Sending Alerts to ServiceNow

ServiceNow is a platform for managing tickets, incidents, and organizational flows. CloudGuard sends CSPM findings and container vulnerability data to ServiceNow, which records them as new ServiceNow incidents. These can be managed as tickets in ServiceNow and, when resolved, are cleared from CloudGuard in the next assessment.

This page describes the CloudGuard configuration only.

To integrate CloudGuard with ServiceNow:

  1. In your ServiceNow account, install the CloudGuard CNAPP from the ServiceNow store and follow the instructions in the Installation Guide (click to download).

  2. In the CloudGuard portal, from the left menu, click Integration Hub.

  3. In the Ticketing Systems section, click Service Now.

    The Service Now sliding menu opens.

  4. Create the configuration.

To send a report from CloudGuard to ServiceNow:

  1. In CloudGuard, from the left menu go to Settings > Configuration > Notifications and click Add.

  2. Enter the applicable options as described in Notifications.

  3. In the Immediate Notification section, select HTTP endpoint notification per newly created finding.

  4. Select ServiceNow.

  5. Select the relevant ServiceNow configuration.

  6. Click Save.