Alibaba Cloud Server Guard

Posted in Alibaba, Cloud by On January 9, 2020. No comments

Alibaba Cloud Security offers Server Guard (Server Security) that acts as a server security O&M manager.

The lightweight Agent plug-in installed on a server and rules of the on-cloud protection center, this product provides real-time awareness of and defence against intrusion events, safeguarding server security.

 

Get Free Basic Server Guard :https://www.alibabacloud.com/campaign/free-trial?spm=5176.2020520001.0.0.5f7e12d2rqeJ7C

The Server Guard Agent plug-in is already integrated in operating system images. When purchasing an ECS instance, you can enable the Activate the Server Guard (Basic Version) for free option at the operating system images selection stage. By doing this, the Server Security (Server Guard) Agent plug-in is installed by default on your purchased ECS instance.

You can log on to the Alibaba Cloud Security Server Guard console, and check the Server Guard Agent online status of each server on the asset management page.

If the Server Guard Agent of a server is offline, you can manually download and install the Server Guard Agent plug-in by following the installation process.

Manual installation (non-Alibaba Cloud servers are also supported)

 

The following table lists the detailed functions and descriptions of server guard.

 
Function Functionality Required or not
Intrusion Detection Suspicious logon. Brute-force password cracking interception: Interactive defense against brute-force password cracking.
Webshell removal Powered by webshell detection and removal engine developed by Alibaba Cloud, the solution includes both local and on-the-cloud detection and removal systems, timed detection and removal, and real-time protection scanning policies. Common webshell file types including php and jsp are supported.

Currently Server Guard Available two locations

 

Note: The third-party security software installed in advance (such as dongles and cloud locks) may cause the Server Guard Agent installation to fail on the server. We recommend that you check for and disable or uninstall such software before installing the Server Guard Agent plug-in.

  1. Log on to Alibaba Cloud Security Server Guard console, and click Settings.
  2. Click Install Server Guard to go to the Server Guard Agent installation page.
  3. Choose the installation steps according to the operating system of your server, and follow the steps to install the latest version of the Server Guard Agent plug-in.
    • Windows
      1. On the Server Guard Agent installation page, download the Server Guard Agent plug-in installation file to your local computer by clicking Click to Download.
      2. Upload the installation file to your Windows-based server. For example, you can upload the installation file using FTP tool.
      3. Log on to your Windows-based server as an administrator, and run the Server Guard Agent plug-in installation file to complete the installation.

        Note: During the installation of the Server Guard Agent plug-in, you may be prompted to enter the install verification key. The verification key is used to associate the Server Guard Agent with your Alibaba Cloud account, so that you can use relevant functionalities to protect your server on the Alibaba Cloud Security Server Guard console with the account.

        The install verification key is displayed on the Server Guard Agent installation page.

Location of the Server Guard Agent plug-in folder

  • Windows: C:\Program Files (x86)\Alibaba\Aegis

 

Benefits Using Server Guard

Lightweight

The Agent running on a server normally consumes less than 1% of the CPU and 10 MB of memory. The resource usage ceilings can be set flexibly.

Management on the cloud

No software operation interface is present on the server. The data displays can be viewed and the operations can be completed by visiting the Alibaba Cloud Security console. Batch management is supported by default.

Cross-platform support

All mainstream Linux and Windows operating systems, Alibaba Cloud classic networks, VPCs, hybrid cloud environments, and traditional IDC environments are supported.

Big data defence

Server Guard has access to the largest malicious attack source library, malicious file library, and vulnerability patch library network-wide. It blocks hundreds of millions of attacks every day in a fast and precise defence model.

 

In The Server Guard Page -> Click Setup -> Install / Uninstall

Click to Download Setup file and Copy Verification Key

Installation Start with Chinees Language

After Installation Complete Enter the Verification Key Copied From Server Guard Page  Click Yes

Verify the Installed Path in Server

Related Posts