Resolved! Vulnerability Scanner
Can we scan CIs in my CMDB without Qualys or any thrid party vulnerability scanner? Just with my vulnerability base application?
Forum Posts
Resolved! SecOps email parsing setup - email properties - not receiving email
Hi I'm trying to setup an email parser in security operations using McAfee ESM as an example. According to doc, it seems that Security Ops email properties handles 4 email adress' and you can add more by separating by commas. The questions is which...
Authentication Single Sign On with Key cloak or similar services
Is it technically possible to connect to one SNOW instance from two places using two different authentication mechanisms like LDAP and also Key Cloak. If yes, do we need specific connector or is there an available readymade connector?
Is there more information on Playbooks?
For example, can we create our own? Can we edit them?
Resolved! Failed Login Attempts not logged in the user table
When a user attempts to log into our Servicenow instance with incorrect credentials the login.failed event gets triggered however the user never gets locked. The user should be locked out after 3 login attempts. In the password reset properties the...
How Risk score is calculated? When the below are changed?
How Risk score is calculated? When the below are changed? Business impact on the Affected Users related listBusiness impact on the Affected Services related listBusiness impact on vulnerabilities on the Vulnerable items related list
Has anyone integrated Vulnerability with Tenable Professional instead of Tenable Security Center?
The application on Store seems to only be available for Security Center, not for Professional
Email Parsing vs Inbound Email Actions
Do we need an inbound email action, when there is already an email parsing for security operations? How is both different from each other and should both be used for processing inbound emails for security incidents or just email parsing.
SecOps email inbox for incident creation
Hi folks, I realise there is a similar question here around this topic but I don't think it fully answers my current problem and my SIRI book is not very clear on the matter... I am currently implementing Security Incident Response which has a couple...
How we can Procure the SSL/TLS certificates for ServiceNow Mid Server.
Hi All, As per our Client requirement it is asked to increase Mid Server Security.We have gone through the Link carefully-->https://docs.servicenow.com/bundle/london-servicenow-platform/page/product/mid-server/concept/mid-server-security-encryption.h...
Mobile App Screen Shot Disabled?
How can I enable Mobile App screen shot's for our development instance? My personal instance allows screen shots on my Android Samsung 8 using the Service Now mobile app, but our development instance does not. I am an administrator, etc. We need t...
Resolved! How to prevent ServiceNow from auto-assigning users to an incident?
I am currently using ServiceNow to create security incidents based on alerts from my SIEM. My issue is that while I am able to select the correct group for the incident assignment, it is currently auto-assigning the incident to random users in that g...
Resolved! Qualys Knowledge Base data import not working, it only brings 112 records at max.
Hi, We are trying to fetch knowledge base data from Qualys into third party vulnerabilities table using out of box integration plugin provided by ServiceNow. After proper research and analysis we have come to a conclusion that previous import xmls a...
Resolved! Security Incident Response manual assignment
How do I remove the assignment group which was assigned automatically upon submit? I have set the assignment rule to "Manually" for the requests. Upon creating and submitting while leaving the assignment group blank, it will be automatically popula...
Resolved! How to disable "remember me" on service portal login page?
In order to meet security compliance, I recently disabled glide.ui.forgetme on our instance. It worked great on the normal login page but the service portal login page still has the "Remember me" checkbox option (and it is functional, i.e. adds a coo...
