How to scan and add an air gapped system to the CMDB
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-09-2022 08:23 AM
We have a need to run a scan on an air gapped system and get the results of the scan imported into the CMDB. Is there any solution out there that exists for this? I am guessing we will need to have an agent or script executed on the device and it generated a file which can be copied or printed, then we take the file and import it into ServiceNow. We will want to capture hardware and software details on the system we are scanning.
For the definition of air gapped lets assume it has no network connectivity at all, files can be copied to the device and copied or printed off the device. If printed we would likely need to scan back to OCR to convert it to an electronic file that can be imported.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-09-2022 12:34 PM
Hi, may be you can put MID server to the air-gapped network segment and run the discovery ?
Hope it helps
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-09-2022 01:10 PM
No these are systems that have no network connectivity at all.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-09-2022 11:56 PM
Hi, I see. Usually air-gapped does not mean disconnected and limited possibilities to connect still exist. To copy files you anyway need to connect to the system; leveraging this connection for running a discovery over MID server would greatly help.
I am not aware about offline scan solution you are referring, hopefully other community members will be able to recommend.
Hope it helps.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-13-2022 07:30 AM
Is there any way to use the Agent Client Collector for Visibility to do this? We could install the agent on the air gapped/off network system. We would then need a method to collection the scan result file and upload it to the mid server manually so it could be processed.