ACC on Servers for SAM use-case

[Mantautas]

Hello Community,

Would like to ask if there is any benefit installing ACC Agent on our Servers (Win and Linux).  We already have ServiceNow agentless Discovery for all Servers.  We will be implementing Software Asset Management (SAM Pro) module. ACC will be installed on all end-user devices, but Servers are under discussion. 

Question:

Is there any extra benefit ACC on Servers will give for SAM vs ServiceNow Discovery ?

Thank you,

Mantautas.

[Doci1 · Accepted solution]

ACC agents on the server can do a lot, however Horizontal Discovery can do MUCH MORE from Discovery perspective. If you are already using Horintal Discvoery, I dont see any reason to stick to ACC for SAM. ACC cannot do ServiceMapping (yet) for example. Another story is ACC-Monitoring. If you want to constantly monitor those servers in that case Agent Client Collector Monitoring (ACC-M) comes into play,

[Doci1 · Accepted solution]

ACC agents on the server can do a lot, however Horizontal Discovery can do MUCH MORE from Discovery perspective. If you are already using Horintal Discvoery, I dont see any reason to stick to ACC for SAM. ACC cannot do ServiceMapping (yet) for example. Another story is ACC-Monitoring. If you want to constantly monitor those servers in that case Agent Client Collector Monitoring (ACC-M) comes into play,

[Severin Launiau · Accepted solution]

@Doci1  @Mantautas : ACC supports pattern execution for application discovery as well as Service Mapping - see the webinars from the ITOM academy:

- https://www.servicenow.com/community/itom-events/itom-visibility-amp-cloud-accelerate-academy-how-to...

- https://www.servicenow.com/community/itom-blog/itom-visibility-resource-library/ba-p/2423151

Many customers who need to discover their systems in hybrid cloud environments do use a combination of horizontal discovery and ACC depending on their network topology, deployment procedures, security requirements and so on. What matters is to choose the products and features in a way that meets your business needs, comply with your security requirements, and is sustainable for your services to operate over time.

A couple of things to consider:

- agent to deploy (and occasionally upgrade) at scale vs. credentials on target systems

- restricted remote access, i.e. in regulated environments, locked-down Cloud accounts

- time to update the CMDB when a new system is created

- time to scan an entire set of subnets in normal run

- account management and access rights: On Windows, ACC doesn't require elevated privileges for a "basic" discovery. On Linux, only sudo dmidecode and ss.

Séverin

[Mantautas]

Thank you, @Doci1 , very useful info.