USM Anywhere Web UI

The USM Anywhere web user interface (UI) provides access to all the tools and capabilities that USM Anywhere makes available for managing the security of your organization’s network and the devices in it. From the USM Anywhere web UI, you can view all essential information about network devices, applications, user activity, and network traffic in your environment. You can begin monitoring information coming from devices and then go about defining orchestration rules to fine tune the behavior of your system. USM Anywhere includes by default correlation rules to alert you of potential security issues and vulnerabilities.

The USM Anywhere web UI runs in a standard web browser. Your system administrator can provide the web address and credentials to log in and access the features and functions appropriate to your role in your organization’s security operation.

Note: The recommended screen resolution for viewing the USM Anywhere web UI is 1440 pixels wide.

When you first log in, the USM Anywhere web UI displays the main window.

USM Anywhere Main Menu

By default, the web UI displays a collection of high-level graphs and charts summarizing activity in your organization’s network. From this main window, you can select different menu options or click other links and buttons.

Important: You can also load the configured default landing page by clicking the logo of USM Anywhere located in the upper-left corner of the page.

The main navigable elements and expand selections are provided consistently through the web UI. Use the <- and -> icons to expand or collapse the left navigation pane.

Primary menu

The primary menu provides access to the main functions or operations of USM Anywhere. These include:

• Dashboards. Provides charts, tables, and graphs. There are dashboards that will be displayed depending on the sensor you have installed; there are also dashboards related to the AlienApp you have configured and that will be visible if you have data for them. See USM Anywhere Dashboards for more information.
• Activity. Provides search, sorting, filtered selection, and visualization of Alarms and Events. See Alarms Management and Events Management for more information.
• Environment. Provides display and management of Assets, Asset Groups, Vulnerabilities, and Configuration Issues. See Asset Management, Vulnerability Assessment, and Configuration Issues Management for more information.
• Reports. Provides display and management of reports which are the result of export data that you can find in assets, asset groups, alarms, events, vulnerabilities, and configuration issues. You can also choose the format of the report (PDF and CSV). There are also Compliance and Event Type Templates. See USM Anywhere Reports for more information.
• Data Sources. Provides options to view and manage deployed USM Anywhere Sensors, the LevelBlue Agent, BlueApps, and Sensor Apps. See USM Anywhere Sensor Management, The LevelBlue Agent, USM Anywhere BlueApps Guide, The Graylog (GELF) Sensor App, The Syslog Server Sensor App, and Windows Event Collector Sensor App for more information.
• Investigations. Provides options to organize the information from your environment. See USM Anywhere Investigations for more information.
• Settings. Provides options to view and manage credentials and system events. There are administration options which let you manage users and asset fields, display the system status, schedule jobs, validate your OTX key, and manage orchestration rules. You can also display the data about your subscription and connect your USM Anywhere to USM Central environments.

Secondary menu

The secondary menu provides access to the system configuration, the user profile information, the help link, and the bookmarked items:

• Bookmarks. The icon enables you to see and access alarms, events, or assets that you (or another user) bookmarked for easy access. The number on the icon indicates the number of items bookmarked.
• Help. The icon includes the these options:
  • Documentation: Links to online documentation
  • Support: Links to the LevelBlue Support page
  • Forums: Links to the LevelBlue Success Center
• Feedback. The icon provides a direct communication with the USM Anywhere team.
• Profile Settings. The icon shows your profile settings. You can change your email, full name, update your password, enable multi-factor authentication (MFA) for the account, select your default landing page after you have logged in, configure an interval for auto-refreshing the dashboards and alarms pages, and the configuration of receiving alarm notifications. See Managing Your Profile Settings for more information.

The remainder of this guide describes best practices in performing common network security operations and provides step-by-step instructions for performing specific tasks. Following sections also describe the USM Anywhere web UI from which you can monitor network security and access all of USM Anywhere’s security operation features and functionality.