Documentation Center
AlienVault® USM Central™

USM Central Connections

To manage a deployment, you must have it connected within your USM Central instance. USM Anywhere or USM Appliance will need to initiate the connection from inside their environment. Upon receipt of the connection request, a USM Central user can accept or decline the connection.

Sensor Ports and Connectivity

Through USM Central, you can connect multiple instances of AlienVault USM.

The required port for integrating a USM Appliance instance into a USM Central instance is 443, so USM Appliance needs to be able to reach out to an endpoint, for instance mymssp-central.alienvault.cloud:443 where mymssp-central is the subdomain your MSSP provided.

USM Anywhere uses private networking in the cloud.

Initiate a Deployment Connection

The request for connection initiates from the USM Anywhere or USM Appliance deployment. This creates a connection request that is displayed in the USM Central Deployments page.

USM Anywhere Connections

To add a USM Anywhere deployment connection to a USM Central instance, you must initiate a connection from the USM Anywhere UI. If another user will initiate the deployment connection, you must provide the domain for your USM Central instance.

Important: On our website, you can see the Adding USM Anywhere to USM Central video which describes how an existing USM Anywhere deployment is connected to USM Central. This video includes a recorded demonstration of the steps involved in configuring the connection and shows how the USM Anywhere information is represented.

To initiate a connection to USM Central from USM Anywhere

  1. In USM Anywhere, go to Settings > My Subscription.
  2. Scroll to the Connection To USM Central section and click Connect.
  3. Enter the domain for the USM Central instance.
  4. Click Connect.

    The system sends a request to the USM Central. The connection is not complete until a USM Central user accepts the connection request.

USM Appliance Connections

To add a USM Appliance deployment connection to a USM Central instance, you must initiate a connection from the USM Appliance web UI. The connection request from a USM Appliance deployment requires a token that you generate in the USM Central instance.

Important: Version 5.4.3 or later is required to add a USM Appliance deployment connection.

Important: Port 443 is required for integrating a USM Appliance into a USM Centralinstance.

Important: On our website, you can see the Adding USM Appliance to USM Central video which describes how an existing USM Appliance deployment is connected to USM Central. This video includes a recorded demonstration of the steps involved in configuring the connection and shows how the USM Appliance information is represented.

To generate a token for a USM Appliance connection

  1. In USM Central, go to Settings > Deployments.
  2. Click Connect to Existing Deployment.
  3. In the dialog, enter a name for the deployment that will be displayed in USM Central and click Generate Token.
  4. Click the copy () icon to copy the token to your clipboard.
  5. Paste the token into a secured file and send it to the user that is responsible for the USM Appliance deployment.

To initiate a connection to USM Central from USM Appliance

  1. In the USM Appliance web UI, go to Configuration > Deployment > Components > Servers.
  2. Click the Connect to USM Central link.
  3. Enter the token generated from USM Central.
  4. Click CONNECT.

    The system sends a request to the USM Central.

    Upon acceptance, your USM Appliance deployment will be automatically connected.

Accept a Deployment Connection

As a user of a USM Central, you can accept the connections initiated from a USM Anywhere or USM Appliance deployment. This request is available in the USM Central web UI.

When you accept the connection, the deployment is displayed in your USM Central Deployments dashboard.

Your USM Central will receive alarms, vulnerabilities, and configuration issues from USM Anywhere connections. When you connect a USM Appliance, USM Central will receive its alarms.

To accept a connection in the USM Central web UI

  1. Go to Settings > Deployments.

    The new deployment displays.

  2. Click Accept.

    The new deployment displays as Connected.

Decline a Connection

If you receive a request for connection by mistake or if there is some issue with making the connection, you can decline the connection request.

To decline a connection in the USM Central web UI

  1. Go to Settings > Deployments.

    The new deployment displays.

  2. Click Deny.

    The connection displays as Connection Denied.

Related Video Content

To view other related training videos, click here.