After you confirm that you have a connection to AT&T Cybersecurity Technical Support, you are ready to start a session. When AT&T Cybersecurity Technical Support Engineers complete their work on an issue, they communicate the results to you by email and update your ticket.
Note: USM Anywhere provides an audit trail of the AT&T Cybersecurity Technical Support Engineers accessing your instance by creating a temporary user with the username of <user>@alienvault.com. These users are disabled after the session ends, and you can view them under Settings > Users.
To enable remote sensor support
Open your virtualization management console and connect to the USM Anywhere Sensor virtual machine (VM).
Alternatively, you can open an SSH session to the sensor VM. When using an SSH session, the default username is sysadmin.
Important: If you are accessing a Microsoft Azure Sensor through SSH and you specified a username other than the default (sysadmin) for your SSH access, you must use the following commands at the command line to "sudo up" and access the sensor console:
# sudo su – sysadmin
From the USM Anywhere Sensor console System Menu, select Maintenance and press Enter.
From the Maintenance menu, select Remote Support and press Enter.
From the Remote Support menu, select Enable Remote Support and press Enter ( < OK > ).
On the Enable Remote Support screen, enter the eight-digit ticket number and press Enter ( < OK > ).
Important: Be careful not to enter any spaces before or after the number or the operation will fail.
A progress bar appears and your request begins processing, which may take several seconds.
When the connection is established with the Support server, the system displays a connection message.
Connected to AlienVault Support. Press Enter to continue.
The USM Anywhere Sensor console returns you to the to the Remote Support screen.
To disconnect after your session is done, select Disable Remote Support and press Enter.
The Manage Connectivity information screen appears and prompts you to confirm.
Are you sure you want to disconnect from AlienVault Remote Support?
The screen goes black and, after several seconds, you receive a notification that the secure connection is now disconnected. You can then back out of the previous menus and close the sensor console.