ServiceNow Rapid7 Integration to synchronize data between InsightVM and the ServiceNow CMDB

[Nayan Mahato]

Hey Team,

I wanted to check if anyone has experience using the ServiceNow Rapid7 SGC or Rapid7 InsightVM CMDB Integration connector to synchronize data between InsightVM and the ServiceNow CMDB, please? We are encountering some urgent challenges that need to be resolved.

Challenges:
ServiceNow Rapid7 Service Graph Connector: A large dataset is being created as unclassified hardware.
InsightVM CMDB Integration: The jobs are not completing at all, and it's impacting instance performance.

Thanks in advance.
Nayan

[Mercedes Pons 1]

I'm in the same boat.  I just started the setup of Rapid7 SGC and I'm not even able to make the connection work.  

"Operation(SG-Rapid7-TestConnection./end) failed with error: com.snc.process_flow.exception.ProcessAutomationException: Request not sent to uri= https"

If anyone has good documentation or a video about this SGC, it will be great.

Thank you

[Jason_DaSilva]

We have been running the Rapid7 Integration for Security Operations using InsightVM for a while now (not the SG) and it seems to work as expected.  With that, the only issue we ran into was with the API key.

Have not looked at the SGC yet, as we are also trying to get Data Warehouse running for our other domain (without success at this point)

[PattiP]

Hello Nayan. We did the integration. Only one direction...pulling CI's from SN to create a tag in Rapid7. Our only issue is if we only want host name as the matching criteria (dynamic assets: Workstations) and we specify to use only the host name, we find it still uses the IP Address and ends up tagging no workstation assets based on what SN saw as the last IP for that workstation. Any other assets that are static...servers, switches etc, it works pretty well. Although not 100% accurate it still helps identify assets for us. We don't populate anything back to the CMDB due to request from the SN team. You can also add a rule for assets tagged as 'unclassed' in the CMDB by using the rules in the tag set up. Class NOT IN 'unclassed' or something like that. Hope that helps.