Overview

You can use SecMaster to manage and maintain tasks across accounts with ease, making it simple to implement protection of different services, including WAF, CFW, VPC security groups and IAM. You can view all policies centrally, manage policies for seven defense lines manually, and query manual and automatic block records quickly.

• Viewing and Configuring Defense Policies: describes how to view and configure defense policies. There are seven defense lines: physical, identity, server, maintenance, data, application, and network defense lines. Table 1 describes the seven layers of defense and the corresponding asset types that can be protected.

  Table 1 Seven layers of defense and types of protected assets

  Defense Layer Type	Protection Plan	Description	Protected Asset Type
  Physical security	--	The cloud service provider is responsible for physical environment security.	--
  Network security	DDoS Mitigation	This solution mitigates DDoS attacks in milliseconds to ensure continuity of your global services based on machine learning, protection policy tuning, and precise identification of DDoS attacks.	Elastic Load Balance (ELB) and Elastic IP (EIP)
  	Cloud Firewall (CFW)	Cloud Firewall (CFW) protects Internet borders on the cloud and at VPC borders. It can detect and defend against intrusions in real time, control traffic in a unified manner, analyze traffic and visualize results, audit logs, and trace traffic sources. You can scale CFW resources as needed.	Virtual Private Cloud (VPC)
  Application security	Web Application Firewall (WAF)	WAF can check and protect website service traffic from multiple dimensions. WAF can intelligently identify malicious request features and defend against unknown threats based on deep machine learning.	Websites and IP addresses
  Server security	Host Security Service (HSS)	HSS is designed to protect server workloads in hybrid clouds and multi-cloud data centers. It protects servers and containers and prevents web pages from malicious modifications.	Elastic Cloud Server (ECS) and Cloud Container Engine (CCE)

  NOTE:

  The defense layers for the identity, data, and O&M security will be available soon.

• Adding an Emergency Policy: Emergency policies are used to quickly prevent attacks. You can select a block type based on the alert source to block attackers.
• Managing Emergency Policies: describes Viewing an Emergency Policy, Editing an Emergency Policy, and Deleting an Emergency Policy.

• Batch Blocking and Canceling Batch Blocking of an IP Address or IP Address Range: describes how to block access from blacklisted IP addresses, IAM users, or IP address ranges. You can add an IP address, IAM user, or IP address range as blocked object for an emergency policy in several operation connections. If there is no need to block an IP address, IAM user, or IP address range for operation connections, you can cancel the blocking from all operation connections.