CNAD Overview

The following figure shows the process of connecting an EIP to CNAD for protection.

Figure 1 Connecting an EIP to CNAD

**Table 1** Procedures
No.	Procedure	Description
1	Using IAM to Grant CNAD Permissions	Use Identity and Access Management (IAM) to grant fine-grained CNAD service permissions to users.
2	Purchasing a CNAD Instance	Purchase a CNAD instance based on service requirements.
3	Adding a Protection Policy	Configure protection policies based on your service requirements. CNAD provides a wide range of protection policies.
4	Adding a Protected Object	Add the EIP to be protected to the CNAD instance.
5	Performing common security operations	Enabling Alarm Notifications for DDoS Attacks: After the alarm notification function is enabled, you will receive alarm notifications if your EIP is under a DDoS attack. Enabling Logging: With LTS, you can perform real-time decision analysis, device O&M management, and service trend analysis in a timely and efficient manner. Viewing Statistics Reports: You can view access and attack statistics within a specified time range. Managing Instances: You can perform common instance management operations, such as enabling renewal, upgrading specifications, and configuring tags. Managing Protected Objects: You can view information about protected objects and remove protected objects. Viewing Monitoring Metrics: You can enable event and metric monitoring for protected EIPs on Cloud Eye. Querying Audit Logs: You can view historical operation records of CNAD on CTS.