Updated on 2023-10-31 GMT+08:00

Configuring a Baseline Inspection Plan

You can configure a baseline inspection plan and let SecMaster check whether there are unsafe baseline configurations on your servers.

This document describes how to add, edit, and delete a baseline inspection plan.

Background

After you enable baseline inspection, SecMaster will check all of your assets based on the default check plan. By default, the default check plan works as follows:

  • Schedule: The default check plan checks your assets every three days from 00:00 to 06:00.
  • Objects: All assets under your account in the current region will be checked.

Limitations and Constraints

A security standard can be added to only one check plan.

Creating a Check Plan

  1. Log in to the management console.
  2. Click in the upper left corner of the page and choose Security > SecMaster.
  3. In the navigation pane, choose Workspaces > Management. In the workspace list, click the name of the target workspace.

    Figure 1 Management

  4. In the navigation tree on the left, choose Risk Prevention > Baseline Inspection. On the Baseline Inspection page, click Configure Check Plan.

    Figure 2 Accessing the page for configuring check plans

  5. On the Checks page, select a region for the plan and click Create Plan. The pane for creating a check plan is displayed on the right.
  6. Configure the check plan.

    1. Enter the basic information by referring to Table 1.
      Table 1 Basic information about a check plan

      Parameter

      Description

      Name

      Plan name

      Schedule

      Select how often and when the check plan is executed.

      • Schedule: every day, every 3 days, every 7 days, every 15 days, or every 30 days
      • Check start time: 00:00-06:00, 06:00-12:00, 12:00-18:00, or 18:00-24:00
    2. Select a security standard for the plan.

      Select the baseline check items to be checked.

  7. Click OK.

    After the check plan is created, SecMaster performs cloud service baseline scanning at the specified time. You can choose Risk Prevention > Baseline Inspection to view the scan result.

Related Operations

After a baseline check plan is created, you can view, edit, or delete the check plan.

  • Viewing a check plan
    1. In the navigation pane on the left, choose Settings > Checks.
    2. On the Checks page, view the check plans of baseline inspection.
  • Editing a check plan
    Only user-defined check plans can be modified.
    1. In the navigation pane on the left, choose Settings > Checks.
    2. In the upper right corner of the check plan box, click Edit. The pane for editing the check plan is displayed on the right.
    3. After editing the plan parameters, click OK.
  • Deleting a check plan
    Only user-defined check plans can be deleted.
    1. In the navigation pane on the left, choose Settings > Checks.
    2. In the upper right corner of the check plan box, click Delete.
    3. In the displayed dialog box, click OK.