CloudGuard Controller for ServiceNow CMDB Server

Starting in R82 Jumbo Hotfix Accumulator Take 118, the CloudGuard Controller Provisions SDDC services as Virtual Data Centers that provide virtualized computer networking, storage, and security. integrates the Check Point Security Management Server Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server. with a ServiceNow CMDB Server.

Authentication to the ServiceNow CMDB Data Center Virtual centralized repository, or a group of physical networked hosts, Virtual Machines, and datastores. They are collected in a group for secured remote storage, management, and distribution of data. is done with a username and a password.

Important - The CloudGuard Controller server clock must be synchronized with the current local time. Use of a NTP server is recommended. Time synchronization issues can cause polling information from the cloud to fail.

Limitations

• The Asset IP address is not imported if it is localhost (127.0.0.1, ::1 or “localhost”).

Connecting to the ServiceNow CMDB Server

Use the existing credentials (username and password) to connect to the ServiceNow CMDB server.

Connecting to a ServiceNow CMDB Server with SmartConsole

Step	Instructions
1	In SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on., use one of these options to create a new Data Center object: In the top left corner, click the Objects menu > Cloud > Data Center > New ServiceNow CMDB Or In the top right corner, click the Objects Pane > New > Cloud > Data Center > ServiceNow CMDB
2	In Enter Name, enter the applicable name.
3	In the Hostname field, enter the ServiceNow CMDB FQDN,or the server IP address and port number. Example: servicenow_cmdb_hostname Or: 172.0.1.2<:Port> Note: The ServiceNow CMDB port is optional and defaults to port 443. If your ServiceNow CMDB server uses port 443, you do not need to provide the port.
4	In the Username and Password fields, enter the credentials.
5	Click Test Connection. If the certificate window opens, confirm the certificate and click Trust.
6	When the connection status changes to Connected, click OK. If the status is not Connected, troubleshoot the issue before you continue.
7	Click OK.
8	Publish the SmartConsole session.
9	Install the Access Control policy on the Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. object.

ServiceNow CMDB Objects and Properties

ServiceNow CMDB Objects

Object	Description
Configuration Item (CI)	Any device or system that ServiceNow CMDB discovers and maps.
Tag	Resembles an attribute of a CI.

Notes: A CI can have one, multiple, or no Tags. Important: Import of IPv6 addresses is disabled by default. To enable it, you must set the servicenow_cmdb.collectIpv6 parameter in the vsec.conf file: servicenow_cmdb.collectIpv6=true For details, refer to Configuration Parameters.

ServiceNow CMDB advanced configuration

To change the default settings of ServiceNow CMDB Data Center in CloudGuard Controller:

1. Add this section to the vsec.conf file on the Management server:

   # ServiceNow CMDB Data Center configuration values. # Overrides: # global.scannerInterval # global.scanSleepUpperLimitInSeconds # global.connectTimeoutInMilliseconds # global.readTimeoutInMilliseconds # Default value: 30, 300, 5000000, 120000 servicenow_cmdb.scannerInterval=30 servicenow_cmdb.scanSleepUpperLimitInSeconds=300 servicenow_cmdb.connectTimeoutInMilliseconds=5000000 servicenow_cmdb.readTimeoutInMilliseconds=120000 servicenow_cmdb.collectIpv6=false

For details, refer to the Configuration Parameters section.

2. Modify the parameter values as required in your environment.

3. Save the file and restart the CloudGuard Controller service.