AlienVault® USM Anywhere™

Redeploying a Sensor

Role Availability Read-Only Analyst Manager

USM Anywhere enables you to redeploy a sensorSensors are deployed into an on-premises, cloud, or multi-cloud environment to collect log and other security-related data. This data is normalized and then securely forwarded to USM Anywhere for analysis and correlation., which means that you can delete the current sensor but link all its assetsAn IP-addressable host, including but not limited to network devices, virtual servers, and physical servers., eventsAny traffic or data exchange detected by AT&T Cybersecurity products through a sensor, or through external devices such as a firewall., alarmsAlarms provide notification of an event or sequence of events that require attention or investigation., and jobs to a new one. You can use this option, for instance, when your disk is corrupted, you have an irreparable failure, or you want more resources in your environment. Your data is secure if you redeploy sensors that are on the same platform.

Note: If you delete the sensor instead of redeploying, you will lose all the information related to that sensor.

After redeploying a sensor, the current disk and memory states are discarded. Therefore, you need to redo all the configurations tied to the sensor. These configurations include, but are not limited to, all credentials, the AlienApp configurations, the Active Directory (AD) configuration, and the Transport Layer Security(TLS) certificate used for syslog forwarding.

To redeploy a sensor

  1. Go to Data Sources > Sensors to open the page.
  2. Click the icon of the sensor you want to redeploy.
  3. Click Delete this sensor and deploy a new one.

    A dialog box opens showing the authenticationProcess used to verify the identity of a user, user device, or other entity, usually through a username and password. code that you need for activating the new sensor.

  4. Deploy the sensor following the instructions in the Deployment Guide. Depending on the type of sensor, you will have to follow different instructions.
  5. Configure your USM Anywhere Sensor following the steps in the Setup Wizard. See the Setup Wizard documentation for more information.
  6. Go to Data Sources > Sensors to open the page.
  7. Verify that your deployed sensor is on the list, ready and well-configured.

Related Video Content

To view other related training videos, click here.