USM Anywhere™

USM Anywhere Sensor Management

USM Anywhere Sensors Sensors are deployed into an on-premises, cloud, or multi-cloud environment to collect log and other security-related data. This data is normalized and then securely forwarded to USM Anywhere for analysis and correlation. deploy into each environment and help you gain visibility into all of your on-premises and cloud The use of many computers connected over a network to run multiple programs or applications at the same time, instead of running them on a local device or network. environments. USM Anywhere Sensors collect and normalize logs, monitor networks, and collect information about the assets An IP-addressable host, including but not limited to network devices, virtual servers, and physical servers. deployed in your environments.

After you install and set up the USM Anywhere Sensor, it communicates with USM Anywhere in the cloud about the assets in your network. The USM Anywhere Sensor then transfers any available raw log data to USM Anywhere in the cloud for correlation Correlation identifies potential security threats by identifying relationships between multiple types of events occurring in two or more assets. and event Any traffic or data exchange detected by AT&T Cybersecurity products through a sensor, or through external devices such as a firewall. generation, among other things.

Note: The number of sensors that you can add to your environment depends on your USM Anywhere license. You can go to Settings > My Subscription to view the number of licensed sensors. See Subscription Management for more information.

This topic discusses these subtopics: