Following the deployment, there is some configuration required within the console on the virtual machine. After this initial configuration, you use the USM Anywhere web UI to further configure the sensor, and all other sensors that you connect to USM Anywhere.
During the installation, the USM Anywhere Sensor acquires the initial IP address through the Dynamic Host Configuration Protocol (DHCPNetwork protocol used to dynamically distribute network configuration parameters, such as IP addresses, for interfaces and services.). If DHCP is not enabled, you must set the IP address manually. AT&T Cybersecuritystrongly recommends assigning a static IP address to the USM Anywhere Sensor as a best practice. This allows for proper log forwarding and network architecture.
Perform these initial configuration tasks on the
You must change the administrative password immediately after you log in to the console for the first time. You can also change the keyboard layout, if desired.
To change the administrative password and keyboard layout
Log in using the credentials displayed in the console screen.
- (Optional) Configure the keyboard if you use a keyboard layout other than the U.S. default.
Set a new password for the sysadmin user and keep it in a safe place.
Important: To protect the security of the sensor, only one administrative account, sysadmin, is created. USM Anywhere does not create or maintain a backup administrative account, nor does it include any hard-coded access credentials. If the sysadmin password is forgotten or lost, you must deploy another sensor in the same environment. See Redeploying a Sensor for instructions.
If your system sets an IP address automatically, note the web URL (IP address). You will need the URL when you exit from the console and follow the instructions in
VMware Sensor Connection to USM Anywhere.
- If your system does not set an IP address automatically, a dialog box confirms that the system was unable to acquire an IP address from a DHCP server. In this case, you must manually set a static IP address so that it remains unchanged in the future.
AT&T Cybersecurity strongly recommends assigning a static IP address to the USM Anywhere Sensor as a best practice. This allows for proper log forwarding and network architecture.
To configure a static IP address
- Go to Network Configuration > Configure Management Interface > Set a Static Management IP Address.
- Enter the IP address, subnet, and gateway information in each screen.
- Press Enter.
Important: When the USM Anywhere Sensor performs an asset scan, it must access the local DNS server in order to resolve local host names. The sensor uses reverse DNS to look up the host name through the discovered IP address.
To configure DNS
- Go to the option Network Configuration > Configure DNS.
- Enter the primary DNS and press Enter.
(Optional) Enter the secondary DNS and press Enter.
A text box appears to confirm that you want to apply changes.
- Press Enter.
Note: Check your settings through Network Configuration > View Network Configuration.