USM Central™

USM Central Connections

To manage a deploymentEntire process involved in installation, configuration, startup, and testing of hardware and software in a specific environment., you must have it connected within your USM Central instance. USM Anywhere or USM Appliance will need to initiate the connection from inside their environment. Upon receipt of the connection request, a USM Central user can accept or decline the connection.

Ports and Connectivity

Through USM Central, you can connect multiple instances of USM Anywhere or USM Appliance.

USM Anywhere uses private networking in the cloud. There is no extra port requirement.

The required port for integrating a USM Appliance instance into a USM Central instance is 443, so USM Appliance needs to be able to reach out to the endpoint, for instance mymssp-central.alienvault.cloud:443 where mymssp-central is the subdomain your AT&T Cybersecurity Managed Security Service Providers (MSSPThe AT&T Cybersecurity MSSP program is designed for both technically competent partners as well as those who manage a security operations center, offering product related services to the end user.) provides.

Initiate a Deployment Connection

The request for connection initiates from the USM Anywhere or USM Appliance deployment. This creates a connection request that is displayed in the USM Central Deployments page.

USM Anywhere Connections

To add a USM Anywhere deployment connection to a USM Central instance, you must initiate a connection from the USM Anywhere user interface (UI). If another user will initiate the deployment connection, you must provide the domain for your USM Central instance.

Important: On AT&T Cybersecurity website, you can see the Adding USM Anywhere to USM Central video, which describes how an existing USM Anywhere deployment is connected to USM Central. This video includes a recorded demonstration of the steps involved in configuring the connection and shows how the USM Anywhere information is represented.

To initiate a connection to USM Central from USM Anywhere

  1. In USM Anywhere, go to Settings > My Subscription.
  2. Scroll to the Connection To USM Central section and click Connect.
  3. Enter the domain for the USM Central instance.
  4. Click Connect.

    The system sends a request to the USM Central. The connection is not complete until a USM Central user accepts the connection request.

USM Appliance Connections

To add a USM Appliance deployment connection to a USM Central instance, you must initiate a connection from the USM Appliance web UI. The connection request from a USM Appliance deployment requires a token that you generate in the USM Central instance.

Important: Version 5.4.3 or later is required to add a USM Appliance deployment connection.

Important: Port 443 is required for integrating a USM Appliance into a USM Central instance.

Important: On AT&T Cybersecurity website, you can see the Adding USM Appliance to USM Central video, which describes how an existing USM Appliance deployment is connected to USM Central. This video includes a recorded demonstration of the steps involved in configuring the connection and shows how the USM Appliance information is represented.

To generate a token for a USM Appliance connection

  1. In USM Central, go to Settings > Deployments.
  2. Click Connect to Existing Deployment.
  3. In the dialog box, enter a name for the deployment that will be displayed in USM Central, and then click Generate Token.
  4. Click the icon to copy the token to your clipboard.
  5. Paste the token into a secured file and send it to the user that is responsible for the USM Appliance deployment.

To initiate a connection to USM Central from USM Appliance

  1. In the USM Appliance web UI, go to Configuration > Deployment > Components > Servers.
  2. Click the Connect to USM Central link.
  3. Enter the token generated from USM Central.
  4. Click Connect.

    The system sends a request to the USM Central.

    Upon acceptance, your USM Appliance deployment is automatically connected.

Accept a Deployment Connection

As a user of a USM Central, you can accept the connections initiated from a USM Anywhere or USM Appliance deployment. This request is available in the USM Central web UI.

When you accept the connection, the deployment displays in your USM Central Deployments dashboard.

Your USM Central will receive alarms, vulnerabilities, and configuration issues from USM Anywhere connections. When you connect a USM Appliance, USM Central will receive its alarms.

To accept a connection in the USM Central web UI

  1. Go to Settings > Deployments.

    The new deployment displays.

  2. Click Accept.

    The new deployment displays as Connected.

Decline a Connection

If you receive a request for connection by mistake or if there is some issue with making the connection, you can decline the connection request.

To decline a connection in the USM Central web UI

  1. Go to Settings > Deployments.

    The new deployment displays.

  2. Click Deny.

    The connection displays as Connection Denied.

Related Video Content

To view other related training videos, click here.