Enterprise/Premium Edition

Check Frequency

HSS performs a full scan in the early morning every day.

After you enable server protection, you can view scan results after the automatic scan in the next early morning, or perform a manual scan immediately.

Prerequisite

The agent has been installed on the servers to be protected, the agent status is Online, and the protection status is Unprotected.

Constraints

• Linux

  On servers running the EulerOS with ARM, HSS does not block the IP addresses suspected of SSH brute-force attacks, but only generates alarms.

• Windows
  • Authorize the Windows firewall when you enable protection for a Windows server. Do not disable the Windows firewall during the HSS in-service period. If the Windows firewall is disabled, HSS cannot block brute-force attack IP addresses.
  • If the Windows firewall is manually enabled, HSS may also fail to block brute-force attack IP addresses.

Procedure

1. Log in to the management console.
2. Click in the upper left corner of the page, select a region, and choose Security > HSS. The HSS page is displayed.
3. In the navigation pane, choose Asset Management > Servers & Quota. Click the Servers tab.
4. Enable protection for one or multiple servers.
   Figure 1 Enabling protection
   
   • Enabling protection for a server
     Click Enable in the Operation column of a server. In the dialog box that is displayed, confirm the server information.

     Figure 2 Confirming the protection information about a server
     

     Table 1 Protection parameters

     Parameter	Description	Example Value
     Edition	Select the enterprise or premium edition. Enterprise edition: It provides support for the DJCP MLPS certification. Main features include asset fingerprint management, vulnerability management, malicious program detection, web shell detection, and abnormal process behavior detection. Premium edition: It helps you with the DJCP MLPS certification and provides advanced features, including application protection, ransomware prevention, high-risk command detection, privilege escalation detection, and abnormal shell detection.	Enterprise

   • Enabling protection in batches
     Select multiple servers and click Enable above the server list. In the dialog box that is displayed, confirm the server information. Table 1 lists the parameters.

     Figure 3 Confirm information about multiple servers
     

5. Confirm the information and click OK. If the protection status of the target servers is Protected, the protection has been enabled.