Configuring HSS for a FlexusX Instance

What Is Host Security Service?

HSS is designed to improve the overall security for cloud servers. It helps you identify and manage the assets on your servers, eliminate risks, and defend against intrusions and web page tampering. There are also advanced protection and security operations functions available to help you easily detect and handle threats.

After installing the HSS agent on your FlexusX instances, you will be able to check the protection status of the instances and risks in a region on the HSS console.

For more information about HSS, see What Is HSS?

Enabling HSS

• Scenario 1: Enabling HSS when you purchase a FlexusX instance

  When you use a public image to purchase a FlexusX instance, you can choose to enable HSS. The HSS agent will be installed on and HSS will be enabled for the FlexusX instance automatically.

  Figure 1 Enabling HSS during the purchase of a FlexusX instance
  
  HSS editions:

  • The HSS basic protection trial edition is free for 30 days. It provides functions such as detection for weak passwords, vulnerabilities, brute-force attacks.
    

    After the free trial period expires, the HSS basic edition quotas will be automatically released, and HSS will not protect your servers.

  • You can choose from the HSS basic, enterprise, premium, and Web Tamper Protection (WTP) editions, which are charged.

    After the instance is purchased, you can switch between different HSS editions on the HSS console. For details about differences among different editions, see Specifications of Different Editions.

• Whether HSS is displayed on the FlexusX console depends on the selected images. Certain public images do not support HSS.
• The supported HSS editions vary with the billing mode and public image. For details, see the supported HSS editions on the management console.

• Scenario 2: Enabling HSS after a FlexusX instance is purchased

  If you do not enable HSS during the FlexusX instance purchase, you can manually install the agent to use HSS. For details, see Installing an Agent and Enabling Server Protection.

  Before manually installing the agent, check whether the OS is supported. For details, see OS Restrictions.

Viewing the Security Status of FlexusX Instances

On the FlexusX instance list page, you can view the security of the instances.

1. Log in to the FlexusX console, in the upper left corner, click , and select a region.
2. In the FlexusX instance list, check the protection status of instances in the Security column.
   • Not installed: The agent is not installed, or the agent is installed but not enabled. If you want to install the agent, refer to Installing an Agent.

     (The security status of a newly purchased FlexusX instance may be Agent not installed, which is because the agent is currently being installed. Please check the status again later.)

   • Risky: The FlexusX instance is at risk.
   • Safe: No risks have been found in the FlexusX instance.
   • Unprotected: HSS is not enabled for the FlexusX instance. For details about how to enable HSS, see Enabling Server Protection.

     If HSS is not enabled on the newly purchased FlexusX instance, please manually install the Agent.

3. Click the name of the target FlexusX instance. The details page of this instance is displayed.

   Select HSS to view the agent status and protection status.