Service Graph Connector for Microsoft Defender for IoT (On-premises Management Console)

  • Release version: Xanadu
  • Updated January 22, 2025
  • 2 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Service Graph Connector for Microsoft Defender for IoT (On-premises Management Console)

    The Service Graph Connector for Microsoft Defender for IoT (On-premises Management Console) integrates Microsoft Defender for IoT with the ServiceNow® Operational Technology Manager application. This integration automates the import of sensor appliances, operational technology (OT) devices, and network connections into the ServiceNow Configuration Management Database (CMDB).

    Show full answer Show less

    It supports Microsoft Defender for IoT versions 10.5.2 or later, and the integration setup is streamlined through a guided setup process within ServiceNow.

    Key Features

    • Automated Data Import: Automatically imports sensor appliances, OT devices, and network connections from Microsoft Defender for IoT into ServiceNow CMDB.
    • Guided Setup: Provides an organized sequence of configuration tasks to simplify integration deployment on your ServiceNow instance.
    • CMDB Integrations Dashboard: Offers a central dashboard to monitor integration status, processing results, and errors, with filtering options by integration, time, or run.
    • Data Mapping and Transformation: Uses the Robust Transform Engine (RTE) and Identification and Reconciliation Engine (IRE) to map and insert data into ServiceNow CMDB tables accurately.
    • Periodic Data Pulls: Enables scheduled, periodic updates from Microsoft Defender for IoT projects to keep your CMDB current.

    Data Handling and CMDB Impact

    Imported data from Microsoft Defender for IoT is initially stored in specific staging tables corresponding to connections, devices, and sensors. From there, data is transformed and inserted into a wide range of target CMDB tables that represent various device and asset classes, including servers (Linux, Unix, AIX, Solaris, Windows), industrial devices (PLCs, HMIs, RTUs), network devices (firewalls, IP cameras, wireless access points), and many others.

    This detailed classification ensures that OT and IoT device data is accurately reflected within the CMDB, supporting comprehensive asset management and operational visibility.

    Practical Benefits for ServiceNow Customers

    • Streamlines OT asset discovery and management by automating data imports from Microsoft Defender for IoT.
    • Enhances CMDB accuracy with detailed and classified device data, improving operational technology governance.
    • Facilitates proactive monitoring of integration health and data processing through the CMDB Integrations Dashboard.
    • Enables periodic synchronization to keep asset data current, supporting ongoing IT and OT operational workflows.

    Next Steps

    ServiceNow customers can use the guided setup to configure the connector and begin importing data from their Microsoft Defender for IoT (On-premises Management Console) environment. Monitoring and managing the integration via the CMDB Integrations Dashboard helps ensure data integrity and integration reliability.

    Understanding the targeted CMDB classes and the attribute mapping for sensors and devices allows customers to tailor the integration to their specific asset management needs.

    Integrate Microsoft Defender for IoT (On-premises Management Console) with the ServiceNow® Operational Technology Manager application to automate import of sensor appliances, OT devices, and network connections.

    Request apps on the Store

    Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.

    Supported versions

    Microsoft Defender for IoT (On-premises Management Console) version: 10.5.2  or later

    Use cases

    You can use the Service Graph Connector for Microsoft Defender for IoT (On-premises Management Console) with the ServiceNow® Operational Technology Manager application to import sensor appliances, OT devices, and network connections.

    Guided setup

    The guided setup for the Service Graph Connector for Microsoft Defender for IoT (On-premises Management Console) provides an organized sequence of tasks to configure the integration on your instance. To access the guided setup, see Configure guided setup.

    CMDB integrations dashboard

    The Integration Commons for CMDB store app provides a dashboard with a central view of the status, processing results, and processing errors of all installed integrations. You can see metrics for all integration runs. You can filter the view to a specific CMDB integration, a specific time duration, or a specific integration run. For more details about monitoring integrations in the CMDB Integrations Dashboard, see Integration Commons for CMDB.

    Data mapping

    Data from the Microsoft Defender for IoT (On-premises Management Console) data sources is mapped and transformed into the ServiceNow CMDB Configuration Item (CI) class definitions using the Robust Transform Engine (RTE). Data is inserted into the ServiceNow CMDB using the Identification and Reconciliation Engine (IRE).

    When you complete the setup, you can configure the integration to periodically pull data from the Microsoft Defender for IoT (On-premises Management Console) application.

    The following table lists the data sources included for a Microsoft Defender for IoT (On-premises Management Console) project and the corresponding staging tables where the imported data is loaded.
    Table 1. Data sources and staging tables for Microsoft Defender for IoT (On-premises Management Console)
    Data source Staging table
    SG-OT Microsoft D4IoT Connections Import SG-OT Msft D4IoT Connections Import [sn_msftd4iotsgc_sg_ot_msft_d4iot_connections_import]
    SG-OT Microsoft D4IoT Devices Import SG-OT Msft D4IoT Devices Import [sn_msftd4iotsgc_sg_ot_msft_d4iot_devices_import]
    SG-OT Microsoft D4IoT Sensors Import SG-OT Msft D4IoT Sensors Import [sn_msftd4iotsgc_sg_ot_msft_d4iot_sensors_import]
    The imported data from the staging tables is then inserted into the following target tables:
    • AIX Server [cmdb_ci_aix_server]
    • Computer [cmdb_ci_computer]
    • Configuration Item [cmdb_ci]
    • DCS [cmdb_ci_ot_dcs]
    • ESX Server [cmdb_ci_esx_server]
    • EWS [cmdb_ci_ot_ews]
    • External System Metadata [cmdb_key_value_v2]
    • Game Console [cmdb_ci_game_console]
    • Handheld Computing Device [cmdb_ci_handheld_computing]
    • Historian [cmdb_ci_ot_historian]
    • HMI [cmdb_ci_ot_hmi]
    • HP-UX Server [cmdb_ci_hpux_server]
    • HVAC Equipment [cmdb_ci_hvac]
    • HyperV Server [cmdb_ci_hyper_v_server]
    • IED [cmdb_ci_ot_ied]
    • Industrial Actuator [cmdb_ci_ot_industrial_actuator]
    • Industrial Drive [cmdb_ci_ot_industrial_drive]
    • Industrial Robot [cmdb_ci_ot_industrial_robot]
    • Industrial Sensor [cmdb_ci_ot_industrial_sensor]
    • IoT Device [cmdb_ci_iot]
    • IP Address [cmdb_ci_ip_address]
    • IP Camera [cmdb_ci_ip_camera]
    • IP Firewall [cmdb_ci_ip_firewall]
    • IP Phone [cmdb_ci_ip_phone]
    • Linux Server [cmdb_ci_linux_server]
    • Netgear [cmdb_ci_netgear]
    • Network Adapter [cmdb_ci_network_adapter]
    • Network Intrusion Detection System [cmdb_ci_nids]
    • Operational Technology (OT) [cmdb_ci_ot]
    • OSX Server [cmdb_ci_osx_server]
    • OT Control Module [cmdb_ci_ot_control_module]
    • OT Control System [cmdb_ci_ot_control]
    • OT Device Details [cmdb_ot_entity]
    • OT Field Device [cmdb_ci_ot_field_device]
    • PLC [cmdb_ci_ot_plc]
    • Printer [cmdb_ci_printer]
    • RTU [cmdb_ci_ot_rtu]
    • Serial Number [cmdb_serial_number]
    • Server [cmdb_ci_server]
    • Server [cmdb_ci_server]
    • Solaris Server [cmdb_ci_solaris_server]
    • Source [sys_object_source]
    • Unix Servercmdb_ci_unix_server]
    • Uninterruptible Power Supply (UPS) [cmdb_ci_ups]
    • Wireless Access Point [cmdb_ci_wap_network]

    For more information on where data is saved when pulling data from a Microsoft Defender for IoT (On-premises Management Console) project, see CMDB classes targeted.