The protection license provides security protection services based on the CWPP client. You can purchase a protection license and bind it to the host where the client is installed, then the host can receive comprehensive security protection, including intrusion detection, vulnerability management, and baseline management. The protection license has flexible management mechanisms, supporting auto-renewal, auto binding, and auto purchase, thus simplifying the user's protection license management.
Limits
The protection license feature can only be bound to hosts where the CWPP client is installed.
The objects associated with Tencent Cloud tags and projects are security license orders, not the specific licenses or hosts.
Once the auto-backtrace switch in Add host settings is enabled, only Ultimate edition hosts support automatically backtracing intrusion alarm data from the past 14 days.
Only the pay-as-you-go license orders for the Pro edition are supported for scaling in and termination.
Note:
Due to the adjustment of the billing mode, CWPP discontinued the pay-as-you-go mode for the Pro edition starting from November 30, 2023. After the adjustment, the new purchase of the Pro edition under the pay-as-you-go mode should no longer be supported. Existing pay-as-you-go orders can still be used normally and allow for scale-out.
Purchasing Protection Licenses
1. Log in to the CWPP console. In the left sidebar, choose License management. 2. On the license management page, click Purchase CWPP license, go to the CWPP purchase page, and select the protection edition, duration, number of licenses, and bind the hosts. After you have completed the payment, the protection will take effect automatically. Note:
If you have set the number of protection licenses (as a precondition) on the CWPP purchase page, have checked the options for auto binding or auto purchase, and have successfully completed the payment, this configuration will be synchronized to the license management page. Setting Auto-Renewal
Method 1: On the license management page, check the license orders that need auto-renewal, and turn on the auto-renewal switch. Method 2: In the license list on the license management page, for the license orders that need auto-renewal, check the auto-renewal option.
Note:
A one-month renewal is set for the three auto-renewal methods above by default. For auto-renewal, the protection edition and the number of licenses will remain consistent with the original order.
Some customers have the privilege of continuous service without interruption upon expiration. If the auto-renewal is disabled, the continuous service privilege for the corresponding license order will become invalid, and the auto-renewal will no longer be performed after expiration.
Setting Auto Bind
On the license management page, click the Auto Bind switch to enable it. This allows the system to automatically bind the remaining available licenses when new Basic edition hosts are detected. Note:
Add new Basic edition host: Refers to a Basic edition host that has never been bound to a paid edition license (excluding those hosts returned to the Basic edition due to unbinding of a paid edition license).
If there are multiple protection license orders with different editions and durations, the system will prioritize binding the higher edition and the one with the later expiration date.
Setting Auto Purchase
On the license management page, configure the exclusive protection edition. After the Auto Bind and Auto Purchase switches are enabled, the system will automatically scale out/newly-purchase licenses and bind the new Basic edition hosts when there are no remaining licenses for auto binding. Note:
The auto-purchase will only take effect if both the auto binding and auto purchase switches are enabled. Otherwise, there will be no actual auto purchase.
If there are multiple corresponding edition orders in the license order list for the user's configured exclusive protection edition, the system will prioritize scaling out the license order with the later expiration date. Otherwise, if there are no corresponding edition orders in the license order list, a new license will be purchased, with a default purchase period of 1 month.
Protection License Overview
On the license management page, the license overview displays the number of the licenses which are available , purchased, valid, about to expire, and isolated/expired/invalidated, and provides auto-renewal, auto binding, and auto purchase switch options. Field Description:
Available Licenses: The total number of unused licenses.
Purchased: The total number of licenses purchased, including valid licenses, those nearing expiration, and those that have expired or been invalidated (records of expired or invalidated licenses that have been deleted are excluded from this count).
Valid: The total number of unexpired licenses.
About to Expire: The total number of licenses expiring within 15 days.
Isolated/Expired/Invalidated: The total number of licenses that have entered isolation, expiration, or invalidation due to the expiration of monthly subscriptions, or overdue payments for pay-as-you-go subscriptions.
Protection License List
In the license list on the license management page, you can view all purchased license orders. The following operations on licenses are supported. Binding/Unbinding/Replacing Licenses
Bind: Click Bind servers to bind the license to a host to obtain the corresponding edition of protection services.
Unbind/Replace: Click Order details to view the license binding status and perform unbind/replace operations. When the unbind is performed, the host will downgrade to the Basic edition. When replacing, you can only replace with the same or a higher edition license.
Note:
Each month, the total count of unbinds and replacements for each license order is equal to the number of licenses in that order multiplied by 2.
Upgrading/Scaling-out
Upgrade: For Pro edition with monthly subscription license orders, click Upgrade to CWPP Ultimate and confirm the upgrade, to upgrade to the Ultimate edition.
Scale-out: Click Expand storage capacity, enter the scaled-out number of licenses and confirm the scale-out, to scale out the license order.
Was this page helpful?