Viewing and Configuring Defense Layer Policies

Scenarios

• Viewing Defense Policies: Check defense layer policies to learn of your asset protection status.
• Configuring Defense Policies: Configure defense layer policies for new assets.

  There are seven layers of defense: physical, identity, server, O&M, data, application, and network defense layers.

The defense layers for the identity, data, and O&M security will be available soon.

Basic Concepts

• Health score: A health score shows the overall health of your assets.

  The score ranges from 0 to 100. A larger score indicates a lower risk and higher asset security. For details about security scores, see Security Overview and Situation Overview.

• Alert: An alert is a notification of abnormal signals in O&M. It is usually automatically generated by a monitoring system or security device when detecting an exception in the system or networks. Generally, an alert can clearly indicate the location, type, and impact of an exception. For more details, see Overview.
• Vulnerability: A vulnerability is a defect or weakness in operating systems, security policies, or software. Attackers may exploit these defects or weaknesses to damage system, steal data, interrupt services, or cause other security problems. For more details, see Overview.
• Baseline check: SecMaster provides baseline checks. This feature can scan cloud services for risks in key configuration items, report scan results by category, generate alerts for incidents, and provide hardening suggestions and guidelines. For more details, see Baseline Check Overview.

Viewing Defense Policies

1. Log in to the SecMaster console.
2. Click in the upper left corner of the management console and select a region or project.
3. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 1 Workspace management page
   

4. In the navigation pane on the left, choose Risk Prevention > Security Policies.
5. View defense policy statistics.
   • Health Score: indicates the current health status of resources.

     The score ranges from 0 to 100. A larger score indicates a lower risk and higher asset security. For details about the security scores, see Security Overview and Situation Overview.

   • Total Assets: displays how many assets, high-risk assets, and assets at other risk levels you have.
   • Threat alarm, vulnerability, and baseline check statistics: display unhandled threat alarms, unfixed vulnerabilities, and risky baseline settings.
     • Threat Alarm: Displays threat alarms that have not been handled in the last seven days.
     • Vulnerability Risk: Displays the top 5 types of vulnerabilities in assets and the total number of vulnerabilities that have not been fixed in the last seven days.
     • Baseline Risk: displays resources by risk severity, including critical, high, medium, low, and informational levels, based on the latest baseline inspection results.
   • SecMaster Protection Overview: displays the protection status and resource information in the seven defense lines.
     • In the area of seven defense layers, you can click the icon of a defense line to view the protection products and protection statistics of the defense line.
     • You can view the resource statistics in the resource area.

Configuring Defense Policies

1. Log in to the SecMaster console.
2. Click in the upper left corner of the management console and select a region or project.
3. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 2 Workspace management page
   

4. In the navigation pane on the left, choose Risk Prevention > Security Policies.
5. Click the name of the defense line the security service belongs to. The cloud service information corresponding to the defense line slides out from the right.
6. On the page of the corresponding cloud service, click Protection Policy to go to the configuration page.

   If you have not purchased the corresponding cloud service, click the service name under service overview in the tab to go to the service console and purchase the service.

7. On the policy configuration page, configure policies of the corresponding cloud service.
   • Anti-DDoS policy configuration:
     • Configuring a Protection Policy
     • Configuring a Protection Policy
   • CFW protection policies: Configuring Intrusion Prevention and Basic Defense Rule Management
   • WAF protection policies: Creating a Protection Policy
   • HSS protection policies: Enabling HSS, Creating a Policy Group, and Installation and Configuration

Related Operations

• Adding an Emergency Policy: Emergency policies are used to quickly contain attacks. You can select a block type based on the alert source to block attackers. Table 1 lists recommended settings. You can also block an attack source based on the comprehensive investigation of multiple alerts.
• Managing Emergency Policies: This section includes Viewing an Emergency Policy and Deleting an Emergency Policy.