Discovery

[Ciuciura]

We have use cases where we need to send the collected Discovery data in 2 tiers. First, MID server 01 needs to send the data to MID server 02, and then the data gets to the ServiceNow instance. We need to ensure that there is no direct connection from MID server 01 to the public Internet for security reasons.

Is this possible?

[Dr Atul G- LNG]

Hi @Ciuciura 

@AJ-TechTrek help here.

[AJ-TechTrek · Accepted solution]

Hi @Ciuciura ,

Mid server always placed on the customer environment which is secure , also ServiceNow will don’t have direct connection to customer infra or internet that’s why we placed the mid server in between customer infra discovery to ServiceNow instance.

basically Mid Server connects to the Servicenow  only to collect the data on port 443 , and Mid server collect data from ServiceNow on Different port based on classes or Infra component hence I don’t think that is required which you mentioned in your question. Also you can configure the proxy as well on your mid server for security things.

i hope I am able to help with your question , please accept solution or mark as helpful if it’s helps you.

thanks

AJ

[Ryan Duce]

Hi @Ciuciura 

Short answer - no, your arrangement is not possible. MID Servers must connect directly to the ServiceNow instance.

Remember that the direction of traffic is from the MID server to the instance only. You do not need to open the inbound firewall to ServiceNow traffic. So the MID server is not accessible from the public internet anyway.

The MID Server can be configured to use a proxy as AJ says - docs.

You can also pay for a VPN connection, in which case MID server communication can go down a tunnel - search for "VPN Requests" in Now Support.