Next-Generation Juniper Network Firewall discovery

  • Release version: Australia
  • Updated March 12, 2026
  • 4 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Next-Generation Juniper Network Firewall discovery

    The Next-Generation Juniper Network Firewall discovery pattern in the ServiceNow Discovery application enables automated identification and data collection of Juniper network firewalls within your infrastructure. It leverages SNMP calls during horizontal discovery to locate and profile these firewall devices accurately. To use this pattern effectively, you may need to update to the latest Discovery and Service Mapping Patterns application from the ServiceNow Store.

    Show full answer Show less

    Prerequisites and Setup

    • Ensure SNMP access is configured on the Juniper firewall devices.
    • Configure SNMP credentials and add the SNMP system OID for Juniper devices on your ServiceNow instance.
    • Update the Classifier to "Juniper Firewall" and the Class to "Juniper Firewall Device" in ServiceNow.
    • Download and install from the ServiceNow Store:
      • CMDB CI Class Models (Release 1.10.0) for required CMDB classes.
      • The Next-Generation Juniper Network Firewall discovery pattern.
    • Synchronize the discovery pattern with an appropriate MID Server.

    Juniper Firewall Data Model and CI Classes

    This discovery pattern introduces several CI classes extending the firewall device hierarchy to represent Juniper firewalls and their clusters, including:

    • Juniper Firewall Device (extends Firewall Device)
    • Juniper Firewall Cluster (extends Firewall Cluster)
    • Firewall Device Group
    • Firewall Manager
    • Firewall Security Policy

    Data Collected During Discovery

    The discovery collects detailed attributes across various CI tables such as IP Firewall, Firewall Device, Juniper Firewall Device, Firewall Cluster, Juniper Firewall Cluster, and Network Adapter. Key fields include hostname, serial number, operational status, IP address, manufacturer, model number, firmware, and hardware OS details. Network adapters are linked back to their respective Juniper firewall devices.

    CI Relationships and References

    The pattern establishes important relationships to represent the network firewall environment accurately, including:

    • Juniper Firewall Clusters hosting Juniper Firewall Devices
    • Juniper Firewall Devices owning Network Adapters and IP Addresses
    • Firewall Devices containing Firewall Security Policies
    • Memberships of Firewall Device Groups
    • Management relationships with Firewall Managers

    These relationships and references enable comprehensive mapping and dependency visualization within the CMDB, supporting accurate impact analysis and operational insights.

    The ServiceNow Discovery application uses the Next-Generation Juniper Network Firewall discovery pattern to find Juniper network firewalls. Discovering some of these resources may require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

    The discovery pattern uses a set of SNMP calls to find the Juniper network firewalls. Discovery uses the pattern to run horizontal discovery.

    Request apps on the Store

    Visit the ServiceNow Store to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.

    Juniper Network Firewall data model

    The Next-Generation Juniper Network Firewall pattern introduces the following CI classes that are part of the Juniper firewall data model.

    Table 1. CI class hierarchy
    CI class Extends from
    Firewall Device [cmdb_ci_firewall_device] IP Firewall [cmdb_ci_ip_firewall]
    Juniper Firewall Device [cmdb_ci_firewall_device_juniper] Firewall Device [cmdb_ci_firewall_device]
    Firewall Cluster [cmdb_ci_firewall_cluster] Cluster [cmdb_ci_cluster]
    Juniper Firewall Cluster [cmdb_ci_firewall_cluster_juniper] Firewall Cluster [cmdb_ci_firewall_cluster]
    Firewall Device Group [cmdb_ci_firewall_device_group] Configuration Item [cmdb_ci]
    Firewall Manager [cmdb_ci_firewall_manager] Configuration Item [cmdb_ci]
    Firewall Security Policy [cmdb_ci_firewall_security_policy] Configuration Item [cmdb_ci]

    Prerequisites

    • Ensure that your network firewall device has SNMP access.
    • On the ServiceNow instance, configure SNMP credentials.
    • Add the SNMP system OID record for the Juniper device to the ServiceNow instance. Update the following:
      • Classifier: Juniper Firewall
      • Class: Juniper Firewall Device
    Deploy the pattern as follows:
    1. Download and install the CMDB CI Class Models: Release 1.10.0 from the ServiceNow Store. The app adds the new CMDB classes required for network firewall discovery. For more information, see Firewall extension classes.
    2. Download and install the discovery pattern from the ServiceNow Store.
    3. Sync the pattern with the appropriate MID Server.

    Data collected by Discovery during horizontal discovery

    The discovered data includes the following tables and fields.

    Table 2. IP Firewall [cmdb_ci_ip_firewall]
    Field Description
    Name [name] Hostname.
    Serial Number [serial_number] Device serial number.
    Operational Status [operational_status] Indicates if the device is in active state.
    IP address [ip_address] IP address.
    Manufacturer [manufacturer] Device manufacturer.
    Description [short_description] Short description.
    Model Number [model_number] Device model number.
    Firmware [firmware_version] Firmware version.
    Hardware Operating System [hardware_os] OS running on the hardware.
    Hardware OS Version [hardware_os_version] OS version running on the hardware.
    Table 3. Firewall Device [cmdb_ci_firewall_device]
    Field Description
    Name [name] Hostname.
    Serial Number [serial_number] Serial number of the device.
    Fully qualified domain name [fqdn] Fully qualified domain name.
    Operational Status [operational_status] Indicates if the device is in active state.
    IP address [ip_address] IP address.
    Manufacturer [manufacturer] Device manufacturer.
    Description [short_description] Short description.
    Model Number [model_number] Device model number.
    Firmware [firmware_version] Firmware version.
    Hardware Operating System [hardware_os] OS running on the hardware.
    Hardware OS Version [hardware_os_version] OS version running on the hardware.
    Table 4. Juniper Firewall Device [cmdb_ci_firewall_device_juniper]
    Field Description
    Name [name] Hostname.
    Serial Number [serial_number] Serial number of the device.
    Fully qualified domain name [fqdn] Fully qualified domain name.
    Operational Status [operational_status] Indicates if the device is in active state.
    IP address [ip_address] IP address.
    Manufacturer [manufacturer] Device manufacturer.
    Description [short_description] Short description.
    Model Number [model_number] Device model number.
    Firmware [firmware_version] Firmware version.
    Hardware Operating System [hardware_os] OS running on the hardware.
    Hardware OS Version [hardware_os_version] OS version running on the hardware.
    Table 5. Firewall Cluster [cmdb_ci_firewall_cluster]
    Field Description
    Name [name] Hostname.
    Fully qualified domain name [fqdn] Fully qualified domain name.
    IP address [ip_address] IP address.
    Manufacturer [manufacturer] Device manufacturer.
    Description [short_description] Short description.
    Model Number [model_number] Device model number.
    Hardware Operating System [hardware_os] OS running on the hardware.
    Hardware OS Version [hardware_os_version] OS version running on the hardware.
    Table 6. Juniper Firewall Cluster [cmdb_ci_firewall_cluster_juniper]
    Field Description
    Name [name] Hostname.
    Fully qualified domain name [fqdn] Fully qualified domain name.
    IP address [ip_address] IP address.
    Manufacturer [manufacturer] Device manufacturer.
    Description [short_description] Short description.
    Model Number [model_number] Device model number.
    Hardware Operating System [hardware_os] OS running on the hardware.
    Hardware OS Version [hardware_os_version] OS version running on the hardware.
    Table 7. Network Adapter [cmdb_ci_network_adapter]
    Field Description
    Name [name] Name of the network adapter.
    IP Address [ip_address] IP address of the network adapter.
    MAC Address [mac_address] MAC address of the network adapter.
    Configuration Item [cmdb_ci] References the Juniper Firewall Device [cmdb_ci_firewall_device_juniper] associated with this network adapter.
    The Dependency Views map on the Juniper Firewall Device CI shows the Juniper Firewall Cluster to which it belongs.
    CIs and connections on a Dependency Views map

    CI relationships

    The Next-Generation Juniper Network Firewall pattern creates the following relationships and references to support Juniper network firewall discovery. References link to records in other tables and don't appear in the CI Relationship [cmdb_rel_ci] table.

    Table 8. CI relationships
    CI Relationship CI
    Juniper Firewall Cluster [cmdb_ci_firewall_cluster_juniper] Hosted on::Hosts Juniper Firewall Device [cmdb_ci_firewall_device_juniper]
    Juniper Firewall Device [cmdb_ci_firewall_device_juniper] Owns::Owned by Network Adapter [cmdb_ci_network_adapter]
    Juniper Firewall Device [cmdb_ci_firewall_device_juniper] Owns::Owned by IP Address [cmdb_ci_ip_address]
    Juniper Firewall Device [cmdb_ci_firewall_device_juniper] Uses::Used by Router Interface [dscy_router_interface]
    Firewall Device [cmdb_ci_firewall_device] Contains::Contained by Firewall Security Policy [cmdb_ci_firewall_security_policy]
    Firewall Device Group [cmdb_ci_firewall_device_group] Members::Member Of Firewall Device [cmdb_ci_firewall_device]
    Firewall Device Group [cmdb_ci_firewall_device_group] Contains::Contained by Firewall Security Policy [cmdb_ci_firewall_security_policy]
    Firewall Manager [cmdb_ci_firewall_manager] Manages::Managed by Firewall Device [cmdb_ci_firewall_device]
    Firewall Manager [cmdb_ci_firewall_manager] Contains::Contained by Firewall Security Policy [cmdb_ci_firewall_security_policy]
    Table 9. CI references
    CI Field Referenced CI
    Serial Number [cmdb_serial_number] Configuration item [configuration_item] Juniper Firewall Device [cmdb_ci_firewall_device_juniper]
    Network Adapter [cmdb_ci_network_adapter] Configuration Item [cmdb_ci] Juniper Firewall Device [cmdb_ci_firewall_device_juniper]
    Router Interface [dscy_router_interface] Configuration Item [cmdb_ci] Juniper Firewall Device [cmdb_ci_firewall_device_juniper]