--- sourceDocument: Yokohama IT Operations Management sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/yokohama/it-operations-management Release : - yokohama ft:locale : - en-US ft:publication_title : - Yokohama IT Operations Management ft:clusterId : - itom bundleId : - itom workflow : - Technology --- # IBM WebSEAL # IBM WebSEAL discovery {#ariaid-title1} * Release version: Yokohama * * Updated January 30, 2025 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read The ® Discovery application uses the IBM WebSEAL patterns to find WebSEAL applications, web application servers, and junctions on your infrastructure. Discovering some of these resources requires installing the Discovery and Service Mapping Patterns application from the ® Store. ## Request apps on the Store {#ibm_webseal_discovery_patterns__id_fld_jhf_1xb} Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/r/store-release-notes/sn-store-release-notes.html).{#ibm_webseal_discovery_patterns__inline-send-to-store} ## Prerequisites {#ibm_webseal_discovery_patterns__section_prj_nrr_v5b} Detailed information on IBM WebSEAL : For information, see [Detailed information on products discovered by ITOM Visibility](https://servicenow-prod.fluidtopics.net/AB0jKyDtjf78iS3uAPUKpg "Discovery and Service Mapping can discover a wide range of operating systems and applications.") Authentication : The WebSEAL authentication process includes HTTP header authentication with basic credentials [Basic authentication credentials](https://www.servicenow.com/docs/access?context=r_BasicAuthCredentialsForm&version=yokohama&pubname=yokohama-platform-security&ft:locale=en-US). If you're running discovery for the first time, configure Credential affinity for Discovery and Orchestration [Credential affinity for Discovery and Orchestration](https://www.servicenow.com/docs/access?context=c_CredentialAffinity&version=yokohama&pubname=yokohama-platform-security&ft:locale=en-US). Note: Credential affinity isn't available In debug mode. Configured MID Server : Ensure the MID Server has access and permissions to send HTTPS requests to the WebSEAL application. Configured user permissions to execute API calls : Ensure that the user has the permission to run the following API: * /net/general * /net/dns * /wga/reverseproxy * /wga/reverseproxy/\/configuration/stanza/junction/entry_name/match-vhj-first * /wga/reverseproxy/\/junctions * /wga/reverseproxy/"\/junctions?junctions_id=\ * /wga/widgets/health.json {#ibm_webseal_discovery_patterns__ul_i2r_pc1_ywb} HTTP Classification enabled : The IBM WebSEAL Pattern is triggered when you run the discovery on the server that the WebSEAL is on. Ensure that the HTTP Classification is present in the instance. For more information, see [Create an HTTP classification](https://servicenow-prod.fluidtopics.net/5NEr9lZQ0m8KmxUZmmIZlA "An HTTP classifier enables the horizontal discovery process to find devices via the HTTP protocol.") and [Run discovery through an HTTP or HTTPS REST call](https://servicenow-prod.fluidtopics.net/SMHrp0tU1OoXVoeSHfrIDQ "Discovery can classify devices using the HTTP(S) protocol. You can create your own HTTP classifier to find devices and access them with Basic Auth credentials, rather than using SNMP or SSH credentials.") ## Data collected during horizontal discovery {#ibm_webseal_discovery_patterns__section_md4_mqh_w5b} {#ibm_webseal_discovery_patterns__table_olj_wwb_x5b__entry__2} | Field | Description | |-|-| | ISAM Server \[cmdb_ci_isam_server\] || | name | The name of the server as returned by the `/net/general` API call. If the field is empty, `nslookup` on the IP address would be attempted to populate this field. | | IP Address \[ip_address\] | The IP address according to the discovery schedule/configuration. | | fqdn | The `search_domain` returned by the`/net/dns` API call. | | WebSEAL \[cmdb_ci_app_server_webseal\] || | name | The name of the WebSEAL server as returned by the API. | | IP Address \[ip_address\] | The IP address according to the discovery schedule/configuration. | | fqdn | The `search_domain` returned by the` /net/dns` API call. | | install_status | The status is set to installed by default. | | operation_status | The status is set to operational by default. | | install_directory | According to the identification requirement, this field is populated with the FQDN of the server. | | WebSEAL Reverse Proxies \[cmdb_ci_webseal_reverse_proxy\] || | name | The name of the resource according to the API response. | | object_id | The ID of the resource, of the API response. | | install_status | Indicates if the installation is enabled. | | operational_status | Indicates if the operation has started. | | service_type -- hard-coded | The status is set to `Webseal Reverse Proxy`by default. | | webseal_health_status | The WebSEAL reported health status regarding the `/wga/widgets/health.json` API call | | WebSEAL Junctions \[cmdb_ci_webseal_junction\] || | name | The name of the resource according to the API response. | | object_id | The id of the resource, created as a unique hash number corresponding to the case-sensitive name of the resource. Note: The case insensitivity of the queries may create duplicate fields when the name value is identical to the Object ID value. One of the identification attributes must be changed to have a unique value. | | install_status | Hard-coded to installed status | | operational_status | Hard-coded to operational status | | stateful_junction | Boolean value indicating whether it's a stateful Junction | | transparent_path_junction | Boolean value indicating whether it's a transparent path Junction | | junction_type | List for the type of the Junction | | WebSEAL Backend Servers \[cmdb_ci_webseal_backend_server\] || | name | the name of the resource, as per API response | | object_id | the id of the resource, as per API response | | install_status | the status of the resource as per the "enabled" value in the API response | | operational_status | the status of the resource as per the "operation state" value | | server_id | The UUID used to identify the junction web server | | http_port | HTTP port of the back-end third-party server. Applicable when the junction type is tcp. | | service_port | TCP port of the back-end third-party server. Default is 80 for TCP junctions and 443 for SSL junctions | | Priority | The priority of the server (1-9). Default is 9. | [ ] {#ibm_webseal_discovery_patterns__table_olj_wwb_x5b} {#ibm_webseal_discovery_patterns__table_nxq_dcc_x5b__entry__3} | CI | Relationship Type | CI | |-|-|-| | Webseal \[cmdb_ci_app_server_webseal\] | Runs on::Runs | ISAM Server \[cmdb_ci_isam_server\] | | Webseal Reverse Proxy \[cmdb_ci_webseal_reverse_proxy\] | Hosted on::Hosts Reference\[load_balancer\] | Webseal \[cmdb_ci_app_server_webseal\] | | Webseal Reverse Proxy \[cmdb_ci_webseal_reverse_proxy\] | Runs on::Runs Reference\[isam_server\] | ISAM Server \[cmdb_ci_isam_server\] | | Webseal Junction \[cmdb_ci_webseal_junction\] | Allocated to::Allocates Reference \[service\] | Webseal Reverse Proxy \[cmdb_ci_webseal_reverse_proxy\] | | Webseal Junction \[cmdb_ci_webseal_junction\] | Owns::Owned by Reference \[pool\] | Load Balancer Pool Member \[cmdb_ci_webseal_backend_server\] | | Webseal Junction \[cmdb_ci_webseal_junction\] | Reference only \[load_balancer\] | Webseal \[cmdb_ci_app_server_webseal\] | [Table 1. Pattern Relations] {#ibm_webseal_discovery_patterns__table_nxq_dcc_x5b} Note: Currently, the relation between the back-end servers and actual server CIs in the CMDB isn't possible for HD.