strong id="hss_01_0576__b3333123095017">Prevention</strong> &gt; <strong id="hss_01_0576__b633373011501">Web Tamper Protection</strong> and click the <strong id="hss_01_0576__b153336305505">Servers</strong> tab. Click <strong id="hss_01_0576__b20333153065011">View Report</strong> in the <strong id="hss_01_0576__b11334143075017">Operation</strong> column of a server. Click <strong id="hss_01_0576__b18334133019500">More</strong> &gt; <strong id="hss_01_0576__b33345305504">View Report</strong> in the <strong id="hss_01_0576__b8334930155019">Operation</strong> column of a server.</span><p><div class="fignone" id="hss_01_0576__fig2994822204916"><span class="figcap"><b>Figure 1 </b>Viewing a protection report</span><br><span><img id="hss_01_0576__image0493122203412" src="en-us_image_0000001808223252.png"></span></div>
+</p></li><li id="hss_01_0576__li5635341143243"><span>View details on the report page.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0153.html">WTP</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0590.html b/docs/hss/umn/hss_01_0590.html
new file mode 100644
index 00000000..139fa558
--- /dev/null
+++ b/docs/hss/umn/hss_01_0590.html
@@ -0,0 +1,1717 @@
+<a name="hss_01_0590"></a><a name="hss_01_0590"></a>
+
+<h1 class="topictitle1">Editions and Features</h1>
+<div id="body1566301166171"><p id="hss_01_0590__p6684848102213"><span id="hss_01_0590__text2018843103813">HSS</span> comes in the enterprise, premium, Web Tamper Protection (WTP), and container editions, providing asset management, vulnerability management, baseline check, intrusion detection, ransomware protection, web tamper protection, and container image security functions. For details about the features of the editions, see <a href="#hss_01_0590__section954711012311">Edition Details</a>.</p>
+<div class="section" id="hss_01_0590__section955112551442"><h4 class="sectiontitle">Features</h4><p id="hss_01_0590__p10401045774"><span id="hss_01_0590__text1127243906">HSS</span> provides asset management, baseline check, ransomware prevention, and intrusion detection features, enhancing server security in all aspects. For details about the features of different editions, see <a href="#hss_01_0590__section954711012311">Edition Details</a>.</p>
+
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0590__table1387416401346" frame="border" border="1" rules="all"><caption><b>Table 1 </b><span id="hss_01_0590__text166763311628">HSS</span> functions and features</caption><thead align="left"><tr id="hss_01_0590__row158753405420"><th align="left" class="cellrowborder" valign="top" width="14.680000000000001%" id="mcps1.3.2.3.2.3.1.1"><p id="hss_01_0590__p8875540143">Feature</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="85.32%" id="mcps1.3.2.3.2.3.1.2"><p id="hss_01_0590__p187519401411">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0590__row287611405414"><td class="cellrowborder" valign="top" width="14.680000000000001%" headers="mcps1.3.2.3.2.3.1.1 "><p id="hss_01_0590__p178761403415">Asset management</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.32%" headers="mcps1.3.2.3.2.3.1.2 "><p id="hss_01_0590__p4852114523511">Provide centralized asset overview, asset fingerprint management, server management, and container management. You can check your asset running status, asset fingerprints, and asset types; and manage assets by server or container.</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row1987612401543"><td class="cellrowborder" valign="top" width="14.680000000000001%" headers="mcps1.3.2.3.2.3.1.1 "><p id="hss_01_0590__p187610401547">Vulnerability management</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.32%" headers="mcps1.3.2.3.2.3.1.2 "><p id="hss_01_0590__p38452251419">Detect vulnerabilities and risks in Linux, Windows, Web content management systems (Web-CMS), and applications.</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row687624018413"><td class="cellrowborder" valign="top" width="14.680000000000001%" headers="mcps1.3.2.3.2.3.1.1 "><p id="hss_01_0590__p168762401141">Baseline check</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.32%" headers="mcps1.3.2.3.2.3.1.2 "><p id="hss_01_0590__p48761640447">Scan for unsafe settings, weak passwords, and password complexity policies in server OS and key software.</p>
+<p id="hss_01_0590__p11886165813154">A security practice baseline can be used for scans. You can customize baseline sub-items used in scan.</p>
+<p id="hss_01_0590__p16611641228">You can repair and verify the detected risks.</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row108766401642"><td class="cellrowborder" valign="top" width="14.680000000000001%" headers="mcps1.3.2.3.2.3.1.1 "><p id="hss_01_0590__p68766407414">Container image security</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.32%" headers="mcps1.3.2.3.2.3.1.2 "><p id="hss_01_0590__p8429113291419">Scan the images that are running or displayed in your image list, and provide suggestions on how to fix vulnerabilities and malicious files.</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row1187710405411"><td class="cellrowborder" valign="top" width="14.680000000000001%" headers="mcps1.3.2.3.2.3.1.1 "><p id="hss_01_0590__p3877104018413">Application protection</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.32%" headers="mcps1.3.2.3.2.3.1.2 "><p id="hss_01_0590__p17610640121412">Protect running applications. You simply need to add probes to applications, without having to modify application files.</p>
+<p id="hss_01_0590__p1997112181914">Currently, only Linux servers are supported, and only Java applications can be connected.</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row1387764017416"><td class="cellrowborder" valign="top" width="14.680000000000001%" headers="mcps1.3.2.3.2.3.1.1 "><p id="hss_01_0590__p587704015417">Web page tampering prevention</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.32%" headers="mcps1.3.2.3.2.3.1.2 "><p id="hss_01_0590__p128771940843">Detect and prevent tampering of files in specified directories, including web pages, documents, and images, and quickly restore them using valid backup files.</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row78772040847"><td class="cellrowborder" valign="top" width="14.680000000000001%" headers="mcps1.3.2.3.2.3.1.1 "><p id="hss_01_0590__p1587718401142">Ransomware prevention</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.32%" headers="mcps1.3.2.3.2.3.1.2 "><p id="hss_01_0590__p3460196102011">Detect known ransomware and support user-defined ransomware backup and restoration policies.</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row138771140749"><td class="cellrowborder" valign="top" width="14.680000000000001%" headers="mcps1.3.2.3.2.3.1.1 "><p id="hss_01_0590__p1887774014420">File integrity monitoring</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.32%" headers="mcps1.3.2.3.2.3.1.2 "><p id="hss_01_0590__p128101511171514">Check the files in the Linux OS, applications, and other components to detect tampering.</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row13878340741"><td class="cellrowborder" valign="top" width="14.680000000000001%" headers="mcps1.3.2.3.2.3.1.1 "><p id="hss_01_0590__p687815407419">Intrusion detection</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.32%" headers="mcps1.3.2.3.2.3.1.2 "><p id="hss_01_0590__p587819404410">Identify and prevent intrusion to servers, discover risks in real time, detect and kill malicious programs, and identify web shells and other threats.</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row587884012414"><td class="cellrowborder" valign="top" width="14.680000000000001%" headers="mcps1.3.2.3.2.3.1.1 "><p id="hss_01_0590__p10878104011412">Container intrusion detection</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.32%" headers="mcps1.3.2.3.2.3.1.2 "><p id="hss_01_0590__p1887810401746">Scan running containers for malicious programs including miners and ransomware; detect non-compliant security policies, file tampering, and container escape; and provide suggestions.</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row1787818403413"><td class="cellrowborder" valign="top" width="14.680000000000001%" headers="mcps1.3.2.3.2.3.1.1 "><p id="hss_01_0590__p28788407414">Whitelist management</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.32%" headers="mcps1.3.2.3.2.3.1.2 "><p id="hss_01_0590__p147185281156">To reduce false alarms, import events to and export events from the whitelist. Whitelisted events will not trigger alarms.</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row12427431468"><td class="cellrowborder" valign="top" width="14.680000000000001%" headers="mcps1.3.2.3.2.3.1.1 "><p id="hss_01_0590__p94316434614">Policy management</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.32%" headers="mcps1.3.2.3.2.3.1.2 "><p id="hss_01_0590__p114319430611">You can group policies and servers to batch apply policies to servers, easily adapting to your business scenarios.</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row17754253114613"><td class="cellrowborder" valign="top" width="14.680000000000001%" headers="mcps1.3.2.3.2.3.1.1 "><p id="hss_01_0590__p1775585314467">Security report</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.32%" headers="mcps1.3.2.3.2.3.1.2 "><p id="hss_01_0590__p6755185311469">Check weekly or monthly server security trend, key security events, and risks.</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row13911487616"><td class="cellrowborder" valign="top" width="14.680000000000001%" headers="mcps1.3.2.3.2.3.1.1 "><p id="hss_01_0590__p1939134811617">Security configuration</p>
+</td>
+<td class="cellrowborder" valign="top" width="85.32%" headers="mcps1.3.2.3.2.3.1.2 "><p id="hss_01_0590__p11143193721519">Configure common login locations, common login IP addresses, the SSH login IP address whitelist, and automatic isolation and killing of malicious programs.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+<div class="section" id="hss_01_0590__section1030973511313"><h4 class="sectiontitle">Recommended Editions</h4><ul id="hss_01_0590__ul2072514717410"><li id="hss_01_0590__li15867132712104">If your servers store important data assets, have high security risks, use publicly available EIPs, or there are databases running on your servers, you are advised to enable the premium or Web Tamper Protection edition.</li><li id="hss_01_0590__li816084316280">For servers that need to protect websites and applications from tampering, the WTP edition is recommended.</li><li id="hss_01_0590__li162982962914">For containers that need to enhance image security, container runtime security, container edition is recommended.<div class="notice" id="hss_01_0590__note15741114975112"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><ul id="hss_01_0590__ul14453401074"><li id="hss_01_0590__li84451740076">You are advised to <strong id="hss_01_0590__b16021506456">deploy <span id="hss_01_0590__text1324033120315">HSS</span> on all your servers</strong> so that if a virus infects one of them, it will not be able to spread to others and damage your entire network.</li></ul>
+</div></div>
+</li></ul>
+</div>
+<div class="section" id="hss_01_0590__section954711012311"><a name="hss_01_0590__section954711012311"></a><a name="section954711012311"></a><h4 class="sectiontitle">Edition Details</h4>
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="hss_01_0590__table171011902716" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Editions</caption><thead align="left"><tr id="hss_01_0590__row141011296273"><th align="left" class="cellrowborder" valign="top" width="7.068516912402427%" id="mcps1.3.4.2.2.10.1.1"><p id="hss_01_0590__p1010120912275">Function</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="8.586296617519514%" id="mcps1.3.4.2.2.10.1.2"><p id="hss_01_0590__p7102397275">Item</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="29.24978317432784%" id="mcps1.3.4.2.2.10.1.3"><p id="hss_01_0590__p171021192276">Description</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="6.938421509106678%" id="mcps1.3.4.2.2.10.1.4"><p id="hss_01_0590__p7102129142715">Enterprise</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="7.133564614050303%" id="mcps1.3.4.2.2.10.1.5"><p id="hss_01_0590__p41026912716">Premium</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="7.740676496097137%" id="mcps1.3.4.2.2.10.1.6"><p id="hss_01_0590__p410210914278">WTP</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="7.111882046834345%" id="mcps1.3.4.2.2.10.1.7"><p id="hss_01_0590__p141028912272">Container</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="10.255854293148307%" id="mcps1.3.4.2.2.10.1.8"><p id="hss_01_0590__p141024913276">Supported OS</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="15.915004336513444%" id="mcps1.3.4.2.2.10.1.9"><p id="hss_01_0590__p910279132713">Check Frequency</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="hss_01_0590__row110229142714"><td class="cellrowborder" colspan="2" valign="top" headers="mcps1.3.4.2.2.10.1.1 mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p12102199192715">Assets</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p7102189112714">Collect statistics on asset status and usage of all servers.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p1010219912710">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p7102169182718">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p151026914271">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p1810316911279">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p510369152716">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.9 "><p id="hss_01_0590__p1910316917271">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row101031394276"><td class="cellrowborder" colspan="2" valign="top" headers="mcps1.3.4.2.2.10.1.1 mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p1210318919279">Servers &amp; Quota</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p16103179142716">Manage all server assets, including their protection status, quotas, and policy allocation.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p2010316912720">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p1110319912710">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p171038932719">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p191037918275">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p1110369152717">Linux and Windows</p>
+<p id="hss_01_0590__p18103596273">Note: Only Linux agents can be installed in batches.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.9 "><p id="hss_01_0590__p51031297274">-</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row310317942712"><td class="cellrowborder" colspan="2" valign="top" headers="mcps1.3.4.2.2.10.1.1 mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p610349162711">Containers &amp; Quota</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p1910314962711">Manage container nodes and container images.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p8104119182711">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p910412922720">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p2104149152715">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p41047920278">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p121045932718">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.9 "><p id="hss_01_0590__p151042090276">-</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row91041292275"><td class="cellrowborder" rowspan="12" valign="top" width="7.068516912402427%" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p4104139122720">Asset Fingerprints</p>
+</td>
+<td class="cellrowborder" valign="top" width="8.586296617519514%" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p313944553017">Account</p>
+</td>
+<td class="cellrowborder" valign="top" width="29.24978317432784%" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p3139145203019">Check and manage server accounts all in one place.</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.938421509106678%" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p61395451309">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.133564614050303%" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p1113994533016">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.740676496097137%" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p111391445133015">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.111882046834345%" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p1724592912470">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="10.255854293148307%" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p1113994543015">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.915004336513444%" headers="mcps1.3.4.2.2.10.1.9 "><p id="hss_01_0590__p6139104553012">Automatic check every hour</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row010515962714"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p1613964513011">Open ports</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p5139154513303">Check open ports all in one place and identify high-risk and unknown ports.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p714016450300">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p131401345113019">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p15140184512306">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p42475292479">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p111402045113015">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p14140134573012">Automated check every 30 seconds</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row1610517918273"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p16140104573013">Processes</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p1914019453306">Check running applications all in one place and identify malicious applications.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p314044553017">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p19140174543013">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p8141114519307">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p624813293470">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p5141154593010">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p1617491912244">Automatic check every hour</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row1810611992718"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p7141545133012">Installed software</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p8141104513015">Check and manage server software all in one place and identify insecure versions.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p7141124520307">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p3141124533014">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p41422452305">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p1249102915477">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p4196174295016">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p18142124533019">Automatic check every day</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row210610932716"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p91431945193017">Auto-startup</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p17143104543014">Check auto-startup entries and collect statistics on entry changes in a timely manner.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p4143104511307">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p121434459303">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p7143174512308">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p17250172913477">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p13143745133016">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p21311735152417">Automatic check every hour</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row710719192719"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p414474563012">Web applications</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p2144154593020">Check details about software used for web content push and release, including versions, paths, configuration files, and associated processes of all software.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p314424516304">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p191440453309">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p5144134519309">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p2025172914472">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p41441245143011">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p111441451304">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row11081397271"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p5144154523016">Web services</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p1514494513016">Check details about the software used for web content access, including versions, paths, configuration files, and associated processes of all software.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p10145124553018">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p51457454308">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p6145144513011">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p625312919476">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p1714518456303">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p2755313254">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row7109292277"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p0145184518303">Web framework</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p51451945173013">Check statistics about frameworks used for web content presentation, including their versions, paths, and associated processes.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p1514584514308">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p14145184583018">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p91461545183019">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p12254122944716">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p4751216135015">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p6146194518308">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row82469565281"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p12146184533018">Websites</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p17146174511307">You can check statistics about web directories and sites that can be accessed from the Internet. You can view the directories and permissions, access paths, external ports, and key processes of websites.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p13146245113011">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p101462451309">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p514604515300">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p1525617294476">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p17638102213491">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p11471845123010">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row589419587281"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p014754593017">Middleware</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p1614754518305">Check information about servers, versions, paths, and processes associated with middleware.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p19147345163017">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p21471245173019">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p614764573015">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p192591429114711">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p17147144514304">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p214719453305">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row1312813162911"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p2148114533015">Databases</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p414894510302">Check details about software that provides data storage, including versions, paths, configuration files, and associated processes of all software.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p1914812451303">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p151481545173012">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p61488455303">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p02608296473">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p2148184593012">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p141481245143010">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row141101892272"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p4148445173015">Kernel module</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p10148145153018">Check information about all the program module files running in kernels, including associated servers, version numbers, module descriptions, driver file paths, file permissions, and file hashes.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p31491345133018">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p14149134520303">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p15149124519306">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p32611298471">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p1314919452309">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p12678114132610">Once a week (04:10 a.m. every Monday)</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row3110992276"><td class="cellrowborder" rowspan="4" valign="top" width="7.068516912402427%" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p16110119162711">Vulnerability Management</p>
+</td>
+<td class="cellrowborder" valign="top" width="8.586296617519514%" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p4115121675">Linux vulnerability detection</p>
+</td>
+<td class="cellrowborder" valign="top" width="29.24978317432784%" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p1111514110714">Based on the vulnerability database, check and handle vulnerabilities in the software (such as kernel, OpenSSL, vim, glibc) you obtained from official Linux sources and have not compiled.</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.938421509106678%" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p1811116911276">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.133564614050303%" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p41116912276">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.740676496097137%" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p12111129122715">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.111882046834345%" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p01119902714">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="10.255854293148307%" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p8111179112713">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.915004336513444%" headers="mcps1.3.4.2.2.10.1.9 "><ul id="hss_01_0590__ul183596231272"><li id="hss_01_0590__li8359423142710">Automatic scan (reporting based on the software asset collection period)</li><li id="hss_01_0590__li33592233276">Scheduled scan (once a week by default)</li><li id="hss_01_0590__li93591523102716">Manual scan</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0590__row11498124914616"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p13115811676">Windows vulnerability detection</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p1011521978">Detect vulnerabilities in Windows OS based on the official patch releases of Microsoft.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p37031616977">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p177039164712">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p8703161614711">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p4703416172">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p629242415711">Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><ul id="hss_01_0590__ul1356220331275"><li id="hss_01_0590__li9563933152720">Automatic scan (reporting based on the software asset collection period)</li><li id="hss_01_0590__li1956353342719">Scheduled scan (once a week by default)</li><li id="hss_01_0590__li1756313316277">Manual scan</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0590__row1311169182713"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p21151211577">Web-CMS vulnerability detection</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p71168110719">Scan for Web-CMS vulnerabilities in web directories and files.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p411289152712">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p31121496274">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p14112189182718">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p171125992716">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p141121495274">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><ul id="hss_01_0590__ul1174104192715"><li id="hss_01_0590__li19741114142712">Automatic scan (reporting based on the software asset collection period)</li><li id="hss_01_0590__li7742134172720">Scheduled scan (once a week by default)</li><li id="hss_01_0590__li3742941162710">Manual scan</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0590__row1311217919273"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p011616114718">Application vulnerability detection</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p1711617118715">Detect vulnerabilities in JAR packages, ELF files, and other files of open source software, such as Log4j and spring-core.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p9113109122716">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p6113195278">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p2113198275">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p1811320992717">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p11113693274">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><ul id="hss_01_0590__ul171131492278"><li id="hss_01_0590__li1211499192719">Once a week (05:00 a.m. every Monday)</li><li id="hss_01_0590__li1114098273">Manual scan</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0590__row411410932712"><td class="cellrowborder" rowspan="3" valign="top" width="7.068516912402427%" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p9114129152719">Unsafe settings check</p>
+</td>
+<td class="cellrowborder" valign="top" width="8.586296617519514%" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p13114109182712">Password policy check</p>
+</td>
+<td class="cellrowborder" valign="top" width="29.24978317432784%" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p1311489172717">Check password complexity policies and modify them based on suggestions provided by HSS to improve password security.</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.938421509106678%" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p21151296274">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.133564614050303%" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p61151597279">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.740676496097137%" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p211514912274">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.111882046834345%" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p1111515916273">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="10.255854293148307%" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p1611518917271">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.915004336513444%" headers="mcps1.3.4.2.2.10.1.9 "><ul id="hss_01_0590__ul191152912279"><li id="hss_01_0590__li2115793276">Automatic check in the early morning every day</li><li id="hss_01_0590__li311519912713">Manual scan</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0590__row1811519992717"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p1211669102716">Weak password check</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p18116129152714">Change weak passwords to stronger ones based on HSS scan results and suggestions.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p1011619913274">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p101161932710">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p01161496273">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p31161197274">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p131163982717">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><ul id="hss_01_0590__ul1211659172712"><li id="hss_01_0590__li911629152712">Automatic check in the early morning every day</li><li id="hss_01_0590__li811616962715">Manual scan</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0590__row1311612918271"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p1211614919272">Unsafe configurations</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p3117149162715">Check the unsafe Tomcat, Nginx, and SSH login configurations found by HSS.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p17117791273">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p121177942716">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p10117189162711">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p7117396271">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p14117179102717">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><ul id="hss_01_0590__ul1911712932719"><li id="hss_01_0590__li21172911271">Automatic check in the early morning every day</li><li id="hss_01_0590__li191170919279">Manual scan</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0590__row10117169192719"><td class="cellrowborder" rowspan="3" valign="top" width="7.068516912402427%" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p611713942713">Container image security</p>
+</td>
+<td class="cellrowborder" valign="top" width="8.586296617519514%" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p141181794276">Container image vulnerability management</p>
+</td>
+<td class="cellrowborder" valign="top" width="29.24978317432784%" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p71181916275">Detect and manage vulnerabilities in local images and private image repositories based on a vulnerability database, and handle critical vulnerabilities in a timely manner.</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.938421509106678%" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p6118694275">×</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.133564614050303%" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p811819902718">×</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.740676496097137%" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p011809102715">×</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.111882046834345%" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p211811920276">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="10.255854293148307%" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p171184922717">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.915004336513444%" headers="mcps1.3.4.2.2.10.1.9 "><ul id="hss_01_0590__ul1111819102712"><li id="hss_01_0590__li19118696277">Automatic check in the early morning every day</li><li id="hss_01_0590__li01191795271">Manual scan</li></ul>
+</td>
+</tr>
+<tr id="hss_01_0590__row101194910271"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p51196962712">Malicious image file detection</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p121194972713">Scan images for malicious files (such as Trojans, worms, viruses, and adware) and identify risks.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p9119391277">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p9119795273">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p201198992711">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p151193912273">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p511939182716">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p911919917272">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row111191499271"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p912013912271">Image baseline check</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p112020992717">Check for insecure configurations based on 18 types of container baselines.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p31207932718">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p1812079122716">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p2012079142712">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p1912019152710">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p13120159152717">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p181211096273">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row3121139132719"><td class="cellrowborder" rowspan="14" valign="top" width="7.068516912402427%" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p11121598275">Application protection</p>
+</td>
+<td class="cellrowborder" valign="top" width="8.586296617519514%" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p112179142710">SQL injection</p>
+</td>
+<td class="cellrowborder" valign="top" width="29.24978317432784%" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p1512139122713">Detect and defend against SQL injection attacks, and check web applications for related vulnerabilities.</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.938421509106678%" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p12121189132719">×</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.133564614050303%" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p712119102713">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.740676496097137%" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p1121790278">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.111882046834345%" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p151216962716">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="10.255854293148307%" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p112120911277">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.915004336513444%" headers="mcps1.3.4.2.2.10.1.9 "><p id="hss_01_0590__p1912114915278">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row13122179112719"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p1612211914274">OS command injection</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p512215962720">Detect and defend against remote OS command injection attacks and check web applications for related vulnerabilities.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p212215912273">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p1612219182718">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p181220916273">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p1012210972716">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p1012279112710">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p1212211992715">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row11222922716"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p8122891272">XSS</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p14123699271">Detect and defend against stored cross-site scripting (XSS) injection attacks.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p012316982717">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p512319952719">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p141238914278">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p31231992274">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p18123296272">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p201233917279">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row51236942716"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p212315913274">Log4jRCE vulnerability</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p1012414922712">Detect and defend against remote code execution.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p1512479112711">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p1124295276">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p201243942715">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p17124169202711">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p01255952712">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p412559192716">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row11125179192719"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p712519914278">Web shell upload</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p15125690271">Detect and defend against attacks that upload dangerous files, change file names, or change file name extension types; and check web applications for related vulnerabilities.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p161251693270">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p1412569162714">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p181269992717">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p11126991279">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p14126209112719">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p9126179182712">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row19126897275"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p2126295272">XXE attack</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p16126109122716">Detect and defend against XML External Entity Injection (XXE) attacks, and check web applications for related vulnerabilities.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p201261397279">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p112616919279">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p1212729122718">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p812749142720">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p1912718919279">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p512717919277">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row4127129112717"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p17127209172710">Deserialization input</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p141272962711">Detect deserialization attacks that exploit unsafe classes.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p1712719932719">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p71281595276">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p131281197276">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p91289982719">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p1912899192713">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p712812942713">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row312879192714"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p1612899162712">File directory traversal</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p181299952719">Check whether sensitive directories or files are accessed.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p21297952716">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p71299910272">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p1812920942710">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p1412920915276">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p812915942711">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p1112916952711">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row31298911276"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p51295912719">Struts2 OGNL</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p18129994273">Detect OGNL code execution.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p1913059172713">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p1113029162719">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p81308914279">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p913059122715">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p11130149172718">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p31301295275">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row1113012910274"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p71301592271">Command execution using JSP</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p17130209172712">Detect command execution using JSP.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p1013199182714">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p2131109162712">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p13131199162717">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p151316912277">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p1313139112718">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p91311494278">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row1913179192719"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p7131292277">File deletion using JSP</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p151321912711">Detects file deletion using JSP.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p141329913273">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p1913218952715">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p19132491276">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p41320914277">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p1213299132719">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p91329952716">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row31321913278"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p113218952715">Database connection exception</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p5133693270">Detect authentication and communication exceptions thrown by database connections.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p113313912716">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p1113315912274">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p613309102713">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p19133109112719">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p41336917270">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p1613315912273">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row16133159122716"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p101331494275">0-day vulnerability</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p19133098273">Check whether the stack hash of a command is in the whitelist of the web application.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p713459112712">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p18134190276">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p181341195271">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p9134179142712">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p1134293279">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p141346932715">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row41341196272"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p513418910277">SecurityManager permission exception</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p12134192272">Detect exceptions thrown by SecurityManager.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p14135139152710">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p151359913273">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p013549172711">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p91352912272">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p5135129122713">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p713518932718">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row11356982711"><td class="cellrowborder" rowspan="2" valign="top" width="7.068516912402427%" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p18135159112715">Web page tampering prevention</p>
+</td>
+<td class="cellrowborder" valign="top" width="8.586296617519514%" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p21356912719">Static WTP</p>
+</td>
+<td class="cellrowborder" valign="top" width="29.24978317432784%" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p17135795272">Protect the static web page files on your website servers from malicious modification.</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.938421509106678%" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p191365919275">×</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.133564614050303%" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p113614912713">×</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.740676496097137%" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p161361294274">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.111882046834345%" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p71363942710">×</p>
+</td>
+<td class="cellrowborder" valign="top" width="10.255854293148307%" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p213619162710">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.915004336513444%" headers="mcps1.3.4.2.2.10.1.9 "><p id="hss_01_0590__p141366911272">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row2136139162710"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p413629112719">Dynamic WTP</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p1813699192719">Protect the dynamic web page files in your website databases from malicious modification.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p191371292271">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p4137139122718">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p19137129132712">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p413716913274">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p1213713972711">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p913715917275">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row1913714919277"><td class="cellrowborder" valign="top" width="7.068516912402427%" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p191373914271">Ransomware prevention</p>
+</td>
+<td class="cellrowborder" valign="top" width="8.586296617519514%" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p1113849192716">Ransomware prevention</p>
+</td>
+<td class="cellrowborder" valign="top" width="29.24978317432784%" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p1813814912275">Help you identify and detect known ransomware attacks and restore services using ransomware backups.</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.938421509106678%" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p1413816911271">×</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.133564614050303%" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p413817915278">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.740676496097137%" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p1138139112719">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.111882046834345%" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p1713816982713">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="10.255854293148307%" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p191381194277">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.915004336513444%" headers="mcps1.3.4.2.2.10.1.9 "><p id="hss_01_0590__p31385922712">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row14138596277"><td class="cellrowborder" valign="top" width="7.068516912402427%" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p113912902711">File integrity monitoring</p>
+</td>
+<td class="cellrowborder" valign="top" width="8.586296617519514%" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p181397918274">File Integrity</p>
+</td>
+<td class="cellrowborder" valign="top" width="29.24978317432784%" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p1613917917271">Check the files in the Linux OS, applications, and other components to detect tampering.</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.938421509106678%" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p201391492273">×</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.133564614050303%" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p1813911952712">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.740676496097137%" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p2139189112715">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.111882046834345%" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p813910919278">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="10.255854293148307%" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p913999112712">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.915004336513444%" headers="mcps1.3.4.2.2.10.1.9 "><p id="hss_01_0590__p6140209112717">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row9140794271"><td class="cellrowborder" rowspan="30" valign="top" width="7.068516912402427%" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p181408917275">Intrusion detection</p>
+</td>
+<td class="cellrowborder" valign="top" width="8.586296617519514%" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p168772718449">Malicious program</p>
+</td>
+<td class="cellrowborder" valign="top" width="29.24978317432784%" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p18687827144420">Check and handle detected malicious programs all in one place, including web shells, Trojan, mining software, worms, and viruses.</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.938421509106678%" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p76241849111818">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.133564614050303%" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p116242498185">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.740676496097137%" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p36242493182">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.111882046834345%" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p26243497185">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="10.255854293148307%" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1762444913180">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.915004336513444%" headers="mcps1.3.4.2.2.10.1.9 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1867312142015">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row69631941123212"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p14717125232311">Virus</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p27171952132320">Check servers in real time and report alarms for viruses detected on servers.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p9655830101416">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1329783214141">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p070933314142">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p4623812146">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p124661323161720">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p7749205741717">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row1371415894815"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p12694354172319">Trojan</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p169425402318">Detect programs that are hidden in normal programs and have special functions such as damaging and deleting files, sending passwords, and recording keyboards. If a program is detected, an alarm is reported immediately.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p16551030151419">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1529711323141">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p13710183321414">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p146738201416">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p790711293173">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p20750145701718">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row9559239491"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p78726564231">Botnet</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1487295620233">Detect whether zombie programs that have been spread exist in servers and report alarms immediately after detecting them.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p166550307142">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1629815323148">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p137101533101416">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p47153831415">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p265054911177">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1275012572176">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row191481499273"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p20390124112418">Web shell</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p639013244240">Detect web shell attacks in the server system in real time and report alarms immediately after detecting them.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p3656113071420">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p132984323143">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p4710153310144">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p177338161412">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1465034901711">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p12750145751716">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row1115211912718"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p9100181716331">Rootkit</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p179571212125616">Detect server assets and report alarms for suspicious kernel modules, files, and folders.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1959673549">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1596011710548">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p2096013735420">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1596015715542">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p8610837205412">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p11610837185412">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row141536916278"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p0406164211277">Ransomware</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p12557195995416">Check ransomware embedded in media such as web pages, software, emails, and storage media.</p>
+<p id="hss_01_0590__en-us_topic_0000001517641926_p10602172081113">Ransomware is used to encrypt and control your data assets, such as documents, emails, databases, source code, images, and compressed files, to leverage victim extortion.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p195925194572">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p159261975720">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p155925197575">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p12592121918573">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p086115312257">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p713484782812">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row171552914275"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1395334142414">Hacker tool</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p39517340240">Check whether non-standard tool used to control the server exist and report alarms immediately after detecting them.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p142001797206">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p182006914208">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p72001295208">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1220089152013">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p17200179122020">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p320115972010">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row1215613912711"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p463554910189">Web shell</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p96361649181813">Check whether the files (often PHP and JSP files) detected by HSS in your web directories are web shells.</p>
+<ul id="hss_01_0590__en-us_topic_0000001517641926_ul116368494181"><li id="hss_01_0590__en-us_topic_0000001517641926_li86366496183">Web shell information includes the Trojan file path, status, first discovery time, and last discovery time. You can choose to ignore warning on trusted files.</li><li id="hss_01_0590__en-us_topic_0000001517641926_li11636249181817">You can use the manual detection function to scan for web shells on servers.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p163744919180">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p7637114910185">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p6637449191810">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p19637749131817">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p66376494187">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1163744918181">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row61570912715"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p193853142516">Mining</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1358110102347">Detect whether mining software exists on servers in real time and report alarms for the detected software.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p93221512102018">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p43221112192011">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p832241292020">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p832311262013">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p03231512112011">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p103231712102019">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row11591597273"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p3401229122513">Remote code execution</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p14401112914258">Check whether the server is remotely called in real time and report an alarm immediately once remote code execution is detected.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p0300104052015">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p830012402209">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p3301144032012">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p830115404200">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p17301940152010">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p730104072019">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row21614912718"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p4646549181815">Reverse shell</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p10646104915188">Monitor user process behaviors in real time to detect reverse shells caused by invalid connections.</p>
+<p id="hss_01_0590__en-us_topic_0000001517641926_p18646154911183">Reverse shells can be detected for protocols including TCP, UDP, and ICMP.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p136471649101815">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p16647174991813">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1964774917188">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1664724913187">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p76470493183">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p964714913187">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row84253410434"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p106471349191819">File privilege escalation</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p146482049101820">Check the file privilege escalations in your system.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p11648174971816">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p20648849181812">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p4648154911184">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p6648549111814">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p8648134941811">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p064854971819">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row016214912273"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1764913492189">Process privilege escalation</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><div class="p" id="hss_01_0590__en-us_topic_0000001517641926_p1864954911817">The following process privilege escalation operations can be detected:<ul id="hss_01_0590__en-us_topic_0000001517641926_ul4649164971814"><li id="hss_01_0590__en-us_topic_0000001517641926_li1164904914185">Root privilege escalation by exploiting SUID program vulnerabilities</li><li id="hss_01_0590__en-us_topic_0000001517641926_li166492049121812">Root privilege escalation by exploiting kernel vulnerabilities</li></ul>
+</div>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1264944915184">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p46497493183">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1464984917187">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p36506495189">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1965094941816">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p765010495185">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row17784191437"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p126505498185">Change in critical file</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p11650114915184">Receive alarms when critical system files are modified.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p5650849181818">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p126501498185">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1765124917187">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p66512496189">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p12651194917182">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p46511849141816">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row63125160437"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p136511249131813">File/Directory change</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p10651749131814">System files and directories are monitored. If a file or directory is modified, an alarm is generated, indicating that the file or directory may be tampered with.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1665164961819">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p186521449131815">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p15652144931818">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p5652164921818">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p06521849171810">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p19652549111816">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row274715134436"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p126522049181819">Abnormal process behavior</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1565214494180">Check the processes on servers, including their IDs, command lines, process paths, and behavior.</p>
+<p id="hss_01_0590__en-us_topic_0000001517641926_p6652194911815">Send alarms on unauthorized process operations and intrusions.</p>
+<p id="hss_01_0590__en-us_topic_0000001517641926_p2652249151813">The following abnormal process behavior can be detected:</p>
+<ul id="hss_01_0590__en-us_topic_0000001517641926_ul46522490183"><li id="hss_01_0590__en-us_topic_0000001517641926_li146521549131814">Abnormal CPU usage</li><li id="hss_01_0590__en-us_topic_0000001517641926_li365344921817">Processes accessing malicious IP addresses</li><li id="hss_01_0590__en-us_topic_0000001517641926_li11653174914188">Abnormal increase in concurrent process connections</li></ul>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1665318495184">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1465304921810">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p0653134911817">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p865354981815">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1653154914189">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p166541649101819">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row16345197154311"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p17654049181814">High-risk command execution</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p2654149151813">Receive real-time alarms on high-risk commands.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p965474920184">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p166541349161818">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p865444991814">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1665424951816">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p186558495186">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p36551749161813">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row125251044320"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1665518492189">Abnormal shell</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1865517494186">Detect actions on abnormal shells, including moving, copying, and deleting shell files, and modifying the access permissions and hard links of the files.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p20655104951818">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p13655154916189">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1656204916182">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p9656349101811">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p116561449121810">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p6656124911187">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row493019550420"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1665644951818">Suspicious crontab task</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p465734961816">Check and list auto-started services, scheduled tasks, pre-loaded dynamic libraries, run registry keys, and startup folders.</p>
+<p id="hss_01_0590__en-us_topic_0000001517641926_p9657949161819">You can get notified immediately when abnormal automatic auto-start items are detected and quickly locate Trojans.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p8658144991812">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1065814971816">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1165819491182">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p765810493181">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p4658104991816">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p565813490182">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row172003582422"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p75101622102619">Windows defender protection disabled</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p195101922142612">Detect the preparations for ransomware encryption: Disable the Windows defender real-time protection function through the registry. Once the function is disabled, an alarm is reported immediately.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p8866161922120">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p10866919172120">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1786631972110">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p14866619102112">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p208661019172114">Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p168661319142112">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row622105324213"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p7265172520266">Backup deletion</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1226552512611">Detect the preparations for ransomware encryption: Delete backup files or files in the <strong id="hss_01_0590__b2029838259">Backup</strong> folder. Once backup deletion is detected, an alarm is reported immediately.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p725910229224">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p825982232214">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p112600221225">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p17260102219225">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p13260192218226">Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p12260162219225">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row237661714453"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p142703272269">Suspicious registry operation</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1427032732619">Detect operations such as disabling the system firewall through the registry and using the ransomware <strong id="hss_01_0590__b1408121981">Stop</strong> to modify the registry and write specific strings in the registry. An alarm is reported immediately when such operations are detected.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p82014271229">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1320152711225">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p520152792213">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p162041927172218">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p3204127182213">Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1020452732211">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row194638207455"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p116691849141817">Brute-force attack defense</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p2670144919184">Check for brute-force attack attempts and successful brute-force attacks.</p>
+<ul id="hss_01_0590__en-us_topic_0000001517641926_ul1367024917185"><li id="hss_01_0590__en-us_topic_0000001517641926_li1567010492187">Your accounts are protected from brute-force attacks. HSS will block the attacking hosts when detecting such attacks.</li><li id="hss_01_0590__en-us_topic_0000001517641926_li8670154916189">Trigger an alarm if a user logs in to the server by a brute-force attack.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p567084917180">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p15670194914186">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p567110496180">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p267144919187">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p4671114917182">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p18671349141815">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row86312222452"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1067110492182">Abnormal login</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p8671124991818">Check and handle remote logins.</p>
+<p id="hss_01_0590__en-us_topic_0000001517641926_p96711349181818">If a user's login location is not any common login location you set, an alarm will be triggered.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p16672194910184">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p13672649151812">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p6672749161818">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p46722049171818">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p167294981813">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p167284917183">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row1633162512459"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p867284916185">Invalid account</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1567264913188">Scan accounts on servers and list suspicious accounts in a timely manner.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1167314901810">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1067315497187">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p7673194913185">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p6673114916181">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1667374915187">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p11674154901816">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row04691527184514"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p24947522815">User account added</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p204943512285">Detect the commands used to create hidden accounts. Hidden accounts cannot be found in the user interaction interface or be queried by commands.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p14641758254">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p116455132511">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1864195172516">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p864252251">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p365105122512">Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1065145152515">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row18641329184513"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1624814116287">Password theft</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p162481613289">Detect the abnormal obtaining of hash value of system accounts and passwords on servers and report alarms.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1446810616258">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1846819602517">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p14468116172511">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p8468186112510">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p20468176202518">Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p546926142513">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row134001138124513"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p93201382811">Port scan</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p17224164113812">Detect scanning or sniffing on specified ports and report alarms.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p155612136365">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p956117130365">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p8561191310369">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p145621113163615">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p14562101319364">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p85622013193615">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row1449973574513"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__en-us_topic_0000001517641926_p26412590277">Host scan</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1865859162711">Detect the network scan activities based on server rules (including ICMP, ARP, and nbtscan) and report alarms.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__en-us_topic_0000001517641926_p10760181453618">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__en-us_topic_0000001517641926_p476091413369">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__en-us_topic_0000001517641926_p1076111412366">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__en-us_topic_0000001517641926_p076151416364">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__en-us_topic_0000001517641926_p47617141362">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__en-us_topic_0000001517641926_p11761314173614">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row15169139162716"><td class="cellrowborder" rowspan="7" valign="top" width="7.068516912402427%" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p1816919922718">Container intrusion detection</p>
+</td>
+<td class="cellrowborder" valign="top" width="8.586296617519514%" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p1816989132714">Vulnerability escape</p>
+</td>
+<td class="cellrowborder" valign="top" width="29.24978317432784%" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p61696902720">An escape alarm is reported if a container process behavior that matches the behavior of known vulnerabilities is detected.</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.938421509106678%" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p1917010913274">×</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.133564614050303%" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p517013962716">×</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.740676496097137%" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p3170199142713">×</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.111882046834345%" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p19170129102717">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="10.255854293148307%" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p18170129182711">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.915004336513444%" headers="mcps1.3.4.2.2.10.1.9 "><p id="hss_01_0590__p16171129142711">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row117119912713"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p317169102713">File escape</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p91717915271">An alarm is reported if a container process is found accessing a key file directory (for example, <strong id="hss_01_0590__b1351802810">/etc/shadow</strong> or <strong id="hss_01_0590__b1686490596">/etc/crontab</strong>). Directories that meet the container directory mapping rules can also trigger such alarms.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p1517119132717">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p41712097273">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p317215914277">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p517209142715">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p917212942718">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p101721692271">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row1717210913276"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p717220917273">Abnormal container process</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><ul id="hss_01_0590__ul917215915276"><li id="hss_01_0590__li517211972716">Malicious container program<p id="hss_01_0590__p12173119162713"><a name="hss_01_0590__li517211972716"></a><a name="li517211972716"></a>Monitor container process behavior and process file fingerprints. An alarm is reported if it detects a process whose behavior characteristics match those of a predefined malicious program.</p>
+</li><li id="hss_01_0590__li1173793279">Abnormal process<p id="hss_01_0590__p13173995271"><a name="hss_01_0590__li1173793279"></a><a name="li1173793279"></a>An alarm is reported if a process not in the whitelist is running in the container.</p>
+</li></ul>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p101731910277">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p21731394272">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p1217320919272">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p817449162711">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p1174159182719">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p11174159202717">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row1317459142712"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p1117469152716">Abnormal container startup</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p1174397271">The service monitors container startups and reports an alarm if it detects that a container with too many permissions is started.</p>
+<p id="hss_01_0590__p11749913278">Container check items include:</p>
+<ul id="hss_01_0590__ul21751591272"><li id="hss_01_0590__li017529142720">Privileged container startup (<strong id="hss_01_0590__b1027241676">privileged:true</strong>)</li><li id="hss_01_0590__li16175169152712">Too many container capabilities (<strong id="hss_01_0590__b502676204">capability:[xxx]</strong>)</li><li id="hss_01_0590__li11751399273">Seccomp not enabled (<strong id="hss_01_0590__b1950701039">seccomp=unconfined</strong>)</li><li id="hss_01_0590__li161762916271">Container privilege escalation (<strong id="hss_01_0590__b1946631275">no-new-privileges:false</strong>)</li><li id="hss_01_0590__li2176179112716">High-risk directory mapping (<strong id="hss_01_0590__b1627349613">mounts:[...]</strong>)</li></ul>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p1817616952715">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p817729192714">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p41775912713">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p141774972710">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p16177295277">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p1717799102713">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row1017720917271"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p5177891276">High-risk system call</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p171781896274">You can run tasks in kernels by Linux system calls. The container edition reports an alarm if it detects a high-risk call.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p61788972710">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p1717859192711">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p181785962715">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p1617829162719">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p81781913271">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p5179129132710">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row1324323815300"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p1443774919308">Container image blocking</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p943712499306">If a container contains insecure images specified in the suspicious image behavior policy, before the container is started, an alarm will be generated and the insecure images will be blocked.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p16770281467">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p2677142818463">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p86776289461">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p12678162804615">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p1267842814469">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p1944016491305">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row417911919271"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p191791922716">Sensitive file access</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p14179109122713">The service monitors the container image files associated with file protection policies, and reports an alarm if the files are modified.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p14179189102714">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p71801697279">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p1318011942717">×</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p818010982714">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p101806912712">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p218010992718">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row16180169152717"><td class="cellrowborder" rowspan="2" valign="top" width="7.068516912402427%" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p161801694278">Whitelist management</p>
+</td>
+<td class="cellrowborder" valign="top" width="8.586296617519514%" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p1818113919278">Alarm whitelist</p>
+</td>
+<td class="cellrowborder" valign="top" width="29.24978317432784%" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p161811597277">You can add an alarm to the whitelist when handling it.</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.938421509106678%" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p161812091272">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.133564614050303%" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p81811198272">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.740676496097137%" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p91812914279">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.111882046834345%" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p131824942711">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="10.255854293148307%" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p3182129122719">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.915004336513444%" headers="mcps1.3.4.2.2.10.1.9 "><p id="hss_01_0590__p318218915278">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row13182398271"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p13182189202710"><span id="hss_01_0590__text98971952806">Login Whitelist</span></p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p10182209192716">Some alarms can be added to the alarm whitelist.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p41831592276">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p9183179152717">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p51837910278">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p171832091272">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p218318914272">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p71832096278">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row1518314914272"><td class="cellrowborder" valign="top" width="7.068516912402427%" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p118418992718">Policy management</p>
+</td>
+<td class="cellrowborder" valign="top" width="8.586296617519514%" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p818417932713">Querying and editing rule configurations</p>
+</td>
+<td class="cellrowborder" valign="top" width="29.24978317432784%" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p151841594270">You can define and issue different detection policies for different servers or server groups, implementing refined security operations.</p>
+<ul id="hss_01_0590__ul181843962715"><li id="hss_01_0590__li118412922719">Check the policy group list.</li><li id="hss_01_0590__li1718415952717">Create a policy group based on default and existing policy groups.</li><li id="hss_01_0590__li718416922717">Define a policy.</li><li id="hss_01_0590__li818511919278">Edit or delete a policy.</li><li id="hss_01_0590__li201851690278">Modify or disable policies in a group.</li><li id="hss_01_0590__li718512916273">Apply policies to servers in batches on the <strong id="hss_01_0590__b224193373">Servers &amp; Quota</strong> page.</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="6.938421509106678%" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p131855916273">√ (Only the default enterprise policy group is supported.)</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.133564614050303%" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p3186109102711">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.740676496097137%" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p21865952715">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.111882046834345%" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p2186793274">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="10.255854293148307%" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p1918699172718">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.915004336513444%" headers="mcps1.3.4.2.2.10.1.9 "><p id="hss_01_0590__p018699182711">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row318679162713"><td class="cellrowborder" valign="top" width="7.068516912402427%" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p21863913279">Security report</p>
+</td>
+<td class="cellrowborder" valign="top" width="8.586296617519514%" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p6187169102718">Server security report</p>
+</td>
+<td class="cellrowborder" valign="top" width="29.24978317432784%" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p718779112711">Check weekly or monthly server security trend, key security events, and risks.</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.938421509106678%" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p418712917275">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.133564614050303%" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p8187169112720">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.740676496097137%" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p618739152720">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.111882046834345%" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p101886920274">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="10.255854293148307%" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p61881791274">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.915004336513444%" headers="mcps1.3.4.2.2.10.1.9 "><p id="hss_01_0590__p2018812914273">-</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row10188189132710"><td class="cellrowborder" rowspan="7" valign="top" width="7.068516912402427%" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p1718914902719">Security configuration</p>
+</td>
+<td class="cellrowborder" valign="top" width="8.586296617519514%" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p218929192711">Agent management</p>
+</td>
+<td class="cellrowborder" valign="top" width="29.24978317432784%" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p5189109172714">You can view the agent status of all servers and upgrade, uninstall, and install agents.</p>
+</td>
+<td class="cellrowborder" valign="top" width="6.938421509106678%" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p7189119192713">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.133564614050303%" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p3189139102716">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.740676496097137%" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p8190139192719">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="7.111882046834345%" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p319011942714">√</p>
+</td>
+<td class="cellrowborder" valign="top" width="10.255854293148307%" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p91908911276">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" width="15.915004336513444%" headers="mcps1.3.4.2.2.10.1.9 "><p id="hss_01_0590__p191902091276">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row419099192711"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p41901916275">Common login location</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p1119119918277">For each server, you can configure the locations where users usually log in from. The service will generate alarms on logins originated from locations other than the configured common login locations. A server can be added to multiple login locations.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p7191598279">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p11191149162717">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p119217912274">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p419279132717">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p61920912272">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p111922920276">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row141921495276"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p8193119172710">Common login IP address</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p7193397272">For each server, you can configure the IP addresses where users usually log in from. The service will generate alarms on logins originated from IP addresses other than the configured common IP addresses.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p151937913274">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p1919313952720">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p131935952711">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p51941916276">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p101941193277">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p51964902718">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row61969912275"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p1919649102714">Configuring an SSH login IP address whitelist</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p1519611914275">The SSH login whitelist controls SSH access to servers to prevent account cracking.</p>
+<p id="hss_01_0590__p4197119142717">After you configure the whitelist, SSH logins will be allowed only from whitelisted IP addresses.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p1919729182720">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p111983942710">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p10198894275">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p17198129162713">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p21980912713">Linux</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p1819819911278">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row11198139162713"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p1519910918273">Malicious program isolation and removal</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p219917942717">HSS automatically isolates and kills identified malicious programs, such as web shells, Trojans, and worms, removing security risks.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p6199189102711">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p111991393275">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p18200179182717">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p1020013972710">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p12001899270">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p42003914270">Real-time check</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row020019172718"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p192011997273">2FA</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p1320120910279">Prevent brute-force attacks by using password and SMS/email authentication.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p112011197279">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p9201209132714">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p1820111916270">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p1920219112713">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p020215914271">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p220215910273">-</p>
+</td>
+</tr>
+<tr id="hss_01_0590__row162027952713"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.1 "><p id="hss_01_0590__p1620217922716">Alarm configuration</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.2 "><p id="hss_01_0590__p92036942710">After alarm notification is enabled, you can receive alarm notifications sent by <span id="hss_01_0590__text9123444594">HSS</span> to learn about security risks facing your servers, containers, and web pages.</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.3 "><p id="hss_01_0590__p162034902720">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.4 "><p id="hss_01_0590__p15203129172718">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.5 "><p id="hss_01_0590__p120310972712">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.6 "><p id="hss_01_0590__p9203893276">√</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.7 "><p id="hss_01_0590__p1204189132712">Linux and Windows</p>
+</td>
+<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.10.1.8 "><p id="hss_01_0590__p8204209102710">-</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0042.html">Introduction</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0596.html b/docs/hss/umn/hss_01_0596.html
new file mode 100644
index 00000000..3582183c
--- /dev/null
+++ b/docs/hss/umn/hss_01_0596.html
@@ -0,0 +1,16 @@
+<a name="hss_01_0596"></a><a name="hss_01_0596"></a>
+
+<h1 class="topictitle1">Deleting a Policy Group</h1>
+<div id="body0000001817560553"><p id="hss_01_0596__p1565832219156">Preset policy groups cannot be deleted. You can delete custom policy groups of premium edition and container edition.</p>
+<div class="section" id="hss_01_0596__section54621157181415"><h4 class="sectiontitle">Constraints</h4><p id="hss_01_0596__p1733859141420">After a policy group is deleted, the <strong id="hss_01_0596__b197221024637">Policy Group</strong> column of the servers that were associated with the group will be blank. You need to deploy a policy group for a server again by referring to <a href="hss_01_0024.html">Deploying a Policy</a>.</p>
+</div>
+<div class="section" id="hss_01_0596__section06891116191417"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0596__ol197101529136"><li id="hss_01_0596__li1471022917317"><span>Log in to the management console.</span></li><li id="hss_01_0596__li157111729830"><span>Click <span><img id="hss_01_0596__hss_01_0571_image9939115511526" src="en-us_image_0000001517477398.png"></span> in the upper left corner of the page, select a region, and choose <strong id="hss_01_0596__hss_01_0571_b74857118407">Security</strong> &gt; <strong id="hss_01_0596__hss_01_0571_b14857117404"><span id="hss_01_0596__hss_01_0571_text6485319406">HSS</span></strong>. The <span id="hss_01_0596__hss_01_0571_text11485131194016">HSS</span> page is displayed.</span></li><li id="hss_01_0596__li10715142914318"><span>In the navigation tree on the left, choose <span class="menucascade" id="hss_01_0596__menucascade58523158411"><b><span class="uicontrol" id="hss_01_0596__uicontrol1485131519417">Security Operations</span></b> &gt; <b><span class="uicontrol" id="hss_01_0596__uicontrol11851181515419">Policies</span></b></span></span></li></ol><ol start="4" id="hss_01_0596__ol209314507585"><li id="hss_01_0596__li6986352175816"><span>Click <strong id="hss_01_0596__b181921018744">Delete</strong> in the <strong id="hss_01_0596__b1819217181548">Operation</strong> column of the target policy.</span><p><p id="hss_01_0596__p138825241586">You can also select multiple policies and click <strong id="hss_01_0596__b1886114323418">Delete</strong> in the upper left corner of the policy list to delete multiple policy groups in batches.</p>
+</p></li><li id="hss_01_0596__li1553618530214"><span>Click <strong id="hss_01_0596__b12763440343">OK</strong>.</span></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0314.html">Policy Management</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0597.html b/docs/hss/umn/hss_01_0597.html
new file mode 100644
index 00000000..9b549a85
--- /dev/null
+++ b/docs/hss/umn/hss_01_0597.html
@@ -0,0 +1,16 @@
+<a name="hss_01_0597"></a><a name="hss_01_0597"></a>
+
+<h1 class="topictitle1">Exporting the Baseline Check Report</h1>
+<div id="body0000001792080845"><p id="hss_01_0597__p37259510106">This section describes how to export a baseline check report.</p>
+<div class="section" id="hss_01_0597__section179441338171410"><h4 class="sectiontitle">Constraints</h4><p id="hss_01_0597__hss_01_0147_p575523782719">Only enterprise edition, premium edition, web tamper protection edition, and container edition are supported.</p>
+</div>
+<div class="section" id="hss_01_0597__section12844665269"><h4 class="sectiontitle">Procedure</h4><ol id="hss_01_0597__ol513104562616"><li id="hss_01_0597__li58771054154815"><span>Log in to the management console.</span></li><li id="hss_01_0597__li712492702913"><span>In the navigation pane on the left, choose <strong id="hss_01_0597__b96210166665824">Prediction</strong> &gt; <strong id="hss_01_0597__b105828204965824">Baseline Checks</strong>.</span></li><li id="hss_01_0597__li18930133120326"><span>Click the <strong id="hss_01_0597__b66903159265824">Unsafe Configurations</strong> or <strong id="hss_01_0597__b114947279365824">Common Weak Password Detection</strong> tab and click <span><img id="hss_01_0597__image10486920388" src="en-us_image_0000001745048576.png"></span> in the upper right corner of the list to download the filtered risk alarms.</span><p><ul id="hss_01_0597__ul99043300812"><li id="hss_01_0597__li129043301811">On the <strong id="hss_01_0597__b19355164311615">Unsafe Configurations</strong> page, you can click the image in the corresponding column to search for and download alarms based on risk level and type.</li><li id="hss_01_0597__li89050309819">On the <strong id="hss_01_0597__b181127710176">Common Weak Password Detection</strong> tab, enter the server name, IP address, or account name in the upper right corner of the list, and click <span><img id="hss_01_0597__image121338372546" src="en-us_image_0000001855042505.png"></span> to search for and download the target content.</li><li id="hss_01_0597__li18905103014816">A maximum of 5,000 risk check reports can be downloaded at a time from the <strong id="hss_01_0597__b165134276165824">Unsafe Configurations</strong> and <strong id="hss_01_0597__b181221360965824">Common Weak Password Detection</strong> pages.</li></ul>
+</p></li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0145.html">Baseline Inspection</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/hss_01_0603.html b/docs/hss/umn/hss_01_0603.html
new file mode 100644
index 00000000..a0cf10d3
--- /dev/null
+++ b/docs/hss/umn/hss_01_0603.html
@@ -0,0 +1,25 @@
+<a name="hss_01_0603"></a><a name="hss_01_0603"></a>
+
+<h1 class="topictitle1">Querying Real-Time Traces</h1>
+<div id="body8662426"><div class="section" id="hss_01_0603__en-us_topic_0179639644_section5470822195238"><h4 class="sectiontitle">Scenarios</h4><p id="hss_01_0603__en-us_topic_0179639644_p333055219577">After you enable CTS and the management tracker is created, CTS starts recording operations on cloud resources. CTS stores operation records generated in the last seven days.</p>
+<p id="hss_01_0603__en-us_topic_0179639644_p3008599195238">This section describes how to query and export operation records of the last seven days on the CTS console.</p>
+<ul id="hss_01_0603__en-us_topic_0179639644_ul17577535194620"><li id="hss_01_0603__en-us_topic_0179639644_li201409184718"><a href="#hss_01_0603__en-us_topic_0179639644_section19271975203">Viewing Real-Time Traces in the Trace List</a></li></ul>
+</div>
+<div class="section" id="hss_01_0603__en-us_topic_0179639644_section19271975203"><a name="hss_01_0603__en-us_topic_0179639644_section19271975203"></a><a name="en-us_topic_0179639644_section19271975203"></a><h4 class="sectiontitle">Viewing Real-Time Traces in the Trace List</h4><ol id="hss_01_0603__en-us_topic_0179639644_ol4845175152710"><li id="hss_01_0603__en-us_topic_0179639644_li791871844313">Log in to the management console.</li><li id="hss_01_0603__en-us_topic_0179639644_li79188188435">Click <span><img id="hss_01_0603__en-us_topic_0179639644_image2107213105014" src="en-us_image_0000001696838310.png"></span> in the upper left corner and choose <strong id="hss_01_0603__en-us_topic_0179639644_b1810717138505">Management &amp; Deployment</strong> &gt; <strong id="hss_01_0603__en-us_topic_0179639644_b1310871313509">Cloud Trace Service</strong>. The CTS console is displayed.</li><li id="hss_01_0603__en-us_topic_0179639644_li591831894316">Choose <strong id="hss_01_0603__en-us_topic_0179639644_b09819412220">Trace List</strong> in the navigation pane on the left.</li><li id="hss_01_0603__en-us_topic_0179639644_li6936134194312">Set filters to search for your desired traces, as shown in <a href="#hss_01_0603__en-us_topic_0179639644_fig139361441134311">Figure 1</a>. The following filters are available:<div class="fignone" id="hss_01_0603__en-us_topic_0179639644_fig139361441134311"><a name="hss_01_0603__en-us_topic_0179639644_fig139361441134311"></a><a name="en-us_topic_0179639644_fig139361441134311"></a><span class="figcap"><b>Figure 1 </b>Filters</span><br><span><img id="hss_01_0603__en-us_topic_0179639644_image14936144112433" src="en-us_image_0000001744598325.png"></span></div>
+<div class="p" id="hss_01_0603__en-us_topic_0179639644_p15936134119435"><ul class="subitemlist" id="hss_01_0603__en-us_topic_0179639644_ul20936164174314"><li id="hss_01_0603__en-us_topic_0179639644_li99361417432"><strong id="hss_01_0603__en-us_topic_0179639644_b179671714141513">Trace Type</strong>, <strong id="hss_01_0603__en-us_topic_0179639644_b179671014191515">Trace Source</strong>, <strong id="hss_01_0603__en-us_topic_0179639644_b4968714141517">Resource Type</strong>, and <strong id="hss_01_0603__en-us_topic_0179639644_b14968101411516">Search By</strong>: Select a filter from the drop-down list.<ul id="hss_01_0603__en-us_topic_0179639644_ul158893433010"><li id="hss_01_0603__en-us_topic_0179639644_li12760183118301">If you select <strong id="hss_01_0603__en-us_topic_0179639644_b389315891511">Resource ID</strong> for <strong id="hss_01_0603__en-us_topic_0179639644_b3893858131515">Search By</strong>, specify a resource ID.</li><li id="hss_01_0603__en-us_topic_0179639644_li12760203115305">If you select <strong id="hss_01_0603__en-us_topic_0179639644_b8997941831">Trace name</strong> for <strong id="hss_01_0603__en-us_topic_0179639644_b199981541317">Search By</strong>, specify a trace name.</li><li id="hss_01_0603__en-us_topic_0179639644_li197601031193019">If you select <strong id="hss_01_0603__en-us_topic_0179639644_b196612501258">Resource name</strong> for <strong id="hss_01_0603__en-us_topic_0179639644_b177275015252">Search By</strong>, specify a resource name.</li></ul>
+</li><li id="hss_01_0603__en-us_topic_0179639644_li15936204184311"><strong id="hss_01_0603__en-us_topic_0179639644_b98151395276">Operator</strong>: Select a user.</li><li id="hss_01_0603__en-us_topic_0179639644_li6936184119437"><strong id="hss_01_0603__en-us_topic_0179639644_b6981161112286">Trace Status</strong>: Select <strong id="hss_01_0603__en-us_topic_0179639644_b1298716111281">All trace statuses</strong>, <strong id="hss_01_0603__en-us_topic_0179639644_b7987181115281">Normal</strong>, <strong id="hss_01_0603__en-us_topic_0179639644_b2988181112810">Warning</strong>, or <strong id="hss_01_0603__en-us_topic_0179639644_b99881511132820">Incident</strong>.</li><li id="hss_01_0603__en-us_topic_0179639644_li1993654144315">Time range: You can query traces generated during any time range in the last seven days.</li><li id="hss_01_0603__en-us_topic_0179639644_li8936104118436">Click <strong id="hss_01_0603__en-us_topic_0179639644_b861150123114">Export</strong> to export all traces in the query result as a CSV file. The file can contain up to 5000 records.</li></ul>
+</div>
+</li><li class="subitemlist" id="hss_01_0603__en-us_topic_0179639644_li094111715448">Click <strong id="hss_01_0603__en-us_topic_0179639644_b55732514186">Query</strong>.</li><li id="hss_01_0603__en-us_topic_0179639644_li29410170448">On the <strong id="hss_01_0603__en-us_topic_0179639644_b176911834143214">Trace List</strong> page, you can also export and refresh the trace list.<ul id="hss_01_0603__en-us_topic_0179639644_ul119414175448"><li id="hss_01_0603__en-us_topic_0179639644_li12946170445">Click <strong id="hss_01_0603__en-us_topic_0179639644_b8907168171714">Export</strong> to export all traces in the query result as a CSV file. The file can contain up to 5000 records.</li><li id="hss_01_0603__en-us_topic_0179639644_li394151717445">Click <span><img id="hss_01_0603__en-us_topic_0179639644_image109421716440" src="en-us_image_0000001696678850.png"></span> to view the latest information about traces.</li></ul>
+</li><li id="hss_01_0603__en-us_topic_0179639644_li169491744418">Click <span><img id="hss_01_0603__en-us_topic_0179639644_image9947176447" src="en-us_image_0000001744678489.jpg"></span> on the left of a trace to expand its details.<p id="hss_01_0603__en-us_topic_0179639644_p1294101714446"></p>
+<p id="hss_01_0603__en-us_topic_0179639644_p1694171715446"><span><img id="hss_01_0603__en-us_topic_0179639644_image49418175441" src="en-us_image_0000001696838318.png"></span></p>
+<p id="hss_01_0603__en-us_topic_0179639644_p109481744411"></p>
+</li><li id="hss_01_0603__en-us_topic_0179639644_li1094161784410">Click <strong id="hss_01_0603__en-us_topic_0179639644_b139145611337">View Trace</strong> in the <strong id="hss_01_0603__en-us_topic_0179639644_b1591756103313">Operation</strong> column. The trace details are displayed.<p id="hss_01_0603__en-us_topic_0179639644_p1695161714447"><span><img id="hss_01_0603__en-us_topic_0179639644_image1904172011220" src="en-us_image_0000001758618249.png"></span></p>
+</li><li id="hss_01_0603__en-us_topic_0179639644_li129561719446">For details about key fields in the trace structure, see section "Trace References" &gt; "Trace Structure" and section "Trace References" &gt; "Example Traces" in the <em id="hss_01_0603__en-us_topic_0179639644_i949883013810">CTS User Guide</em>.</li></ol>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="hss_01_0070.html">Audit</a></div>
+</div>
+</div>
+
diff --git a/docs/hss/umn/public_sys-resources/caution_3.0-en-us.png b/docs/hss/umn/public_sys-resources/caution_3.0-en-us.png
new file mode 100644
index 00000000..60f60762
Binary files /dev/null and b/docs/hss/umn/public_sys-resources/caution_3.0-en-us.png differ
diff --git a/docs/hss/umn/public_sys-resources/danger_3.0-en-us.png b/docs/hss/umn/public_sys-resources/danger_3.0-en-us.png
new file mode 100644
index 00000000..47a9c723
Binary files /dev/null and b/docs/hss/umn/public_sys-resources/danger_3.0-en-us.png differ
diff --git a/docs/hss/umn/public_sys-resources/delta.gif b/docs/hss/umn/public_sys-resources/delta.gif
new file mode 100644
index 00000000..0d1b1f67
Binary files /dev/null and b/docs/hss/umn/public_sys-resources/delta.gif differ
diff --git a/docs/hss/umn/public_sys-resources/deltaend.gif b/docs/hss/umn/public_sys-resources/deltaend.gif
new file mode 100644
index 00000000..cc7da0fc
Binary files /dev/null and b/docs/hss/umn/public_sys-resources/deltaend.gif differ
diff --git a/docs/hss/umn/public_sys-resources/icon-arrowdn.gif b/docs/hss/umn/public_sys-resources/icon-arrowdn.gif
new file mode 100644
index 00000000..37942803
Binary files /dev/null and b/docs/hss/umn/public_sys-resources/icon-arrowdn.gif differ
diff --git a/docs/hss/umn/public_sys-resources/icon-arrowrt.gif b/docs/hss/umn/public_sys-resources/icon-arrowrt.gif
new file mode 100644
index 00000000..6aaaa11c
Binary files /dev/null and b/docs/hss/umn/public_sys-resources/icon-arrowrt.gif differ
diff --git a/docs/hss/umn/public_sys-resources/icon-caution.gif b/docs/hss/umn/public_sys-resources/icon-caution.gif
new file mode 100644
index 00000000..079c79b2
Binary files /dev/null and b/docs/hss/umn/public_sys-resources/icon-caution.gif differ
diff --git a/docs/hss/umn/public_sys-resources/icon-danger.gif b/docs/hss/umn/public_sys-resources/icon-danger.gif
new file mode 100644
index 00000000..079c79b2
Binary files /dev/null and b/docs/hss/umn/public_sys-resources/icon-danger.gif differ
diff --git a/docs/hss/umn/public_sys-resources/icon-huawei.gif b/docs/hss/umn/public_sys-resources/icon-huawei.gif
new file mode 100644
index 00000000..a31d60f8
Binary files /dev/null and b/docs/hss/umn/public_sys-resources/icon-huawei.gif differ
diff --git a/docs/hss/umn/public_sys-resources/icon-note.gif b/docs/hss/umn/public_sys-resources/icon-note.gif
new file mode 100644
index 00000000..31be2b03
Binary files /dev/null and b/docs/hss/umn/public_sys-resources/icon-note.gif differ
diff --git a/docs/hss/umn/public_sys-resources/icon-notice.gif b/docs/hss/umn/public_sys-resources/icon-notice.gif
new file mode 100644
index 00000000..40907065
Binary files /dev/null and b/docs/hss/umn/public_sys-resources/icon-notice.gif differ
diff --git a/docs/hss/umn/public_sys-resources/icon-tip.gif b/docs/hss/umn/public_sys-resources/icon-tip.gif
new file mode 100644
index 00000000..c47bae05
Binary files /dev/null and b/docs/hss/umn/public_sys-resources/icon-tip.gif differ
diff --git a/docs/hss/umn/public_sys-resources/icon-warning.gif b/docs/hss/umn/public_sys-resources/icon-warning.gif
new file mode 100644
index 00000000..079c79b2
Binary files /dev/null and b/docs/hss/umn/public_sys-resources/icon-warning.gif differ
diff --git a/docs/hss/umn/public_sys-resources/note_3.0-en-us.png b/docs/hss/umn/public_sys-resources/note_3.0-en-us.png
new file mode 100644
index 00000000..57a0e1f5
Binary files /dev/null and b/docs/hss/umn/public_sys-resources/note_3.0-en-us.png differ
diff --git a/docs/hss/umn/public_sys-resources/notice_3.0-en-us.png b/docs/hss/umn/public_sys-resources/notice_3.0-en-us.png
new file mode 100644
index 00000000..fa4b6499
Binary files /dev/null and b/docs/hss/umn/public_sys-resources/notice_3.0-en-us.png differ
diff --git a/docs/hss/umn/public_sys-resources/warning_3.0-en-us.png b/docs/hss/umn/public_sys-resources/warning_3.0-en-us.png
new file mode 100644
index 00000000..def5c356
Binary files /dev/null and b/docs/hss/umn/public_sys-resources/warning_3.0-en-us.png differ