Configuring HSS for a FlexusX Instance

What Is Host Security Service?

HSS is designed to improve the overall security for cloud servers. It helps you identify and manage the assets on your servers, eliminate risks, and defend against intrusions and web page tampering. There are also advanced protection and security operations functions available to help you easily detect and handle threats.

After installing the HSS agent on your FlexusX instances, you will be able to check the protection status of the instances and risks in a region on the HSS console.

For more information about HSS, see What Is HSS?

Enabling HSS

Before using HSS, install the agent on your FlexusX instance. You can install the agent during or after the creation of a FlexusX instance.

• Scenario 1: During the creation of a FlexusX instance

  If you use certain public images to purchase FlexusX instances, you are advised to use HSS to protect your instances.

  Figure 1 Enabling HSS when purchasing a FlexusX instance
  
  Select one of the following options:

  • Basic edition (one-month free trial): After this function is enabled, the HSS basic edition can be used free of charge for 30 days. The HSS basic edition supports detection of OS vulnerabilities, weak passwords, and brute force cracking to improve the overall security for your ECSs.
    

    After the free trial period expires, the HSS basic edition quotas will be automatically released, and HSS will not protect your servers.

    If you want to retain or upgrade HSS security capabilities, you are advised to enable the advanced HSS edition. For details, see What Should I Do When the Free Trial of HSS Basic Edition Expires?

    This option is selected by default.

  • Advanced HSS edition (paid): You can choose from HSS basic, enterprise, premium, and Web Temper Protection (WTP) editions and you need to pay for it.

    After ECSs are purchased, you can switch between different editions on the HSS console after Advanced HSS edition (paid) is enabled. For details about the differences among different editions, see Specifications of Different Editions.

  • None: HSS is disabled and servers are not protected.

  HSS provides basic, enterprise, premium, and WTP editions. For details, see Edition Details.

  If the basic or enterprise edition does not meet service requirements, you can Purchasing an HSS Quota and switch the edition on the HSS console to obtain advanced protection without reinstalling the agent.

  

  Different public images support different HSS versions. See the supported HSS versions on the management console.

• Scenario 2: After a FlexusX instance is purchased

  If you did not select HSS or the selected image does not support HSS when purchasing a FlexusX instance, you need to manually install the agent to use HSS.

  For details, see Installing an Agent and Enabling Server Protection.

Viewing the Security Status of FlexusX Instances

On the FlexusX instance list page, you can view the security of the instances.

1. Log in to the FlexusX console, in the upper left corner, click , and select a region and project.
2. In the FlexusX instance list, check the protection status of instances in the Security column.
   • Not installed: The agent is not installed, or the agent is installed but not enabled. If you want to install the agent, refer to Installing an Agent.

     (The security status of a newly purchased FlexusX instance may be Agent not installed, which is because the agent is currently being installed. Please check the status again later.)

   • Risky: The FlexusX instance is at risk.
   • Safe: No risks have been found in the FlexusX instance.
   • Unprotected: HSS is not enabled for the FlexusX instance. For details about how to enable HSS, see Enabling Server Protection.

     If HSS is not enabled on the newly purchased FlexusX instance, please manually install the Agent.

3. Click the name of the target FlexusX instance. The details page of this instance is displayed.

   Select HSS to view the agent status and protection status.