Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document.
Note: Even the most advanced machine translation cannot match the quality of professional translators.
Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Performing Security Hardening
- Adding Firewall Rules
If you do not have an external firewall to protect the network environment of the eSight server, you are advised to configure firewall rules to disable unnecessary ports and connections to reduce external attack surfaces and improve eSight security. - Configuring Remote Login Permission for the root User in SSH Mode (Two-Node Cluster)
To improve system security, you need to disable the root user to remotely log in to the server using SSH. In maintenance scenarios such as upgrade and patch installation, you can allow the root user to remotely log in to the server.