The Assets page in the Security Center console displays security information about all servers. The information includes the security status, the groups to which the servers belong, and the regions and virtual private cloud (VPCs) in which the servers reside. This topic describes how to search for servers to view the security status.

Procedure

  1. Log on to the Security Center console.
  2. In the left-side navigation pane, click Assets.
  3. On the Assets page, click the Server(s) tab.
  4. On the Server(s) tab, view the security status of your servers. Assets
    • View the security status of a server (marked 1 in the preceding figure)
      To view the security status of a server, you can enter the server name, the public IP address, and the private IP address in the search box above the server list. In the Risks Status column, you can view the security status of the server. View the security status of a serverIn the Operation column, you can click View to go to the server details page. On the server details page, you can view information about the server on tabs such as Basic Information, Vulnerabilities, Alerts, Baseline Risks, and Asset Fingerprints. For more information, see View the details of an asset.
    • View the security status of servers by category (marked 2 in the preceding figure)

      On the Assets page, servers are categorized to help you manage servers in an efficient manner. The categories include Risky server, Unprotected server, and Exposed Server. You can view the security status of servers by category.

      The following table describes servers by category.
      Category Description
      All Servers The servers that are protected by Security Center. The servers include Elastic Compute Service (ECS) instances and servers that are not deployed on Alibaba Cloud and have the Security Center agent installed.
      Risky server The servers on which vulnerabilities and baseline risks are detected, and servers on which alerts are generated.
      Unprotected server The servers on which the Security Center agent is in the Close or Disable Protection state.
      Notice Security Center cannot protect the servers on which the agent is in the Close or Disable Protection state. You can allow Security Center to protect the servers. For more information, see Enable or disable server protection.
      Shutdown Server(s) The servers that are shut down.
      Exposed Server The servers that are exposed on the Internet. These servers are accessible over the Internet. For more information about the exposure details, see Asset exposure analysis.
      Note
      • Only the Enterprise and Ultimate editions support asset exposure analysis. If you do not use one of these editions, you must upgrade Security Center to the Enterprise or Ultimate edition before you can view the number and list of the servers that are exposed on the Internet.
      • If Unknown is displayed on the right of Exposed Server, the current edition of Security Center does not support asset exposure analysis. In this case, the number of exposed servers is not displayed in the Security Center console. To use asset exposure analysis, you must upgrade Security Center to the Enterprise or Ultimate edition. For more information, see Upgrade and downgrade Security Center.
      New Server(s) The ECS instances that you purchased within the last 15 days.
      Server Group The servers that are categorized based on server groups. You can find a server group and click the number in the Servers, Risk, or Unprotected column to view the security status of the servers that belong to the server group.
      Note You can manage and delete a server group in the Security Center console. For more information, see Manage asset groups.
      Region The servers that are categorized based on regions. You can find a region and click the number in the Servers, Risk, or Unprotected column to view the security status of the servers that are deployed in the region.
      VPC The servers that are categorized based on VPCs. You can find a VPC and click the number in the Servers, Risk, or Unprotected column to view the security status of the servers that reside in the VPC.
      Asset Importance The servers that are categorized based on asset importance levels. In the Asset Importance section, you can click Important Assets, General Assets, or Test Asset to view the security status of the related servers.
      Note Security Center allows you to classify your servers that belong to the current Alibaba Cloud account into three levels based on asset importance. You can determine the asset importance based on your business requirements. This way, you can manage multiple servers by asset importance level.
      Tag The servers that are categorized based on tags. You can click a tag in the Tag section to view the security status of the servers to which the tag is added.
      Note You can manage and delete a tag in the Security Center console. For more information, see Manage asset tags.
    • View the security status of the servers that meet one or more search conditions (marked 3 in the following figure))

      After you click the All Servers, Risky server, Unprotected server, Shutdown Server(s), Exposed Server, or New Server(s) category, you can specify one or more search conditions to search for specific servers and view the security status.

      This section provides an example on how to specify multiple search conditions to search for servers. In the example, servers that meet the following search conditions are returned: Linux operating system, alerts generated, and the China (Hangzhou) region.
      1. On the Server(s) tab of the Assets page, click Unprotected server.
      2. In the drop-down list next to the search box, configure the System Type, Alert problems, and Region search conditions.
        • Select Linux for System Type.
        • Select Yes for Alert problems.
        • Select China (Hangzhou) for Region.
        Note If you cannot select a value for a search condition in the drop-down list, you can enter keywords for the search condition in the search box.

        After you configure search conditions, the search conditions are displayed in the Search item section above the server list.

      3. Click the switch to the left of Search item to switch between the AND and OR Boolean operators.
        • AND: specifies the AND logical relation between search conditions.
        • OR: specifies the OR logical relation between search conditions.

        After you configure the search conditions, servers that match all the specified search conditions are displayed in the server list.

      4. Optional:If you want to specify the preceding search conditions as frequently used search conditions, click Save to the right of Search item.

        After you save frequently used search conditions, you can select them from the Frequent search conditions drop-down list to search for servers in an efficient manner.