The Password Exclusion List config indicates "There are 3 different sizes of default exclusion list provided by ServiceNow that can be used as a good way to get started." It looks like "Small (5000)" is installed by default. What are the other 2 leve...
I found a table in my lab instance for the ServiceNow University course "Vulnerability Response (VR) Implementation On Demand (Xanadu)". The table is named Integration Instance [sn_sec_int_impl]. It is filled with records named things like "Veracode ...
As is general best practice, by company policy I'm also required not to use real production data in our non-production instances of ServiceNow. I find it challanging to gain compliancy with Host Vulnerability Response. I do believe it makes sense not...
What are your best practices for dealing with stale assets? I'm particularly looking for a way to deal with VIT's from hosts that have been purged from Qualys. When the next sync occurs, usually once a day, the VIT's remain open for hosts that we no ...
Hi,When state is Awaiting Approval in Policies & Compliance Management its not triggering approvalso that Approver can Approve/Reject. If we tab on Request Approval UI Action state changes to Awaiting Approval but Approver can't able to approve it. p...
What is the consequence of leaving the "Owned by" field blank on CIs as it relates to the Vulnerability Response application? I know that the "Managed by" field can be used to assign remediation tasks, but I'm not sure how Vulnerability Response uses...
I have an existing Exception Rule that is active with a "Valid to" date expiring soon. I selected the "Request Extension" option from the rule and entered the new date, upon approval, this only updated the "Deferred to" date. 1) the Valid to date mea...
Hello community, So I understand that a Default SLA flow designer in global scope creates and triggers a notification for events created inside the notification such as - 'SLA warning parm' and SLA breached parm'. So, I copied the same flow designer ...
I am trying to integrate Tenable.io with ServiceNow, but my API credentials are not being accepted, I keep getting this error : Error: Cannot run REST based integration without Tenable api credentials specified. I have admin access on Tenable which l...
We have been using CS for a couple of years now. I am interested in any experiences people have with keeping the detections in ServiceNow in sync with the detections in CrowdStrike. Are you able to keep the data in sync?If so, what is your strateg...
Hi Community,I'm currently working on the PCRS integration with Qualys in ServiceNow and encountering an issue when running the PCRS Test Results job. The job fails with the following error: "Cannot run REST-based integration without a Qualys API cre...
Hello.I'm quite new in VR. Can somebody explain me a CONCEPT of "Remediation Task Rules" ? I was trying to understand it and read docs etc etc but not clear for me: how exactly the "GROUP BY" works?Where is the outcome of this grouping? Where do I se...
Hello all, We have a requirement to defer VIT's and capture exception number against those deferrals. The exceptions are raised in a 3rd party system and the exception data is synchronized in a custom ServiceNow table called 'bwise exception table'.S...
Hi Team,I am currently working as a Quality Analyst in ServiceNow and I am looking to transition into a Security Analyst role.I have a few queries regarding DevSecOps, SIR, and AVR, particularly on how to gain both theoretical knowledge and hands-on ...