This article will provide a learning path for newbies to host security.
1.Get familiar with the basics of CWPP
The billing modes of Tencent Cloud host security are divided into Prepaid (monthly subscription) and Postpaid (pay-as-you-go). Fully understanding the billing modes of CWPP is conducive to your choice of the optimal billing plan. For billing details, see Purchase Guide. Note:
Due to billing adjustment, CWPP Pro Edition (pay-as-you-go) will be decommissioned starting from November 30, 2023. Subsequently, newly purchased Pro Edition in pay-as-you-go mode will no longer be supported. Existing pay-as-you-go orders of the Pro Edition can still be used and scaled up normally.
3.1 Install CWPP Client
The CWPP client is a security plugin provided by Tencent Cloud. The server must install this client before using the CWPP service (basic edition protection will be available after installation). The CWPP client can be installed on hybrid CVMs. For details, see Hybrid Cloud Installation Guide. Description
Tencent Cloud Lighthouse (Lighthouse) automatically installs the CWPP client by default.
When purchasing a CVM, ECM, or Blackstone physical server 1.0 (CPM), check "security reinforcement" to automatically install the CWPP client.
3.2 Purchase CWPP Protection Edition
|
Basic Edition | If a CWPP client is installed on a server for free, it has basic edition protection. When purchasing CVM, Lighthouse, or ECM, the CWPP client will be automatically installed for the purchased server by default. |
Pro Edition | Annual/Monthly Subscription: 12 USD/Instance/Month. The billing system will perform a one-time charge and generate bills now. Renewal, scale-out, and upgrade to ultimate edition are supported. |
Ultimate Edition | Annual/Monthly Subscription: 27 USD/Instance/Month. The billing system will perform a one-time charge and generate bills immediately. Renewal and scale-out are supported. Temporarily not supported downgrading to the professional edition. |
Note:
The deduction of protection authorization fees is based on the actual number of authorizations purchased, regardless of whether the authorization is bound to a host or whether the host is powered on.
3.3 Security Protection Settings
Host security supports features such as intrusion detection, vulnerability management, baseline management, and advanced defense. It supports settings for each feature (such as anti-virus rules, scheduled detection, allowlist settings, vulnerability ignoring, etc.) as the standard for detecting and determining security threats. For details, see Operation Guide. 3.4 Fault Troubleshooting
If the host is hacked, you can perform troubleshooting based on the intrusion troubleshooting guide to restore the normal operation of the website or system. For details, see Fault Handling. 4.Console Function Overview
|
View the security check score, protection status, pending risks, risk trend, and real-time dynamic of CWPP, etc. | |
Batch export, trust, isolate, and delete Trojan file events. | |
Check or handle abnormal log-in events, or add them to the allowlist. | |
Provides real-time monitoring of password brute force cracking behavior on hosts and realizes automatic blocking defense feature. | |
View all security baselines supported for detection by CWPP | |
5.Feedback and Suggestions
If you have any questions or suggestions on using Tencent Cloud host security products and services, you can give feedback through the following channels. A dedicated person will follow up and solve your problems.
If you find problems with the product documentation, such as link, content, API errors, etc., or issues related to use of the product, you can consult Contact Us for help.