After you review the requirements and make sure that your Microsoft Azure environment is configured as needed, you can deploy the USM Anywhere Sensor for Azure. AT&T Cybersecurity provides the virtual machine (VM) template for the sensor and makes it available through the Azure Marketplace for easy deployment.
Note: Azure limits the availability of the Azure Marketplace to customers according to country. On the Marketplace FAQs page, the "Azure Marketplace for Customers" section provides a current list of supported countries.
If the Azure Marketplace is not supported for your country, contact AT&T Cybersecurity Technical Support for assistance with manually downloading the sensor and importing the image and template into your subscription.
To deploy a USM Anywhere Sensor from the Azure Marketplace
Open the USM Anywhere page on the Azure portal:
If you are not already logged in to the Azure console, this link launches the Microsoft Azure Login page. Provide your Azure account credentials (username and password) and click Sign in.
On the page, review the details of the license and click Create.
This takes you to the Create a virtual machine page, which guides you through the steps for deploying the USM Anywhere Sensor VM.
On the Basics tab, specify the required fields for the VM:
- Subscription: Select the subscription into which the USM Anywhere Sensor should be installed.
- Resource Group: Indicate whether you want to install the USM Anywhere Sensor into an existing resource group or into a new resource group. If new, enter a unique name.
- Virtual machine name: Enter the name you want to use for the USM Anywhere Sensor VM.
- Region: Select the region you want to deploy the USM Anywhere Sensor VM.
- Image: This field is set to Unified Security Management (USM) Anywhere.
- Size: This field is set to Standard D2 v2.
- Authentication type: Set this option to specify an SSH public key or a password for SSHProgram to securely log into another computer over a network, to execute commands in a remote machine, and to move files from one machine to another through Secure Copy (SCP). access.
Username: Enter a username.
Important: AT&T Cybersecurity recommends using sysadmin as the username. If you use a different name, you will need to "sudo up" to access the sensor console. See Checking Connectivity to the Remote Server for more information.
- Click Next : Disks.
- On the Disks tab, select Standard SSD as the disk type.
- Click Next : Networking.
On the Networking tab, select the virtual network or subnet upon which the USM Anywhere Sensor VM should be installed. Keep the other defaults.
Important: Make sure you install the USM Anywhere Sensor in the network that has sufficient connectivity to the assets that you want to monitor.
- Click Review + create to keep the defaults on the remaining tabs.
- On the Review + create tab, review your specifications and the cost summary.
This starts the deployment of the USM Anywhere Sensor, which can take up to six minutes.
After deployment finishes, click Go to resource or go to the overview page of the VM and locate its public IP address.
Paste the IP address into your browser to launch the USM Anywhere Sensor Setup page.
Important: This link requires that inbound port 80 is open for the sensor VM, which is not a default network setting on Azure. See Sensor Ports and Connectivity for more information.