DNS record as a configuration item??

[stevemac]

Hi,

Just started an internal discussion on how to better manage the domain registration process / life cycle.  Some of the items that came up were

• request to register a domain (required data, approvals etc)
• tasks / automation to support registration (submit to registrar, infoblox config etc)
• automate check of EPP domain status codes and domain reputation - raise incidents / notification if issues
• retirement of a domain
• transferring a domain

As a summary a request to register a new domain would

• confirm the domain is available
• get required approvals
• integrate with the registrar system to register the domain
• [if required] integrate with infoblox
• create the CMDB record (in a custom class)

Other

• scheduled job(s) to check EPP status codes and domain reputation (eg via whoisxmlapi)
• • notifications / incidents when problems detected
• reports / dashboard for our domain administration team

Wondering if anyone has done this or can recommend a better approach than a new CMDB class?

FYI - aware of the dns_domain column in the configuration item table [cmdb_ci], however that field is a string.

thanks,

Steve

[Ct111]

Hi,

FOr DNS related configuration item that means scanning , identifying it's IP address , FQDN  inorder to get correct details . the integration that is available as per Servicenow Docs is   QUALYS .

The lookup rules that it will be using while matching the CI can be checked in below link (under QUALYS section)

https://docs.servicenow.com/bundle/newyork-security-management/page/product/security-operations-comm...

ANd to check how Qualys integration is configured you can refer below link (Qualys API)

https://docs.servicenow.com/bundle/madrid-security-management/page/product/secops-integration-vr/qua...

Mark my ANSWER as CORRECT n also HELPFUL if it helped .

[march]

Hi Steve,

We have not tried to support the following services yet, but this gives me some ideas 🙂

The following OoB tables existing in our instances (maybe they are deployed as part of the discovery activation).

• cmdb_ci_dns_name - containing fqdn entries that have been populated from discovery
• • It is referenced by cmdb_ip_address_dns_name to link it to an ip address
  • Not sure if using this table s recommended, maybe other people could answer this
• cmdb_dns_alias - not used in our instance.

Hope this gives you some direction to search.

BR

Marc

[Community Alums]

Got this PDF. Hope this helps!

[Erik25]

Hi Steve,

Did you receive any other good information for managing DNS and domain information? I ask because we are in the process of evaluating use of the CMDB to manage the DNS records from cradle to grave as well as the auditing and stewardship of these records.

Thanks,

Erik