Prerequisites and Configuration

• Application updates: Ensure Discovery and Service Mapping Patterns are updated to the latest version from the ServiceNow Store.
• API Token: Create an API token in Fortinet with sufficient permissions to access required Fortinet APIs (such as system status, firewall policies, interfaces, and VDOM properties).
• MID Server access: Verify that the MID Server can access the Fortinet APIs.
• Disable SNMP-based discovery: To avoid conflicts, disable SNMP-based Fortinet firewall discovery when using REST-based discovery.
• Credential alias and schedule: Create an alias for the API key credentials and set up a serverless discovery schedule for the REST-based discovery process.

Key Features

• REST API-based discovery: Uses Next Generation Fortinet Network Firewall - REST pattern to discover devices and VDOMs.
• VDOM Discovery extension: Specifically discovers FortiGate Virtual Domains in multi-VDOM mode.
• Comprehensive data collection: Discovers firewall devices, clusters, network adapters, IP addresses, VDOMs, firewall interfaces, network topologies, and firewall policies.
• Detailed CMDB population: Populates multiple CMDB tables with essential fields such as hostname, serial number, IP address, firmware version, and policy details.
• Relationship mapping: Automatically creates relationships between CIs to represent clusters, interfaces, VDOMs, policies, and network topology.

Data and CMDB Impact

The discovery populates the CMDB with detailed configuration items (CIs) relevant to Fortinet firewalls and FortiGate VDOMs:

• Firewall devices and clusters: Includes hostname, serial number, model, firmware, and operational status.
• Network adapters and IP addresses: Captures IPs, MAC addresses, netmasks, and user-assigned aliases.
• Virtual Domains (VDOMs): Discovers VDOM indexes, names, descriptions, and their relationships to interfaces and policies.
• Firewall interfaces and policies: Identifies interfaces with IPs, MAC addresses, access types, and firewall policies with source/destination details and managed services.
• Network topology: Maps VLAN IDs and associates them with firewall interfaces.

Benefits for ServiceNow Customers

• Enables accurate and automated discovery of Fortinet firewall infrastructure and virtual domains, improving visibility in the CMDB.
• Supports effective configuration management and security policy tracking by maintaining up-to-date firewall and VDOM data.
• Helps maintain compliance and operational readiness by ensuring detailed relationships and configurations are captured and maintained.
• Facilitates integration with other ITOM processes such as event management, change management, and service mapping through comprehensive CI data.