HSM

Hillstone Security ManagementTM, HSM for short, is an innovative tool that offers a centralized management platform to manage and control multiple Hillstone devices. HSM system consists of 3 modules: HSM Agent, HSM Server and HSM Client. After deploying these modules and establishing security connection, you can use the HSM Client to view logs, statistics and attributes of managed security devices, as well as monitor system status and traffic information.

StoneOS running on each security device is designed with an HSM agent. After configuring this agent, the device can connect to the HSM server and will be managed and controlled by the server.

Tip: For more information about HSM, see Hillstone Security ManagementTM User's Guide.

Configuring a HSM Agent

To configure the HSM agent for the device, take the following steps:

  1. Select System > HSM from the menu bar.
  2. In the HSM Agent Configuration dialog, select the Enable check box for HSM agent to enable the HSM agent function.
  3. The Status option displays HSM management status, including disabled (HSM agent is disabled), unregistered (HSM agent is enabled but the device is not connected to the HSM server properly) and registered (HSM agent is enabled and the device is connected to the HSM server properly. The device can be controlled and managed by the HSM server).
  4. Type the IP address of the HSM Agent into the HSM server IP box. This IP address cannot be 0.0.0.0, 255.255.255.255 or multicast address.
  5. Select the Virtual Routerouter for the HSM agent from the Virtual Router drop-down list. This option is available if you have already enabled the Multi-Virtual Router function and created different Virtual Routerouters. If the Multi-Virtual Router function is disabled, the default Virtual Routerouter trust-vr will be used.
  6. Type the port number of the HSM server into the HSM server port box. The HSM server connects with the agent through this port.
  7. Type the password for accessing the HSM server into the HSM password box. The HSM server authenticates the device using this password.
  8. Re-type the password into the Confirm password box to make confirmation.
  9. Click OK to save your settings.

Tip: The Syslog server section in the HSM Agent Configuration dialog displays the IP address and port number of the syslog server configured on the HSM server.