Plug-Ins Overview

If container protection is enabled and you want to use the image blocking function, you need to install the Docker plug-in.

The Docker plug-in provides the image blocking capability. It can prevent the startup of container images that have high-risk vulnerabilities or do not comply with security standards in the Docker environment.

You can configure image blocking in the following scenarios:

• To enhance the security of container images and prevent the risks caused by the use of untrusted or outdated images, you can configure an image blocking policy to specify the level of vulnerabilities to be blocked or the whitelist.
• If you need to comply with the security requirements of certain industries or regulations, such as PCI DSS and CIS, you can configure an image blocking policy to specify the security baseline or compliance check items to be blocked.
• If you need to implement the best practices of container DevSecOps and embed security check and defense into each phase of the container lifecycle, you can configure an image blocking policy to enhance security from source to devices.