Updated on 2024-12-28 GMT+08:00

Overview

SecMaster automatically discovers and manages all assets on and off the cloud and displays the real-time security status of your assets.

On the Resource Manager page, you can view the security status statistics of all resources under your account, including the resource name, service, and security status. This helps you quickly locate security risks and find solutions.

With Resource Manager, you can perform the following operations:

  • Configuring the Asset Subscription and Importing Assets

    You can subscribe to cloud assets and import external assets to SecMaster for centralized management. After subscribing to cloud assets, you can synchronize asset details. For external assets, you can import a variety of assets from outside to SecMaster.

  • Viewing Asset Information

    You can view the asset name, type, protection status, and other details.

  • Asset management
    • Importing and Exporting Assets: You can import varied types of assets into or export all assets from SecMaster.
    • Editing or Deleting an Asset. You can edit the department, service system, and owner of an asset. If you no longer need to display the information about one or more imported assets on SecMaster Resource Manager page, delete the imported assets from SecMaster.

Asset Source and Corresponding Security Products

Table 1 Asset source and corresponding security products

Parameter

Source

Security Product

Servers

Elastic Cloud Server (ECS)

Host Security Service (HSS)

Website

Web Application Firewall (WAF)

Web Application Firewall (WAF)

Database

Relational Database Service (RDS)

Database Security Service (DBSS)

VPC

Virtual Private Cloud (VPC)

Cloud Firewall (CFW)

EIP

Elastic IP (EIP)

CNAD Basic (Anti-DDoS)

Device

On-premises devices

--

NOTE:

After the asset information is synchronized to SecMaster, the protection status of assets will be displayed on the SecMaster console. The protection status is as follows:

  • If Protection Status for an asset is Protected, the corresponding security product has been enabled for the asset.
  • If Protection Status for an asset is Unprotected, the corresponding security product has not been purchased or enabled for the asset. If you want to protect target assets, purchase corresponding security products and enable protection. For example, if you want to protect ECSs, purchase HSS and enable HSS for each ECS.
  • If protection status for an asset is --, the corresponding security product is not supported in the current region.

Limitations and Constraints

After asset subscription, you can click System Synchronize Assets on the Resource Manager page to synchronize asset information again. The basic edition allows you to synchronize assets one time per day, and the standard or professional edition allows you to synchronize assets 20 times per day. If you exceed this threshold, the system displays error message "Insufficient resource synchronization quota." In this case, synchronize assets again the next day.