How Do I Scan My Servers?

Prerequisites

Check Items

Scan Duration

• The scan for a single item (such as password risks) takes less than 30 minutes.
• A comprehensive manual scan takes less than 30 minutes. Items are scanned concurrently.

Performing a Manual Detection with One Click

1. Log in to the management console.
2. In the upper left corner of the page, select a region, click , and choose Security > Host Security Service.
3. In the upper right corner of the Servers page, click Manual Detection.

   Figure 1 Performing a manual detection

   
   

4. On the Manual Detection page, select the target servers and click OK.

   Figure 2 Manual detection

   
   

5. On the Dashboard page of the HSS console, view the overall detection result. Alternatively, on the Servers page, click View Scan Results in the Operation column of a server to view the manual detection results of the server.

Manually Checking an Item

1. Log in to the management console.
2. In the upper left corner of the page, select a region, click , and choose Security > Host Security Service.
3. In the navigation pane, choose Servers. In the Operation column of the server list, click View Scan Results.

   Figure 3 Viewing scan results

   
   
   • Checking software information

     Click Installed Software on the Assets tab, and click Manual Detection.

     Figure 4 Viewing software information

     
     
   • Detecting vulnerabilities

     Click the Vulnerabilities tab. Click Linux Vulnerabilities or Web-CMS Vulnerabilities and click Manual Detection.

     Note

     The manual detection of either software vulnerabilities or software information management will collect software information from servers.

     • Click Select the Vulnerability Management tab, select a system vulnerability, and click Manual Detection. HSS will scan for system vulnerabilities immediately.

       Figure 5 Detecting system vulnerabilities

       
       
     • Click the Vulnerabilities tab. Click Web-CMS Vulnerabilities, select a vulnerability, and click Manual Detection. HSS will detect Web-CMS vulnerabilities immediately.

       Figure 6 Detecting Web-CMS vulnerabilities

       
       

   • Detecting password risks

     Click the Unsafe Settings tab and click Password Risks. Click Manual Detection to manually detect unsafe configurations.

     Figure 7 Detecting weak passwords

     
     
   • Detecting unsafe settings

     Click the Unsafe Settings tab and click Unsafe Configurations. Click Manual Detection to manually detect unsafe configurations.

     Figure 8 Detecting unsafe settings

     
     

4. Wait until Detection Status changes to Completed, click to refresh the detection results.