Server Guard

Features

• 

  Detect and Fix Host Vulnerabilities

  • 
    

    Comprehensive vulnerability management largely reduces the security risks on your assets.

    
    

    CVE Vulnerabilities in System Software

    Detects and reports vulnerabilities that are listed in Common Vulnerabilities and Exposures (CVE) on your server, for example, SSH, OpenSSL, and MySQL.

    
    

    Windows System Vulnerabilities

    Sends you Microsoft patches for critical vulnerabilities on your server, for example, the SMB RCE vulnerability. Manual operations are required to update the security system and fix low-risk vulnerabilities.

    Web CMS Vulnerabilities

    Detects web CMS vulnerabilities by scanning directories and files based on Alibaba Cloud security information, and provides patches developed by Alibaba Cloud Security. Fixes vulnerabilities in software such as WordPress and Discuz!.

    Other Critical Vulnerabilities

    Detects vulnerabilities in the software configurations and components, including vulnerabilities that cannot be detected by checking the version information or files, for example, the Redis unauthorized access vulnerability.

    
    
• 

  Configuration Baseline Check

  • 
    

    Checks all security configurations to enable targeted protection.

    
    

    Suspicious Account Detection

    Detects and reports hidden accounts and cloned accounts that are created by attackers on your servers.

    
    

    Weak Password Detection

    Detects weak passwords of servers such as SSH and RDP, based on common weak password dictionaries.

    
    

    Configuration Risk Detection

    Checks whether the logon configurations, process configurations, and registry configurations on your servers comply with the security standards of servers in an enterprise.

• 

  Attacker Intrusion Detection (Cloud Virus Removal Included)

  • 
    

    Alerts you about attacker intrusions in real time, enabling a quick response to security events.

    
    

    Unusual Logon Alerts

    Audits all logons and alerts you about unusual logons. You can set the usual logon locations.

    
    

    Brute-force Attack Prevention

    Detects brute-force attacks and reports to Alibaba Cloud to prevent password cracking.

    Webshell Detection and Removal

    Provides an Alibaba engine for detecting and removing webshells such as PHP webshells and JSP webshells, both on-premises and in the cloud. Supports both regular and real-time webshell detection and removal.

    Suspicious Host Detection

    Detects and alerts you about reverse shells, DDoS attacks on other hosts, mining processes, botnets used for CC attacks, and downloads from malicious sources.

    Cloud Virus Removal

    Integrates major cloud virus removal engines from developers across the globe and Alibaba-developed sandboxes. Detects malicious processes and viruses and allows you to quickly quarantine them.

    
    
• 

  Efficient scheduling

  • 
    

    Supports multiple scheduling algorithms and distribution modes to improve the efficiency of application deployment.

    
    

    Scheduling algorithms

    Supports the weighted round-robin and least-connections scheduling algorithms. These algorithms allow you to distribute traffic based on your business needs.

    
    

    Traffic distribution based on domain names and URLs

    Distributes traffic based on domain names and URLs to improve the efficiency of your applications.

    
    
• 

  Host Port/Process/Account Management

  • 
    

    Manages processes, ports, and accounts in the cloud, and detects unusual changes on your assets.

    
    

    Asset Data Collection

    Regularly records process data on your servers, such as listener ports and created accounts, and manages the data in a unified manner.

    
    

    Process Change Audit

    Audits changes in the process data to detect unusual activities on your assets.

    
    
• 

  Real-time Retrieval of All Host Logs

  • 
    

    Manages all host logs and allows you to locate security issues.

    
    

    Unified Data Management

    Manages all host data, such as network connections, logon history, accounts, listener ports, and all process data.

    
    

    Fast Data Retrieval

    Allows you to use Boolean search to identify the causes of security events on your hosts. Displays the search result within seconds.