USM Anywhere SensorsSensors are deployed into an on-premises, cloud, or multi-cloud environment to collect log and other security-related data. This data is normalized and then securely forwarded to USM Anywhere for analysis and correlation. deploy into each environment and help you gain visibility into all of your on-premises and cloudThe use of many computers connected over a network to run multiple programs or applications at the same time, instead of running them on a local device or network. environments. USM Anywhere Sensors collect and normalize logs, monitor networks, and collect information about the assetsAn IP-addressable host, including but not limited to network devices, virtual servers, and physical servers. deployed in your environments.
After you install and set up the USM Anywhere Sensor, it communicates with USM Anywhere in the cloud about the assets in your network. The USM Anywhere Sensor then transfers any available raw pluginPlugins specify how to collect and normalize raw information from devices to create events that can then be analyzed to determine threats and vulnerabilities. data to USM Anywhere in the cloud for correlationCorrelation identifies potential security threats by identifying relationships between multiple types of events occurring in two or more assets. and eventAny traffic or data exchange detected by AT&T Cybersecurity products through a sensor, or through external devices such as a firewall. generation, among other things.
Note: The number of sensors that you can add to your environment depends on your USM Anywhere licensing. You can go to Settings > My Subscription to view the number of licensed sensors.
This topic discusses these subtopics: