yexinru/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
Files
e0076dd9e4a6630c7550320c6a3c30b50eafac3d
doc-exports/docs/hss/umn/hss_01_0511.html
qiaoli 8ac860f1c4 HSS UMN 20240730 version 
Reviewed-by: Rogal, Marcel <mrogal@noreply.gitea.eco.tsi-dev.otc-service.com>
Co-authored-by: qiaoli <qiaoli@huawei.com>
Co-committed-by: qiaoli <qiaoli@huawei.com>
2024-12-19 12:07:54 +00:00

5.7 KiB
Raw Blame History

How Do I Enable or Disable HSS Self-protection?

HSS self-protection protect HSS files, processes, and software from malicious programs, which may uninstall HSS agents, tamper with HSS files, or stop HSS processes.

Constraints

  • HSS self-protection is supported only for Windows servers that enabled HSS premium or WTP edition.
  • Self-protection in Windows depends on antivirus detection, HIPS detection, and ransomware protection. It takes effect only when more than one of the three functions are enabled. For more details, see:
    • .
    • Antivirus detection and HIPS detection are enabled by default. If you manually disable the two detection items, enable them again by referring to .
  • Enabling the self-protection policy has the following impacts:
    • The agent cannot be uninstalled on the control panel of a Windows server. It can be uninstalled on the HSS console.
    • In the agent installation path C:\Program Files\HostGuard, you can only access the log and data directories (and the upgrade directory, if your agent has been upgraded).
    • Hide the process information of HSS.

Procedure

  1. Log in to the management console.
  2. In the navigation tree on the left, choose Security Operations > Policies
  3. Click the name of a premium edition policy group for Windows servers. The policy group details page is displayed.

    Select the policy group of the server where you want to enable self-protection.

    • If you have not created any policy groups of premium edition, you can select the default policy group of the premium or WTP edition. The group name format is tenant_XXX_XXX_default_policy_group.
    • If you have created policy groups of premium edition, select the policy group of your server. Perform the following operations:
      1. In the navigation tree on the left, choose Asset Management > Servers & Quota.
      2. Click the Servers tab to view the policy groups of servers.

  4. In the row containing the target self-protection policy, click Enable or Disable in the Operation column.
  5. In the displayed dialog box, click OK.

Related Operations

Disabling HSS Self-Protection

  1. In the row containing the target self-protection policy, click Disable in the Operation column.
  2. In the displayed dialog box, click OK.
Parent topic: Others