Disable NBT communication in Windows discovery

Takahiko Sasamo
ServiceNow Employee
ServiceNow Employee

The customer doesn’t want to use NetBIOS communication for their security reason in Windows discovery.

In the following document, there are some data collected via NBT like “Name”, “Hostname”, “OS domain”.

 

https://docs.servicenow.com/bundle/kingston-it-operations-management/page/product/discovery/referenc...

 

Is there any way to disable NetBIOS communication?

 

Disable “wins” in Probe setting?

or

Disable the following values in the “System property” – “Discovery” ?

 

DNS or NetBIOS is trusted host name source: If "yes", trust the device name discovered via DNS or NetBIOS. If checked, CI's host name found via DNS or NBT will be used.

Set OS domain name by NBT or WMI: If "yes", Windows domain name is set by NBT. Otherwise it is set by WMI.

 

Please let me know correct procedure.

 

3 REPLIES 3

Asi Garty
ServiceNow Employee
ServiceNow Employee

Hi,

The properties you mentioned only effect fqdn/device name resolution.

if you want to fully disable usage of specific protocol during discovery, try changing your MID capabilities, hopefully netbios is supported as part of the list of protocols that can be controlled.

Asi 

Hi Asi,

Thanks for your help!

 

I just confirmed the MID Server capabilities lists on my instance. But netbios isn't in the list.

So, Isn't there any way to fully disable NetBIOS protocol?

 

Best regards,

Takahiko

Narayan2
Mega Expert

Hi,

 

You can disable the wins probe and the NetBIOS communication will not be establish and will not discover any information.

 

Hope this is answers your query.

 

 

Regards,

Narayan Munagala

Engineer

www.DxSherpa.com