Internet Facing / Internet-Facing Attribute - what strategies exist to auto-populate?

Bradley Marshal
Tera Contributor

‎06-09-2023 05:23 PM

Internet Facing / Internet-Facing Attribute - what strategies exist to auto-populate?

 

 

 

Anyone have a strategy on how to automatically populate the Internet Facing / Internet-Facing Attribute? IPAM data, Firewall data, some baseline Internet Assigned Numbers Authority (IANA) reference file which scours the IP Address Table / Network Interface table / Incomplete IP Address table to find Configuration Items with identified Internet routable IP addresses and automatically flip the Internet Facing attribute to True?

 

 

 

Thanks for any advice in how you tackled this in your enterprise.

  • 2,853 Views
1 REPLY 1

Shaikh Mzhar
Tera Guru

‎06-09-2023 10:46 PM

the Internet Facing attribute is not automatically populated out-of-the-box. However, you can implement strategies to automatically populate the Internet Facing attribute based on IPAM data, firewall data, or other sources. Here are some approaches you can consider:

  1. Integration with IPAM and Firewall Systems: Establish integrations between ServiceNow and your IP Address Management (IPAM) and firewall systems. These integrations can periodically sync data related to IP addresses and firewall rules. Based on this data, you can develop custom scripts or workflows that analyze the IP addresses and associated firewall rules to determine if a Configuration Item (CI) is Internet-facing or not. The Internet Facing attribute can then be automatically updated in ServiceNow.

  2. Scheduled Data Aggregation and Analysis: Implement scheduled jobs or scripts within ServiceNow that aggregate and analyze data from various sources like IPAM systems, firewall logs, or network scans. These jobs can search for IP addresses associated with CIs and determine if they are Internet-facing based on predefined criteria (such as matching against known public IP ranges). The Internet Facing attribute can be updated accordingly based on the results of the analysis.

  3. External APIs or Services: Utilize external APIs or services that provide information about IP address ranges or Internet-facing status. You can leverage these APIs or services to retrieve data related to IP addresses associated with CIs and update the Internet Facing attribute in ServiceNow based on the retrieved information.

  4. Custom Discovery Patterns: If you are using ServiceNow Discovery, you can create custom patterns to identify Internet-facing CIs based on specific characteristics or attributes. These patterns can be developed to analyze network configurations, IP address ranges, or other relevant information to determine if a CI is Internet-facing. The Internet Facing attribute can then be set based on the results of the discovery process.

Please mark helpful

Mzhar