Firewall extension classes

  • Release version: Xanadu
  • Updated August 1, 2024
  • 3 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Firewall Extension Classes

    The CMDB CI Class Models store app enhances the ServiceNow platform by adding or updating classes related to firewall devices. These extensions enable the integration of firewall classes into the CMDB hierarchy, allowing for better management and discovery of network security systems through applications like Discovery and Service Mapping.

    Show full answer Show less

    Key Features

    • Firewall Device Classes: New classes for various firewall vendors like Fortinet, Juniper, and Cisco are introduced, allowing users to recognize and manage these devices effectively.
    • Centralized Management: The app supports centralized firewall management systems, such as Panorama for Palo Alto Networks, facilitating streamlined security policy management across multiple devices.
    • Enhanced Class Models: Additional columns for existing classes provide detailed information about hardware and operating systems, improving inventory accuracy.

    Key Outcomes

    By utilizing the firewall extension classes, ServiceNow customers can expect improved visibility of firewall devices within their CMDB, enhanced security posture through better policy management, and the ability to leverage automated tools for asset discovery. This ultimately leads to more effective network security management and reduced risk of cyber threats.

    The CMDB CI Class Models store app adds or updates classes for firewall devices.

    The app adds class models that extend the CMDB class hierarchy, including class descriptions, identification rules, identifier entries, and dependent relationships (if applicable). You can use the added classes as any other CMDB class. Applications such as Discovery and Service Mapping patterns can use these class extensions to populate CIs and discover various technologies and software.

    Request apps on the Store

    Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.

    Firewalls

    A firewall is a network security system that monitors and controls incoming and outgoing network traffic, based on security policies. Firewalls typically form a barrier between an internal network and an untrusted external network, such as the internet. It usually consists of security policies that help secure an organization from external threats and cyber attacks. Firewall vendors may provide a centralized firewall manager to manage many firewall devices and the security policies residing on them. For example, Panorama™ is the centralized management system for Palo Alto Networks firewalls.

    Figure 1. Firewall extension classes integrated with the CMDB class hierarchy (CMDB CI Class Models: Release 1.11.0)

    Firewall extension classes integrated with the CMDB class hierarchy.
    Figure 2. Firewall extension classes integrated with the CMDB class hierarchy (CMDB CI Class Models: Release 1.10.0)

    Firewall extension classes integrated with the CMDB class hierarchy.

    Classes

    This section lists the classes that the CMDB CI Class Models store app adds or updates.

    CMDB CI Class Models: Release 1.10.0 adds or updates the following classes for the discovery of network firewall devices. For the list of CMDB classes in a base system, including ones that this store app might be extending, see CMDB tables descriptions.

    Class Extends Description
    IP Firewall [cmdb_ci_ip_firewall] NETGEAR [cmdb_ci_netgear] Contains all network firewalls.
    Firewall Device [cmdb_ci_firewall_device] IP Firewall [cmdb_ci_ip_firewall] Network security system that monitors and controls incoming and outgoing network traffic, based on security policies.
    Fortinet Firewall Device [cmdb_ci_firewall_device_fortinet] Firewall Device [cmdb_ci_firewall_device] Fortinet firewall device.
    Juniper Firewall Device [cmdb_ci_firewall_device_juniper] Firewall Device [cmdb_ci_firewall_device] Juniper firewall device.
    Firewall Device Group [cmdb_ci_firewall_device_group] CMDB CI [cmdb_ci] Group of firewall devices.
    Panorama Firewall Device Group [cmdb_ci_firewall_device_group_panorama] Firewall Device Group [cmdb_ci_firewall_device_group] Group of Panorama firewall devices.
    Palo Alto Firewall Device [cmdb_ci_firewall_device_palo_alto] Firewall Device [cmdb_ci_firewall_device] Palo Alto firewall device.
    Firewall Cluster [cmdb_ci_firewall_cluster] [cmdb_ci_cluster] Group of firewall nodes that work as a single logical entity.
    Fortinet Firewall Cluster [cmdb_ci_firewall_cluster_fortinet] Firewall Cluster [cmdb_ci_firewall_cluster] Fortinet firewall cluster.
    Juniper Firewall Cluster [cmdb_ci_firewall_cluster_juniper] Firewall Cluster [cmdb_ci_firewall_cluster] Juniper firewall cluster.
    Firewall Manager [cmdb_ci_firewall_manager] CMDB CI [cmdb_ci] System that provides centralized management for many firewall devices and the security policies residing on them.
    Panorama Firewall Manager [cmdb_ci_firewall_manager_panorama] Firewall Manager [cmdb_ci_firewall_manager] The centralized network security management tool for Palo Alto Networks firewalls.
    Firewall Security Policy [cmdb_ci_firewall_sec_policy] CMDB CI [cmdb_ci] The security policy that the firewall device enforces.
    Panorama Firewall Security Policy [cmdb_ci_firewall_sec_policy_panorama] Firewall Security Policy [cmdb_ci_firewall_sec_policy] The security policy that the Panorama firewall device enforces.
    CMDB CI Class Models: Release 1.12.0 adds the following class for the discovery of network firewall devices.
    Class Extends Description
    Cisco Firewall Device [cmdb_ci_firewall_device_cisco] Firewall Device [cmdb_ci_firewall_device] All Cisco Firewall devices.

    Class columns

    CMDB CI Class Models: Release 1.10.0 adds the following columns to the respective classes.

    Table 1. IP Firewall [cmdb_ci_ip_firewall] class
    Added columns Description
    Hardware Operating System OS running on the hardware.
    Hardware OS Version OS version running on the hardware.
    Table 2. Firewall Cluster [cmdb_ci_firewall_cluster] class
    Added columns Description
    Hardware Operating System OS running on the hardware.
    Hardware OS Version OS version running on the hardware.

    CMDB CI Class Models: Release 1.12.0 adds no columns to the existing classes.