How Do I Enable HSS Self-Protection?
HSS self-protection protect HSS files, processes, and software from malicious programs, which may uninstall HSS agents, tamper with HSS files, or stop HSS processes.
Constraints
- HSS self-protection is supported only for Windows servers that enabled HSS premium or WTP edition.
- Self-protection depends on antivirus detection, HIPS detection, and ransomware protection. It takes effect only when more than one of the three functions are enabled. For more details, see:
- Enabling Ransomware Prevention.
- Antivirus detection and HIPS detection are enabled by default. If you manually disable the two detection items, enable them again by referring to Viewing a Policy Group.
- Enabling the self-protection policy has the following impacts:
- The HSS agent cannot be uninstalled on the control panel of a server, but can be uninstalled on the HSS console.
- HSS process cannot be terminated.
- In the agent installation path C:\Program Files\HostGuard, you can only access the log and data directories (and the upgrade directory, if your agent has been upgraded).
Procedure
- Log in to the management console.
- In the upper left corner of the page, select a region, click , and choose Security & Compliance > HSS.
- In the navigation tree on the left, choose
- Click the name of a premium edition policy group for Windows servers. The policy group details page is displayed.
Select the policy group of the server where you want to enable self-protection.
- If you have not created any policy groups of premium edition, select the default policy group tenant_windows_premium_default_policy_group.
- If you have created policy groups of premium edition, select the policy group of your server. Perform the following operations:
- In the navigation tree on the left, choose .
- Click the Servers tab to view the policy groups of servers.
Figure 1 Viewing the policy groups of servers
- In the row containing the target self-protection policy, click Enable in the Operation column.
- In the displayed Prompt dialog box, click OK.
Related Operations
Disabling HSS Self-Protection
- In the row containing the target self-protection policy, click Disable in the Operation column.
- In the displayed dialog box, click OK.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.