Documentation Center
AlienVault® USM Anywhere™

USM Anywhere Architecture

USM Anywhere is a modular and scalable two-tier architecture.

Tier 1 — USM Anywhere Sensors

USM Anywhere SensorsSensors are deployed into an on-premises, cloud, or multi-cloud environment to collect log and other security-related data. This data is normalized and then securely forwarded to USM Anywhere for analysis and correlation. deploy natively into each environment and help you gain visibility into all of your on-premises and cloudThe use of many computers connected over a network to run multiple programs or applications at the same time, instead of running them on a local device or network. environments. USM Anywhere Sensors collect and normalize logs, monitor networks and collect information about the environments and assets deployed in your hybrid environments.

USM Anywhere Sensors are a key component of the USM Anywhere solution. They operate either on-premises or in the cloud:

Tier 2 — USM Anywhere Cloud

USM Anywhere receives the previously described data sent to it by the USM Anywhere Sensor and uses it to provide essential security capabilities in a single SaaS platform:

USM Anywhere also integrates log management and retains raw logs securely long-term for forensic investigations and compliance mandates.