HSS

What Is HSS?

Host Security Service (HSS) helps you identify and manage the assets on your servers, eliminate risks, and defend against intrusions and web page tampering. There are also advanced protection and security operations functions available to help you easily detect and handle threats.

After installing the HSS agent on your ECSs, you will be able to check the ECS security status and risks in a region on the HSS console.

How Do I Use HSS?

Before using the HSS service, install the agent on your ECS.

After you select an HSS edition, the system automatically installs the HSS agent, enables account cracking prevention, and offers host security functions.

• Scenario 1: Enable HSS during ECS creation.

  When you use certain public images to create ECSs, you are advised to use HSS to protect your ECSs.

  Select one of the following options:

  • Advanced HSS edition (paid): You can choose the enterprise edition.
  • None: HSS is disabled and servers are not protected.
• Scenario 2: Enable HSS for an existing ECS.

  If HSS is not enabled on an existing ECS, you can manually install an agent to use HSS.

  For details, see the Host Security Service User Guide.

How Do I Check Host Security Statuses?

On the Server tab, you can view the ECS security statuses in the current region.

1. Log in to the management console.
2. Click in the upper left corner and select a region and project.
3. Under Security, click Host Security Service.
4. Choose Asset Management > Servers & Quota > Servers to view the security statuses of target servers.

   Table 1 Statuses

   Parameter	Description
   Agent Status	Not installed: The agent has not been started or even has not been installed. Online: The agent is running properly. Offline: The agent fails to communicate with the HSS server. Therefore, HSS cannot protect your ECS. Click Offline. Then, the ECSs with agent being offline and the offline reasons are displayed.
   Protection Status	Protected: The ECS is fully protected by HSS. Unprotected: HSS is disabled for the ECS. After the agent is installed, click Enable in the Operation column to enable protection. Protection interrupted: The ECS is not protected, because the HSS protection server is interrupted. You can hover the cursor on next to Protection interrupted to view the cause.
   Scan Results	Risky: The ECS is risky. Safe: No risks are detected. Pending risk detection: HSS is not enabled for the ECS.

For more details, see What Is HSS?