Help Center/ Host Security Service/ User Guide (Kuala Lumpur Region)/ Installation and Configuration/ Installation and Configuration on Servers/ Agent Management/ Installing the Agent on a Server
Updated on 2025-10-10 GMT+08:00
View PDF
Share

Installing the Agent on a Server

Scenarios

The HSS agent is a piece of software installed on servers to exchange data between the servers and HSS, implementing security detection and protection. You can use the HSS only after installing the agent.

Step 1: Prepare the Installation Environment

  1. Ensure your server OS is supported by the agent. For more information, see the table in OS Restrictions.

    The agent cannot be installed on the OSs that are not in the list.

  2. Ensure the server is running properly.

    The agent cannot be installed if the server is not running.

  3. Ensure the capacity of the disk where the agent is to be installed is greater than 300 MB.

    If the available space is less than 300 MB, the agent will fail to be installed. The agent installation path cannot be customized. The following default paths are used:

    • Linux: /usr/local/hostguard/
    • Windows: C:\Program Files\HostGuard

  4. Ensure the outbound rule of your security group allows access to the port 10180 on the 100.125.0.0/16 CIDR block. (This is the default setting.)

    This port is used to communicate with the HSS server. For details about how to view and modify an outbound security group rule, see .

  5. Uninstall third-party security software.

    Third-party security software will probably be incompatible with the HSS agent and affects HSS protection. If third-party security software is installed on your servers, uninstall it before installing the HSS agent.

  6. (Optional) For a Linux server, disable the SELinux firewall.

    The SELinux firewall may disrupt agent installation. You can enable it after the agent is successfully installed.

Step 2: Install the Agent on Servers

HSS can protect cloud servers and third-party servers. For details about how to install the agent on the servers, see:

Modifying a Security Group

To install the agent, ensure the security group of the server allows outbound access to port 10180 of the 100.125.0.0/16 CIDR block. This section describes how to view and modify ECS security group rules.

  1. Log in to the management console.
  2. Click in the upper left corner and select a region or project.
  3. Click in the upper left corner of the management console and choose Compute > Elastic Cloud Server.
  4. In the ECS list, click the name of an ECS.
  5. On the ECS details page, click the Security Groups tab, click , and click the security group ID.
  6. Click the Outbound Rules tab and add a rule, as shown in Security group rules.

    Table 1 Security group rules

    Protocol

    Port Range or ICMP Type

    Type

    Destination

    Description

    TCP

    10180

    IPv4
    • IP Address
    • 100.125.0.0/16

    Communicates with the HSS server.

Parent topic: Agent Management