Microsoft Hyper-V is a hypervisor that lets you create and manage a virtualized computing environment by using virtualization technology that is built into Windows Server. Through Hyper-V, you can deploy a USM Anywhere Sensor in any of the virtual networks that you want to instrument for threat monitoring.

The Hyper-V Sensor deployment includes network-based intrusion detection system (NIDS)Network Intrusion Dectection System (NIDS) monitors network traffic and events for suspicious or malicious activity using the sensors that provide management and network monitoring interfaces to networks and network devices. that monitors the networks connected to the listening interfaces. A deployed Hyper-V Sensor supports a NIDS throughput of 600 Mbps, but this performance may vary depending on your environment, configurations, and other variables.

AT&T Cybersecurity provides a package containing the following files to deploy a USM Anywhere Sensor on Hyper-V:

• A disk image file: deploy_config
• An XML document: USM_sensor-node
• The hard disk images files: usm-data-disk.vhdx and usm-os-disk.vhd

If your organization uses multiple subnets to allow communication between headquarters and remote offices, you do not need a sensor for each subnet. However, you will need a Hyper-V Sensor for each physical location that you want to monitor.

Note: For further information about Hyper-V, see the Microsoft TechNet website (https://technet.microsoft.com/en-us/library/mt169373(v=ws.11.aspx).

Deployment Process Overview

The deployment process for an initial USM Anywhere Sensor on Hyper-V consists of these primary tasks:

1. Review requirements for a Hyper-V Sensor deployment
2. Create, configure, and start the Hyper-V virtual machine
3. Configure the sensor on the virtual machine
4. Register the new sensor with your sensor authentication code to provision the USM Anywhere instance and connect the deployed sensor
5. Complete your Hyper-V Sensor configuration, including initial asset discovery