This article will provide a learning path for newbies to host security.
1.Get familiar with the basics of CWPP
The billing modes of Tencent Cloud host security are divided into Prepaid (monthly subscription) and Postpaid (pay-as-you-go). Fully understanding the billing modes of CWPP is conducive to your choice of the optimal billing plan. For billing details, see Purchase Guide. Note:
Due to billing adjustment, CWPP Professional Edition (pay-as-you-go) will be decommissioned starting from November 30, 2023. Subsequently, newly purchased Professional Edition in pay-as-you-go mode will no longer be supported. Existing pay-as-you-go orders of the Professional Edition can still be used and scaled up normally.
3.1 Install CWP Client
The CWP client is a security plugin provided by Tencent Cloud. The server must install this client before using the CWPP service (basic edition protection will be available after installation). The CWP client can be installed on hybrid CVMs. For details, see Hybrid Cloud Installation Guide. Description
Tencent Cloud Lighthouse (Lighthouse) automatically installs the CWP client by default.
When purchasing a CVM, ECM, or Blackstone physical server 1.0 (CPM), check "security reinforcement" to automatically install the CWP client.
3.2 Purchase CWP Protection Version
|
Basic version | If a CWP client is installed on a server for free, it has basic edition protection. When purchasing CVM, Lighthouse, or ECM, the CWP client will be automatically installed for the purchased server by default. |
Professional Edition | Annual/Monthly Subscription: 12 USD/Instance/Month. The billing system will perform a one-time charge and generate bills now. Renewal, scale-out, and upgrade to flagship version are supported. |
Flagship Edition | Annual/Monthly Subscription: 27 USD/Instance/Month. The billing system will perform a one-time charge and generate bills immediately. Renewal and scale-out are supported. Temporary not support downgrading to the professional version. |
Note:
The deduction of protection authorization fees is based on the actual number of authorizations purchased, regardless of whether the authorization is bound to a host or whether the host is powered on.
3.3 Security Protection Settings
Host security supports features such as intrusion detection, vulnerability management, baseline management, and advanced defense. It supports settings for each feature (such as anti-virus rules, scheduled detection, allowlist settings, vulnerability ignoring, etc.) as the standard for detecting and determining security threats. For details, see Operation Guide. 3.4 Fault Troubleshooting
If the host is hacked, you can perform troubleshooting based on the intrusion troubleshooting guide to restore the normal operation of the website or system. For details, see Fault Handling. 4.Console Function Overview
|
View the security check score, protection status, pending risks, risk trend, and real-time dynamic of CWPP, etc. | |
Batch export, trust, isolate, and delete Trojan file events. | |
Check or handle abnormal log-in events, or add them to the allowlist. | |
Provides real-time monitoring of password brute force cracking behavior on hosts and realizes automatic blocking defense feature. | |
View all security baselines supported for detection by CWPP | |
5.Feedback and Suggestions
If you have any questions or suggestions on using Tencent Cloud host security products and services, you can give feedback through the following channels. A dedicated person will follow up and solve your problems.
If you find problems with the product documentation, such as link, content, API errors, etc., or issues related to use of the product, you can consult Contact Us for help.