Managing Server Security

What Is Host Security Service?

Host Security Service (HSS) helps you identify and manage the assets on your servers, eliminate risks, and defend against intrusions and web page tampering. There are also advanced protection and security operations functions available to help you easily detect and handle threats.

After installing the HSS agent on your FlexusX instances, you will be able to check the protection status of the instances and risks in a region on the HSS console.

For more information about HSS, see Host Security Service.

Enabling HSS

Before using the HSS service, install the agent on your FlexusX instance. You can install the agent during or after the creation of a FlexusX instance.

• Scenario 1: During the creation of a FlexusX instance

  When you use certain public images to purchase FlexusX instances, you are advised to use HSS to protect your instances.

  Select one of the following options:

  • HSS basic edition (free): provides HSS basic edition (1-month free trial), account cracking protection, weak password detection, and malicious program detection.
    

    After the free trial period expires, the HSS basic edition quotas will be automatically released, and HSS will not protect your servers.

    If you want to retain or upgrade HSS security capabilities, you are advised to purchase HSS. For details, see Editions and Features.

    This option is selected by default.

  • Advanced HSS edition (paid): provides HSS enterprise edition, vulnerability patches, virus scan and removal, and graded protection.
  • None: Do not use security protection.

  HSS provides basic, enterprise, premium, and WTP editions. For details, see Edition Details.

  If the basic or enterprise edition does not meet service requirements, you can Purchasing an HSS Quota and switch the edition on the HSS console to obtain advanced protection without reinstalling the agent.

  

  Different public images support different HSS versions. See the supported HSS versions on the management console.

• Scenario 2: After a FlexusX instance is purchased

  If you did not select HSS or the selected image does not support HSS when purchasing a FlexusX instance, you need to manually install the agent to use HSS.

  For details, see Installing an Agent and Enabling Server Protection.

Viewing the Security Status of FlexusX Instances

On the FlexusX instance list page, you can view the security of the instances.

1. Log in to the FlexusX console, click in the upper left corner, and select a region and project.
2. In the FlexusX instance list, view the protection status of instances in the Security column.
   • Not installed: The agent is not installed, or the agent is installed but not enabled. If you want to install the agent, refer to Installing an Agent.

     (The security status of a newly purchased FlexusX instance may be Agent not installed, which is because the agent is being installed. Please check it later.)

   • Risky: The FlexusX instance is risky.
   • Safe: No risk is found in the FlexusX instance.
   • Unprotected: HSS is not enabled for the FlexusX instance. For details about how to enable HSS, see Enabling Server Protection.

     If HSS is not enabled on the newly purchased FlexusX instance, please manually install the Agent.

3. Click the name of the target FlexusX instance. The details page of this instance is displayed.

   Select HSS to view the agent status and protection status.