Configuring HSS for a FlexusL Instance

What Is Host Security Service?

HSS is designed to improve the overall security for cloud servers. It helps you identify and manage the assets on your servers, eliminate risks, and defend against intrusions and web page tampering. There are also advanced protection and security operations functions available to help you easily detect and handle threats.

After installing the HSS agent on your FlexusX instances, you will be able to check the protection status of the instances and risks in a region on the HSS console.

For more information about HSS, see What Is HSS?

Enabling HSS

Scenario 1: Enabling HSS when you purchase a FlexusL instance
You can associate HSS with your FlexusL instance when you purchase FlexusL on the FlexusL console. The HSS agent will be installed on and HSS will be enabled for the FlexusL instance automatically.
Figure 1 Enabling HSS during the purchase of a FlexusL instance
Scenario 2: Enabling HSS after a FlexusL instance is purchased
If you do not enable HSS during the FlexusL instance purchase, you can manually install the agent to use HSS. For details, see Installing the Agent on Servers and Enabling Protection.

Before manually installing the agent, check whether the OS is supported. For details, see OS Restrictions.

The following table lists the differences between enabling HSS in difference scenarios. You can select one as required.

**Table 1** Differences between two scenarios of HSS
Scenario	Billing Mode	Lifecycle	HSS Version	Advantage
Scenario 1	Yearly/Monthly (The validity period is the same as that of a FlexusL instance.)	If HSS is enabled during the FlexusL instance purchase on the FlexusL console, its lifecycle is the same as the FlexusL instance. It cannot be renewed or unsubscribed separately, and cannot be disassociated from the FlexusL instance.	Basic Edition	More cost-effective than the yearly/monthly HSS with the same duration purchased on the HSS console
Scenario 2	Yearly/monthly and pay-per-use	HSS purchased on the HSS console has its own lifecycle. You can disassociate it from the FlexusL instance at any time.	Basic, enterprise, and premium editions	More flexible

Constraints

If HSS is enabled during the FlexusL instance purchase, it cannot be disassociated after the FlexusL instance is created.

Viewing the Security Status of FlexusX Instances

To view detection details about HSS enabled during the FlexusL instance purchase, perform the following steps. To view detection details about HSS that is not enabled during the FlexusL instance purchase, see Viewing Detection Details.

In the left navigation pane, choose Host Security to view HSS details.

Item	Description
Protection status	HSS is enabled by default and the status is Protected. When the FlexusL instance expires, HSS stops protecting the instance server.
Server status	Status of the server
Detection result	The number of alarms is displayed. HSS supports intrusion detection, vulnerability management, and baseline inspection.
IP address	Private IP or EIP of a server