If your organization runs servers in Internet data centers (IDCs) alongside cloud resources, Security Center can protect those servers too. Use the IDC probe to automatically discover servers in your data center and bring them under unified security management in the Security Center console.
How it works
After you install the Security Center agent on one server in the data center, create an IDC probe on that server and configure scan tasks. The probe periodically scans the CIDR block you specify, detects servers in the data center, and adds them to the IDC Probe Finding tab on the page.
Detected servers are not protected by Security Center. Install the Security Center agent on each detected server to enable security features.
The IDC probe can only run on a server that already has the Security Center agent installed.
If your data centers cannot communicate with each other, add a separate IDC probe in each data center.
Prerequisites
Before you begin, ensure that you have:
The Security Center agent installed on at least one server in the data center
Add an IDC probe
Log on to the Security Center console. In the upper-left corner, select the region of the assets you want to protect: China or Outside China.
In the left-side navigation pane, choose .
On the tab, click Add Probe. Alternatively, go to , hover over the
icon in the Add Multi-cloud Asset section, and click Add under IDC to open the Add Assets Outside Cloud panel.In the Add Assets Outside Cloud panel, configure the IDC probe and click Next.
Field Description Data Center Name of the data center where the server is deployed CIDR Block Settings CIDR block for the probe to scan. Only class C addresses are supported, for example, 192.168.0.10/24Period Settings How often the probe scans for servers Linux Port Secure Shell (SSH) port of the Linux servers being scanned Windows Port Remote Desktop Protocol (RDP) port of the Windows servers being scanned. Non-standard ports are supported Region City name of the IDC server's location. This value appears as a label on the Assets page Select the servers to run scan tasks. Multiple servers can be selected. Click OK. Make sure the selected servers have the Security Center agent installed and can communicate with servers in the specified CIDR block.
View IDC probe findings
Log on to the Security Center console. In the top navigation bar, select the region of the assets you want to manage: China or Outside China.
In the left-side navigation pane, choose .
Click the IDC Probe Finding tab.
The tab lists all servers detected by the IDC probe. Each entry includes:
| Column | Description |
|---|---|
| Start Time | When the server was detected |
| IP Address/Port/CIDR Block | IP address, port, and CIDR block of the detected server |
| Data Center | Name of the data center where the server is deployed |
| Agent | Status of the Security Center agent on the detected server |
| Asset Finding | Operating system of the detected server |
| Probe | Name, public IP address, and private IP address of the server running the IDC probe |
If the Agent status is Unknown, check whether the Security Center agent is installed. To use the protection features of Security Center, install the Security Center agent on that server.
To exclude a server from future scans, add it to the whitelist. See Add a server to the whitelist.
Disable an IDC probe
To stop scanning a data center, disable or delete the probe on the page.
Once disabled, Security Center stops scanning servers in that data center. New servers added to the data center are not synchronized with Security Center.
Add a server to the whitelist
If you want to prevent the IDC probe from scanning a specific server:
Log on to the Security Center console. In the top navigation bar, select the region of the assets you want to manage: China or Outside China.
In the left-side navigation pane, choose .
Click the IDC Probe Finding tab.
In the scan list, find the server and click Add to Whitelist in the Actions column.
After adding a server to the whitelist, the probe no longer scans or records information about it. To review whitelisted servers, click Whitelist in the upper-right corner of the scan results list.
What's next
Install the Security Center agent on detected servers to enable detection and protection.
Manage quotas and bind a Security Center edition to servers with the agent installed, so they can use the corresponding protection features.