Next-Generation Cisco Firewall discovery
Summarize
Summary of Next-Generation Cisco Firewall discovery
The Next Generation Cisco Firewall discovery pattern in ServiceNow's Discovery application enables customers to identify Cisco firewalls using SNMP calls. This feature supports horizontal discovery and requires the Discovery and Service Mapping Patterns application, which can be obtained from the ServiceNow Store. It is compatible with the Madrid release and later versions of the ServiceNow AI Platform.
Show less
Prerequisites
- Ensure SNMP access is configured on the network firewall device.
- Configure SNMP credentials in the ServiceNow instance.
- Add the SNMP system OID record for the Cisco device to the ServiceNow instance.
- Update the Classifier to Cisco Firewall Class and Class to Cisco Firewall Device.
Implementation Steps
- Download and install the Firewall extension classes and Discovery and Service Mapping Patterns application from the ServiceNow Store.
- Sync the pattern with the appropriate MID Server.
Key Features
During horizontal discovery, the following key data fields are populated in the CMDB:
- Serial Number: Unique identifier of the device.
- Name: Administratively assigned name (FQDN).
- IP Address: Address of the device.
- Firmware Version: Current firmware of the device.
- Manufacturer: Maker of the device.
- Model ID: Name of the device model.
- Operational Status: Indicates if the device is active.
- Hardware Status: Current operational state of the device.
Key Outcomes
By utilizing the Next Generation Cisco Firewall discovery pattern, ServiceNow customers can achieve efficient discovery of Cisco firewalls, ensuring accurate data representation in the CMDB and facilitating better IT operations management.
The ServiceNow Discovery application uses the Next Generation Cisco Firewall pattern to find Cisco firewalls. Discovering some of these resources requires updating the Discovery and Service Mapping Patterns application from the ServiceNow Store.
The discovery pattern uses a set of SNMP calls to find the Cisco firewalls. Discovery uses the pattern to run horizontal discovery.
You can use this pattern on the ServiceNow AI Platform® using the Madrid release or later.
Request apps on the Store
Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.
Prerequisites
- Ensure that your network firewall device has SNMP access.
- On the ServiceNow instance, configure SNMP credentials. For more information, see SNMP credentials.
- Add the SNMP system OID record for the Cisco device to the ServiceNow instance. Update the following:
- Classifier: Cisco Firewall
- Class: Cisco Firewall Device
- Deploy
the pattern as follows:
- Download and install Firewall extension classes from the ServiceNow Store. The app adds the new CMDB classes required for network firewall discovery.
- Download and install the Discovery and Service Mapping Patterns application from the ServiceNow Store.
- Sync the pattern with the appropriate MID Server.
Data collected by Discovery during horizontal discovery
Discovery populates the data in the CMDB when running the Next Generation Cisco Firewall pattern.
| Field | Description |
|---|---|
| Serial number [serial_number] | Serial number of the device. |
| Name [name] | Administratively assigned name for this managed node. By convention, this is the node's fully qualified domain name (FQDN). |
| IP Address [ip_address] | IP address of the device. |
| Firmware version [firmware_version] | Firmware version. |
| Fully qualified domain name [fqdn] | FQDN of the device. |
| Manufacturer [manufacturer] | Device manufacturer. |
| Model ID [model_id] | Device model name. |
| Harware OS [hardware_os] | Operating system (OS) running on the hardware. |
| Hardware OS Version [hardware_os_version] | OS version running on the hardware. |
| Description [short_description] | Short description of the Cisco device. |
| Operational status [operational_status] | Indicates if the device is in active state. |
| Hardware Status [hardware_status] | Detailed description of the current status of the resource. |
| Field | Description |
|---|---|
| IP Address [ip_address] | IP address of the Cisco firewall. |
| Netmask [netmask] | Netmask of the Cisco firewall. |
| Nic [nic] | References the Network Adapter [cmdb_ci_network_adapter] table. |
| Field | Description |
|---|---|
| IP Address [ip_address] | IP address of the network adapter. |
| Alias [alias] | User-assigned name for the network adapter. |
| Netmask [netmask] | Netmask of the network adapter. |
| MAC Address [mac_address] | MAC address of the network adapter. |
| Name [name] | Name of the network adapter. |
| Configuration Item [cmdb_ci] | References the Cisco Firewall Device [cmdb_ci_firewall_device_cisco] table. |
| Field | Description |
|---|---|
| Name [name] | Name of the Domain Name System (DNS). |
| IP Address [ip_address] | IP address of the DNS. |
CI relationships
These relationships are created to support Cisco firewall discovery.
| CI | Relationship | CI |
|---|---|---|
| Cisco Firewall Device [cmdb_ci_firewall_device_cisco] | Owns::Owned by | IP Address [cmdb_ci_ip_address] |
| Cisco Firewall Device [cmdb_ci_firewall_device_cisco] | Owns::Owned by | Network Adapter [cmdb_ci_network_adapter] |
| Cisco Firewall Device [cmdb_ci_firewall_device_cisco] | Uses::Used by | Router Interface [dscy_router_interface] |
| IP Address [cmdb_ci_ip_address] | References | Network Adapter [cmdb_ci_network_adapter] |
| Network Adapter [cmdb_ci_network_adapter] | Owns::Owned by | IP Address [cmdb_ci_ip_address] |
| Network Adapter [cmdb_ci_network_adapter] | References | Cisco Firewall Device [cmdb_ci_firewall_device_cisco] |
| Router Interface [dscy_router_interface] | References | Cisco Firewall Device [cmdb_ci_firewall_device_cisco] |
| Serial Number [cmdb_serial_number] | References | Cisco Firewall Device [cmdb_ci_firewall_device_cisco] |