Hyper Converged Infrastructure (HCI/aSV)

Sangfor HCI and aSV provide a unified infrastructure combining compute, storage, networking, and built-in security to simplify deployment, operations, and services.
{{ $t('productDocDetail.guideClickSwitch') }}
{{ $t('productDocDetail.know') }}
{{ $t('productDocDetail.dontRemind') }}
6.11.1R1
Hyper Converged Infrastructure (HCI/aSV) {{ breadTitle }} User Manual aSecurity Configuration Guide Security Capabilities Cyber Attack Protection
{{sendMatomoQuery("Hyper Converged Infrastructure (HCI/aSV)","Cyber Attack Protection")}}

Cyber Attack Protection

{{ $t('productDocDetail.updateTime') }}: 2026-01-05

Description

aSecurity provides cyber attack protection policies for the virtual network topology and Layer 7 network protection for business systems within the cloud.

Prerequisites

N/A

Precautions

  1. The backend aggregates cyber attack events by impact scope and attack source based on cyber attack log data once every 10 minutes.
  2. You can configure up to 512 IPS policies and up to 512 web vulnerability protection policies.
  3. A VM group can contain up to 100 IP addresses. If more IP addresses exist, a new group needs to be created.

Steps

  1. Go to aSecurity > Security Capabilities > Cyber Attack Protection, click Create, configure the basic, source, and destination information, and select applicable scenarios for the policy.

• IPS: Detects and defends against attacks exploiting operating system, application, and protocol vulnerabilities.

• Web Vuln Protection: Protects web servers from various attacks targeting web applications, such as SQL injections, XSS attacks, and command injections.

  1. Go to Cyber Attack Protection Policies > Templates to view or manage intrusion prevention policies and web vulnerability policies.

• Click Details in the Operation column of the policy to view its details.

• Go to Signature Database and set Action (Allow or Drop) and Status (Enable or Disable).