Scheduling Asset Groups Scans from the Job Scheduler Page

Role Availability Read-Only Investigator Analyst Manager

USM Anywhere provides a simple way to include scans for scheduling using its web user interface (UI).

To schedule an asset group scan job from the Job Scheduler page

  1. Go to Settings > Scheduler to open the Job Scheduler page.
  2. In the left navigation panel, click Asset Group Scans.
  3. Click Create Scan Job.

    The Schedule New Job dialog box opens.

    Schedule New Job Dialog Box

  4. Enter the name and description for the job.

    The description is optional, but it is a best practice to provide this information so that others can easily understand what it does.

  5. Select Sensor as the source for your new job.
  6. In the Action Type field, select Asset Scanner.
  7. Depending on the USM Anywhere Sensor that you have installed, this field can include different options.

  8. Select a USM Anywhere sensor in case you have more than one installed.
  9. Select the App Action:
  10. In the App Action field, the Asset Group Scan is the default option.
  11. Select the scan profile that you want to run:

  12. (Optional.) Select the assets you want to exclude from the scan.
  13. Select Set Debug Mode if you want to log the results of the scan or if you have a problem with a scan.

    This option is disabled by default.

    Note: The Set Debug Mode option must be used only for debugging purposes because it needs a large amount of disk space for the file or files that it generates. Only AT&T Cybersecurity Technical Support should review these files. You can contact this department for more information.

  14. In the Schedule section, specify when USM Anywhere runs the job:

    1. Select the increment as Minute, Hour, Day, Week, Month, or Year.

      Warning: After a frequency change, monitor the system to check its performance. For example, you can check the system load and CPU. See USM Anywhere System Monitor for more information.

    2. Set the interval options for the increment.

      The selected increment determines the available options. For example, on a weekly increment, you can select the days of the week to run the job.

      Set the schedule for the job to run each week

      Or on a monthly increment, you can specify a date or a day of the week that occurs within the month.

      Set the schedule for the job to run each month

    3. Important: USM Anywhere restarts the schedule on the first day of the month if the option "Every x days" is selected.

    4. Set the start time.

      This is the time that the job starts at the specified interval. It uses the time zone configured for your USM Anywhere instance (the default is Coordinated Universal Time [UTC]).

  15. Click Save.
  16. The job now displays in the job scheduler list.

To schedule an authenticated asset group scan job from the Job Scheduler page

  1. Go to Settings > Scheduler to open the Job Scheduler page.
  2. In the left navigation panel, click Asset Group Scans.
  3. Click Create Scan Job.
  4. The Schedule New Job dialog box opens.

    Schedule New Job Dialog Box

  5. Enter the name and description for the job.

    The description is optional, but it is a best practice to provide this information so that others can easily understand what it does.

  6. Select Sensor as the source for your new job.
  7. In the Action Type field, select Authenticated Asset Scanner.
  8. Select a sensor in case you have more than one installed.
  9. In the App Action field, Asset Group Scan is the default option.
  10. In the Asset Group field, you can either enter the asset group name or browse asset groups.
  11. In the Schedule section, specify when USM Anywhere runs the job:

    1. Select the increment as Minute, Hour, Day, Week, Month, or Year.

      Warning: After a frequency change, monitor the system to check its performance. For example, you can check the system load and CPU. See USM Anywhere System Monitor for more information.

    2. Set the interval options for the increment.

      The selected increment determines the available options. For example, on a weekly increment, you can select the days of the week to run the job.

      Set the schedule for the job to run each week

      Or on a monthly increment, you can specify a date or a day of the week that occurs within the month.

      Set the schedule for the job to run each month

    3. Important: USM Anywhere restarts the schedule on the first day of the month if the option "Every x days" is selected.

    4. Set the start time.

      This is the time that the job starts at the specified interval. It uses the time zone configured for your USM Anywhere instance (the default is Coordinated Universal Time [UTC]).

  12. Click Save.
  13. The job now displays in the job scheduler list.