Configure cloud security management

About this feature

Cloud security management enables centralized management of security products, including security hardware and security virtualization products. After the security cloud manages security network elements, you can enable life cycle management, including warm boot, security policy management, network orchestration, daily operations, and unified auditing.

Prerequisites

• Deploy the Cloud Security Management Platform on the System > Component Management page.

• Complete the availability zone and log source settings on the SecCloud OMP Security Cloud Security Management Platform. For more information, see the help for the SecCloud OMP Security Cloud Security Management Platform.

Security situation

About this feature

The security situation page provides security operators with a global, intuitive, and real-time overview of the system's security situation. This feature visualizes complex network security data through various charts and data modules, helping you understand the current security situation, identify risks, and make informed decisions.

Restrictions and guidelines

• The system displays security incidents at most 9 minutes after they are generated.

• Security incidents can be generated only if protected hosts are managed by the cloud security management platform.

Security market

The security market is a unified entry point for security services. You can access the

security product catalog and product details, and quickly activate services.

Activate security services

After you activate a security service, the Ordered label appears at the top right of the

security service area. Click View Service in the bottom left corner to view details of the activated security service.

Prerequisites

Only application services released on the System Settings > App Release/Remove page can be displayed in the security market.

Restrictions and guidelines

To select flavors. Make sure hardware resource instances are available or conditions for automatic virtual machine creation are met, such as virtualization pool configuration, template configuration, and license server configuration. You must complete the resource management for the corresponding service on the System Settings > Apps page in advance.

Procedure

1. On the top navigation bar, select Security. 2. From the left navigation pane, select Security Market. 3. The security market page displays the security services in the system. 4. Click Activate Now for an application service to access the product service order page. 5. Select an availability zone, organization, flavor, and duration. 6. Click Next to complete the creation.

View security products

Only application services released on the System Settings > App Release/Remove page can be displayed in the security market.

The security market page displays security services that have been released on the System Settings > App Release/Remove page.

1. On the top navigation bar, select Security. 2. From the left navigation pane, select Security Market. 3. The security market page displays the security services in the system. 4. You can filter applications by availability zone, organization, application name, and order state at the top of the page. 5. Click the security category in the product catalog on the left side of the page to view security product under each category.

Network security

SSL VPN (Exclusive)

SSL VPN (exclusive) provides data encryption for secure transmission and access. It offers a safe, fast, and user-friendly remote access solution for mobile workers, allowing access to the intranet quickly and securely from any location using office devices.

IPS (Exclusive)

The IPS (Exclusive) product features a comprehensive attack signature library. It effectively protects against common viruses, worms, back doors, Trojan horses, botnet attacks, buffer overflow attacks, and vulnerability exploits, ensuring secure network operation.

Cloud Firewall (FC3.0, Hyper convergence)

The firewall enables access control between different security zones. It allows or denies data flows based on the session state, controls system access, divides areas, and prevents network attacks.

Cloud Firewall (Exclusive)

The firewall enables access control between different security zones. It allows or denies data flows based on the session state, controls system access, divides areas, and prevents network attacks.

IPS (Exclusive)

The IPS (Exclusive) product features a comprehensive attack signature library. It effectively protects against common viruses, worms, back doors, Trojan horses, botnet attacks, buffer overflow attacks, and vulnerability exploits, ensuring secure network operation.

Cloud NGFW (FC3.0, Hyper convergence)

The next-generation firewall enables access control between security zones. It provides application control, Internet access behavior auditing, keyword filtering, and client behavior analysis. It effectively defends against viruses, worms, back doors, Trojan horse, botnet attacks, buffer overflow attacks, and vulnerability exploits, ensuring secure network operation.

Cloud NGFW (Exclusive)

The next-generation firewall enables access control between security zones. It provides application control, Internet access behavior auditing, keyword filtering, and client behavior analysis. It effectively defends against viruses, worms, back doors, Trojan horse, botnet attacks, buffer overflow attacks, and vulnerability exploits, ensuring secure network operation.

Cloud Firewall (FC3.0)

The firewall enables access control between different security zones. It allows or denies data flows based on the session state, controls system access, divides areas, and prevents network attacks.

Application security

Website Defacement Prevention (SaaS)

The Website Defacement Prevention (SaaS) product protects website files and blocks unauthorized sources from modifying protected files or directories. You can modify the service name, log in to the system, and renew the service.

Vulnerability Scanning (FC3.0)

The remote security assessment system supports vulnerability probes and configuration baseline checks for systems and Web applications. It identifies vulnerabilities, enhances security, and helps build secure and reliable services.

Website Defacement Prevention (FC3.0)

The Website Defacement Prevention product protects website files and blocks unauthorized sources from modifying protected files or directories.

Website Defacement Prevention (Exclusive)

The Website Defacement Prevention (Exclusive) product protects website files and blocks unauthorized sources from modifying protected files or directories. You can modify the service name, log in to the system, and renew the service.

Web Application Firewall (FC3.0)

WAF provides comprehensive security analysis and defense for the network layer, Web service layer, Web application layer, and application content attributes. It uses independent security defense technologies based on different security attributes at each level. This approach enhances the overall security defense capability of Web applications.

Web Application Firewall (SaaS)

WAF (SaaS) provides comprehensive security analysis and defense for the network layer, Web service layer, Web application layer, and application content attributes. It uses independent security defense technologies based on different security attributes at each level. This approach enhances the overall security defense capability of Web applications.

Web Application Firewall (Exclusive)

WAF provides comprehensive security analysis and defense for the network layer, Web service layer, Web application layer, and application content attributes. It uses independent security defense technologies based on different security attributes at each level. This approach enhances the overall security defense capability of Web applications.

Website Vulnerability Scanning (SaaS)

The Website Vulnerability Scanning (SaaS) product supports vulnerability probes for Web applications. It identifies vulnerabilities, enhances security, and helps build secure and reliable Web application services..

Endpoint security

Security management

Log Audit (Exclusive)

The Log Audit product monitors and collects various types of information in the information system, including system security incidents, user access behaviors, operational logs, and system states. After being processed through standardization, filtering, aggregation, and alarm analysis, the information is centrally stored and managed in a unified log format. Leveraging comprehensive log statistics and advanced analytical functions, it enables thorough auditing of the overall security posture of the information system. You can modify the service name, log in to the system, and renew the service.

Ops Audit & Access Control System (Exclusive)

The Ops Audit & Access Control System integrates various functions such as operation and maintenance identity authentication, username management, and system operation auditing. Based on protocol forward proxy technology, it enables full recording of data flows for common operation and maintenance protocols like SSH, Windows remote desktop, and SFTP. By reassembling protocol data flows, it achieves replay functionality to fulfill the purpose of operation and maintenance auditing.

Ops Audit & Access Control System (SaaS)

The Ops Audit & Access Control System (SaaS) integrates various functions such as operation and maintenance identity authentication, username management, and system operation auditing. Based on protocol forward proxy technology, it enables full recording of data flows for common operation and maintenance protocols like SSH, Windows remote desktop, and SFTP. By reassembling protocol data flows, it achieves replay functionality to fulfill the purpose of operation and maintenance auditing.

Endpoint Security (SaaS)

The endpoint security function achieves unified management of policies, unified update of virus databases, and unified presentation of logs by working with the endpoint security management system. In addition to providing common functions such as malicious program identification and removal, it also offers intelligent protection and solutions to prevent malicious program outbreaks.

Security Configuration Check (FC3.0)

The security configuration check system systematically checks and evaluates configurations to ensure they follow security best practices. This reduces security risks and prevents potential security vulnerabilities from being exploited.

Container Security (FC3.0)

The Container Security product focuses on lifecycle protection for containers. It supports flexible deployment options to monitor and block risks in container images, orchestration environments, and runtime operations. Featuring non-intrusive full-image delivery, it enables rapid deployment. Backed by continuous cloud-native security research, it helps customers build secure and stable cloud-native application environments with fully operational security capabilities.

Log Audit (FC3.0)

The Log Audit product monitors and collects various types of information in the information system, including system security incidents, user access behaviors, operational logs, and system states. After being processed through standardization, filtering, aggregation, and alarm analysis, the information is centrally stored and managed in a unified log format. Leveraging comprehensive log statistics and advanced analytical functions, it enables thorough auditing of the overall security posture of the information system.

Operations and Maintenance Auditing (FC3.0)

The operation and maintenance audit system integrates username management, multi-factor authentication, target asset management, operations audit, high-risk command blocking, secondary authorization, and automated operation functions. It enables administrators to centrally manage various resources, including network devices, hosts, security devices, and databases. It can perform centralized username management, fine-grained authority management, and access auditing, helping businesses enhance internal risk control levels.

Comprehensive Vulnerability Scanning (Exclusive)

The host risk scanning product offers comprehensive host vulnerability policies. Through vulnerability detection, weak password detection, and baseline check functions, it can quickly identify risks and provide repair suggestions. You can modify the service name, log in to the system, and renew the service.

Host Security (SaaS)

The Host Security (SaaS) product uses a patented document decoy engine to provide specialized ransomware prevention without relying on anti-virus engines. It ensures network isolation and protection through kernel-level east-west traffic isolation technology. It also provides host security features such as patch repair, peripheral control, file auditing, and detection and blocking of unauthorized external connections.

Host Risk Scanning (SaaS)

The Host Risk Scanning (SaaS) product offers comprehensive host vulnerability policies. Through vulnerability detection, weak password detection, and baseline check functions, it can quickly identify risks and provide repair suggestions.

CSAP (SaaS)

CSAP is a big data security analysis platform that can perform security checks and generate alarms for all your assets. CSAP can also identify potential intrusions and

Data security

Sensitive Data Discovery (FC3.0)

It provides industry templates based on business data characteristics and classification standards. It uses precise sensitive data identification to discover and locate sensitive

Password security

Basic Password Service (Exclusive)

The basic encryption and decryption service provides a password service interface for data encryption.

Password Service Instance (Exclusive)

The password service instance provides password service interfaces for application systems. Through a password service instance, you can deploy the password service program on the instance server and distribute the configuration to the instance server to provide password services externally.

Key Management (Exclusive)

Key management integrates master key and data key management with cloud services to perform cryptographic operations.

Signature and Verification (Exclusive)

The signature and verification service supports cryptographic algorithms approved by the State Cryptography Administration. It provides data signing, verification, digital certificate-based identity authentication, and digital certificate-based encryption/decryption for secure protection. It ensures authenticity, integrity, and nonrepudiation of critical business information. The product can be used in e-commerce, CA certification centers, and online banking servers to provide high-strength and efficient password services.

Host management

About this feature

Host management allows you to add cloud firewalls, cloud next-generation firewalls (exclusive), IPS (exclusive), and WAF (dedicated) for protection and management.

Restrictions and guidelines

Select a traffic steering mode and create traffic steering devices on the SecCloud OMP Security Cloud Security Management Platform. For more information, see the help for the SecCloud OMP Security Cloud Security Management Platform.

Add a host

1. On the top navigation bar, select Security.

2. From the left navigation pane, select Hosts.

3. Click Add.

4. Configure the parameters as shown in the following table. Parameter Description Name Host name. Availability Zone Select an availability zone for the host. Organization Select an organization for the host. Computer Name Computer name of the host. Host IP IP address of the host. Access Address Access address of the host OS Type OS type of the host. Memory Size Memory size of the host. Total Cores Number of CPU cores of the host. Description Description for the host.

5. Click OK.

Add protection configuration

1. On the top navigation bar, select Security.

2. From the left navigation pane, select Hosts.

3. Click Protection Configuration in the Actions column for a host.

4. Click Add Protection Configuration.

5. Add protection parameters: The protection parameters vary by NIC type (basic network or advance network). The following are protection parameters for the basic network NIC type.

○ Protection Service Type: Select a protection service type for the host. Options include Firewall Protection Service, Intrusion Protection Service, or Firewall Protection Service+Intrusion Protection Service.

○ Firewall Protection Service:

▪ Firewall Protection Service Name: Select the name of a firewall protection service. Optional services must be activated in advance on the Security Market page.

▪ Firewall Protection Service Service Network Card: Specify the NIC used by the firewall service to connect to the service network.

▪ Firewall Protection Service Service Network Address: Specify the address used by the firewall service to connect to the service network.

▪ Firewall Protection Service Service Network Gateway: Specify the gateway used by the firewall service to connect to the service network.

▪ Tenant Service: Select the tenant client and server policy-based routing (PBR) uplink and downlink interfaces for traffic redirection.

○ Intrusion Protection Service

▪ Intrusion Protection Service Name: Select the name of an intrusion prevention service. Optional services must be activated in advance on the Security Market page.

▪ Intrusion Prevention Service Service Network Card: Specify the NIC used by the intrusion prevention service to connect to the service network.

▪ Intrusion Prevention Service Service Network Address: Specify the service network address used by the intrusion prevention service to connect to the service network.

▪ Intrusion Prevention Service Service Network Gateway: Specify the gateway used by the intrusion prevention service to connect to the service network.

▪ Tenant Service: Select the tenant client and server policy-based routing (PBR) uplink and downlink interfaces for traffic redirection.

6. Click OK.

Edit a host

1. On the top navigation bar, select Security.

2. From the left navigation pane, select Hosts.

3. Click Edit in the Actions column for a host.

4. Edit the host name, availability zone, and other information. If edit the host IP address, the protection configuration will not take effect on the new IP address. You must delete the protection configuration before you edit the IP address and reconfigure protection configuration after you edit the IP address.

Delete hosts

1. On the top navigation bar, select Security.

2. From the left navigation pane, select Hosts.

3. Select hosts.

4. Click Delete.

Product settings

This page displays activated security services in the system. You can renew a service

and log in to the system.

View activated security services

Only security services activated on the Security Market page are displayed on the Product Settings page.

1. On the top navigation bar, select Security.

2. From the left navigation pane, select Product Settings. All activated security services are displayed under the menu.

3. Click a security service name to access its page. The page displays detailed information about that security service.

4. You can renew security services, modify their status, and perform other actions.

Security policies

Security policies match specific packets with filtering conditions such as source/destination security zones, source IP/MAC addresses, destination IP addresses, services, applications, input interface’s VRF, and content security settings, and process these packets according to predefined policy actions. If a packet does not match any policy, the packet will be dropped. A security policy without any filtering conditions matches all packets. Not all security services support this function.

1. On the top navigation bar, select Security.

2. From the left navigation pane, select Product Settings. All activated security services are displayed.

3. Click a security service name to display detailed information about that security service on the right.

4. Click Security policies in the Actions column to access the Security policies window.

5. Click Add to add a security policy. Parameters

   ○ Name: Enter a name for the security policy. Make sure names are unique among security policies of the same type.

   ○ Type: This parameter is fixed at IPv4

   ○ Enable policy: Enable the policy to make it take effect.

6. Record log: Enable the logging function to log information about packets matching a security policy, facilitating auditing and analysis.

   ○ Source Address: Configure a source IP address, address range, or subnet as a filtering condition for the security policy.

   ○ Destination Address: Configure a destination IP address, address range, or subnet as a filtering condition for the security policy.

   ○ Services: Configure a service object group as a filtering condition for the security policy.

   ○ Application: Configure an application as a filtering condition for the security policy

   ○ Input Interface VRF: Configure the input interface VPN instance as a filtering condition for the security policy. If you select Any VRF, all input interface VPN instances can be matched.

   ○ Action: Select an action to take on matching packets.

   ○ Web application protection profile: Specify a Web application protection profile to execute on matching packets.

   ○ Intrusion prevention profile: Specify an intrusion prevention profile to execute matching packets.

   ○ Antivirus profile: Specify an anti-virus profile to execute on matching packets.

7. Click OK.

Renew a service

Not all security services support this function.

1. On the top navigation bar, select Security.

2. From the left navigation pane, select Product Settings. All activated security services are displayed.

3. Click a security service name to display detailed information about that security service on the right.

4. Click Renew in the Actions column to extend the use of the security service..

Log in to the system

This function allows you to quickly log in to the security service configuration page. Not all security services support this function.

1. On the top navigation bar, select Security.

2. From the left navigation pane, select Product Settings. All activated security services are displayed.

3. Click a security service name to display detailed information about that security service on the right.

4. Click Log In in the Actions column.

Edit the state

Not all security services support this function.

1. On the top navigation bar, select Security.

2. From the left navigation pane, select Product Settings. All activated security services are displayed.

3. Click a security service name to display detailed information about that security service on the right.

4. Click More in the Actions column, and select Edit State to edit the state of the security service.

Edit the service name

1. On the top navigation bar, select Security.

2. From the left navigation pane, select Product Settings. All activated security services are displayed.

3. Click a security service name to display detailed information about that security service on the right.

4. Click More in the Actions column, and select Edit.

Network configuration

For hyper-converged edition firewalls, you can change the NIC type from basic network or advanced network. For the basic network type, the address pool on the security management platform is used to allocate addresses. For the advanced network type, addresses are allocated to NICs from the advanced network subnet. Not all security services support this function.

1. On the top navigation bar, select Security.

2. From the left navigation pane, select Product Settings. All activated security services are displayed.

3. Click a security service name to display detailed information about that security service on the right.

4. Click Network Configuration in the Actions column. You can create, edit, or delete network configurations as needed.

5. In the network configuration window, enable the network configuration, and click Edit to configure the following parameters:

   ○ NIC Type: The default is the service network of the hyper-converged firewall.

   ○ NIC Name: NIC name displayed based on the selected interface.

   ○ Network Type: Select Advanced Network or Basic Network.

   ○ Network: Network name for the advanced network type.

   ○ Subnet: Subnet name within the network.

   ○ vSwitch: Name of the vSwitch on the virtualization platform for creating a hyper-converged firewall.

   ○ IP/mask: Service network address pool on the security management platform.

   ○ Gateway: Gateway for the service network address pool on the security management platform.

Edit flavors

The system allows you to modify the security service specifications.

1. On the top navigation bar, select Security.

2. From the left navigation pane, select Product Settings. All activated security services are displayed.

3. Click a security service name to display detailed information about that security service on the right.

4. Click More in the Actions column, and select Edit Flavor to edit the flavor of the security service.

Delete security services

The system allows you to delete activated security services.

1. On the top navigation bar, select Security.

2. From the left navigation pane, select Product Settings. All activated security services are displayed.

Security incidents

About this feature

This page displays security incidents generated in the system, including event severity, event name, and more. You can take appropriate security measures based on event details. Security incidents are generated if the following conditions exist:

• Security service are created, and hosts are created in the same availability zone.

• Hosts are attacked and security logs are generated.

Security logs match custom security rules to generate four levels of security incidents: Critical, High, Medium, and Low.

Prerequisites

Complete the log platform and log source settings on the SecCloud OMP Security Cloud Security Management Platform. For more information, see the help for the SecCloud OMP Security Cloud Security Management Platform.

System settings

You can manage applications, release or remove applications, and view operation logs.

Application management

Before you activate an application on the Security Market page, you must configure

resources and license servers. To activate the service for a SaaS-based application, you only need to create a resource. To activate the service for an exclusive application, you can create a resource or create a template and configure a license server. The application management page displays information about flavor management, license allocation, resource overview, and resource management. You can also configure resources and license servers required by applications.

View application settings

• Only applications released on the System Settings > App Release/Remove page can be displayed in the Apps page.

• To activate a service, you must select the correct template.

• To select a flavor when you select an exclusive service, you must configure a license server.

1. On the top navigation bar, select Security.

2. From the left navigation pane, select System Settings > Apps.

3. Click Set in the Actions column to access the application details page. The application details page displays the following content, which varies by product.

   ○ Basic Information: This page provides the vendor, service type, application name, application type, and description. SaaS applications can be used by multiple organizations, while exclusive applications can be used by only one organization at a time.

   ○ Flavor Family Management: A flavor family defines the dimensions for the application flavor. For example, in a Web Application Firewall (SaaS), two dimensions for the application flavor are defined: bandwidth (25 to 1000 Mbps) and protected domain name (1 to 40 characters).

   ○ Flavor Management: A flavor defines the details of a flavor family for the application. The flavor value of a range-based flavor family is the step value of the flavor family, while the flavor values of an enumeration-based flavor family are all available flavors.

   ○ License Allocation: Defines device licensing corresponding to the application flavor.

   ○ Validity Period Management: Service duration available when an application is activated.

   ○ Resource Management: Manages security service resource instances. Resource instance data includes two types: virtual machine (VM) and hardware. You don't need to add virtualization-based resources in advance. When you activate services, VMs are automatically created and resource instances are automatically synchronized based on information such as VM templates, license servers, and address pools. You can also deploy VMs as resource instances and add them to the resource management page in advance before activating components.

   ○ License Server Information: Displays information about the license server interoperated with the application.

Add a resource

1. On the top navigation bar, select Security.

2. From the left navigation pane, select System Settings > Apps.

3. Click Set in the Actions column to access the application details page.

4. Click the Resource Management tab.

5. Add or edit a resource. The following are parameters for adding a resource:

   ○ Availability Zone: Select the availability zone where you want to manage resources.

   ○ Name: Name of the resource.

   ○ Flavor: Flavor of the resource. Different flavors correspond to different licensing.

   ○ Protocol: Protocol for the application.

○ IPv4: IPv4 address for the application.

○ IPv6: IPv6 address for the application.

○ Port: Port number for the application.

○ Authentication Type: Authentication type for the application.

○ Username: Username used for the custom authentication type.

○ Password: Password used for the custom authentication type.

○ Apikey: A character string provided by managed resources for authentication with the security management platform.

○ License Server Address: License server address in the availability zone.

○ No Authentication: No authentication is required.

○ Licensing: No Licensing: Does not check whether managed resources have the required licensing under the configured flavor. Licensing Check: Checks whether managed resources have the required licensing under the configured flavor. Renew Licensing: Uses the license server to license flavors for unauthorized applications.

○ Single Sign-On redirect URL: URL used for single sign-on after the resource is activated.

○ Use Organizations: You can specify organizations when you activate the resource. You can also activate the resource without specifying organizations.

○ Health Check Type: Checks the connectivity with another address or URL. Options include ICMP, HTTP, and HTTPS.

6. Click OK.

Configure the license server

License servers are divided into product license servers and common license servers. You can configure product license servers under each product in application management. You can configure common license servers once and synchronize them to applications.

1. On the top navigation bar, select Security.

2. From the left navigation pane, select System Settings > Apps.

3. Click Set in the Actions column to access the application details page.

4. Click the License Server tab.

5. Configure the following parameters:

   ○ Availability Zone: Select an availability zone for the license server.

   ○ Name: Name of the license server.

   ○ Protocol: Protocol of the license server.

   ○ IPv4: The internal accessible address of the license server.

   ○ Port: Port number used by the client to connect to the license server.

   ○ Public IPv4: Public address of the license server.

   ○ Public Port: Public port of the license server.

   ○ Authentication Type: Authentication method for the platform to connect to the license server.

   ○ Client Username: Username used by the client to connect to the license server.

   ○ Client Password: Password used by the client to connect to the license server.

6. Click OK.

Configure password middleware information

The password service middleware supports basic password resources, basic password services, and business services. You can centrally manages password devices as a password pool and configure authentication information to access available password devices.

1. On the top navigation bar, select Security.

2. From the left navigation pane, select System Settings > Apps.

3. Click Set in the Actions column to access the application details page.

4. Click the Password Middleware Information tab.

5. Click Configure, and configure the following parameters:

   ○ Availability Zone: Availability zone for managing the password middleware.

   ○ Name: Name of the password middleware, used to identify and manage the middleware device.

   ○ Protocol: Protocol for the password middleware.

   ○ IPv4: IP address.

   ○ Port: Port number used to interoperate with other platforms.

   ○ Public IPv4: Public IP address.

   ○ Public Port: Public port number used to interoperate with other platforms.

   ○ Authentication Type: Authentication method.

   ○ Username: Username of the system administrator on the password middleware.

   ○ Password: Password of the system administrator on the password middleware.

   ○ Security Administrator Username: Username of the security administrator on the password middleware.

   ○ Security Administrator Password: Password of the security administrator on the password middleware.

   ○ Used Cipher Machines: Number of cipher machines used by password service instances

   ○ Total Cipher Machines: Total cipher machines on the password middleware cloud server.

6. Click OK.

Add a template

The security management platform retrieves virtual machine template information from the virtualization platform interface and allows you to configure templates of different flavors to activate security services.

1. On the top navigation bar, select Security.

2. From the left navigation pane, select System Settings > Apps.

3. Click Set in the Actions column to access the application details page.

4. Click the Template Management tab.

5. Click Add, and configure the following parameters:

   ○ Availability Zone: Select an availability zone for the template.

   ○ Virtualization Type: Select a virtualization platform type.

   ○ Resource Pool Name: Virtualization platform name.

Release and remove applications

About this feature

Only administrators have permissions to release or remove applications. They can add or remove applications across modes and manage their release status within the full application scope.

Restrictions and guidelines

If you release or remove an application, the operation takes effect only after you log out and log in again.

Procedure

1. On the top navigation bar, select Security.

2. From the left navigation pane, select System Settings > App Release/Remove.

Common license server management

About this feature

The common license is the licensing model for FC3.0 applications. You can use the common license server to configure, view, and import licenses centrally. This page displays the system's common licensing servers. FC3.0 security applications in the system can use these license servers for licensing.

Procedure

1. On the top navigation bar, select Security.

2. From the left navigation pane, select System Settings > Common License Server Management.

3. This page displays the created license servers in the system, including the server name, protocol, and IP address.

4. You can perform the following task on this page:

   ○ Add: Add a license server by entering the IP address and type-A and type-B connection parameters. Parameters

   ▪ Availability Zone: Select an availability zone used for the license server.

   ▪ License server name: Enter a license server name.

   ▪ Protocol: Select a protocol.

   ▪ Address: Enter an IP address.

   ▪ Type-A Server Port: Port number used by a type-A product to connect to the license server. A type-A server is used to provide licenses for cloud firewall (FC3.0), cloud next-generation firewall (FC3.0), IPS (FC3.0), and log audit (FC3.0) services.

   ▪ Type-A Client Account: Username used by a type-A client to connect to the license server.

   ▪ Type-A Client Password: Password used by a type-A client to connect to the license server.

   ▪ Type-B Server Port: Port number used by a type-B product to connect to the license server. A type-B server is used to provide licenses for vulnerability scanning (FC3.0), Ops audit (FC3.0), WAF

Security operation logs

This page displays operation log information from the platform operation type

perspective, helping you focus on different information based on different query criteria.

1. On the top navigation bar, select Security.

2. From the left navigation pane, select System Settings > Security Operation Logs.

3. The operation log page displays user actions in the Cloud Security Management module, including IP, service name, and operation details.

4. The operation log page allows you to perform the following tasks:

   ○ Filter logs by query criteria: You can search for operation logs by user, operation result, business name, IP, operation content, or date/time.

   ○ Export logs: Click Export to CSV, select the logs to export, and download the log data as a CSV file to your local system.