Role Availability | Read-Only | Investigator | Analyst | Manager |
You can manage your own user account, which enables you to do the following:
- Change your email address, name, and password
- Enable multifactor authentication (MFA) for the account
- Select your default landing page after you have logged in
- Configure an interval for auto-refreshing the dashboards and alarms pages
- Activate notifications Communication of an important event, typically through an email message or other desktop display. In USM Appliance, notifications are typically triggered by events, policies, and correlation directives, and in USM Anywhere, they are typically triggered by notification rules or directly from alarms. for alarms Alarms provide notification of an event or sequence of events that require attention or investigation.
To manage your profile settings
-
At the bottom of the expanded pane of the USM Anywhere web user interface (UI), hover over the profile settings options, and select Profile Settings.
- Modify the data of the items that can be modified.
- Open the Profile Settings page.
- You have two options to choose from based on your role:
- General user: At the bottom of the expanded pane of the USM Anywhere web user interface (UI), hover over the profile settings options, and select Profile Settings.
- Manager: Go to Settings > Users and click the icon of your user.
- Click Update Password to display the password fields.
- Enter your current password and the new password.
- Click Save.
- Open the Profile Settings page.
- You have two options to choose from based on whether your role is as the general user or as the manager:
- General user: At the bottom of the expanded pane of the USM Anywhere web user interface (UI), hover over the profile settings options, and select Profile Settings.
- Manager: Go to Settings > Users and click the icon of your user.
- Select Enable Multi-Factor Authentication.
- Click Save.
- Open the Profile Settings page.
- You have two options to choose from based on whether your role is as the general user or as the manager:
- General user: At the bottom of the expanded pane of the USM Anywhere web user interface (UI), hover over the profile settings options, and select Profile Settings.
- Manager: Go to Settings > Users and click the icon of your user.
-
Select the default home page you want to display after you have logged in. You have these options:
- Dashboards: You can select a specific dashboard to use it as a landing page. The list of dashboards is alphabetically ordered and also includes the custom dashboards you can create.
- Activity: Select alarms or events.
- Environment: Select assets, asset groups, vulnerabilities, or configuration issues.
- Investigations: You can select the investigations page to use it as a landing page.
Note: Keep in mind that dashboard names that begin with a lowercase letter are located at the end of the list.
Important: You have the option of selecting the views you have created. If there is a selected view and you delete that view, when you log in, USM Anywhere displays the main page related to that view. For example, if you select a custom dashboard page to be your landing page and then you delete that custom dashboard, USM Anywhere displays the dashboards page when you log in.
- Click Save.
- None: The page works as usual and displays the icon for manually updating the page.
- Every 5 min: The page is reloaded every 5 minutes.
- Every 10 min: The page is reloaded every 10 minutes.
- Every 15 min: The page is reloaded every 15 minutes.
- Open the Profile page.
- You have two options to choose from based on whether your role is as the general user or as the manager:
- General user: At the bottom of the expanded pane of the USM Anywhere web user interface (UI), hover over the profile settings options, and select Profile Settings.
- Manager: Go to Settings > Users and click the icon of your user.
-
Select Receive Alarm Notifications.
Note: It can take up to one hour for the notifications to take effect.
Important: This option is not available for LevelBlue Managed Security Service Provider (MSSP The LevelBlue MSSP program is designed for both technically competent partners as well as those who manage a security operations center, offering product related services to the end user.) users who logged in through USM Central.
Important: You will not receive email notifications for suppressed alarms.
- Click Save.
USM Anywhere helps you meet the Payment Card Industry (PCI) standard by enforcing password complexity, password expiration, and forbidding password reuse. See the USM Anywhere Password Policy for details.
To set a new password
Both actions open the profile page.
Note: The date of the last update displays in front of the Update Password button.
If you want to protect your account, enable MFA for your user account. When this feature is activated, USM Anywhere displays the multifactor authentication page for you to complete your MFA configuration. The displayed page provides a unique QR code that is used by the Authenticator app to retrieve a verification code. See Using Multifactor Authentication for more information about this security configuration.
Note: LevelBlue recommends that users enable MFA for their account. MFA adds extra security because it requires multiple factors to authenticate Process used to verify the identity of a user, user device, or other entity, usually through a username and password. a user, making it more difficult for an unauthorized person to gain access to the account.
To enable MFA
Both actions open the Profile Settings page.
USM Anywhere gives you the option of selecting your default landing page after you have logged in.
Important: You can also load the
To select your default landing page after you have logged in
Both actions open the Profile Settings page.
If you want to configure the time that the alarms and dashboard pages refresh their information, you can set an interval. These are the options:
If you want notification on alarms generated by USM Anywhere, activate the notification option for your user account. When this feature is activated, USM Anywhere sends an email to provide real-time notification of critical security incidents.
Note: These notifications send emails using Simple Mail Transfer Protocol (SMTP). There is a quota of 200 emails per day.
To activate alarm notifications
Both actions open the Profile Settings page.
To log out of the system
- At the bottom of the expanded pane of the USM Anywhere web user interface (UI), hover over the profile settings options.
- Select Logout.