USM Anywhere Sensors Sensors are deployed into an on-premises, cloud, or multi-cloud environment to collect logs and other security-related data. This data is normalized and then securely forwarded to USM Anywhere for analysis and correlation. deploy into each environment and help you gain visibility into all of your on-premises and cloud The use of many computers connected over a network to run multiple programs or applications at the same time, instead of running them on a local device or network. environments. USM Anywhere Sensors collect and normalize logs, monitor networks, and collect information about the assets An IP-addressable host, including but not limited to network devices, virtual servers, and physical servers. deployed in your environments.

After you install and set up the USM Anywhere Sensor, it communicates with USM Anywhere in the cloud about the assets in your network. The USM Anywhere Sensor then transfers any available raw log data to USM Anywhere in the cloud for correlation Correlation identifies potential security threats by identifying relationships between multiple types of events occurring in two or more assets. and event Any traffic or data exchange detected by AT&T Cybersecurity products through a sensor or external devices such as a firewall. generation, among other things.

This topic discusses these subtopics: