Enabling Application Protection

Prerequisite

You have purchased HSS premium, WTP, or container edition.

Constraints

• Currently, only Linux servers are supported.
• So far, only Java applications can be protected.
• Servers that are not protected by HSS premium, WTP, or container editions do not support application protection operations.

Procedure

1. Log in to the management console.
2. In the upper left corner of the page, select a region, click , and choose Security & Compliance > Host Security Service.
   Figure 1 Accessing HSS
   

3. In the displayed dialog box, click Try the new edition to switch to the HSS (New) console.
   

   • Currently, HSS is available in the following regions: CN South-Guangzhou, CN-Hong Kong, AP-Bangkok, and AP-Singapore.
   • On the HSS (New) console, you can click Back to Old Console in the upper left corner to switch to the HSS (Old) console.

4. Choose Prevention > Application Protection. Click the Protected Servers tab.
   

   If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.

   Figure 2 Protection settings
   

5. Click Add Server. Select servers in the dialog box that is displayed.
   

   You can select a default security policy or create a security policy.

   Figure 3 Selecting the target server and policy
   

6. Click Add and Enable Protection.
7. On the Protected Servers tab, click the status in the RASP Protection column.
   Figure 4 Viewing the progress of enabling protection
   

8. Check the RASP software installation progress. Wait until the message "Installation completed." is displayed.
   Figure 5 Installation completed
   

9. Log in to the server, go to the Spring Boot startup path, and copy the parameters from the Configure Startup Parameters step to the command box. See Figure 6.
   Figure 6 Configuring startup parameters
   

10. Restart the microservice to apply the protection settings.
11. On the Protected Servers tab, check the protection status in the Microservice Protection column. If the status is Active, the protection has been enabled.