The Assets page in the Security Center console displays security information about all servers. The information includes the security status, the groups to which servers belong, the regions where servers reside, and the virtual private cloud (VPCs) where servers reside. This topic describes how to search for specific servers and view the security status of these servers. This topic also describes how to specify search conditions and select the items that you want to display on the Assets page.

Procedure

  1. Log on to the Security Center console.
  2. In the left-side navigation pane, click Assets.
  3. On the Server tab, view the security status of servers.
    You can perform the following operations based on your business requirements:
    • Search for servers by status
      • The All Servers section displays the numbers of servers by status, including All Servers, Risky server, Unprotected server, Shutdown Server(s), Exposed Server, and New Server(s). All assets
        The following list describes the servers by status:
        • All Servers: servers that are protected by Security Center. The servers include Alibaba Cloud servers and servers that are not deployed on Alibaba Cloud but have the Security Center agent installed.
        • Risky server: servers that are detected with risks, including vulnerabilities, alerts, and baseline risks.
        • Unprotected server: servers on which the Security Center agent is in the Close or Disable Protection state. Security Center does not protect these servers.
        • Shutdown Server(s): servers that are shut down.
        • Exposed Server: servers that are accessible over the Internet. For more information about the exposure of your assets, see Use the asset exposure analysis feature.
          Note
          • Only the Enterprise and Ultimate editions support asset exposure analysis. If you want to view the number and list of the servers that are accessible over the Internet, you must upgrade Security Center to the Enterprise or Ultimate edition.
          • If Unknown is displayed next to Exposed Server, the current edition does not support asset exposure analysis. In this case, the number of exposed servers is not displayed in the Security Center console. To use asset exposure analysis, you must upgrade Security Center to the Enterprise or Ultimate edition. For more information, see Upgrade and downgrade Security Center.
        • New Server(s): the Elastic Compute Service (ECS) instances that are purchased in the last 15 days.

        To view the details of a server, click the name of the server, or click View or Fix in the Actions column. For more information, see View the details of an asset.

      • You can click Risky server, Unprotected server, Shutdown Server(s), Exposed Server, or New Server(s) to view the security status of the related servers.

    • Search for servers by group
      • You can click Server Group to view the total number of server groups and numbers of servers, servers that are at risk, and unprotected servers in each server group. Server groups

        You can manage or delete a server group in the Security Center console. For more information, see Manage asset groups.

      • You can find a specific server group, and click the number in the Servers, Risk, or Unprotected column to view the security status of specified servers in this group. For example, find the 2008 server group and click the number in the Risk column. Servers that match the Risk Status: At-risk and Group Name: 2008 search conditions appear. You can view the status of these servers. View a server group
    • Search for servers by region
      • You can click Region to view the total number of regions and numbers of servers, servers that are at risk, and unprotected servers that are deployed in each region. Server regions
      • You can find a specific region, and click the number in the Servers, Risk, or Unprotected column to view the security status of the servers that are deployed in this region. For example, find the China (Shanghai) region in the Region column, and click the number in the Servers column. Servers in this region appear. You can view the security status of these servers. View servers in a region
    • Search for servers by VPC ID
      • You can click VPC to view the total number of VPCs, and the numbers of servers, servers that are at risk, and unprotected servers that are deployed in each VPC. VPCs
      • You can find a specific VPC, and click the number in the Servers, Risk, or Unprotected column to view the security status of specified servers in this VPC. For example, find the noncloudEcs VPC, and click the number in the Servers column. Servers in this VPC appear. You can view the security status of these servers. View servers deployed in a VPC
    • Search for servers by asset importance
      In the Asset Importance section, you can click Important Assets, General Assets, or Test Asset to view the security status of the related servers. Asset importance
    • Search for servers by tag
      You can click a tag on the left of the asset list to view the security status of the servers to which this tag is added. Tags
    • Search for servers based on search conditions
      You can click All Servers, Server Group, Region, VPC, or a tag, and use the search box above the asset list to search for specific servers.
      • Use multiple sub-conditions to search for specific assets:

        Above the asset list, you can select a search condition, and select or enter a keyword in the search box to search for specific servers. Supported search conditions include Internet IP, Private IP, Instance name, Instance ID, VPC ID, System, Baseline problems, Vul problems, Alert problems, Risk Status, Online or Offline, ECS status, Tag, Group name, and Region.

        Note

        You can configure multiple search conditions at a time and specify a Boolean operator for search conditions. The following list describes the Boolean operators:

        • Boolean operators:
          • AND: specifies the AND logical relation for the search conditions.
          • OR: specifies the OR logical relation for the search conditions.
        • If you need to use one search condition and multiple keywords to search for specific servers, set the Boolean operator to OR.
        • If the search condition requires you to enter a keyword, enter a keyword and click the Search icon. Results appear after you click the Search icon.
        For example, select Region and Region: China (Hangzhou) as one search condition, and Region and Region: China (Qingdao) as the other search condition. Then, specify the OR Boolean operator between these search conditions. Assets that are deployed in the China (Hangzhou) and China (Qingdao) regions appear. Multiple search conditions
      • Specify the AND Boolean operator to search for specific servers:
        If you want to search for servers that match all the specified search conditions, you must specify the AND Boolean operator. For example, select Region and Region: China (Hangzhou) as one search condition, and Online or Offline and Online or Offline: Online as the other search condition. Then, specify the AND Boolean operator between these search conditions. Powered-on servers that are deployed in the China (Hangzhou) region appear. Multiple search conditions

        You can also select Server Group, Region, VPC, or Tag, and use the search box above the asset list to search for specific servers.

    • Save frequently used search conditions
      You can save applied search conditions as frequently used search conditions. Click Save and enter a name in the Save condition dialog box. Then, you can select the saved search conditions from the Frequent search conditions drop-down list on the right of the search box. Save frequently used search conditions
    • Customize displayed information
      1. On the Settings icon page, click the Settings icon in the upper-right corner of the server list. Customize columns
      2. In the Setting dialog box, customize the columns to be displayed in the server list. Then, click OK. Columns