How Do I Enable HSS Self-Protection?

Constraints

• HSS self-protection is supported only for Windows servers that enabled HSS premium or WTP edition.
• Self-protection depends on antivirus detection, HIPS detection, and ransomware protection. It takes effect only when more than one of the three functions are enabled. For more details, see:
  • Enabling Ransomware Prevention.
  • Antivirus detection and HIPS detection are enabled by default. If you manually disable the two detection items, enable them again by referring to Viewing a Policy Group.
• Enabling the self-protection policy has the following impacts:
  • The HSS agent cannot be uninstalled on the control panel of a server, but can be uninstalled on the HSS console.
  • HSS process cannot be terminated.
  • In the agent installation path C:\Program Files\HostGuard, you can only access the log and data directories (and the upgrade directory, if your agent has been upgraded).

Procedure

1. Log in to the management console.
2. In the upper left corner of the page, select a region, click , and choose Security & Compliance > HSS.
3. In the navigation tree on the left, choose Security Operations > Policies
4. Click the name of a premium edition policy group for Windows servers. The policy group details page is displayed.

   Select the policy group of the server where you want to enable self-protection.

   • If you have not created any policy groups of premium edition, select the default policy group tenant_windows_premium_default_policy_group.
   • If you have created policy groups of premium edition, select the policy group of your server. Perform the following operations:
     1. In the navigation tree on the left, choose Asset Management > Servers & Quota.
     2. Click the Servers tab to view the policy groups of servers.
        Figure 1 Viewing the policy groups of servers
        

5. In the row containing the target self-protection policy, click Enable in the Operation column.
6. In the displayed Prompt dialog box, click OK.

Related Operations

Disabling HSS Self-Protection

1. In the row containing the target self-protection policy, click Disable in the Operation column.
2. In the displayed dialog box, click OK.